$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json) Hash identifier: qOuNAt0G0oL5Te4jqSyX+gZUbLSRa759tqIZwLCr/lQ= Subject key identifier: 0C:A3:F5:FB:28:75:A8:0F:96:64:A9:8A:90:07:85:68:5D:1D:60:FE Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft Manifest number: 66 Signing time: Sun 27 Apr 2025 05:48:23 +0000 Manifest this update: Sun 27 Apr 2025 05:48:22 +0000 Manifest next update: Sun 04 May 2025 05:48:22 +0000 Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: 70U/PShieFNpvsAILqVxDgnAZLI4ly1zbb75h2Vwkr4=) 2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: eCOiciHVF02QIJ92sCGpWxzFiJ0IghOmtXmYmm4vkYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5 Validity Not Before: Apr 27 05:48:22 2025 GMT Not After : May 4 05:48:22 2025 GMT Subject: CN=680dc526-7d7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:91:44:fc:cd:09:4c:9d:13:f6:e8:fc:a4: 5b:c9:8e:1a:26:4d:83:56:b8:82:b4:fe:82:7b:0f: 77:2f:46:5d:87:3a:62:8c:87:06:86:39:7b:11:9d: 16:d1:82:c7:50:cf:10:2f:9c:3d:e8:0d:2f:6d:63: 64:15:bc:ba:19:a3:7f:41:f7:e9:4f:ca:3c:c2:fc: 27:6b:fb:23:78:a9:1a:7c:e1:5a:ad:1e:f1:18:d0: 2a:02:4c:72:18:d7:1a:72:c5:13:d5:0d:6f:39:c0: 9a:1d:15:dc:4c:05:77:a0:23:e0:08:57:0b:ba:86: 0f:c4:c0:72:31:37:da:a2:f3:09:ec:38:6d:c9:a4: 06:53:a8:3c:b2:83:c4:b7:f2:da:ec:e5:42:f6:9b: 5f:fc:13:59:d5:c7:5c:dc:59:c8:1f:64:82:96:18: c4:62:e5:d4:2e:96:fe:fc:f5:5b:e6:4c:b2:5c:64: 89:b4:2a:ca:47:77:b3:fa:6c:06:66:90:79:76:75: 53:05:f3:d2:eb:64:f6:60:27:fb:2d:c8:3a:88:4d: 65:70:c1:1b:1e:5c:8e:39:8e:74:1f:1f:ee:27:e2: d5:73:22:aa:83:a0:13:cd:4a:04:86:63:57:7c:32: f1:cc:33:48:1c:4d:f9:9c:59:8d:4e:2c:78:d3:75: a0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A3:F5:FB:28:75:A8:0F:96:64:A9:8A:90:07:85:68:5D:1D:60:FE X509v3 Authority Key Identifier: keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:78:dc:8f:6a:78:fb:22:d8:38:91:0a:43:d2:6f:3d:76:0f: 87:d5:8a:a3:23:c5:2d:ae:8e:a3:ed:e8:51:a7:c0:52:06:21: 6a:e8:5f:cb:41:46:67:3b:8a:68:04:3a:0c:a9:f6:c4:8a:78: f0:95:e7:72:bb:8b:d9:70:3f:a4:2d:d5:67:1a:59:f8:d8:da: b4:56:fd:64:b7:6e:51:ac:81:43:d2:40:f1:1e:85:99:4e:d2: 05:77:0a:23:8b:58:a8:09:aa:99:a6:f0:86:78:a1:fc:ba:6c: a8:08:7a:93:cc:7f:a8:fa:7b:ae:5f:e8:f4:e7:19:cb:a1:75: 74:a2:be:0f:0e:24:df:1e:94:87:c2:27:3d:da:d5:69:5b:10: 9a:40:73:f0:80:dc:46:16:0f:2c:7f:0f:d8:3e:ae:1c:c4:46: 12:03:3c:74:b7:b8:cb:3e:72:c8:2e:9f:7d:5b:0d:a2:14:d0: 80:35:85:e7:ed:7c:b4:e0:75:6b:e4:77:ce:fd:b4:39:d0:1a: 27:25:27:db:14:00:4c:df:b6:6b:f2:b1:ea:4c:e5:40:4b:29: 1a:f5:49:d0:4a:0f:0e:5f:a2:2f:b1:58:cb:c7:ef:90:39:36: d4:7d:48:4b:81:f3:23:08:fd:cb:8e:64:52:e6:51:2d:6d:f9: 29:78:c7:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0IwNTExMC8GA1UEBRMoNDBEREVFRjAxOEVBRENERTREMUJGNzhEMTU0ODUxRjhE OEJDMjZBNTAeFw0yNTA0MjcwNTQ4MjJaFw0yNTA1MDQwNTQ4MjJaMBgxFjAUBgNV BAMTDTY4MGRjNTI2LTdkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHgpFE/M0JTJ0T9uj8pFvJjhomTYNWuIK0/oJ7D3cvRl2HOmKMhwaGOXsRnRbR gsdQzxAvnD3oDS9tY2QVvLoZo39B9+lPyjzC/Cdr+yN4qRp84VqtHvEY0CoCTHIY 1xpyxRPVDW85wJodFdxMBXegI+AIVwu6hg/EwHIxN9qi8wnsOG3JpAZTqDyyg8S3 8trs5UL2m1/8E1nVx1zcWcgfZIKWGMRi5dQulv789VvmTLJcZIm0KspHd7P6bAZm kHl2dVMF89LrZPZgJ/styDqITWVwwRseXI45jnQfH+4n4tVzIqqDoBPNSgSGY1d8 MvHMM0gcTfmcWY1OLHjTdaBtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDKP1+yh1 qA+WZKmKkAeFaF0dYP4wHwYDVR0jBBgwFoAUQN3u8Bjq3N5NG/eNFUhR+Ni8JqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQjA1L0YwQjY2Q0Y4OEE5 QTExRUZCOEFBNTY0OEM0RjlBRTAyL1FOM3U4QmpxM041TkdfZU5GVWhSLU5pOEpx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUU4zdThCanEzTjVOR19lTkZVaFItTmk4SnFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QjA1L0YwQjY2Q0Y4OEE5QTExRUZCOEFBNTY0OEM0RjlBRTAyL1FOM3U4QmpxM041 TkdfZU5GVWhSLU5pOEpxVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAt43I9qePsi2DiRCkPSbz12D4fViqMjxS2ujqPt6FGnwFIGIWroX8tB Rmc7imgEOgyp9sSKePCV53K7i9lwP6Qt1WcaWfjY2rRW/WS3blGsgUPSQPEehZlO 0gV3CiOLWKgJqpmm8IZ4ofy6bKgIepPMf6j6e65f6PTnGcuhdXSivg8OJN8elIfC Jz3a1WlbEJpAc/CA3EYWDyx/D9g+rhzERhIDPHS3uMs+csgun31bDaIU0IA1heft fLTgdWvkd879tDnQGiclJ9sUAEzftmvysepM5UBLKRr1SdBKDw5foi+xWMvH75A5 NtR9SEuB8yMI/cuOZFLmUS1t+Sl4xwY= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net