$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft File: 0omLrZJnkc4JM8CSed-XmNfetpQ.mft (raw, json) Hash identifier: B4zSK9S8pyRrqJZGmlKtjc8C9ppJ5UWAGgrn50jwFy0= Subject key identifier: 74:09:8B:C9:A5:21:D4:DD:91:9A:DD:7E:7C:F3:7A:7C:A3:D7:54:04 Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft Manifest number: 3C Signing time: Sat 26 Apr 2025 23:11:18 +0000 Manifest this update: Sat 26 Apr 2025 23:11:18 +0000 Manifest next update: Sat 03 May 2025 23:11:18 +0000 Files and hashes: 1: 0omLrZJnkc4JM8CSed-XmNfetpQ.crl (hash: ci584dTnRwIrCJrvI+SUatWYua89C6M3DMaQFhErR4o=) 2: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (hash: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Validity Not Before: Apr 26 23:11:18 2025 GMT Not After : May 3 23:11:18 2025 GMT Subject: CN=680d6816-1552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:e9:96:5d:18:2e:77:54:38:0b:a1:e6:7b: b9:30:ef:9d:fb:fc:5e:ee:5f:ef:e8:3b:8c:50:3e: 34:f5:a4:ba:48:c2:3c:d6:98:88:25:76:9c:50:db: 23:56:10:b5:44:c0:58:89:89:1f:dc:2b:99:1c:4f: c7:bc:a4:3f:3b:f7:cf:f4:db:39:5e:e4:75:5f:6f: ba:11:63:28:e6:ad:3d:37:f9:ea:71:42:61:65:3d: 28:f7:a6:b6:18:fa:22:51:5c:e2:53:1e:59:82:04: 4f:b3:70:a1:ed:98:ab:08:29:d3:ac:fd:9a:3b:f0: 97:22:32:9a:47:c3:e3:7b:d9:6d:71:84:d8:f3:57: c0:2e:e4:35:04:ca:89:6c:40:40:73:82:4b:67:dd: 9e:5a:9a:38:8d:2a:af:03:7b:e8:4c:fa:f5:bb:ce: f1:3a:4a:79:c5:e5:42:98:25:a4:0e:52:4a:0c:10: 62:4f:c3:3f:26:be:5c:73:41:46:56:36:66:a5:d2: 78:a1:c8:bf:f2:9f:86:d5:fb:9b:1e:ac:9b:aa:b7: be:60:1e:0f:7a:b6:67:97:fc:9c:64:38:cf:64:df: 8d:63:2e:1b:a4:d5:68:89:b6:d3:92:52:c8:38:1a: 72:da:7b:6c:af:93:6a:ad:ac:8d:23:10:3a:e9:bc: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:09:8B:C9:A5:21:D4:DD:91:9A:DD:7E:7C:F3:7A:7C:A3:D7:54:04 X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:20:60:bf:13:38:2b:4f:02:bd:0c:2f:66:9b:af:7e:97:a8: ae:71:15:8e:53:ab:9e:b9:07:5e:e5:2c:85:41:89:b6:61:35: 65:19:a5:24:03:fe:b1:7e:0a:ef:43:80:77:eb:cb:e4:d0:b9: 6f:e9:e9:96:98:2c:c0:b6:9e:8b:29:73:ad:ea:97:10:80:40: 4c:4e:3c:b8:59:d1:fe:c3:1e:16:05:81:02:6d:2d:70:c3:67: fe:12:96:a9:3e:61:4d:46:d4:45:50:bd:fb:14:ae:d5:58:64: 8b:34:cf:58:64:0b:c8:c4:00:96:c6:cf:6f:7a:02:66:0b:45: 64:ba:ff:82:f9:6b:ec:a3:64:d8:15:30:e2:77:72:86:fb:cd: 70:82:43:b2:47:72:8c:3e:04:ce:12:38:c7:64:76:c3:95:23: 57:b6:aa:a0:60:c6:b5:b9:2c:1e:f1:c5:ac:68:e7:e5:a0:50: 76:82:da:09:21:a3:63:65:a7:72:df:cd:2f:ce:8d:dc:96:01: 51:c8:da:85:81:66:6a:0f:d8:67:c5:c2:5f:92:6a:28:1e:5b: 34:d9:8b:b4:53:d4:f2:a1:70:28:71:eb:7b:45:0a:3d:f3:30: d0:a9:e4:69:29:d0:8c:db:e7:d8:6c:e8:5c:a0:0b:6e:b3:e4: 12:ae:6b:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTA0MjYyMzExMThaFw0yNTA1MDMyMzExMThaMBgxFjAUBgNV BAMTDTY4MGQ2ODE2LTE1NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Z+mWXRgud1Q4C6Hme7kw7537/F7uX+/oO4xQPjT1pLpIwjzWmIgldpxQ2yNW ELVEwFiJiR/cK5kcT8e8pD8798/02zle5HVfb7oRYyjmrT03+epxQmFlPSj3prYY +iJRXOJTHlmCBE+zcKHtmKsIKdOs/Zo78JciMppHw+N72W1xhNjzV8Au5DUEyols QEBzgktn3Z5amjiNKq8De+hM+vW7zvE6SnnF5UKYJaQOUkoMEGJPwz8mvlxzQUZW Nmal0nihyL/yn4bV+5serJuqt75gHg96tmeX/JxkOM9k341jLhuk1WiJttOSUsg4 GnLae2yvk2qtrI0jEDrpvOZfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdAmLyaUh 1N2Rmt1+fPN6fKPXVAQwHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB QzgzLzIwQTYxMzdFQ0M5OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0 Sk04Q1NlZC1YbU5mZXRwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsgYL8TOCtPAr0ML2abr36XqK5xFY5Tq565B17lLIVBibZhNWUZpSQD /rF+Cu9DgHfry+TQuW/p6ZaYLMC2nospc63qlxCAQExOPLhZ0f7DHhYFgQJtLXDD Z/4Slqk+YU1G1EVQvfsUrtVYZIs0z1hkC8jEAJbGz296AmYLRWS6/4L5a+yjZNgV MOJ3cob7zXCCQ7JHcow+BM4SOMdkdsOVI1e2qqBgxrW5LB7xxaxo5+WgUHaC2gkh o2Nlp3LfzS/OjdyWAVHI2oWBZmoP2GfFwl+SaigeWzTZi7RT1PKhcChx63tFCj3z MNCp5Gkp0Izb59hs6FygC26z5BKuawo= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net