$ rpki-client -vvf rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft File: iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft (raw, json) Hash identifier: eKYVqzl64eTb0o2OPhmEx2Gy/fZ1Gu4wJNu+2A3fmng= Subject key identifier: 31:3C:D6:61:C1:13:F5:0C:21:95:D9:99:CB:CD:52:E8:EE:4C:BB:F1 Authority key identifier: 88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 Certificate issuer: /CN=A911A35E/serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Certificate serial: 0325 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft Manifest number: 031E Signing time: Sun 27 Apr 2025 00:47:20 +0000 Manifest this update: Sun 27 Apr 2025 00:47:19 +0000 Manifest next update: Sun 04 May 2025 00:47:19 +0000 Files and hashes: 1: iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl (hash: 2t6GGM16vUBZQWaa/rYjP719C2lxwhlKMaPT2NujQto=) 2: 7FA7FFD6D54F11EF88D65E53C4F9AE02.roa (hash: BWjw8ZzgxeIsXktsSggwFqoGIGBV9RKmqBd6UmUawiw=) 3: 3DCC89FAC6CB11ECB185E43EC4F9AE02.roa (hash: w5wAGuBp2YZuw7r2gpx/dOhrAuPlBh9HGiqoIoNxrIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 805 (0x325) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A35E, serialNumber=8899693E931350C555F2BF47B151DEF87342B729 Validity Not Before: Apr 27 00:47:19 2025 GMT Not After : May 4 00:47:19 2025 GMT Subject: CN=680d7e98-09bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:f4:d7:14:cd:22:9e:2f:7f:ce:d6:14:98: 9a:d5:c0:36:cd:68:be:9a:28:78:57:5e:64:56:b2: bf:42:86:53:c9:e7:d3:a5:3d:54:4d:f7:7c:8e:4b: 9e:19:43:24:44:39:87:05:a4:2f:57:6a:3f:b0:3b: d2:37:06:f7:9e:5c:5f:b6:a7:e0:06:8e:7c:65:63: 7d:6a:df:42:da:a8:37:d5:b3:0c:4c:7c:0c:99:97: 5c:9f:bb:c9:d1:cb:a8:71:6e:8d:02:26:b0:77:cd: 3e:c4:31:1c:db:ff:9a:15:65:6b:f6:b1:55:07:4c: 6b:cf:a3:b3:c2:1a:df:58:b7:39:0b:d1:2f:44:12: 89:b6:3d:8a:d1:de:8f:ba:d8:f2:4a:1e:87:c8:b0: 46:c6:51:9b:41:b3:13:ea:24:7e:ee:74:cb:60:25: f5:72:fa:f4:1a:97:61:37:ab:5a:45:c4:a2:5d:0f: ec:28:d8:2b:a7:fc:c9:1a:4c:49:05:a3:ed:90:ba: 4c:13:f7:57:0f:01:37:85:16:d1:f8:79:e1:60:56: 49:27:7b:43:3d:a8:85:af:ac:4c:04:10:e0:70:15: ef:8c:b7:4f:f8:e8:13:01:1b:3b:5e:40:8a:c3:35: f0:bc:3b:cd:a2:dc:df:0e:ac:6e:f9:f7:1c:52:37: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3C:D6:61:C1:13:F5:0C:21:95:D9:99:CB:CD:52:E8:EE:4C:BB:F1 X509v3 Authority Key Identifier: