$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: Chl9duXAcZJ/zraV/uTeHW6Pi2qw+S7EYT756MkEm/8= Subject key identifier: 88:2C:61:7F:DD:58:74:20:B3:9D:D2:DE:CE:80:F1:FA:35:59:B4:0E Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 4B Signing time: Sun 27 Apr 2025 06:11:30 +0000 Manifest this update: Sun 27 Apr 2025 06:11:30 +0000 Manifest next update: Sun 04 May 2025 06:11:30 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: cWPHrDqCzHrECulVyThZ+6P9xNvCiZbSwaayktZriIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Apr 27 06:11:30 2025 GMT Not After : May 4 06:11:30 2025 GMT Subject: CN=680dca92-6fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:1c:91:ef:d1:22:ff:63:5c:26:6e:36:bf: ef:13:b9:95:92:06:26:94:b5:72:51:bc:a5:ad:7a: 0f:84:5f:d2:9f:98:65:d3:c9:55:1d:df:8d:da:94: 0f:64:5a:03:a1:ff:d8:18:6b:e8:73:af:b3:cd:6e: ba:9c:75:52:32:10:d4:02:aa:00:83:d4:5f:56:ec: 64:b9:0a:75:2e:13:24:90:96:bc:9f:cf:a1:6c:49: 85:6f:9a:2c:fa:9d:61:02:18:1c:1c:fc:f8:ed:57: dc:38:87:3b:1d:75:db:ba:a4:02:3f:4e:bb:ee:fa: 0e:b8:bc:4c:9a:1e:49:af:72:68:d2:30:01:b4:80: b7:78:75:b3:31:6e:a5:03:1f:4e:e0:7e:a2:ba:63: 25:f6:ea:3f:9f:c2:07:61:62:b1:df:b1:f3:2f:4d: b9:80:c6:dc:82:6e:e9:f6:7d:fe:06:ca:1f:da:f0: 2f:da:c1:08:23:7a:84:70:33:e6:8a:7d:e7:53:2c: f3:cd:1f:b7:3e:4f:0a:85:ab:b4:72:b9:cd:e4:d2: 41:a6:f9:87:24:c4:46:76:8b:f1:c3:84:a8:5f:a9: 94:ce:9c:02:37:e5:01:6a:d7:ad:03:db:32:76:ea: 15:5a:86:68:ef:10:a3:04:61:2f:4c:7e:29:31:19: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2C:61:7F:DD:58:74:20:B3:9D:D2:DE:CE:80:F1:FA:35:59:B4:0E X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:57:1c:ec:54:4a:b1:eb:b5:8b:9c:3d:e5:32:71:34:88:c8: 57:b9:e6:9d:8e:96:b0:2c:ab:23:cd:55:4a:b9:a0:f6:f6:c8: 22:23:0c:e9:31:0d:9d:16:75:1b:4e:49:ce:5e:9d:72:8e:18: f7:e6:53:f0:77:54:34:a5:8a:d2:75:0d:11:15:02:52:19:46: 8d:8b:e3:99:3e:ef:89:cc:68:f7:5d:49:ee:82:7e:95:4f:dc: 55:fb:82:ea:0b:ce:79:27:ad:07:84:a4:69:60:59:eb:23:0e: 45:2c:a8:18:67:88:65:d7:2f:1b:25:9e:c6:4e:17:fd:56:b6: c5:e1:b9:25:77:b7:9d:e8:12:64:13:41:e6:4f:0e:94:0b:95: b4:55:81:cc:ca:67:3b:83:90:9a:7b:59:43:3e:dc:5c:7c:1c: 9a:6e:fe:7e:1a:0c:ac:cf:c6:67:7d:b0:d2:fd:9f:ea:56:ce: 69:c5:a8:dc:a0:ed:cf:f0:f8:32:7b:6a:ee:3a:41:86:00:d6: 82:b3:42:96:be:d2:f0:fb:63:45:dc:32:4c:84:1b:f2:e1:85: 0a:71:13:dc:61:ed:3d:86:80:dc:9a:6c:34:2d:6c:1d:9d:ff: c3:c4:a5:c0:67:25:58:a5:ae:7d:bf:f7:7f:78:aa:7a:c0:a3: 3f:fd:82:19 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjZFMzExMC8GA1UEBRMoMkJGMEFFNjc5MEQyRjAxREQxREI2NzM4MzEzMkRDNDAz QjY3NDUyMjAeFw0yNTA0MjcwNjExMzBaFw0yNTA1MDQwNjExMzBaMBgxFjAUBgNV BAMTDTY4MGRjYTkyLTZmYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjhRyR79Ei/2NcJm42v+8TuZWSBiaUtXJRvKWteg+EX9KfmGXTyVUd343alA9k WgOh/9gYa+hzr7PNbrqcdVIyENQCqgCD1F9W7GS5CnUuEySQlryfz6FsSYVvmiz6 nWECGBwc/PjtV9w4hzsdddu6pAI/Trvu+g64vEyaHkmvcmjSMAG0gLd4dbMxbqUD H07gfqK6YyX26j+fwgdhYrHfsfMvTbmAxtyCbun2ff4Gyh/a8C/awQgjeoRwM+aK fedTLPPNH7c+TwqFq7Ryuc3k0kGm+YckxEZ2i/HDhKhfqZTOnAI35QFq160D2zJ2 6hVahmjvEKMEYS9MfikxGd+zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiCxhf91Y dCCzndLezoDx+jVZtA4wHwYDVR0jBBgwFoAUK/CuZ5DS8B3R22c4MTLcQDtnRSIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNkUzL0YyRkI4MjUwQjVE RDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS19DdVo1RFM4QjNSMjJjNE1UTGNRRHRuUlNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG NkUzL0YyRkI4MjUwQjVERDExRUY5N0Q5RkEzNEM0RjlBRTAyL0tfQ3VaNURTOEIz UjIyYzRNVExjUUR0blJTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlXHOxUSrHrtYucPeUycTSIyFe55p2OlrAsqyPNVUq5oPb2yCIjDOkx DZ0WdRtOSc5enXKOGPfmU/B3VDSlitJ1DREVAlIZRo2L45k+74nMaPddSe6CfpVP 3FX7guoLznknrQeEpGlgWesjDkUsqBhniGXXLxslnsZOF/1WtsXhuSV3t53oEmQT QeZPDpQLlbRVgczKZzuDkJp7WUM+3Fx8HJpu/n4aDKzPxmd9sNL9n+pWzmnFqNyg 7c/w+DJ7au46QYYA1oKzQpa+0vD7Y0XcMkyEG/LhhQpxE9xh7T2GgNyabDQtbB2d /8PEpcBnJVilrn2/9394qnrAoz/9ghk= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net