$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: 9RPDSce+OTtvHchdBPWZm/QdtJNzoAkPn+I3grOesAg= Subject key identifier: D8:D5:C9:0D:0E:36:BD:23:EA:A7:03:89:B0:15:14:C3:51:36:0C:4F Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 016C Signing time: Sun 27 Apr 2025 02:53:40 +0000 Manifest this update: Sun 27 Apr 2025 02:53:40 +0000 Manifest next update: Sun 04 May 2025 02:53:40 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: 88pZqGkfcDfOS3QhZDb+irVXPpSaglPyUb4QgilxWQ4=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: HTdqH+rVkV/AtsO/FyEhhxX1Ymy2SFkUhzQ9lJgZ3eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Apr 27 02:53:40 2025 GMT Not After : May 4 02:53:40 2025 GMT Subject: CN=680d9c34-cfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:b9:4f:3e:11:42:ba:0e:b6:11:5c:e1:4d: 21:57:99:e5:90:d3:d3:63:9b:e9:b6:91:90:1e:6f: ea:0c:ae:2b:d1:15:6d:59:e7:ae:f6:c7:34:f7:53: 0a:fd:0a:5e:ed:33:93:03:52:65:5f:b0:f1:8c:42: 64:8a:79:2f:09:16:02:2b:3f:5a:27:05:1b:76:e5: ac:48:0c:6b:ff:1e:b5:21:a7:ff:3e:8d:99:32:8e: b8:e7:16:d8:09:6c:13:0c:ca:89:0d:39:a3:87:da: e3:38:c9:46:9d:21:4e:ce:01:29:fe:a6:1b:84:fa: 1a:9c:f0:83:77:86:0a:93:aa:94:25:e8:c7:93:61: d2:b5:3e:ca:76:90:d9:cf:4a:2c:b5:d2:15:7d:6e: 9c:91:58:b2:25:40:6b:9e:e7:23:30:2e:8e:92:99: 1e:70:b4:39:51:48:2b:ad:ff:a0:4b:a8:86:74:5e: 84:3b:6e:90:84:7c:0a:4e:91:38:f6:1b:88:35:90: 48:0a:82:d2:30:38:2c:fb:60:b4:a3:db:ec:fb:89: 7c:aa:a9:41:6c:17:5c:6e:2f:9c:0d:e9:21:8b:45: 71:80:f1:11:22:98:01:17:ed:68:0f:c4:38:7e:c0: d2:71:3d:c5:aa:5c:a3:36:eb:85:b9:58:d8:a5:a3: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D5:C9:0D:0E:36:BD:23:EA:A7:03:89:B0:15:14:C3:51:36:0C:4F X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a0:06:d5:07:1d:9d:dd:f4:ca:3c:96:3b:ba:fc:08:e6:ea: 4c:c6:83:78:4c:9c:ec:1c:20:02:d2:52:44:a1:4e:5c:57:2e: 22:ed:1f:85:53:18:2b:f1:95:cb:b9:21:49:d8:8b:fb:28:85: 2c:2f:c4:76:5a:ae:4f:fd:b5:6a:f7:9c:45:33:f3:76:b6:80: 67:40:b9:60:6b:3c:4b:37:ab:ca:ac:cf:95:ec:e6:b4:8d:72: 91:3f:8c:7b:f9:b1:43:7a:a7:30:9a:fa:d5:83:c1:b8:56:1f: d8:15:06:8e:4e:5d:be:91:fb:f3:e8:a5:a6:94:5f:62:34:56: 34:41:5f:69:9a:c1:c4:e4:49:47:74:85:d0:f2:b2:34:9a:00: a6:96:b6:ff:db:1d:c2:d6:c6:37:10:52:0d:79:f1:eb:0c:78: 69:f6:41:d9:cc:c5:d8:b2:39:e0:fd:c1:12:80:ec:84:f8:14: 33:d6:e7:d3:2e:08:85:9c:21:a7:ea:9e:ce:3f:71:ad:ec:8a: 5d:1a:d4:00:0e:4a:54:4d:13:43:3b:ef:aa:58:65:97:04:33: 95:3a:8c:aa:ef:ff:5b:dd:1e:6a:21:43:d4:96:61:3e:3a:1f: 71:53:e2:f7:5f:ef:49:8f:ea:7f:2f:b4:9a:3f:b1:3e:33:16: 87:c3:89:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUwNDI3MDI1MzQwWhcNMjUwNTA0MDI1MzQwWjAYMRYwFAYD VQQDEw02ODBkOWMzNC1jZmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlS5Tz4RQroOthFc4U0hV5nlkNPTY5vptpGQHm/qDK4r0RVtWeeu9sc091MK /Qpe7TOTA1JlX7DxjEJkinkvCRYCKz9aJwUbduWsSAxr/x61Iaf/Po2ZMo645xbY CWwTDMqJDTmjh9rjOMlGnSFOzgEp/qYbhPoanPCDd4YKk6qUJejHk2HStT7KdpDZ z0ostdIVfW6ckViyJUBrnucjMC6OkpkecLQ5UUgrrf+gS6iGdF6EO26QhHwKTpE4 9huINZBICoLSMDgs+2C0o9vs+4l8qqlBbBdcbi+cDekhi0VxgPERIpgBF+1oD8Q4 fsDScT3FqlyjNuuFuVjYpaOgsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjVyQ0O Nr0j6qcDibAVFMNRNgxPMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8oAbVBx2d3fTKPJY7uvwI5upMxoN4TJzsHCAC0lJEoU5cVy4i7R+F Uxgr8ZXLuSFJ2Iv7KIUsL8R2Wq5P/bVq95xFM/N2toBnQLlgazxLN6vKrM+V7Oa0 jXKRP4x7+bFDeqcwmvrVg8G4Vh/YFQaOTl2+kfvz6KWmlF9iNFY0QV9pmsHE5ElH dIXQ8rI0mgCmlrb/2x3C1sY3EFINefHrDHhp9kHZzMXYsjng/cESgOyE+BQz1ufT LgiFnCGn6p7OP3Gt7IpdGtQADkpUTRNDO++qWGWXBDOVOoyq7/9b3R5qIUPUlmE+ Oh9xU+L3X+9Jj+p/L7SaP7E+MxaHw4nq -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:37 2025 by rpki-client on console.sobornost.net