$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json) Hash identifier: /42UiSDe4fUoNHYUASArWBr5BVwfHm+coRNykN3MzUU= Subject key identifier: C5:92:6E:00:50:EA:5E:84:B3:63:41:8E:04:5D:79:AC:58:97:D1:37 Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft Manifest number: 64 Signing time: Sun 27 Apr 2025 04:26:10 +0000 Manifest this update: Sun 27 Apr 2025 04:26:10 +0000 Manifest next update: Sun 04 May 2025 04:26:10 +0000 Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: zBHd8P9HsZParbEyHXr42yCF98dEXS0L8msTgHi0ECk=) 2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: kvDpEJ4vNqB5v/40TPE8rSrj+LHjgO0UCi0Xf8q1/Kg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F Validity Not Before: Apr 27 04:26:10 2025 GMT Not After : May 4 04:26:10 2025 GMT Subject: CN=680db1e2-4825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:c7:ce:da:28:9f:6c:19:e9:d7:ee:a2:e2: 74:ba:0f:a1:8d:6c:32:7c:03:9b:90:07:62:8b:d9: 96:34:37:3b:e3:5c:e3:b4:54:1f:fa:34:9c:34:50: b5:6c:4b:35:b3:60:1e:d4:2e:8c:95:b7:90:d7:ef: 21:7a:23:72:04:00:54:06:3a:8d:bc:d2:cb:97:f2: a2:ea:f8:45:5b:ea:d3:01:d8:6a:bb:b8:cc:c9:c6: 8d:c5:56:14:b3:e0:58:53:8d:9a:3d:2d:73:ea:27: f7:c0:3c:b8:23:42:f3:6d:c1:e0:f5:04:e6:c0:5e: e4:1a:dc:ae:f9:aa:ab:be:60:1c:ff:e1:30:67:5e: 54:59:0c:30:c6:78:b7:1d:5a:05:1b:2a:3c:34:67: 49:67:47:bb:4b:11:b3:25:10:30:e8:b3:03:b6:8f: ee:a5:ac:6d:85:b1:ac:7e:08:f2:7b:dc:8e:ff:ce: 5f:7c:40:8f:ab:7a:7e:b8:60:03:c5:95:9d:31:3c: 31:7d:7a:d5:49:63:1c:95:ec:8b:2a:be:d9:37:65: f9:0d:b5:4f:bf:62:51:bb:d2:7a:ed:7f:cb:c5:e8: 32:e9:b6:57:71:8b:4f:cb:e1:6c:ad:fd:19:10:fc: 2e:ff:05:c8:3e:42:b3:e5:91:9b:56:a3:7a:f3:6b: 79:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:92:6E:00:50:EA:5E:84:B3:63:41:8E:04:5D:79:AC:58:97:D1:37 X509v3 Authority Key Identifier: keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ed:19:9b:a5:48:21:c4:9d:54:8d:52:12:11:50:3e:f3:7c: e2:8b:c8:3b:61:ff:cd:44:53:38:d5:10:b6:d6:51:b0:17:da: 9b:7c:60:5a:69:67:5d:ed:40:ac:a5:b1:fc:e7:e5:ec:0d:83: a7:51:ee:8d:69:70:53:6e:11:33:ae:7e:dd:f7:d3:20:3b:87: 63:dd:3a:e2:44:b7:70:de:d6:e8:97:35:6d:35:5c:83:31:ff: ca:01:52:5a:91:55:92:66:a9:4a:2f:b9:56:24:f4:2d:5c:00: b8:d9:3b:26:d8:2f:0a:57:72:46:2c:d2:01:1a:b1:21:f8:41: 54:34:74:aa:70:e5:d5:7a:d9:58:84:76:4c:bc:01:e7:68:53: e1:ef:c3:7f:5b:3c:58:62:b4:b9:eb:39:2f:11:6a:e1:18:29: 61:7d:5b:80:64:e1:ae:f5:d2:30:6e:41:82:d9:f7:2c:de:a7: 88:d1:b4:a1:e7:f3:95:f7:bf:b2:80:79:fa:74:95:26:f4:a9: 52:da:c1:72:31:08:13:55:00:c0:b9:b8:37:1d:d8:20:84:c7: ab:ff:25:c2:c7:eb:8d:24:68:c8:46:c4:39:b5:0b:ef:3b:20: 1b:0a:3b:2d:35:5f:93:fc:2a:a1:cd:13:99:cc:02:1c:9a:80: 67:a4:62:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTUzQzExMC8GA1UEBRMoNzQ0NTkzMzYzN0NDQTMwOUE0QzE2MUFCRkVERjg3NzlD QjJBQjEzRjAeFw0yNTA0MjcwNDI2MTBaFw0yNTA1MDQwNDI2MTBaMBgxFjAUBgNV BAMTDTY4MGRiMWUyLTQ4MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDicfO2iifbBnp1+6i4nS6D6GNbDJ8A5uQB2KL2ZY0NzvjXOO0VB/6NJw0ULVs SzWzYB7ULoyVt5DX7yF6I3IEAFQGOo280suX8qLq+EVb6tMB2Gq7uMzJxo3FVhSz 4FhTjZo9LXPqJ/fAPLgjQvNtweD1BObAXuQa3K75qqu+YBz/4TBnXlRZDDDGeLcd WgUbKjw0Z0lnR7tLEbMlEDDoswO2j+6lrG2Fsax+CPJ73I7/zl98QI+ren64YAPF lZ0xPDF9etVJYxyV7Isqvtk3ZfkNtU+/YlG70nrtf8vF6DLptldxi0/L4Wyt/RkQ /C7/Bcg+QrPlkZtWo3rza3n9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxZJuAFDq XoSzY0GOBF15rFiX0TcwHwYDVR0jBBgwFoAUdEWTNjfMowmkwWGr/t+HecsqsT8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFNTNDLzI5Qjg2OTk0OTAz QTExRUZCRjE1NkQ4MUM0RjlBRTAyL2RFV1ROamZNb3dta3dXR3JfdC1IZWNzcXNU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEVXVE5qZk1vd21rd1dHcl90LUhlY3Nxc1Q4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF NTNDLzI5Qjg2OTk0OTAzQTExRUZCRjE1NkQ4MUM0RjlBRTAyL2RFV1ROamZNb3dt a3dXR3JfdC1IZWNzcXNUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJrtGZulSCHEnVSNUhIRUD7zfOKLyDth/81EUzjVELbWUbAX2pt8YFpp Z13tQKylsfzn5ewNg6dR7o1pcFNuETOuft330yA7h2PdOuJEt3De1uiXNW01XIMx /8oBUlqRVZJmqUovuVYk9C1cALjZOybYLwpXckYs0gEasSH4QVQ0dKpw5dV62ViE dky8AedoU+Hvw39bPFhitLnrOS8RauEYKWF9W4Bk4a710jBuQYLZ9yzep4jRtKHn 85X3v7KAefp0lSb0qVLawXIxCBNVAMC5uDcd2CCEx6v/JcLH640kaMhGxDm1C+87 IBsKOy01X5P8KqHNE5nMAhyagGekYjU= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net