$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft File: R34i4b061SBOOtwt7NbSoZSs-lg.mft (raw, json) Hash identifier: hKXbdKqchn6Vx5sByQrL21/D0T8hzptgmdGj6YXFiP0= Subject key identifier: AF:A1:74:8B:C0:5C:F3:47:6A:0F:69:EA:E2:6B:3B:66:F0:31:47:16 Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 Certificate issuer: /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Certificate serial: 1169 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft Manifest number: 115F Signing time: Mon 28 Apr 2025 14:52:56 +0000 Manifest this update: Mon 28 Apr 2025 14:52:56 +0000 Manifest next update: Mon 05 May 2025 14:52:56 +0000 Files and hashes: 1: R34i4b061SBOOtwt7NbSoZSs-lg.crl (hash: SYOGGmVm1eIHQsn8+TUmQ5IoxHTJjBu/pHPc+9XUnlc=) 2: 6C510F98B51C11EAA1649251C4F9AE02.roa (hash: XN60w0eRqVpxeIfX7b6c8hnme3sk6Z9ebx38NO7BFYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4457 (0x1169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58 Validity Not Before: Apr 28 14:52:56 2025 GMT Not After : May 5 14:52:56 2025 GMT Subject: CN=680f9648-6cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:aa:83:5b:35:ee:8c:33:1a:9e:16:6e:ab: c2:7a:61:05:4d:15:5a:a0:99:f9:a6:23:a9:50:18: c8:2f:d6:5a:c2:c4:e0:09:df:b8:59:00:62:8b:f4: b8:93:77:37:9a:c6:56:1d:8b:86:be:22:f2:42:7e: 31:67:de:d3:76:a9:44:1a:55:ec:9a:ed:46:45:ff: 80:31:70:9b:fe:ab:13:79:be:cc:d7:4d:59:0e:7d: 39:c0:14:a4:be:ac:dc:d5:c6:f8:bd:f2:93:13:e2: c8:b4:ca:9f:0f:98:c8:f2:d0:c5:2e:f0:81:7d:6e: 3b:ef:8c:04:80:90:7c:80:d6:af:03:b9:2a:6c:14: 4e:6e:c5:9d:56:ab:d2:84:81:7d:64:58:e8:f9:a0: c3:0e:4e:fe:18:d1:39:2b:e1:1b:e4:d0:34:49:a6: 0f:d6:1f:d8:45:a1:ce:fd:e9:d0:10:07:93:5b:28: a9:51:8a:b6:2c:46:44:c0:f9:de:29:32:69:46:50: cb:46:8c:8b:ae:ba:c5:14:b4:76:b3:2e:4d:d8:22: 45:43:7a:f1:32:3d:55:f6:d0:45:5f:0d:b1:66:72: ac:d3:fc:2d:7e:f0:66:1b:f3:14:61:52:13:07:af: 57:a0:a2:d6:a8:67:d6:01:3d:4d:62:7c:c2:49:ae: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A1:74:8B:C0:5C:F3:47:6A:0F:69:EA:E2:6B:3B:66:F0:31:47:16 X509v3 Authority Key Identifier: keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:01:19:ac:58:f3:f7:4e:13:e8:01:b2:de:64:2d:dc:22:ad: 7f:55:96:16:1c:a8:a3:9f:04:7e:e5:0a:52:83:a8:04:99:10: b3:3a:74:83:f4:6e:a4:bb:b2:6e:8b:0a:74:47:eb:8f:1b:61: 86:81:66:c8:9f:09:bc:80:6a:3b:49:17:a8:de:a5:50:bc:cb: 2b:da:fc:e3:eb:38:c6:de:e5:e9:fc:d4:c6:13:c1:ff:92:cb: 82:8b:71:e6:fb:11:3a:49:01:7b:a0:55:97:0d:e2:4d:4d:95: 09:3a:76:d3:35:8a:3f:9d:4e:1c:93:9b:bb:fc:03:89:53:3a: bd:38:e3:03:ff:77:07:57:30:8c:ec:49:3b:7d:e8:71:cb:00: db:c0:3c:62:af:c8:24:61:1c:29:ed:2c:dd:38:b0:3f:d6:4f: 39:aa:d1:1a:6e:bb:da:10:c8:a6:31:00:dd:b7:a6:f2:e4:c4: c5:68:7a:02:c3:08:7c:94:f7:e2:ea:83:f2:5c:e2:b6:34:68: 88:c4:6e:8d:a9:f2:3b:42:3f:23:88:28:ad:d7:ae:f7:9d:5f: 45:ac:d2:4e:73:78:42:6a:3b:4e:34:ff:73:e2:86:62:1f:9e: b4:94:72:64:7d:40:90:e3:98:6c:c6:b1:1b:a8:89:5a:24:c1: 30:af:c3:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDQ3N0UyMkUxQkQzQUQ1MjA0RTNBREMyREVDRDZEMkEx OTRBQ0ZBNTgwHhcNMjUwNDI4MTQ1MjU2WhcNMjUwNTA1MTQ1MjU2WjAYMRYwFAYD VQQDEw02ODBmOTY0OC02Y2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vaqg1s17owzGp4WbqvCemEFTRVaoJn5piOpUBjIL9ZawsTgCd+4WQBii/S4 k3c3msZWHYuGviLyQn4xZ97TdqlEGlXsmu1GRf+AMXCb/qsTeb7M101ZDn05wBSk vqzc1cb4vfKTE+LItMqfD5jI8tDFLvCBfW4774wEgJB8gNavA7kqbBRObsWdVqvS hIF9ZFjo+aDDDk7+GNE5K+Eb5NA0SaYP1h/YRaHO/enQEAeTWyipUYq2LEZEwPne KTJpRlDLRoyLrrrFFLR2sy5N2CJFQ3rxMj1V9tBFXw2xZnKs0/wtfvBmG/MUYVIT B69XoKLWqGfWAT1NYnzCSa4cmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+hdIvA XPNHag9p6uJrO2bwMUcWMB8GA1UdIwQYMBaAFEd+IuG9OtUgTjrcLezW0qGUrPpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC8zQjA2RjMwNjA0 MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFTQk9PdHd0N05iU29aU3Mt bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1IzNGk0YjA2MVNCT090d3Q3TmJTb1pTcy1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC8zQjA2RjMwNjA0MzUxMUU5OUUwOUNDNjNDNEY5QUUwMi9SMzRpNGIwNjFT Qk9PdHd0N05iU29aU3MtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFARmsWPP3ThPoAbLeZC3cIq1/VZYWHKijnwR+5QpSg6gEmRCzOnSD 9G6ku7Juiwp0R+uPG2GGgWbInwm8gGo7SReo3qVQvMsr2vzj6zjG3uXp/NTGE8H/ ksuCi3Hm+xE6SQF7oFWXDeJNTZUJOnbTNYo/nU4ck5u7/AOJUzq9OOMD/3cHVzCM 7Ek7fehxywDbwDxir8gkYRwp7SzdOLA/1k85qtEabrvaEMimMQDdt6by5MTFaHoC wwh8lPfi6oPyXOK2NGiIxG6NqfI7Qj8jiCit1673nV9FrNJOc3hCajtONP9z4oZi H560lHJkfUCQ45hsxrEbqIlaJMEwr8ON -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:46 2025 by rpki-client on console.sobornost.net