$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json) Hash identifier: RWCFMq12jc2VudLA57CrLMi9MG2n7DzNnShyeOZ9HHk= Subject key identifier: CB:D0:8F:85:A9:48:4A:72:5A:D0:FD:BC:5A:70:BA:49:B2:C2:96:5E Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft Manifest number: 90 Signing time: Sun 27 Apr 2025 05:17:07 +0000 Manifest this update: Sun 27 Apr 2025 05:17:07 +0000 Manifest next update: Sun 04 May 2025 05:17:07 +0000 Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: t5M6M07aCjoceSos06m3x4rGlpol0OV+2N1McCVy36U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E Validity Not Before: Apr 27 05:17:07 2025 GMT Not After : May 4 05:17:07 2025 GMT Subject: CN=680dbdd3-4903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:22:6d:42:02:ce:b3:6c:f4:6c:e5:f5:9a: 32:58:41:08:59:37:56:e0:f1:4d:a6:d9:a4:7b:90: 9c:be:69:a3:10:dc:ec:2c:66:10:38:67:2d:f6:49: ba:c1:f5:3e:37:04:59:66:25:ec:65:ea:60:41:75: 15:63:24:5e:7a:0b:d9:13:bf:23:42:19:08:ad:c3: e4:86:61:82:a6:24:cb:55:52:0e:58:ce:1d:61:6c: f9:9f:04:80:c6:ec:60:a0:95:57:8a:99:e1:ee:78: d8:d7:2a:6a:7b:73:7b:ee:8f:05:d3:3d:4f:24:31: b6:eb:86:11:48:f8:68:a5:72:36:36:8c:b9:8e:df: df:44:2a:fc:d1:50:5a:04:3f:dd:ff:53:21:60:0f: ed:80:12:2b:03:75:7d:ae:b5:8b:9f:07:a6:79:ba: 9c:a8:b2:0f:5c:90:3d:d1:49:e0:f7:de:8f:24:3a: 2d:02:21:f8:56:ac:b9:9b:30:f2:2a:c2:65:45:23: d2:35:db:65:cd:a4:6b:a6:f7:ee:ee:d3:57:74:c4: e2:e1:1e:b4:48:c3:8b:42:0b:7f:f7:74:a2:e3:c3: 1a:c3:5e:82:49:e1:42:6d:63:2e:37:bf:d4:fb:7e: 51:51:ce:3b:2e:d5:9f:d4:7c:3e:bf:7e:5b:b2:d5: 39:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D0:8F:85:A9:48:4A:72:5A:D0:FD:BC:5A:70:BA:49:B2:C2:96:5E X509v3 Authority Key Identifier: keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:35:71:b1:da:07:ec:0f:06:e0:31:fd:42:ee:eb:61:ef:23: 64:c3:20:db:24:d2:05:1a:54:c7:a6:55:14:ec:e4:60:3d:8f: 09:06:ec:93:46:d5:ef:ec:07:1a:42:4b:d6:57:c8:f3:39:28: 76:3e:e7:c1:0e:96:5b:f6:17:85:d8:c8:0d:7e:66:10:aa:89: 34:cc:26:c0:91:23:4f:1d:2c:eb:35:5d:a0:f2:34:5a:b6:94: e7:cd:72:c1:60:e4:48:70:39:00:95:24:8e:08:da:6d:ea:8b: 8d:f4:8d:7a:28:c7:18:40:a2:6c:5a:c8:6d:3e:ed:dd:57:72: c9:30:e8:3d:d6:45:ce:17:85:c7:a6:32:90:49:49:6e:c9:1c: 79:59:fc:38:03:6e:79:12:18:b4:10:bc:ec:8f:62:c7:ec:94: 6b:11:c3:68:92:0e:ff:98:a5:ed:7c:c5:3f:bb:97:33:15:62: cc:db:78:c9:d6:a1:a8:ff:f3:23:a2:c3:cc:b0:08:9d:08:2c: 13:be:98:00:98:69:1c:bd:e5:33:34:5a:ba:5e:6c:14:da:d6: 02:dc:7b:36:2c:10:d9:23:04:d7:f1:b5:40:9b:79:41:1f:4e: 13:49:8e:1b:8d:50:fd:35:84:84:2d:a9:d4:15:23:fd:9b:b2: e5:9d:ad:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzQjYxMTAvBgNVBAUTKDczNDVEMzM4NTE5NTg5MDY4ODREODcxNjQwQTRCRUQy Qzg0NkQxNEUwHhcNMjUwNDI3MDUxNzA3WhcNMjUwNTA0MDUxNzA3WjAYMRYwFAYD VQQDEw02ODBkYmRkMy00OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuskibUICzrNs9Gzl9ZoyWEEIWTdW4PFNptmke5CcvmmjENzsLGYQOGct9km6 wfU+NwRZZiXsZepgQXUVYyReegvZE78jQhkIrcPkhmGCpiTLVVIOWM4dYWz5nwSA xuxgoJVXipnh7njY1ypqe3N77o8F0z1PJDG264YRSPhopXI2Noy5jt/fRCr80VBa BD/d/1MhYA/tgBIrA3V9rrWLnwemebqcqLIPXJA90Ung996PJDotAiH4Vqy5mzDy KsJlRSPSNdtlzaRrpvfu7tNXdMTi4R60SMOLQgt/93Si48Maw16CSeFCbWMuN7/U +35RUc47LtWf1Hw+v35bstU5qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvQj4Wp SEpyWtD9vFpwukmywpZeMB8GA1UdIwQYMBaAFHNF0zhRlYkGiE2HFkCkvtLIRtFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjNCNi81OUM0QUQ0QTQ4 QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlRYUlUWWNXUUtTLTBzaEcw VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwWFRPRkdWaVFhSVRZY1dRS1MtMHNoRzBVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjNCNi81OUM0QUQ0QTQ4QkExMUVGQkQ0NTE2M0RDNEY5QUUwMi9jMFhUT0ZHVmlR YUlUWWNXUUtTLTBzaEcwVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoNXGx2gfsDwbgMf1C7uth7yNkwyDbJNIFGlTHplUU7ORgPY8JBuyT RtXv7AcaQkvWV8jzOSh2PufBDpZb9heF2MgNfmYQqok0zCbAkSNPHSzrNV2g8jRa tpTnzXLBYORIcDkAlSSOCNpt6ouN9I16KMcYQKJsWshtPu3dV3LJMOg91kXOF4XH pjKQSUluyRx5Wfw4A255Ehi0ELzsj2LH7JRrEcNokg7/mKXtfMU/u5czFWLM23jJ 1qGo//MjosPMsAidCCwTvpgAmGkcveUzNFq6XmwU2tYC3Hs2LBDZIwTX8bVAm3lB H04TSY4bjVD9NYSELanUFSP9m7Llna1v -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net