$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft File: ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json) Hash identifier: +TXrpGzkS7yeoh348ZBx7zbo10Iej+vvLuRAYmSgtzo= Subject key identifier: BD:6D:69:A5:B2:DE:74:50:3E:0F:45:9F:55:F0:57:57:70:A2:93:E4 Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 Certificate issuer: /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft Manifest number: 0125 Signing time: Sun 27 Apr 2025 03:38:34 +0000 Manifest this update: Sun 27 Apr 2025 03:38:33 +0000 Manifest next update: Sun 04 May 2025 03:38:33 +0000 Files and hashes: 1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: S0bp/yBBVVhZt8SONMInkMbz2hdZHXVPPybhWOM6J6k=) 2: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: btNm9lgvWpgU2p+BlBu9ugdzhnB1MwJxPbCJvAvXYk4=) 3: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: 0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3 Validity Not Before: Apr 27 03:38:33 2025 GMT Not After : May 4 03:38:33 2025 GMT Subject: CN=680da6ba-e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:9c:8b:b2:2c:0e:84:a2:4c:34:f7:34:f5: 8e:e3:19:07:8d:90:9c:26:46:17:53:ae:ff:73:8c: 95:e0:70:36:fe:4e:6a:20:1c:13:1f:4d:3e:c8:d1: 08:68:45:ef:d0:9f:ff:f4:28:88:43:6b:bd:3f:ec: 37:97:f7:78:47:de:c1:39:d3:2c:c3:2f:19:5d:ea: e1:06:5f:d6:41:87:7b:38:cf:8e:b6:25:46:ae:2a: 5d:ea:02:db:51:3d:7e:d8:a0:96:e3:f6:b8:3b:fc: 7f:74:25:04:68:eb:c2:43:3b:8b:f1:f8:30:bc:3f: 0c:2c:a7:4f:e3:25:49:4d:1b:bd:d1:10:5e:9c:4a: dd:1b:58:8f:8b:e4:c7:45:64:8a:b8:ae:d7:b1:e4: 7a:e1:6e:6a:64:10:76:ca:50:f8:0c:02:fc:15:ab: e6:16:2c:36:79:f6:72:28:f3:a0:b2:9d:4e:56:65: 17:24:3d:03:ca:17:00:7d:29:3d:3d:6b:2a:9a:6c: 1e:95:58:ad:b3:c6:68:01:fb:c5:6e:a6:8b:b7:14: 44:ca:f5:71:a3:62:dc:19:c5:65:6d:b9:67:d4:11: cf:ac:78:c6:9b:35:63:d1:ad:b2:af:75:5b:03:74: 31:71:0d:9e:5b:63:4f:dd:88:22:fe:00:6c:0f:bd: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6D:69:A5:B2:DE:74:50:3E:0F:45:9F:55:F0:57:57:70:A2:93:E4 X509v3 Authority Key Identifier: keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:12:41:52:95:e8:41:0f:a8:65:10:a3:ff:72:ed:2b:30:82: b0:f2:92:6d:fa:3d:d4:c9:40:36:44:ad:22:26:dd:f3:6d:02: ed:6c:1a:30:f7:1b:c6:cb:f1:b9:f9:ee:5c:e4:31:e8:02:4a: b9:9d:7d:b1:e2:c2:97:be:e2:1d:3d:40:f1:2f:73:7a:1a:c3: f3:34:96:db:85:fe:d5:99:22:5c:ac:47:39:04:43:ca:5c:72: 11:8b:24:0d:c3:68:c5:fe:3b:9a:43:d0:6e:b6:7d:51:16:54: 36:fd:f6:01:b6:69:2a:bd:f3:29:a6:9a:74:3b:44:83:bf:15: 3f:cc:87:cd:94:ff:62:f1:7f:e3:f2:5a:b0:f6:d9:e8:40:91: ba:ba:5c:1e:45:47:b9:6b:0d:2f:6c:0e:dc:70:81:61:1e:26: 70:5b:74:f7:9e:29:b4:0b:36:05:4e:2e:d9:32:dd:d0:3f:52: 0c:d7:bd:1a:40:82:b7:0e:1c:56:bb:bc:75:14:cc:3a:70:1a: 35:f1:6d:af:ce:5e:fb:b8:fc:e6:49:42:e9:dd:f2:35:2a:b6: cf:a0:41:41:0a:04:f5:e8:13:ac:46:b4:d0:37:89:88:4b:c6: 56:ed:10:6e:77:5c:f6:d9:cb:b2:e7:16:bb:d8:47:47:dc:91: eb:ed:f0:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3ODgxMTAvBgNVBAUTKDgyMDlGREYzOUFGMDJDM0I5QUU1MDNGMjI1RDc0N0U2 N0FBM0NERjMwHhcNMjUwNDI3MDMzODMzWhcNMjUwNTA0MDMzODMzWjAYMRYwFAYD VQQDEw02ODBkYTZiYS1lOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2deci7IsDoSiTDT3NPWO4xkHjZCcJkYXU67/c4yV4HA2/k5qIBwTH00+yNEI aEXv0J//9CiIQ2u9P+w3l/d4R97BOdMswy8ZXerhBl/WQYd7OM+OtiVGripd6gLb UT1+2KCW4/a4O/x/dCUEaOvCQzuL8fgwvD8MLKdP4yVJTRu90RBenErdG1iPi+TH RWSKuK7XseR64W5qZBB2ylD4DAL8FavmFiw2efZyKPOgsp1OVmUXJD0DyhcAfSk9 PWsqmmwelVits8ZoAfvFbqaLtxREyvVxo2LcGcVlbbln1BHPrHjGmzVj0a2yr3Vb A3QxcQ2eW2NP3Ygi/gBsD717DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1taaWy 3nRQPg9Fn1XwV1dwopPkMB8GA1UdIwQYMBaAFIIJ/fOa8Cw7muUD8iXXR+Z6o83z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDc4OC8zN0YwMUIxQTZD OTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xEdWE1UVB5SmRkSDVucWp6 Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnbjk4NXJ3TER1YTVRUHlKZGRINW5xanpmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDc4OC8zN0YwMUIxQTZDOTExMUVFQTU2MDdCMjlDNEY5QUUwMi9nZ245ODVyd0xE dWE1UVB5SmRkSDVucWp6Zk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkEkFSlehBD6hlEKP/cu0rMIKw8pJt+j3UyUA2RK0iJt3zbQLtbBow 9xvGy/G5+e5c5DHoAkq5nX2x4sKXvuIdPUDxL3N6GsPzNJbbhf7VmSJcrEc5BEPK XHIRiyQNw2jF/juaQ9Butn1RFlQ2/fYBtmkqvfMpppp0O0SDvxU/zIfNlP9i8X/j 8lqw9tnoQJG6ulweRUe5aw0vbA7ccIFhHiZwW3T3nim0CzYFTi7ZMt3QP1IM170a QIK3DhxWu7x1FMw6cBo18W2vzl77uPzmSULp3fI1KrbPoEFBCgT16BOsRrTQN4mI S8ZW7RBud1z22cuy5xa72EdH3JHr7fAe -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:37 2025 by rpki-client on console.sobornost.net