keyid:88:99:69:3E:93:13:50:C5:55:F2:BF:47:B1:51:DE:F8:73:42:B7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJlpPpMTUMVV8r9HsVHe-HNCtyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A35E/FA927782C60011EC9DA7400FC4F9AE02/iJlpPpMTUMVV8r9HsVHe-HNCtyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:2f:24:ea:94:45:f2:f1:d2:e3:91:b6:ba:f2:48:f2:82:14: ce:67:97:f8:df:d9:65:97:e7:41:dc:43:cb:45:07:dd:47:b4: ea:07:6f:53:93:02:5b:0b:1a:aa:e3:40:40:45:18:6b:9c:67: 64:c0:1c:ad:e0:80:18:72:10:62:e6:2a:b2:6e:e1:a5:24:b6: fd:7b:80:54:7c:0e:9a:b6:ac:ad:57:03:db:d1:f1:7b:72:4d: a6:89:65:c3:da:eb:5d:6d:db:cf:82:21:67:86:78:81:8e:b6: da:fe:d1:e2:19:dd:ef:bb:e8:d9:47:f2:fd:4b:e0:d1:b2:8d: 5e:e9:42:0c:ed:ff:20:36:59:92:bd:0a:05:6e:58:34:3d:6d: 3e:03:82:8d:20:0a:6e:95:0f:4c:f8:aa:51:1e:0d:ca:6f:83: b1:19:50:4e:cf:78:fb:0a:e4:a6:8f:c0:f8:b9:05:af:d2:73: 55:ab:d5:c1:eb:82:0a:ac:49:7c:bb:eb:1a:e5:0b:9e:2c:af: ff:cd:45:2c:47:e6:e8:5c:7f:53:d1:35:01:c3:3d:c5:af:d2: 02:b6:bb:d3:36:cc:85:3d:a1:c8:37:90:6a:00:8c:76:c8:44: d3:cc:86:57:1d:4e:e5:17:09:00:50:55:f7:ef:56:53:89:6e: 9b:3a:8a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUEzNUUxMTAvBgNVBAUTKDg4OTk2OTNFOTMxMzUwQzU1NUYyQkY0N0IxNTFERUY4 NzM0MkI3MjkwHhcNMjUwNDI3MDA0NzE5WhcNMjUwNTA0MDA0NzE5WjAYMRYwFAYD VQQDEw02ODBkN2U5OC0wOWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnf01xTNIp4vf87WFJia1cA2zWi+mih4V15kVrK/QoZTyefTpT1UTfd8jkue GUMkRDmHBaQvV2o/sDvSNwb3nlxftqfgBo58ZWN9at9C2qg31bMMTHwMmZdcn7vJ 0cuocW6NAiawd80+xDEc2/+aFWVr9rFVB0xrz6OzwhrfWLc5C9EvRBKJtj2K0d6P utjySh6HyLBGxlGbQbMT6iR+7nTLYCX1cvr0GpdhN6taRcSiXQ/sKNgrp/zJGkxJ BaPtkLpME/dXDwE3hRbR+HnhYFZJJ3tDPaiFr6xMBBDgcBXvjLdP+OgTARs7XkCK wzXwvDvNotzfDqxu+fccUjfEbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDE81mHB E/UMIZXZmcvNUujuTLvxMB8GA1UdIwQYMBaAFIiZaT6TE1DFVfK/R7FR3vhzQrcp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTM1RS9GQTkyNzc4MkM2 MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVNVlY4cjlIc1ZIZS1ITkN0 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKbHBQcE1UVU1WVjhyOUhzVkhlLUhOQ3R5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTM1RS9GQTkyNzc4MkM2MDAxMUVDOURBNzQwMEZDNEY5QUUwMi9pSmxwUHBNVFVN VlY4cjlIc1ZIZS1ITkN0eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnLyTqlEXy8dLjkba68kjyghTOZ5f439lll+dB3EPLRQfdR7TqB29T kwJbCxqq40BARRhrnGdkwByt4IAYchBi5iqybuGlJLb9e4BUfA6atqytVwPb0fF7 ck2miWXD2utdbdvPgiFnhniBjrba/tHiGd3vu+jZR/L9S+DRso1e6UIM7f8gNlmS vQoFblg0PW0+A4KNIApulQ9M+KpRHg3Kb4OxGVBOz3j7CuSmj8D4uQWv0nNVq9XB 64IKrEl8u+sa5QueLK//zUUsR+boXH9T0TUBwz3Fr9ICtrvTNsyFPaHIN5BqAIx2 yETTzIZXHU7lFwkAUFX371ZTiW6bOory -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net