$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: tWefqC9g5qFdvfFfU/uq+3MlA9yFPVwVzHaLOd6uz1s= Subject key identifier: 70:4F:D9:F0:86:09:F1:3D:CF:5C:14:D8:4F:50:81:A9:05:8B:48:A3 Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: 85 Signing time: Sun 27 Apr 2025 05:24:15 +0000 Manifest this update: Sun 27 Apr 2025 05:24:15 +0000 Manifest next update: Sun 04 May 2025 05:24:15 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: Xl6yE9ibhz2f4qFCnO6C6vS0U6idNLmDiyYk2ePUvwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: Apr 27 05:24:15 2025 GMT Not After : May 4 05:24:15 2025 GMT Subject: CN=680dbf7f-4c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:09:dc:88:b5:59:cc:e7:f6:e8:3e:18:e1:fc: 22:71:b9:8f:fa:6a:db:65:91:03:2f:4c:35:9f:cd: 81:5a:fa:e4:40:4b:1b:a7:de:75:a7:8a:fe:1a:97: 00:f1:3e:b8:66:46:f2:8b:ae:c7:80:36:11:8d:0e: 8c:ac:16:b8:03:01:ac:8b:04:06:04:91:15:d1:9a: c7:f7:c5:09:67:11:44:72:c2:6d:ee:9a:40:73:e9: b2:f0:d2:7b:d5:b7:4c:10:4d:1a:19:1e:b1:b8:af: da:b9:1d:09:f7:dc:14:ab:d8:7b:c6:d5:bb:51:08: bc:dc:ad:c0:e2:59:5d:20:c9:eb:47:5f:a4:df:f5: fb:35:ec:63:dc:2f:74:84:b7:a9:fa:52:f3:57:af: 38:f8:de:5a:a7:e3:3a:78:3d:24:a2:18:70:59:fa: 87:39:40:e5:c0:85:88:ae:03:0e:de:e4:9c:f3:ae: f9:b3:a2:b1:5c:69:df:db:9a:8d:1f:85:e1:3d:b4: 8d:78:43:39:83:31:ac:86:ed:cb:b1:3e:88:16:ab: 94:44:f1:42:a4:0e:19:a1:8d:d6:54:ce:80:1a:ee: 00:3f:04:28:c7:4e:f8:5c:c6:1e:43:46:ed:19:00: e8:5f:f5:1e:c3:d2:ef:9e:89:6f:3a:02:a4:5d:16: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4F:D9:F0:86:09:F1:3D:CF:5C:14:D8:4F:50:81:A9:05:8B:48:A3 X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ea:06:97:38:b2:88:3e:31:40:6b:95:44:cb:1b:99:7f:25: 20:02:cb:9a:d0:74:ab:7d:cc:cc:f3:d2:65:cd:55:31:b2:06: 3a:cd:9a:6a:95:49:d9:6f:f0:62:58:19:28:af:b3:46:d7:e9: 66:fe:26:54:06:a1:24:8b:4a:6c:5e:8d:8b:65:4e:fe:45:e4: 50:51:65:27:3f:fa:a3:14:ae:e7:12:9b:e2:fd:d4:6e:cd:c6: fe:bb:b3:94:d9:ea:72:34:54:a3:20:ef:7d:9e:8d:60:bb:06: c1:d1:00:06:6d:7d:54:93:94:52:4c:89:dd:72:f8:dc:51:52: 35:c5:1c:a1:70:85:9a:a3:13:07:5e:77:2d:48:da:7b:bb:50: 7f:1d:01:e4:10:34:52:fa:dd:7c:9d:dc:91:eb:81:75:d9:1f: 1b:0a:a0:6b:cd:d1:40:6a:ab:76:b4:42:1a:04:55:e6:08:37: 56:47:04:19:c2:54:80:84:3c:8d:c7:8e:b8:73:f9:a9:81:89: 59:fb:75:45:2e:9b:b1:27:60:a5:db:41:8d:23:8e:2c:29:8d: 3f:74:c7:4e:cc:31:99:10:58:e9:30:fa:5d:8a:47:ab:94:00: e0:53:b0:00:a6:11:f8:40:5e:f1:3e:d2:e2:88:33:1d:ff:d0: 02:c8:1f:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjUwNDI3MDUyNDE1WhcNMjUwNTA0MDUyNDE1WjAYMRYwFAYD VQQDEw02ODBkYmY3Zi00YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAnciLVZzOf26D4Y4fwicbmP+mrbZZEDL0w1n82BWvrkQEsbp951p4r+GpcA 8T64Zkbyi67HgDYRjQ6MrBa4AwGsiwQGBJEV0ZrH98UJZxFEcsJt7ppAc+my8NJ7 1bdMEE0aGR6xuK/auR0J99wUq9h7xtW7UQi83K3A4lldIMnrR1+k3/X7Nexj3C90 hLep+lLzV684+N5ap+M6eD0kohhwWfqHOUDlwIWIrgMO3uSc8675s6KxXGnf25qN H4XhPbSNeEM5gzGshu3LsT6IFquURPFCpA4ZoY3WVM6AGu4APwQox074XMYeQ0bt GQDoX/Uew9LvnolvOgKkXRbt5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBP2fCG CfE9z1wU2E9QgakFi0ijMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr6gaXOLKIPjFAa5VEyxuZfyUgAsua0HSrfczM89JlzVUxsgY6zZpq lUnZb/BiWBkor7NG1+lm/iZUBqEki0psXo2LZU7+ReRQUWUnP/qjFK7nEpvi/dRu zcb+u7OU2epyNFSjIO99no1guwbB0QAGbX1Uk5RSTIndcvjcUVI1xRyhcIWaoxMH XnctSNp7u1B/HQHkEDRS+t18ndyR64F12R8bCqBrzdFAaqt2tEIaBFXmCDdWRwQZ wlSAhDyNx464c/mpgYlZ+3VFLpuxJ2Cl20GNI44sKY0/dMdOzDGZEFjpMPpdiker lADgU7AAphH4QF7xPtLiiDMd/9ACyB8H -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net