$ rpki-client -vvf rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft File: d2KqgncCDQu1x1mX3l99ilFC3xQ.mft (raw, json) Hash identifier: gDgi5xiHOhUw6QO+dxmmB0zyjA2jULemz9Juo5o/Y7M= Subject key identifier: 04:33:19:3D:7E:A0:06:8A:A2:BA:E7:69:71:C8:2A:D6:55:92:5F:E2 Authority key identifier: 77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 Certificate issuer: /CN=A911FAC3/serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Certificate serial: 1384 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft Manifest number: 136E Signing time: Mon 28 Apr 2025 17:13:20 +0000 Manifest this update: Mon 28 Apr 2025 17:13:20 +0000 Manifest next update: Mon 05 May 2025 17:13:20 +0000 Files and hashes: 1: d2KqgncCDQu1x1mX3l99ilFC3xQ.crl (hash: ypJ9mO/+BCZaxgTj07gPscJBFG0xj2jmuzT2oqS+ZJY=) 2: 4338FC5CFB5611EBB7032080C4F9AE02.roa (hash: jXq2yfYI+6Vq13ZwndDj/+d34MA8vN7mKixhRF47lwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4996 (0x1384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FAC3, serialNumber=7762AA8277020D0BB5C75997DE5F7D8A5142DF14 Validity Not Before: Apr 28 17:13:20 2025 GMT Not After : May 5 17:13:20 2025 GMT Subject: CN=680fb730-2820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:bc:23:93:3e:76:c0:e9:d8:16:3a:76:cb: 39:4c:1b:18:71:18:99:12:ed:4b:b2:99:4e:1f:41: 61:d6:85:6d:67:36:3e:6c:1c:cc:04:1b:4e:41:7f: 4d:ec:2a:6f:f9:ad:a8:c6:c6:e2:73:7b:b9:ae:54: 47:29:3b:20:b5:b1:f7:27:a8:6f:59:35:19:29:7b: 89:d3:85:1a:21:30:65:c6:eb:6f:1d:ce:27:d5:90: 78:1c:c4:c2:93:68:96:cd:5f:10:b5:df:20:4f:36: f9:51:b1:ff:a3:ef:04:f6:e2:aa:e4:8f:51:90:4a: 54:3f:e6:3a:64:f9:09:a1:27:90:c1:5b:c4:9c:b3: 72:eb:0a:1f:25:52:bc:98:3c:19:58:2c:5e:13:31: 03:93:8d:d8:d0:f3:2f:48:c4:4e:d9:d6:cd:6c:62: bb:21:86:c1:ef:4b:df:c1:26:b9:c9:a6:f9:a7:6e: 22:bd:ad:9b:ae:b8:98:7c:75:3f:81:3f:3d:52:ac: e9:b4:0d:28:25:5b:5e:3a:91:50:94:ca:78:fc:81: 99:8b:f0:ef:6c:34:6f:14:58:5d:67:75:68:61:31: f5:40:88:f5:d8:b0:88:f8:5b:1b:da:b8:fe:93:d5: 3f:1d:71:a5:1a:08:f6:54:1a:12:5e:b9:73:9c:ea: 8b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:19:3D:7E:A0:06:8A:A2:BA:E7:69:71:C8:2A:D6:55:92:5F:E2 X509v3 Authority Key Identifier: keyid:77:62:AA:82:77:02:0D:0B:B5:C7:59:97:DE:5F:7D:8A:51:42:DF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d2KqgncCDQu1x1mX3l99ilFC3xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FAC3/7B868C089DF511E8957AB416C4F9AE02/d2KqgncCDQu1x1mX3l99ilFC3xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:3f:a9:5a:78:9f:7a:fd:50:1d:19:a2:04:05:7a:03:41:47: 