$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: rZTpaCjp6mY/NfBTZYkwT4WBqK9lM7jvy+qR7jw2q78= Subject key identifier: 7C:57:16:63:54:13:86:9E:79:F4:D0:4C:A7:46:B1:7C:71:BC:D4:58 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 1B Signing time: Sun 27 Apr 2025 06:45:08 +0000 Manifest this update: Sun 27 Apr 2025 06:45:08 +0000 Manifest next update: Sun 04 May 2025 06:45:08 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: 123olKa8/ETEcfYZW6SwMzLnv1KQ5t50lSR+M1afuUE=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: zfjkzPAZbDp4JpjN4ePtNi0tOHT/uT0JPO+MhXtdLAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Apr 27 06:45:08 2025 GMT Not After : May 4 06:45:08 2025 GMT Subject: CN=680dd274-ac8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fc:bf:1a:f4:77:d1:f3:39:a3:74:b1:26:50: 06:85:f6:b1:e7:be:b7:39:f0:b9:d4:1c:68:f1:82: f6:85:d7:80:3d:38:98:0b:8f:ef:e8:47:4e:e2:dc: 87:b1:fa:7a:92:55:d5:b6:22:a7:0f:ca:1f:09:fb: 7f:69:5c:12:79:c2:2d:04:f9:c0:27:f2:71:48:90: 8c:c8:20:56:a5:04:56:d4:7b:1c:47:3a:9c:b1:a0: de:1c:94:a5:46:e8:78:d8:0d:5a:8c:68:fc:bf:30: f0:b6:e8:3d:1c:9b:f4:26:b4:9a:24:25:de:52:21: 97:86:42:75:7b:ca:91:40:23:77:5e:d9:a1:e1:73: ac:2e:33:1e:cb:26:d8:16:e1:cd:c9:03:98:94:34: ed:ac:fe:2a:3d:a5:ad:16:c2:20:c5:21:b5:2c:b1: 25:46:98:8b:2c:cd:19:76:d3:1a:53:7f:bb:e0:32: 6b:4f:02:a7:1e:97:75:da:73:aa:ba:5d:67:f2:62: c0:50:ad:37:fb:05:19:28:8a:8c:f3:c1:44:b5:eb: 8d:5c:91:b3:4f:32:00:c2:a6:a5:d3:28:94:35:c3: ff:8b:49:3b:b7:0d:2a:e1:51:0c:0a:8f:4f:1e:c9: 8a:2e:0f:4e:b2:b8:bb:a3:7d:36:98:9a:c2:9f:99: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:57:16:63:54:13:86:9E:79:F4:D0:4C:A7:46:B1:7C:71:BC:D4:58 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e5:7c:68:71:be:91:a3:16:01:a8:5e:4e:67:e3:f7:f1:af: 26:27:4e:0b:e5:be:f6:be:c9:20:91:ca:34:03:8c:33:98:c1: 7e:3d:be:fc:26:d2:25:e1:47:09:dc:9e:cc:94:5f:22:ec:13: d0:d9:b2:3d:a5:75:eb:bb:af:29:6f:f0:35:89:16:55:fa:9f: e3:fa:f8:32:f7:cc:d6:09:73:42:2c:9c:f5:93:52:7c:3f:e3: d7:18:cc:b1:74:46:3e:51:1e:a1:97:4e:5d:cb:15:af:42:a2: 1c:f6:7b:ac:9c:dc:fe:a7:3f:96:05:15:d6:63:11:8b:68:0d: 96:35:49:6a:cd:eb:08:55:ad:9a:9b:80:38:de:e6:09:40:46: 5a:4c:5c:4a:ca:6b:eb:f3:65:f0:10:70:b0:47:ba:ce:4b:34: 93:89:51:bb:a8:37:f2:f0:0a:de:ed:dd:02:9a:69:5c:e3:2c: 64:8a:6e:da:31:47:8d:03:a2:3e:21:c5:46:e3:59:7d:09:98: c7:95:61:d6:f6:00:4a:94:fe:c9:93:ed:a9:bb:5e:33:a4:59: 08:e1:74:1c:79:10:53:f3:0f:b7:f1:1c:44:0f:b3:71:00:25: fd:5d:c3:30:c6:13:db:88:01:99:5b:40:6f:b2:96:79:f1:61: b8:b1:35:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTA0MjcwNjQ1MDhaFw0yNTA1MDQwNjQ1MDhaMBgxFjAUBgNV BAMTDTY4MGRkMjc0LWFjOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU/L8a9HfR8zmjdLEmUAaF9rHnvrc58LnUHGjxgvaF14A9OJgLj+/oR07i3Iex +nqSVdW2IqcPyh8J+39pXBJ5wi0E+cAn8nFIkIzIIFalBFbUexxHOpyxoN4clKVG 6HjYDVqMaPy/MPC26D0cm/QmtJokJd5SIZeGQnV7ypFAI3de2aHhc6wuMx7LJtgW 4c3JA5iUNO2s/io9pa0WwiDFIbUssSVGmIsszRl20xpTf7vgMmtPAqcel3Xac6q6 XWfyYsBQrTf7BRkoiozzwUS1641ckbNPMgDCpqXTKJQ1w/+LSTu3DSrhUQwKj08e yYouD06yuLujfTaYmsKfmZerAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfFcWY1QT hp559NBMp0axfHG81FgwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITlfGhxvpGjFgGoXk5n4/fxryYnTgvlvva+ySCRyjQDjDOYwX49vvwm 0iXhRwncnsyUXyLsE9DZsj2ldeu7rylv8DWJFlX6n+P6+DL3zNYJc0IsnPWTUnw/ 49cYzLF0Rj5RHqGXTl3LFa9Cohz2e6yc3P6nP5YFFdZjEYtoDZY1SWrN6whVrZqb gDje5glARlpMXErKa+vzZfAQcLBHus5LNJOJUbuoN/LwCt7t3QKaaVzjLGSKbtox R40Doj4hxUbjWX0JmMeVYdb2AEqU/smT7am7XjOkWQjhdBx5EFPzD7fxHEQPs3EA Jf1dwzDGE9uIAZlbQG+ylnnxYbixNWg= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net