$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: i5ZgYmLadPYDln1P9PALX33jnFSfMKQQWxcuZD3kgm4= Subject key identifier: 3B:66:A9:F3:72:96:2B:48:20:E4:20:54:E2:0F:97:D4:25:E9:94:E7 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0CF7 Signing time: Mon 28 Apr 2025 18:18:14 +0000 Manifest this update: Mon 28 Apr 2025 18:18:13 +0000 Manifest next update: Mon 05 May 2025 18:18:13 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: MlPj0k9KT+Di4TPB9diVkdIQlqV0CL3ZUjk88YhbD64=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: A3euC+JMbFaWVx5aIIYMhJy2o8x3eQCdnzPijIO/OPI=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: /lCYyr/ggNz4m2hSHph8iFrUwvAmVOifZgcsV4MIeXY=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: dYlMryTZgDYlMwbzeqzaAmjgFNBL4klqki3/QbfzqsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Apr 28 18:18:13 2025 GMT Not After : May 5 18:18:13 2025 GMT Subject: CN=680fc665-4993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2f:71:08:c4:89:ab:41:ad:b4:47:3e:a2:da: e0:c4:00:a4:e0:74:d2:a0:ab:bc:59:e3:e7:97:77: 2f:ca:0c:32:50:51:14:04:49:31:6c:e8:6b:ce:ee: 8d:21:c9:79:02:52:8c:4d:3a:39:b5:0c:c3:8c:76: 79:54:26:1d:5e:71:59:25:23:13:23:6e:84:2c:68: c9:8d:ab:bc:4d:52:5b:5b:bf:18:28:4d:7f:b6:9c: 52:7e:09:22:72:6d:58:e0:10:6e:bb:39:41:b0:84: f7:4c:55:61:70:dd:6a:42:1c:c3:19:78:61:0d:cb: 34:0e:b6:2f:7e:25:b0:8a:3f:29:81:ae:a0:58:4a: cf:50:6f:39:08:b3:d8:29:f1:94:18:81:ed:e1:8a: 77:d9:0c:19:4e:85:9a:37:ad:7e:79:56:6c:a3:80: 63:75:46:04:cc:5e:90:b2:68:5b:bd:0b:3a:5c:05: 55:5f:ac:76:ee:0a:82:07:41:6f:67:d7:eb:cb:9d: 1e:e3:d9:ed:12:cc:b4:ac:8c:2b:88:d1:98:8c:73: 11:c8:81:6b:e7:fd:57:44:df:6c:9e:25:53:0c:be: a2:5c:a0:2d:1d:1b:50:fb:bf:c4:fe:cf:a1:9f:64: d1:b6:7e:e6:48:7d:cd:ee:c2:82:e4:47:5c:23:45: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:66:A9:F3:72:96:2B:48:20:E4:20:54:E2:0F:97:D4:25:E9:94:E7 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d3:7c:e0:a2:26:60:f8:c9:a4:82:e4:3a:fa:4d:1e:f0:8b: b6:f5:50:f9:89:02:e5:1f:d9:54:70:0c:9a:45:a1:b1:ed:44: b7:30:25:dd:42:b5:b7:d7:4a:0b:34:94:73:f2:7a:23:aa:87: 0d:12:06:4b:89:1a:54:4c:7a:34:cf:29:3c:8d:cf:df:a3:7b: 4e:a3:f3:4b:dc:33:e7:ac:50:33:9e:f1:99:2c:36:83:7e:ee: 42:8c:0a:6c:bc:3c:bd:8e:94:cf:f9:2c:b1:03:b2:dc:f2:89: f1:a4:fd:70:04:7c:11:d7:c2:cd:ac:07:ca:76:e4:ff:c4:48: 3a:a0:18:5c:55:ff:a1:e2:42:d6:73:84:4f:a4:69:ce:4d:27: be:a7:59:78:ea:12:e7:13:db:67:78:7e:a4:ee:b3:70:9e:05: c0:be:6c:6d:55:f5:05:48:03:b7:89:c0:12:3b:80:0c:67:18: 8b:ec:da:a9:df:1d:14:6f:46:34:9d:5a:b7:88:e5:36:ed:a8: a6:f4:88:cd:44:54:e5:b7:f0:3b:47:c3:66:a1:8b:d2:e7:fe: 7f:06:f1:dc:f3:7b:c6:6f:98:06:86:eb:a4:83:b7:d8:00:25: c8:b8:47:04:f1:63:ac:92:16:ed:9c:e2:63:bd:1a:91:89:d3: bc:41:3a:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjUwNDI4MTgxODEzWhcNMjUwNTA1MTgxODEzWjAYMRYwFAYD VQQDEw02ODBmYzY2NS00OTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6y9xCMSJq0GttEc+otrgxACk4HTSoKu8WePnl3cvygwyUFEUBEkxbOhrzu6N Icl5AlKMTTo5tQzDjHZ5VCYdXnFZJSMTI26ELGjJjau8TVJbW78YKE1/tpxSfgki cm1Y4BBuuzlBsIT3TFVhcN1qQhzDGXhhDcs0DrYvfiWwij8pga6gWErPUG85CLPY KfGUGIHt4Yp32QwZToWaN61+eVZso4BjdUYEzF6QsmhbvQs6XAVVX6x27gqCB0Fv Z9fry50e49ntEsy0rIwriNGYjHMRyIFr5/1XRN9sniVTDL6iXKAtHRtQ+7/E/s+h n2TRtn7mSH3N7sKC5EdcI0WYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtmqfNy litIIOQgVOIPl9Ql6ZTnMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA103zgoiZg+MmkguQ6+k0e8Iu29VD5iQLlH9lUcAyaRaGx7US3MCXd QrW310oLNJRz8nojqocNEgZLiRpUTHo0zyk8jc/fo3tOo/NL3DPnrFAznvGZLDaD fu5CjApsvDy9jpTP+SyxA7Lc8onxpP1wBHwR18LNrAfKduT/xEg6oBhcVf+h4kLW c4RPpGnOTSe+p1l46hLnE9tneH6k7rNwngXAvmxtVfUFSAO3icASO4AMZxiL7Nqp 3x0Ub0Y0nVq3iOU27aim9IjNRFTlt/A7R8NmoYvS5/5/BvHc83vGb5gGhuukg7fY ACXIuEcE8WOskhbtnOJjvRqRidO8QTo9 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:23 2025 by rpki-client on console.sobornost.net