$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft File: t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft (raw, json) Hash identifier: fYQ2LGyup7hQoCVAhHiY7TjSuSuUnj6RrIPLtHTBSFc= Subject key identifier: 13:54:F0:AB:02:10:B5:09:3B:B8:14:83:9E:B1:86:BF:D5:68:88:5B Authority key identifier: B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 Certificate issuer: /CN=A9147016/serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Certificate serial: 0436 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft Manifest number: 0436 Signing time: Sat 26 Apr 2025 23:54:52 +0000 Manifest this update: Sat 26 Apr 2025 23:54:52 +0000 Manifest next update: Sat 03 May 2025 23:54:52 +0000 Files and hashes: 1: t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl (hash: Tq9DtHO6J7CsuPaO//cTQNNX/1ITf/o/JdN8OgiYLWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1078 (0x436) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147016, serialNumber=B7C611F02F5C2D8D8C66C259D23B39C789AA0107 Validity Not Before: Apr 26 23:54:52 2025 GMT Not After : May 3 23:54:52 2025 GMT Subject: CN=680d724c-37c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b6:37:b6:6f:8c:69:43:85:9e:4f:94:12:83: b0:d4:0e:36:42:51:38:0b:e8:c5:bc:42:1f:48:de: e9:74:44:77:69:cd:b6:4b:7c:46:a0:ea:7f:be:dc: 62:29:fb:2f:c6:5e:fd:36:34:ca:55:37:45:15:24: d3:d7:e9:79:85:49:56:02:81:86:f3:8d:6d:88:c8: 98:40:6a:06:5d:c8:c6:f1:58:73:a9:e7:6a:46:ba: cc:48:e1:04:33:81:10:4d:a0:05:4b:44:09:2d:a5: 15:87:ba:31:2f:6e:44:89:0a:30:0c:73:94:b8:42: ce:56:5d:8a:e8:75:eb:2b:e1:1d:08:b7:72:b7:27: d0:9a:0c:e5:b6:8e:bb:9d:8b:75:aa:d5:e5:21:f7: 73:95:4d:6b:37:eb:01:f9:a5:97:78:0e:e6:ad:c2: 53:5d:1b:e9:13:7f:2b:53:09:d0:2d:67:ad:e4:f7: c8:80:e8:91:04:20:85:9b:1a:bb:88:02:d3:8c:21: 45:52:a3:64:d8:2a:69:d5:16:ee:f5:9e:19:16:c6: ab:09:37:0c:50:a7:99:49:02:56:59:30:e6:a6:49: af:62:f9:48:7f:74:a9:4b:a4:ca:6d:2f:8e:9f:19: 18:af:61:08:1c:e3:b3:0a:16:45:84:42:00:02:d9: 45:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:54:F0:AB:02:10:B5:09:3B:B8:14:83:9E:B1:86:BF:D5:68:88:5B X509v3 Authority Key Identifier: keyid:B7:C6:11:F0:2F:5C:2D:8D:8C:66:C2:59:D2:3B:39:C7:89:AA:01:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8YR8C9cLY2MZsJZ0js5x4mqAQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/378836E2563D11EC95F3DC16C4F9AE02/t8YR8C9cLY2MZsJZ0js5x4mqAQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6c:9f:04:79:96:13:4d:54:95:ef:09:72:52:c0:11:14:82: df:1e:58:4f:7e:e5:29:7c:f0:52:bc:5c:79:41:49:e2:89:d4: 8f:9e:dd:80:c7:28:2d:8e:9f:fc:69:b0:01:08:8f:34:be:32: 68:5a:c7:7f:4a:a0:95:f3:2f:c4:05:3e:6a:80:95:81:fe:42: da:ec:d4:68:5d:7d:e0:66:36:29:ad:78:76:95:7e:97:2a:80: f7:13:8f:1a:92:67:37:12:cb:6f:c2:1f:c4:4d:85:9c:6c:75: 25:9e:d9:d7:ae:b0:e7:66:e0:f7:87:c1:d4:07:6f:28:85:b4: 61:66:90:88:7c:3e:fe:b2:fc:a5:31:00:8d:46:80:d9:83:6d: 81:21:91:1a:77:85:43:b9:3b:4a:85:a5:97:32:66:9a:bb:29: 4b:47:af:c5:38:8c:cb:cf:1d:59:33:a0:4f:53:1d:a5:4a:59: 56:f9:7b:b5:9f:4a:bb:8c:e4:c3:dc:47:46:ae:27:2b:1a:c1: ce:6a:5e:03:e8:d4:6c:fe:1a:44:e9:0f:50:32:5d:db:a0:fe: 3e:d0:65:ef:26:ca:10:c9:18:cf:1d:65:40:5d:44:7c:b5:14: 10:38:f3:41:6b:c0:b7:6c:24:a5:eb:cc:14:d6:3b:6a:88:4b: 3e:54:58:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwMTYxMTAvBgNVBAUTKEI3QzYxMUYwMkY1QzJEOEQ4QzY2QzI1OUQyM0IzOUM3 ODlBQTAxMDcwHhcNMjUwNDI2MjM1NDUyWhcNMjUwNTAzMjM1NDUyWjAYMRYwFAYD VQQDEw02ODBkNzI0Yy0zN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLY3tm+MaUOFnk+UEoOw1A42QlE4C+jFvEIfSN7pdER3ac22S3xGoOp/vtxi Kfsvxl79NjTKVTdFFSTT1+l5hUlWAoGG841tiMiYQGoGXcjG8VhzqedqRrrMSOEE M4EQTaAFS0QJLaUVh7oxL25EiQowDHOUuELOVl2K6HXrK+EdCLdytyfQmgzlto67 nYt1qtXlIfdzlU1rN+sB+aWXeA7mrcJTXRvpE38rUwnQLWet5PfIgOiRBCCFmxq7 iALTjCFFUqNk2Cpp1Rbu9Z4ZFsarCTcMUKeZSQJWWTDmpkmvYvlIf3SpS6TKbS+O nxkYr2EIHOOzChZFhEIAAtlFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNU8KsC ELUJO7gUg56xhr/VaIhbMB8GA1UdIwQYMBaAFLfGEfAvXC2NjGbCWdI7OceJqgEH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzAxNi8zNzg4MzZFMjU2 M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZMk1ac0paMGpzNXg0bXFB UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4WVI4QzljTFkyTVpzSlowanM1eDRtcUFRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzAxNi8zNzg4MzZFMjU2M0QxMUVDOTVGM0RDMTZDNEY5QUUwMi90OFlSOEM5Y0xZ Mk1ac0paMGpzNXg0bXFBUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDbJ8EeZYTTVSV7wlyUsARFILfHlhPfuUpfPBSvFx5QUniidSPnt2A xygtjp/8abABCI80vjJoWsd/SqCV8y/EBT5qgJWB/kLa7NRoXX3gZjYprXh2lX6X KoD3E48akmc3Estvwh/ETYWcbHUlntnXrrDnZuD3h8HUB28ohbRhZpCIfD7+svyl MQCNRoDZg22BIZEad4VDuTtKhaWXMmaauylLR6/FOIzLzx1ZM6BPUx2lSllW+Xu1 n0q7jOTD3EdGricrGsHOal4D6NRs/hpE6Q9QMl3boP4+0GXvJsoQyRjPHWVAXUR8 tRQQOPNBa8C3bCSl68wU1jtqiEs+VFh3 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:39 2025 by rpki-client on console.sobornost.net