$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft File: GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json) Hash identifier: nmPaIw7x6325Ua6fd3AYnk392cYX162MPCWpLiKz+z4= Subject key identifier: ED:C5:91:8A:36:5C:25:99:71:63:5E:B5:73:F1:7C:06:B9:64:AD:E0 Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC Certificate issuer: /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Certificate serial: 0348 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft Manifest number: 0340 Signing time: Fri 25 Apr 2025 00:48:44 +0000 Manifest this update: Fri 25 Apr 2025 00:48:43 +0000 Manifest next update: Fri 02 May 2025 00:48:43 +0000 Files and hashes: 1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: VQtE/ensLRxLXXDkXqUTsplAjooNWDLrpBvK3B1A6p0=) 2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: bwcKq1c0r2cXBrd25MLQlHFjWgMS2hGGf/FnvA7qj34=) 3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: M4NylbqODaGIV7jb3azGtcDcoPjVhzDh1zfYrf7L1aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 840 (0x348) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC Validity Not Before: Apr 25 00:48:43 2025 GMT Not After : May 2 00:48:43 2025 GMT Subject: CN=680adbec-fe91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:00:fe:ff:63:cc:32:7d:63:7b:12:6a:dc: b3:10:07:60:89:78:83:da:bd:73:3f:eb:84:68:ae: a1:61:68:94:85:22:9d:e8:9c:fc:6f:90:ee:9f:e5: 48:fb:3d:8d:08:6e:f1:fb:94:42:13:66:aa:6a:07: ec:49:ac:6b:d6:1d:85:f7:c6:c9:5a:e8:5a:d1:a5: 12:c6:c1:63:33:c5:f6:62:ac:90:a7:11:51:8e:95: 3e:94:f4:fb:50:e5:f0:a1:fc:ae:20:85:b2:ab:a2: 28:47:66:6f:07:7c:73:0f:ce:55:65:6b:19:55:51: f6:df:ec:2a:b8:57:7a:ec:11:ce:40:52:58:d7:a8: 82:13:4b:12:6f:ca:f4:14:5b:78:32:27:ac:cc:a1: 09:4f:4e:b7:51:06:66:a5:9b:22:63:ad:19:34:fd: 77:fb:06:82:8c:15:67:f2:14:74:04:df:c1:9f:18: c1:06:0b:5f:02:b9:04:55:96:a0:36:c2:c6:5c:6c: 9f:cb:03:39:35:32:ea:a0:73:23:08:c6:3a:e7:aa: 7c:86:f8:c8:d8:e0:32:82:41:37:50:92:04:7a:fc: c6:08:7f:97:06:dc:26:b6:ab:04:99:cf:c4:a2:38: 49:cd:8f:1b:4d:ff:12:c2:be:55:f5:7d:70:a1:e8: 0a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C5:91:8A:36:5C:25:99:71:63:5E:B5:73:F1:7C:06:B9:64:AD:E0 X509v3 Authority Key Identifier: keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:c4:87:84:04:f2:2e:1f:cb:ce:aa:87:a1:2a:b2:30:0a:84: 2a:ae:24:fa:93:17:88:95:ce:06:8e:a0:7c:39:9d:01:24:b6: 74:7b:5d:7b:0a:43:cd:2b:bd:60:cc:9a:4f:1f:99:7a:7a:cd: ca:af:7f:44:8e:b0:3b:bf:5c:2b:f3:05:f9:30:f5:c8:78:13: 98:a1:6f:8f:a3:ab:68:82:6b:e4:ba:4a:c0:df:73:b8:3b:b9: 64:18:75:86:e9:53:2a:cf:c8:c7:30:c1:38:ac:cf:19:fd:8e: 5a:9d:0d:5f:3b:98:3b:6b:86:95:81:46:54:8f:71:d9:d4:0e: 53:99:1a:df:73:b2:e3:40:a0:4f:10:e6:75:9d:89:0e:01:1f: 77:af:f5:24:28:2f:46:a9:f7:f1:74:c5:dd:cd:e7:a3:bf:af: a5:ed:56:83:23:33:86:1c:fa:bb:cc:55:5e:94:d0:11:41:e7: 47:8d:12:63:3b:86:3b:9d:2e:fa:ca:62:50:59:18:a1:e6:3c: 51:58:60:50:54:38:de:36:76:52:ed:ea:f9:90:39:e5:cc:a5: 72:00:f3:13:c0:a6:d2:20:0f:7b:49:d6:54:68:ce:40:35:66: 1b:bc:08:af:df:ed:d4:3a:1b:06:b1:ee:e5:db:47:b1:f1:72: 67:46:87:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1NUQxMTAvBgNVBAUTKDFBMjM5ODY4NDM1NjVERkZDODAwRjgwRkYyOTZCQUIx QUQzNzE0RUMwHhcNMjUwNDI1MDA0ODQzWhcNMjUwNTAyMDA0ODQzWjAYMRYwFAYD VQQDEw02ODBhZGJlYy1mZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUQA/v9jzDJ9Y3sSatyzEAdgiXiD2r1zP+uEaK6hYWiUhSKd6Jz8b5Dun+VI +z2NCG7x+5RCE2aqagfsSaxr1h2F98bJWuha0aUSxsFjM8X2YqyQpxFRjpU+lPT7 UOXwofyuIIWyq6IoR2ZvB3xzD85VZWsZVVH23+wquFd67BHOQFJY16iCE0sSb8r0 FFt4MieszKEJT063UQZmpZsiY60ZNP13+waCjBVn8hR0BN/BnxjBBgtfArkEVZag NsLGXGyfywM5NTLqoHMjCMY656p8hvjI2OAygkE3UJIEevzGCH+XBtwmtqsEmc/E ojhJzY8bTf8Swr5V9X1woegKgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3FkYo2 XCWZcWNetXPxfAa5ZK3gMB8GA1UdIwQYMBaAFBojmGhDVl3/yAD4D/KWurGtNxTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU1RC80MEU0M0I4MEI3 QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hmX0lBUGdQOHBhNnNhMDNG T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dpT1lhRU5XWGZfSUFQZ1A4cGE2c2EwM0ZPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU1RC80MEU0M0I4MEI3QUIxMUVDOUU1NTMxN0RDNEY5QUUwMi9HaU9ZYUVOV1hm X0lBUGdQOHBhNnNhMDNGT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjxIeEBPIuH8vOqoehKrIwCoQqriT6kxeIlc4GjqB8OZ0BJLZ0e117 CkPNK71gzJpPH5l6es3Kr39EjrA7v1wr8wX5MPXIeBOYoW+Po6togmvkukrA33O4 O7lkGHWG6VMqz8jHMME4rM8Z/Y5anQ1fO5g7a4aVgUZUj3HZ1A5TmRrfc7LjQKBP EOZ1nYkOAR93r/UkKC9GqffxdMXdzeejv6+l7VaDIzOGHPq7zFVelNARQedHjRJj O4Y7nS76ymJQWRih5jxRWGBQVDjeNnZS7er5kDnlzKVyAPMTwKbSIA97SdZUaM5A NWYbvAiv3+3UOhsGse7l20ex8XJnRoeE -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:36 2025 by rpki-client on console.sobornost.net