$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft File: PnIyBI3L0sabqyJbikIhYEbBiyU.mft (raw, json) Hash identifier: 5TmW1CzsfN9KsToK8D1R8ygusUTGsCsT/qQy+W8x0g4= Subject key identifier: 97:CA:CB:13:89:E1:38:C8:9E:33:22:E1:59:48:9E:69:FA:5F:2E:EF Authority key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25 Certificate issuer: /CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft Manifest number: 016A Signing time: Mon 28 Apr 2025 19:30:23 +0000 Manifest this update: Mon 28 Apr 2025 19:30:22 +0000 Manifest next update: Mon 05 May 2025 19:30:22 +0000 Files and hashes: 1: PnIyBI3L0sabqyJbikIhYEbBiyU.crl (hash: VhuaLj8U6YhfY0/cAzcOJvGtDIzi1c4pmf2lgcjORLw=) 2: 1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa (hash: jx7hnJAbOWXi06R8EaUqGVH9j+g4HwGKu5sUmUZqpVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25 Validity Not Before: Apr 28 19:30:22 2025 GMT Not After : May 5 19:30:22 2025 GMT Subject: CN=680fd74f-7aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:4c:ef:72:58:62:52:1e:5a:d0:81:4c:9b: a9:b5:27:61:e7:52:20:7c:7b:49:31:73:5b:fb:49: d2:a1:2e:fc:1d:a6:e4:76:69:09:bc:4c:de:b2:4e: ff:ec:3b:0c:ee:69:94:df:7d:d4:ef:58:1f:0f:e3: 1d:12:08:bf:57:36:50:a6:5b:ef:51:50:b8:ac:d6: a9:ce:41:4f:61:41:6c:7e:f0:f8:c4:eb:5c:e6:fa: 78:30:94:b1:e4:cd:60:61:10:54:20:7c:ec:eb:ae: 57:ef:79:0e:4f:87:58:35:78:b2:21:d5:71:16:2c: 27:90:9c:73:b0:94:77:44:e6:e5:46:f2:72:48:58: b4:3a:54:dc:de:a2:fc:ff:28:b0:36:a7:59:2f:6a: a3:49:82:e0:bd:98:2e:88:2b:eb:98:88:c2:72:71: 6e:fd:74:07:0d:e9:3a:77:ed:68:f8:57:53:f4:34: ef:d9:8a:5b:a5:1c:59:97:62:25:c2:34:78:37:a7: 0b:10:b7:bc:2a:e6:ad:38:92:40:47:d7:7b:8f:eb: 38:b6:a6:55:e9:d0:3b:6e:4b:d6:fc:43:30:6e:c1: 3a:0f:33:36:46:9b:56:67:4a:80:d7:ab:a9:1a:8e: bd:50:88:7b:29:eb:0f:50:a2:82:24:eb:36:dc:50: fd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CA:CB:13:89:E1:38:C8:9E:33:22:E1:59:48:9E:69:FA:5F:2E:EF X509v3 Authority Key Identifier: keyid:3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:aa:3d:6d:d1:75:3b:d5:0e:d4:37:2e:9f:5e:4a:64:da:9f: 27:e2:fa:12:6c:d8:9a:31:b7:a9:ae:84:a9:94:c8:f3:a4:9b: 9a:64:5f:e2:08:3c:76:e4:6d:da:de:90:d1:a3:d6:92:a5:57: f2:71:f5:b2:c9:e7:0d:30:ff:e5:ef:db:5d:85:f8:d0:35:b4: 71:0f:6e:ae:5d:2f:49:e1:8e:e3:60:fa:83:b6:50:57:f1:e2: 0f:69:07:35:71:b6:84:13:b7:6f:04:83:74:d2:ee:28:94:12: be:16:0b:56:37:06:a1:02:91:1d:76:06:ca:5b:18:ba:0a:74: 93:0b:d1:f8:d8:c5:45:ff:33:bd:68:eb:0f:72:45:c3:c3:04: f1:3c:46:49:03:83:70:7f:a7:ab:f7:e1:92:3f:05:8e:87:44: 96:87:72:4c:8d:e0:60:07:b8:7f:f9:03:99:70:c7:82:b1:a8: c1:31:8a:a4:95:c5:f2:8b:91:a2:63:66:40:bd:09:77:2a:26: 52:a0:87:8f:dc:7b:f4:ae:fa:0f:0d:a3:3b:24:05:8d:91:b5: f7:8d:c4:97:22:56:d5:e3:98:6a:4b:3e:dd:b3:9c:d3:84:7e: 7e:98:ea:d2:cf:e5:ad:d5:f0:25:ae:5f:2e:91:2c:6f:93:4a: 9f:84:c4:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDNFNzIzMjA0OERDQkQyQzY5QkFCMjI1QjhBNDIyMTYw NDZDMThCMjUwHhcNMjUwNDI4MTkzMDIyWhcNMjUwNTA1MTkzMDIyWjAYMRYwFAYD VQQDEw02ODBmZDc0Zi03YWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubZM73JYYlIeWtCBTJuptSdh51IgfHtJMXNb+0nSoS78HabkdmkJvEzesk7/ 7DsM7mmU333U71gfD+MdEgi/VzZQplvvUVC4rNapzkFPYUFsfvD4xOtc5vp4MJSx 5M1gYRBUIHzs665X73kOT4dYNXiyIdVxFiwnkJxzsJR3ROblRvJySFi0OlTc3qL8 /yiwNqdZL2qjSYLgvZguiCvrmIjCcnFu/XQHDek6d+1o+FdT9DTv2YpbpRxZl2Il wjR4N6cLELe8KuatOJJAR9d7j+s4tqZV6dA7bkvW/EMwbsE6DzM2RptWZ0qA16up Go69UIh7KesPUKKCJOs23FD9fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfKyxOJ 4TjInjMi4VlInmn6Xy7vMB8GA1UdIwQYMBaAFD5yMgSNy9LGm6siW4pCIWBGwYsl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC8wMjhGNThGRTE2 RDkxMUVFOUYxNzUzMTVDNEY5QUUwMi9Qbkl5QkkzTDBzYWJxeUpiaWtJaFlFYkJp eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BuSXlCSTNMMHNhYnF5SmJpa0loWUViQml5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC8wMjhGNThGRTE2RDkxMUVFOUYxNzUzMTVDNEY5QUUwMi9Qbkl5QkkzTDBz YWJxeUpiaWtJaFlFYkJpeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkqj1t0XU71Q7UNy6fXkpk2p8n4voSbNiaMbeproSplMjzpJuaZF/i CDx25G3a3pDRo9aSpVfycfWyyecNMP/l79tdhfjQNbRxD26uXS9J4Y7jYPqDtlBX 8eIPaQc1cbaEE7dvBIN00u4olBK+FgtWNwahApEddgbKWxi6CnSTC9H42MVF/zO9 aOsPckXDwwTxPEZJA4Nwf6er9+GSPwWOh0SWh3JMjeBgB7h/+QOZcMeCsajBMYqk lcXyi5GiY2ZAvQl3KiZSoIeP3Hv0rvoPDaM7JAWNkbX3jcSXIlbV45hqSz7ds5zT hH5+mOrSz+Wt1fAlrl8ukSxvk0qfhMT/ -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:52 2025 by rpki-client on console.sobornost.net