$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft File: QeHsF957pw-MEkF3aWN3AjclGd4.mft (raw, json) Hash identifier: HS9t81MQvztFK2Y0bDsRcMC8r7pBgclKDCWTmMPIfJM= Subject key identifier: DE:79:D8:A1:4F:01:00:AB:5A:41:4B:7C:2A:D3:46:07:81:28:7F:87 Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE Certificate issuer: /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft Manifest number: A3 Signing time: Fri 25 Apr 2025 05:12:25 +0000 Manifest this update: Fri 25 Apr 2025 05:12:25 +0000 Manifest next update: Fri 02 May 2025 05:12:25 +0000 Files and hashes: 1: QeHsF957pw-MEkF3aWN3AjclGd4.crl (hash: Ce7GQYJOahZ4j//V0a0bbEznZugXjs+D13bU40GovH8=) 2: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (hash: 7ZftxeCsBvOw6J2/sGTBldkcAq0B9zzZMirRxBsj6nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Validity Not Before: Apr 25 05:12:25 2025 GMT Not After : May 2 05:12:25 2025 GMT Subject: CN=680b19b9-6620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:29:aa:a9:9e:d4:4b:aa:71:24:6b:a3:a1:28: d1:23:49:a4:f2:29:14:69:6f:0a:dd:f0:9f:cb:10: 7d:70:6f:65:de:11:dd:dd:f7:08:6f:36:14:8f:1a: 8c:30:a7:07:83:54:e3:16:2f:46:bd:e3:97:21:86: 34:31:62:78:ac:a6:f5:c4:ba:aa:7a:86:fc:e7:82: fa:87:b0:65:ef:37:25:92:83:57:c0:e7:e5:f9:d6: ee:2f:32:d4:d6:7e:5e:7e:42:45:c0:eb:b7:cf:17: bb:41:cf:67:3a:c7:a9:96:7c:b8:88:c1:ab:db:78: c9:7d:fd:6e:aa:7c:ff:86:86:e1:a3:70:44:15:a4: 14:f2:75:33:3e:0f:c1:8e:f2:d4:54:9c:8f:a7:d0: 45:72:f6:ae:32:b7:48:9b:6f:6b:6c:db:7a:00:89: 01:30:55:00:fa:46:4e:f8:70:ca:39:60:de:06:19: 24:52:de:04:15:34:70:e7:36:40:4e:3c:99:4c:f6: 8c:80:bb:62:58:bd:0b:6e:30:b3:fb:ba:23:b4:18: 80:39:a1:e8:5c:48:d3:ad:b5:1b:9b:71:fb:dc:2f: ff:15:e4:6b:a6:dc:fe:c6:8b:58:b8:d1:82:37:73: 88:3d:0d:d2:1e:79:47:34:2a:5c:b6:75:6d:58:7c: 47:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:79:D8:A1:4F:01:00:AB:5A:41:4B:7C:2A:D3:46:07:81:28:7F:87 X509v3 Authority Key Identifier: keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:14:bf:81:56:de:e3:01:0b:86:d3:00:78:2d:f2:99:56:1f: 55:0c:97:bc:bc:62:ef:e3:54:84:ba:ba:87:8b:f3:aa:59:31: bb:e2:85:4f:b2:b5:24:3f:09:31:57:a1:65:a9:fc:b9:9c:c7: f1:84:ec:fa:d0:28:81:3f:c0:3a:26:ff:2c:c8:16:04:17:41: e6:86:ef:a5:43:89:e0:e5:bf:39:98:00:3d:91:4e:3d:a1:c9: ab:5a:0c:5f:6e:01:51:04:b2:cc:40:03:98:ea:4a:42:10:64: 2c:ce:78:81:1b:cd:11:b4:ee:7b:bf:db:b0:b0:d9:54:ca:f5: e2:8f:2f:ba:a3:fb:e3:a2:57:3d:5e:4d:f7:36:76:22:eb:22: da:29:ef:da:fa:dc:6c:18:18:03:bf:51:e5:b6:71:14:52:b6: 5c:d6:9d:c2:13:d9:e6:43:0a:35:cd:1f:84:18:85:b5:fa:5d: 42:0a:ad:f5:d5:79:04:34:2d:3b:02:b6:b1:94:8d:a7:13:fc: 6e:8f:43:46:a3:48:d5:8b:4a:05:07:90:34:87:11:c4:17:1a: 7a:4e:ec:68:89:51:19:37:f3:e8:7f:ef:3d:a5:32:6e:27:ca: 3f:e3:4b:8b:e1:b4:d6:42:0c:33:63:e7:f6:c4:c8:63:58:d4: 58:63:e4:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKDQxRTFFQzE3REU3QkE3MEY4QzEyNDE3NzY5NjM3NzAy MzcyNTE5REUwHhcNMjUwNDI1MDUxMjI1WhcNMjUwNTAyMDUxMjI1WjAYMRYwFAYD VQQDEw02ODBiMTliOS02NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SmqqZ7US6pxJGujoSjRI0mk8ikUaW8K3fCfyxB9cG9l3hHd3fcIbzYUjxqM MKcHg1TjFi9GveOXIYY0MWJ4rKb1xLqqeob854L6h7Bl7zclkoNXwOfl+dbuLzLU 1n5efkJFwOu3zxe7Qc9nOseplny4iMGr23jJff1uqnz/hobho3BEFaQU8nUzPg/B jvLUVJyPp9BFcvauMrdIm29rbNt6AIkBMFUA+kZO+HDKOWDeBhkkUt4EFTRw5zZA TjyZTPaMgLtiWL0LbjCz+7ojtBiAOaHoXEjTrbUbm3H73C//FeRrptz+xotYuNGC N3OIPQ3SHnlHNCpctnVtWHxHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN552KFP AQCrWkFLfCrTRgeBKH+HMB8GA1UdIwQYMBaAFEHh7Bfee6cPjBJBd2ljdwI3JRne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zMDFBMUU0QTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3LU1Fa0YzYVdOM0FqY2xH ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FlSHNGOTU3cHctTUVrRjNhV04zQWpjbEdkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUyMy8zMDFBMUU0QTJDNkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3 LU1Fa0YzYVdOM0FqY2xHZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjFL+BVt7jAQuG0wB4LfKZVh9VDJe8vGLv41SEurqHi/OqWTG74oVP srUkPwkxV6Flqfy5nMfxhOz60CiBP8A6Jv8syBYEF0Hmhu+lQ4ng5b85mAA9kU49 ocmrWgxfbgFRBLLMQAOY6kpCEGQszniBG80RtO57v9uwsNlUyvXijy+6o/vjolc9 Xk33NnYi6yLaKe/a+txsGBgDv1HltnEUUrZc1p3CE9nmQwo1zR+EGIW1+l1CCq31 1XkENC07AraxlI2nE/xuj0NGo0jVi0oFB5A0hxHEFxp6TuxoiVEZN/Pof+89pTJu J8o/40uL4bTWQgwzY+f2xMhjWNRYY+Ru -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:43 2025 by rpki-client on console.sobornost.net