$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft File: gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json) Hash identifier: /65YkWGzbozl2zoUDiEwtgjqXPvaJ7/KfyXwheRU7rk= Subject key identifier: 39:83:25:C1:C5:24:30:49:21:0C:D4:2F:65:43:89:81:0B:8F:7C:6F Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft Manifest number: 1C2E Signing time: Mon 28 Apr 2025 16:18:15 +0000 Manifest this update: Mon 28 Apr 2025 16:18:14 +0000 Manifest next update: Mon 05 May 2025 16:18:14 +0000 Files and hashes: 1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: i4yJslSb0RknCW6A3+QhjIae1tdQTdOd5ASGQIgFdLc=) 2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: X/4GCRMZ/gVyKNef6s/CyH3yqYjWWcRQZHTiFuRUpcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7230 (0x1c3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: Apr 28 16:18:14 2025 GMT Not After : May 5 16:18:14 2025 GMT Subject: CN=680faa47-af19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:7d:ab:49:36:52:70:8e:92:51:8e:2f:40: 56:45:a8:32:e3:0d:64:81:48:2b:f8:bd:2a:5f:09: fa:0b:aa:8e:02:c0:c6:c8:d3:0c:56:76:a7:f0:d0: 79:2e:e8:75:e9:53:73:14:93:09:2c:7b:05:ff:51: 6a:eb:4f:45:12:2e:ce:85:23:a0:08:ce:cb:d5:30: ae:4a:54:ba:d7:cb:d4:d8:99:98:5c:17:3b:ac:6a: 60:80:42:2f:ac:18:71:8b:4a:76:a0:7e:ad:0e:d5: 0c:3d:5d:10:1b:b9:c8:5c:43:5e:c9:4a:de:ff:d6: d0:83:61:1c:9c:a5:90:6d:08:8c:3d:7d:85:65:1b: 00:7b:63:59:5c:e1:a0:ea:f7:dc:71:e8:2e:11:b3: af:f3:0d:28:17:f3:5f:e6:e2:54:1a:0f:72:e6:76: 68:42:97:80:88:7a:99:11:15:2a:64:b8:18:e6:b9: 54:58:e7:a2:cf:b7:c2:20:05:ea:ad:59:38:93:7e: 7b:d3:80:05:13:c7:0f:3e:05:fe:c7:bb:73:33:0a: 15:56:45:fa:33:c7:f0:06:41:c5:75:de:61:dc:69: 4a:d0:73:6d:f4:92:fc:cd:3b:81:72:9c:6c:74:5a: 4e:be:d6:8c:b4:ce:ea:13:36:8e:e4:26:4b:9e:ea: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:25:C1:C5:24:30:49:21:0C:D4:2F:65:43:89:81:0B:8F:7C:6F X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4f:6e:47:57:4e:03:38:4f:6b:67:36:22:3d:39:e1:36:63: 3b:7a:0f:7b:3b:76:23:80:e1:47:2e:42:15:05:27:00:36:18: 39:81:af:ac:49:fb:2b:98:28:ee:f0:a4:9b:2c:f6:e3:80:ed: 0b:b1:f0:94:b1:9e:d3:2b:eb:47:a4:c4:f8:8d:a8:65:7b:8c: aa:75:ef:69:08:9b:b1:63:1a:97:2f:34:35:31:ae:4a:de:22: 76:b7:a7:fb:cf:6f:a1:30:97:23:97:bc:2e:c4:bf:67:a8:2e: e8:25:7a:42:4b:f2:5d:cb:19:bb:97:db:55:70:dd:38:f9:bc: 7a:33:2c:9b:13:77:97:da:2a:4f:94:0d:10:84:70:0a:d3:68: 72:fe:54:2b:61:29:2b:2c:71:76:9f:85:91:23:57:80:22:a1: 04:8d:55:59:84:1a:b6:4e:6f:ff:89:29:1b:90:47:72:d1:b6: 7d:ec:55:a8:9a:ad:82:83:15:b2:88:4e:6d:dc:bc:c2:ca:a5: 40:33:2d:56:bd:b3:80:27:42:50:b3:75:59:79:ef:4f:1f:19: 8c:40:bc:a4:93:4e:d7:7b:68:10:b4:1c:83:d3:e7:67:67:d0: 04:d7:30:f4:77:d1:3d:98:dc:5a:47:6a:89:52:e3:fc:c4:3d: 7d:0f:7d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjUwNDI4MTYxODE0WhcNMjUwNTA1MTYxODE0WjAYMRYwFAYD VQQDEw02ODBmYWE0Ny1hZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l99q0k2UnCOklGOL0BWRagy4w1kgUgr+L0qXwn6C6qOAsDGyNMMVnan8NB5 Luh16VNzFJMJLHsF/1Fq609FEi7OhSOgCM7L1TCuSlS618vU2JmYXBc7rGpggEIv rBhxi0p2oH6tDtUMPV0QG7nIXENeyUre/9bQg2EcnKWQbQiMPX2FZRsAe2NZXOGg 6vfcceguEbOv8w0oF/Nf5uJUGg9y5nZoQpeAiHqZERUqZLgY5rlUWOeiz7fCIAXq rVk4k35704AFE8cPPgX+x7tzMwoVVkX6M8fwBkHFdd5h3GlK0HNt9JL8zTuBcpxs dFpOvtaMtM7qEzaO5CZLnuoZqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmDJcHF JDBJIQzUL2VDiYELj3xvMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdU S29oUlZjUXgwek1aclBiWTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcT25HV04DOE9rZzYiPTnhNmM7eg97O3YjgOFHLkIVBScANhg5ga+s SfsrmCju8KSbLPbjgO0LsfCUsZ7TK+tHpMT4jahle4yqde9pCJuxYxqXLzQ1Ma5K 3iJ2t6f7z2+hMJcjl7wuxL9nqC7oJXpCS/Jdyxm7l9tVcN04+bx6MyybE3eX2ipP lA0QhHAK02hy/lQrYSkrLHF2n4WRI1eAIqEEjVVZhBq2Tm//iSkbkEdy0bZ97FWo mq2CgxWyiE5t3LzCyqVAMy1WvbOAJ0JQs3VZee9PHxmMQLykk07Xe2gQtByD0+dn Z9AE1zD0d9E9mNxaR2qJUuP8xD19D30P -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:28 2025 by rpki-client on console.sobornost.net