$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json) Hash identifier: uOarYy9c0/PVll5ntns0T2T29hzN9685De/eqK+6wgE= Subject key identifier: 2B:E0:DD:CF:0A:AA:78:24:E1:75:8B:44:71:F5:8B:9A:94:D5:CC:17 Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Certificate serial: 0376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft Manifest number: 036A Signing time: Sun 27 Apr 2025 00:37:00 +0000 Manifest this update: Sun 27 Apr 2025 00:37:00 +0000 Manifest next update: Sun 04 May 2025 00:37:00 +0000 Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: 6e83p7UZGtL7usZv8RAh3x7xBCHFeih2WEkCz8bQQ3A=) 2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: 6mC/txbLj6N85EveWxsVzvziGwZn6iYsN0nn29ZX8bA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE Validity Not Before: Apr 27 00:37:00 2025 GMT Not After : May 4 00:37:00 2025 GMT Subject: CN=680d7c2c-a407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:8a:bd:69:3c:53:a5:b1:3b:1c:1c:c1:a8: c8:10:49:69:72:64:db:13:45:f5:13:51:ff:d4:b6: 77:65:3c:58:de:5c:a9:d4:12:34:ee:f9:8c:4f:fb: 33:08:e5:4a:b7:54:86:dc:90:9b:a1:43:00:7c:ab: aa:85:dd:b9:f5:8b:29:b3:0f:e6:37:1a:92:d7:5c: 11:09:21:5e:f5:bf:15:e2:97:21:02:6c:32:b2:5b: b5:d4:d4:83:bf:75:66:71:1c:39:2a:cd:bb:34:9b: b2:bb:68:a1:45:7a:5e:e4:03:b4:92:b2:33:1a:a0: f5:55:30:cb:79:fa:36:64:74:80:f0:da:37:43:e3: c6:fe:a5:c3:8a:fb:bb:ed:23:26:a7:f1:c4:25:3b: 67:e1:75:ec:c8:2d:57:83:1a:26:96:72:ec:8c:34: 2e:99:2b:d2:8e:90:b8:d1:c4:2a:7d:6e:17:e0:0e: 0e:4a:e1:d5:13:84:2d:aa:e4:22:a5:d9:f1:16:d3: 30:04:d4:ce:29:f3:a1:5f:97:b1:fe:7e:e9:c5:c9: f6:7c:05:5f:65:20:9f:4f:6b:c5:2a:50:0d:7a:5b: 1e:40:fb:c7:0b:19:cf:af:af:44:3a:f8:bc:91:5e: 23:fb:57:7e:28:17:8e:a7:bf:49:dc:f3:16:41:5d: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:DD:CF:0A:AA:78:24:E1:75:8B:44:71:F5:8B:9A:94:D5:CC:17 X509v3 Authority Key Identifier: keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c5:61:fa:f0:fc:f5:31:aa:95:32:a4:c3:4d:48:83:41:5e: 82:3c:f8:3d:14:91:4e:3a:61:78:e0:92:a0:8b:a8:4f:3f:11: 8a:b3:ef:59:c5:80:2e:2c:6b:73:08:f6:06:4a:5f:79:63:99: 93:f5:2d:1f:55:29:62:56:fb:46:cc:dd:96:c6:9e:09:41:8b: b0:a8:5b:e4:ab:78:a9:88:e2:94:03:32:9d:70:fd:6e:e7:00: f9:ec:f1:7a:2d:57:59:f2:0a:47:d6:49:84:7d:68:c2:a0:6e: 23:cd:56:31:2f:16:b4:05:62:5e:e5:be:df:c9:6d:e6:79:9e: 59:26:de:2c:48:34:5c:a7:d3:9b:75:4f:e8:5e:85:69:39:a6: 4b:87:bb:83:0a:a0:e1:bd:8d:9a:9a:7d:84:b7:6c:03:f3:cf: d2:cd:81:10:0f:90:f9:8d:0a:da:d4:80:6d:08:df:83:da:99: 9e:dd:62:7f:f1:78:53:62:93:03:53:28:89:ba:e9:54:ae:6b: c7:18:06:fd:92:00:07:14:ce:e2:6f:0a:a9:a6:b7:45:dd:5d: a6:1f:e4:36:a4:1b:79:bb:41:3e:8b:53:2a:2e:db:c7:73:70: cb:c8:15:e1:24:2c:be:44:9f:a1:e0:d5:bc:8a:5e:32:76:47: eb:d2:dd:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwNzgxMTAvBgNVBAUTKDBDMjA0MkU1RkMzMzYxRkY3MzU2OTM2RDA5N0UxMjQ0 QUZDNjI2Q0UwHhcNMjUwNDI3MDAzNzAwWhcNMjUwNTA0MDAzNzAwWjAYMRYwFAYD VQQDEw02ODBkN2MyYy1hNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm2KvWk8U6WxOxwcwajIEElpcmTbE0X1E1H/1LZ3ZTxY3lyp1BI07vmMT/sz COVKt1SG3JCboUMAfKuqhd259Yspsw/mNxqS11wRCSFe9b8V4pchAmwyslu11NSD v3VmcRw5Ks27NJuyu2ihRXpe5AO0krIzGqD1VTDLefo2ZHSA8No3Q+PG/qXDivu7 7SMmp/HEJTtn4XXsyC1XgxomlnLsjDQumSvSjpC40cQqfW4X4A4OSuHVE4QtquQi pdnxFtMwBNTOKfOhX5ex/n7pxcn2fAVfZSCfT2vFKlANelseQPvHCxnPr69EOvi8 kV4j+1d+KBeOp79J3PMWQV1HZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvg3c8K qngk4XWLRHH1i5qU1cwXMB8GA1UdIwQYMBaAFAwgQuX8M2H/c1aTbQl+EkSvxibO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzA3OC9EQTI5QjRBRUFE MTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellmOXpWcE50Q1g0U1JLX0dK czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RDQkM1Znd6WWY5elZwTnRDWDRTUktfR0pzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzA3OC9EQTI5QjRBRUFEMTExMUVDOTg5RTNBMERDNEY5QUUwMi9EQ0JDNWZ3ellm OXpWcE50Q1g0U1JLX0dKczQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCexWH68Pz1MaqVMqTDTUiDQV6CPPg9FJFOOmF44JKgi6hPPxGKs+9Z xYAuLGtzCPYGSl95Y5mT9S0fVSliVvtGzN2Wxp4JQYuwqFvkq3ipiOKUAzKdcP1u 5wD57PF6LVdZ8gpH1kmEfWjCoG4jzVYxLxa0BWJe5b7fyW3meZ5ZJt4sSDRcp9Ob dU/oXoVpOaZLh7uDCqDhvY2amn2Et2wD88/SzYEQD5D5jQra1IBtCN+D2pme3WJ/ 8XhTYpMDUyiJuulUrmvHGAb9kgAHFM7ibwqpprdF3V2mH+Q2pBt5u0E+i1MqLtvH c3DLyBXhJCy+RJ+h4NW8il4ydkfr0t2U -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:37 2025 by rpki-client on console.sobornost.net