$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json) Hash identifier: Mcc3yRTKZe9FrckOci0LsHJ0+CJEnNyeeThk+RhU/sE= Subject key identifier: 2A:58:93:95:05:35:3E:26:75:D0:77:47:D0:90:4A:D0:3D:06:15:02 Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft Manifest number: 3F Signing time: Sun 27 Apr 2025 06:17:23 +0000 Manifest this update: Sun 27 Apr 2025 06:17:22 +0000 Manifest next update: Sun 04 May 2025 06:17:22 +0000 Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: K+wnsAg0RWPMHxNeJnwngLfGEIjsPMZja1ANN+JvFsM=) 2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0 Validity Not Before: Apr 27 06:17:22 2025 GMT Not After : May 4 06:17:22 2025 GMT Subject: CN=680dcbf3-3969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:c7:cc:05:ce:fd:d1:29:3d:43:02:a1:de: bc:b4:26:d9:5e:90:10:ef:ed:74:42:61:df:d8:74: 85:3e:9e:9c:2a:cc:8d:f3:bd:c6:94:7b:ca:12:37: f9:a9:82:9b:13:63:c2:aa:71:43:4e:88:05:f4:16: 27:5b:a9:a7:57:d3:1f:91:ba:b1:12:8d:24:c5:8b: 8f:7a:b4:4b:81:f3:ee:5d:37:17:d6:7f:e9:da:01: af:d7:7c:4d:e8:8b:a6:1b:b7:be:6e:c6:a3:ce:3d: 6e:38:d8:63:e5:72:66:c2:10:8a:79:ba:53:03:9f: 53:2e:b0:8a:e8:60:93:25:6f:03:ee:fe:8b:6d:6d: a0:36:ba:40:73:36:27:55:a3:25:bb:f8:a2:c3:f9: 92:44:f4:e6:37:1b:c7:88:2d:4a:fe:dd:2b:ea:22: 26:07:01:bc:0f:b1:02:ef:ad:9f:11:59:ca:f2:95: ba:96:be:29:d1:a2:7a:de:5f:39:d8:c5:e9:48:2c: 7e:e9:ee:62:f2:01:42:a4:c1:dc:6f:b7:88:41:93: b5:ba:c5:41:54:5c:2a:fc:7c:3c:b5:81:37:df:1a: 5b:8a:12:e8:ec:07:d5:fd:0b:b9:c5:e8:b1:b1:3a: 5c:6c:74:21:1f:bd:ba:0f:9a:40:c5:a8:25:5f:58: f0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:58:93:95:05:35:3E:26:75:D0:77:47:D0:90:4A:D0:3D:06:15:02 X509v3 Authority Key Identifier: keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b9:1c:fd:88:bc:72:20:43:ec:84:e0:94:3b:20:3e:19:26: 2d:e7:0e:e1:b2:36:f1:ce:54:85:a8:4d:f2:6b:9f:a6:31:14: 7d:e3:98:0b:e9:d2:66:2f:95:51:52:58:7e:06:17:53:eb:e0: c8:32:bc:0b:e6:91:cc:3a:99:bf:73:15:34:2f:3c:77:10:52: 40:d0:c1:32:57:d4:ed:f7:5c:07:41:66:b9:fb:00:a8:2f:d6: 10:08:61:2c:4b:01:49:e3:c5:55:a5:7d:fe:e7:c5:cb:f3:98: 66:2c:da:bf:55:94:c9:e5:f2:fb:f5:ee:69:c1:7f:89:0c:73: 00:e8:ab:51:ed:63:45:f9:57:05:d5:2a:a0:5d:75:fe:b4:0d: f3:1c:91:ac:32:c8:d6:d7:27:5a:b9:c6:c6:c4:df:e6:49:63: f9:69:6b:5e:01:90:51:3c:82:cc:62:80:03:aa:44:7a:5e:e6: 53:15:74:b5:40:28:1c:96:be:64:bb:50:0f:29:c3:81:e9:13: cd:01:8d:92:2e:75:b2:bf:01:af:89:7c:d9:d5:b4:ac:98:5f: c5:3c:8c:ea:3d:cb:ad:c8:58:0f:4f:11:67:b1:28:0b:22:1e: 17:6e:5a:e1:e1:ba:d7:c4:c3:14:49:88:4c:36:4f:b3:e3:a8: 86:fe:8b:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0I2MjExMC8GA1UEBRMoNDJGRUYzMzE3NDFBNTRENUEwQUU3NTUzMTA4RDREMkQz MkIwNTdCMDAeFw0yNTA0MjcwNjE3MjJaFw0yNTA1MDQwNjE3MjJaMBgxFjAUBgNV BAMTDTY4MGRjYmYzLTM5NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRVMfMBc790Sk9QwKh3ry0JtlekBDv7XRCYd/YdIU+npwqzI3zvcaUe8oSN/mp gpsTY8KqcUNOiAX0FidbqadX0x+RurESjSTFi496tEuB8+5dNxfWf+naAa/XfE3o i6Ybt75uxqPOPW442GPlcmbCEIp5ulMDn1MusIroYJMlbwPu/ottbaA2ukBzNidV oyW7+KLD+ZJE9OY3G8eILUr+3SvqIiYHAbwPsQLvrZ8RWcrylbqWvinRonreXznY xelILH7p7mLyAUKkwdxvt4hBk7W6xUFUXCr8fDy1gTffGluKEujsB9X9C7nF6LGx OlxsdCEfvboPmkDFqCVfWPADAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKliTlQU1 PiZ10HdH0JBK0D0GFQIwHwYDVR0jBBgwFoAUQv7zMXQaVNWgrnVTEI1NLTKwV7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQjYyLzI2NjE5RDQ0QzZF ODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5XZ3JuVlRFSTFOTFRLd1Y3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUXY3ek1YUWFWTldncm5WVEVJMU5MVEt3VjdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QjYyLzI2NjE5RDQ0QzZFODExRUZCQjUyMEIwREM0RjlBRTAyL1F2N3pNWFFhVk5X Z3JuVlRFSTFOTFRLd1Y3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI65HP2IvHIgQ+yE4JQ7ID4ZJi3nDuGyNvHOVIWoTfJrn6YxFH3jmAvp 0mYvlVFSWH4GF1Pr4MgyvAvmkcw6mb9zFTQvPHcQUkDQwTJX1O33XAdBZrn7AKgv 1hAIYSxLAUnjxVWlff7nxcvzmGYs2r9VlMnl8vv17mnBf4kMcwDoq1HtY0X5VwXV KqBddf60DfMckawyyNbXJ1q5xsbE3+ZJY/lpa14BkFE8gsxigAOqRHpe5lMVdLVA KByWvmS7UA8pw4HpE80BjZIudbK/Aa+JfNnVtKyYX8U8jOo9y63IWA9PEWexKAsi HhduWuHhutfEwxRJiEw2T7PjqIb+i+w= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net