1b:c1:90:37:ad:a9:99:62:90:e3:1a:cf:4d:d5:f5:dc:be:b5: 9a:5f:fe:47:53:b8:bb:3f:cd:28:f6:7a:22:5e:ee:15:29:27: 5e:0f:80:dc:1d:ef:35:d3:e2:47:76:8d:26:f8:c8:b9:71:ac: 09:70:8d:d3:5f:62:5f:01:99:19:5f:eb:43:d7:e2:b8:36:93: ce:5f:18:e1:52:f7:45:55:f0:16:9b:08:0f:a9:a9:25:24:78: a3:1e:95:84:97:9b:e4:c6:21:e5:5a:6f:89:dd:17:55:90:79: 99:1b:b7:d8:e1:16:98:25:fe:b4:b1:0b:14:53:0d:42:06:80: d2:dd:b2:87:ed:f8:ac:cc:2e:2a:0a:b8:b2:41:e4:5b:a1:99: 05:4f:f1:26:37:ad:63:6d:06:14:30:e9:02:69:b5:39:90:ea: 55:f4:2f:a8:41:26:59:39:43:e4:89:30:35:98:d8:f4:b6:7e: 4a:aa:f2:3c:f7:d6:2f:3e:0c:47:8f:4d:0c:06:8a:9a:d6:c8: 0e:89:ce:ae:02:9b:ac:f5:27:84:95:6b:93:8c:ff:d6:0c:c5: d4:0b:54:55:ce:c8:c5:2b:da:7d:d6:61:ec:a3:ac:1e:9d:04: 16:e6:1b:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQzMxMTAvBgNVBAUTKDc3NjJBQTgyNzcwMjBEMEJCNUM3NTk5N0RFNUY3RDhB NTE0MkRGMTQwHhcNMjUwNDI4MTcxMzIwWhcNMjUwNTA1MTcxMzIwWjAYMRYwFAYD VQQDEw02ODBmYjczMC0yODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1i8I5M+dsDp2BY6dss5TBsYcRiZEu1LsplOH0Fh1oVtZzY+bBzMBBtOQX9N 7Cpv+a2oxsbic3u5rlRHKTsgtbH3J6hvWTUZKXuJ04UaITBlxutvHc4n1ZB4HMTC k2iWzV8Qtd8gTzb5UbH/o+8E9uKq5I9RkEpUP+Y6ZPkJoSeQwVvEnLNy6wofJVK8 mDwZWCxeEzEDk43Y0PMvSMRO2dbNbGK7IYbB70vfwSa5yab5p24iva2brriYfHU/ gT89UqzptA0oJVteOpFQlMp4/IGZi/DvbDRvFFhdZ3VoYTH1QIj12LCI+Fsb2rj+ k9U/HXGlGgj2VBoSXrlznOqLowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQzGT1+ oAaKorrnaXHIKtZVkl/iMB8GA1UdIwQYMBaAFHdiqoJ3Ag0LtcdZl95ffYpRQt8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFDMy83Qjg2OEMwODlE RjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RRdTF4MW1YM2w5OWlsRkMz eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QyS3FnbmNDRFF1MXgxbVgzbDk5aWxGQzN4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFDMy83Qjg2OEMwODlERjUxMUU4OTU3QUI0MTZDNEY5QUUwMi9kMktxZ25jQ0RR dTF4MW1YM2w5OWlsRkMzeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKP6laeJ96/VAdGaIEBXoDQUcbwZA3ramZYpDjGs9N1fXcvrWaX/5H U7i7P80o9noiXu4VKSdeD4DcHe810+JHdo0m+Mi5cawJcI3TX2JfAZkZX+tD1+K4 NpPOXxjhUvdFVfAWmwgPqaklJHijHpWEl5vkxiHlWm+J3RdVkHmZG7fY4RaYJf60 sQsUUw1CBoDS3bKH7fiszC4qCriyQeRboZkFT/EmN61jbQYUMOkCabU5kOpV9C+o QSZZOUPkiTA1mNj0tn5KqvI899YvPgxHj00MBoqa1sgOic6uApus9SeElWuTjP/W DMXUC1RVzsjFK9p91mHso6wenQQW5hu1 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:24 2025 by rpki-client on console.sobornost.net