$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: +kdnsfIky8FpSpp8JXFgQ6aBoRqVnWZau5HNh8oFrrI= Subject key identifier: DB:91:BB:E3:FA:6F:88:6B:DE:A1:E9:B4:BC:22:18:F6:15:F0:70:78 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 0306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 0302 Signing time: Sun 27 Apr 2025 00:54:06 +0000 Manifest this update: Sun 27 Apr 2025 00:54:05 +0000 Manifest next update: Sun 04 May 2025 00:54:05 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: NHU4/0iPGy7j0IsDCOUdbKWb3/tkWURkUoTW1ynlNdQ=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: aPnt9G9PwhxXYMkZOwS2x4lOo/4L3AhIffLQ2SVs6TQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 774 (0x306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Apr 27 00:54:05 2025 GMT Not After : May 4 00:54:05 2025 GMT Subject: CN=680d802d-e74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:d6:03:f3:a1:66:8a:76:63:e7:d9:78:16: 18:03:e6:b9:7e:a7:c1:72:e7:27:74:9a:b4:7d:7f: fd:c2:e2:60:1b:9b:28:31:09:e6:78:ab:7a:0c:36: 1d:a8:28:28:50:ca:3f:19:c1:61:bb:77:c2:e4:14: cb:da:74:61:88:eb:3f:4b:a5:86:0c:6f:9a:f1:88: 8c:5b:42:e9:65:70:19:49:34:5f:7a:8f:5d:16:63: 6b:f8:44:96:84:04:d5:d7:77:8e:e7:ee:ba:18:3e: 98:a3:1a:23:46:c8:dc:76:cb:fb:59:8f:fe:9c:63: 6f:dd:a9:f3:ee:60:ad:9d:7f:ce:d3:6d:96:e0:8f: 46:41:66:1a:0e:cf:30:ef:d6:c5:40:31:47:ab:73: 3c:ab:25:48:26:f5:eb:66:e2:9c:74:17:ea:b2:ed: 31:aa:f9:bf:4c:fc:49:a9:55:7d:7e:3c:8b:61:68: bd:a2:a0:dc:c0:0e:a9:a7:e1:94:dc:12:2b:34:cf: aa:52:d2:d9:45:fa:4b:f8:42:bf:b7:0c:37:6e:5e: dd:a8:1a:49:92:cf:0a:d1:6a:dc:56:0d:8c:89:92: 7e:1e:01:61:87:1a:e1:58:06:96:c3:97:b5:03:de: 58:d5:35:1e:49:16:f8:fc:75:97:24:d6:14:28:b3: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:91:BB:E3:FA:6F:88:6B:DE:A1:E9:B4:BC:22:18:F6:15:F0:70:78 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a5:5b:e6:d6:7c:8e:8c:08:ce:cf:3a:aa:f7:31:b6:33:b9: e8:15:02:93:23:b0:51:1d:17:59:4b:35:a1:96:3e:f1:83:60: f3:87:55:bc:4e:f7:b4:b2:2b:f6:59:a4:b8:de:74:fb:36:d1: 36:92:e6:e0:97:a9:40:82:bc:55:8e:6f:cf:1b:ed:c0:9b:30: 57:68:1a:69:88:1b:64:d8:2d:7b:c8:32:d6:77:6a:f5:24:d7: d6:d8:fd:f8:9d:11:3c:a6:ce:4c:3e:96:79:fa:71:90:ed:8b: 36:20:66:d5:96:1a:99:bd:fe:fa:0d:59:4a:cb:5a:2e:9f:49: a8:be:94:bb:00:89:86:7a:d4:ca:27:62:00:c6:a8:98:7d:64: 3f:8e:21:61:20:73:c1:0a:5f:20:88:39:78:2e:86:e1:71:db: a4:26:b7:0d:ef:ab:e1:66:f7:c2:34:9b:3b:41:43:f4:84:09: 33:0a:54:79:de:ed:f2:3a:d2:f5:44:09:9f:c7:08:66:ca:6f: 7b:e7:18:4f:c0:c1:3a:a6:6b:46:8f:f0:e9:71:68:bd:9a:03: c7:4f:6a:79:cc:87:bf:74:5b:71:83:b7:f5:ea:55:34:0e:ab: a6:fc:34:0d:ab:37:95:a6:ee:b9:15:82:d2:9c:e2:a4:e3:21: c5:94:53:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjUwNDI3MDA1NDA1WhcNMjUwNTA0MDA1NDA1WjAYMRYwFAYD VQQDEw02ODBkODAyZC1lNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD3WA/OhZop2Y+fZeBYYA+a5fqfBcucndJq0fX/9wuJgG5soMQnmeKt6DDYd qCgoUMo/GcFhu3fC5BTL2nRhiOs/S6WGDG+a8YiMW0LpZXAZSTRfeo9dFmNr+ESW hATV13eO5+66GD6YoxojRsjcdsv7WY/+nGNv3anz7mCtnX/O022W4I9GQWYaDs8w 79bFQDFHq3M8qyVIJvXrZuKcdBfqsu0xqvm/TPxJqVV9fjyLYWi9oqDcwA6pp+GU 3BIrNM+qUtLZRfpL+EK/tww3bl7dqBpJks8K0WrcVg2MiZJ+HgFhhxrhWAaWw5e1 A95Y1TUeSRb4/HWXJNYUKLO4XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuRu+P6 b4hr3qHptLwiGPYV8HB4MB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYpVvm1nyOjAjOzzqq9zG2M7noFQKTI7BRHRdZSzWhlj7xg2Dzh1W8 Tve0siv2WaS43nT7NtE2kubgl6lAgrxVjm/PG+3AmzBXaBppiBtk2C17yDLWd2r1 JNfW2P34nRE8ps5MPpZ5+nGQ7Ys2IGbVlhqZvf76DVlKy1oun0movpS7AImGetTK J2IAxqiYfWQ/jiFhIHPBCl8giDl4LobhcdukJrcN76vhZvfCNJs7QUP0hAkzClR5 3u3yOtL1RAmfxwhmym975xhPwME6pmtGj/DpcWi9mgPHT2p5zIe/dFtxg7f16lU0 Dqum/DQNqzeVpu65FYLSnOKk4yHFlFPp -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net