$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: vamXc6VsUxDQ18eAIVubt04oVxAWBDzxuvhwMNpVIdw= Subject key identifier: 75:16:6C:B3:B6:D9:2A:48:E0:B2:24:A7:3F:A4:C1:0C:6A:38:C8:38 Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 347D Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 347D Signing time: Sat 26 Apr 2025 14:21:46 +0000 Manifest this update: Sat 26 Apr 2025 14:21:46 +0000 Manifest next update: Sat 03 May 2025 14:21:46 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: Z4IqszkhrEM8WrSC/HngUhyp6Hb3G6+j0qD5Ta0JeRo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13437 (0x347d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Apr 26 14:21:46 2025 GMT Not After : May 3 14:21:46 2025 GMT Subject: CN=680cebfa-85c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:97:b6:64:68:c1:95:c9:71:9f:81:8b:93: 3c:82:06:01:d0:94:2d:16:2e:1f:dd:3a:a4:dc:4d: ae:2e:68:44:64:7a:38:ce:90:95:f0:7f:7c:1e:10: c2:c9:8c:88:72:61:69:7c:c5:84:2e:0c:2b:79:35: 08:e4:77:c7:84:13:35:34:b1:1c:4f:d7:c3:79:52: 8c:84:14:2b:74:2d:ad:32:18:83:ae:a7:07:b5:72: ee:26:b3:e5:1f:e8:31:b0:43:a8:0a:ad:f5:24:94: 1b:06:0d:7d:ad:ba:78:47:6b:a7:39:db:86:f3:92: 38:43:4a:6a:2a:58:01:b5:fc:35:01:9a:98:b3:0e: f5:a1:3d:70:c3:6f:4b:9a:77:ad:13:c9:ea:d1:ed: 44:7e:12:52:60:95:09:df:d3:02:b0:34:0d:94:63: 48:96:41:f0:fd:53:68:5f:8c:ee:b0:73:12:61:1d: c5:c7:da:25:77:b9:ec:e6:aa:76:31:32:72:7f:77: e0:c5:43:8b:98:0a:83:18:16:7a:5f:66:1c:00:37: af:f0:23:ad:f2:d0:60:79:00:a1:3e:b8:03:f9:89: c8:4f:1e:5c:9a:8b:d4:9a:7f:fb:c6:6c:cb:7b:0a: 8a:46:30:b6:ee:dc:39:aa:e1:ce:d5:03:02:32:7d: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:16:6C:B3:B6:D9:2A:48:E0:B2:24:A7:3F:A4:C1:0C:6A:38:C8:38 X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8c:1d:5a:96:18:08:f2:90:58:79:26:7b:17:b3:c9:49:22: 40:27:6a:76:14:b2:61:00:6f:ba:bd:12:a6:4c:4e:12:db:0f: 39:f1:69:49:94:9e:dc:6c:3e:fa:84:9f:ef:8c:ab:d6:99:b1: e6:c6:dc:79:ec:bb:11:c9:98:7b:76:c9:0a:ee:d9:bc:84:e2: 1b:31:e0:79:93:1d:20:45:85:01:33:ab:b6:01:20:bb:88:b6: bf:8c:15:60:7e:a9:72:f8:9b:88:71:1a:3d:e4:8c:f3:2c:1e: 14:0a:6f:0b:16:d8:3d:e6:fe:34:98:0b:17:1c:ec:48:81:3c: 16:f4:e2:cc:c8:d4:64:52:d2:ee:d4:dc:55:7a:96:9f:8b:f3: 17:c1:ac:5f:db:38:a6:ea:ad:cf:7c:f5:8f:f5:00:04:99:86: 5e:b4:bc:35:87:e4:70:24:58:ef:59:62:4c:2d:14:e6:d6:98: 97:4a:cc:e0:a0:a7:36:60:cf:76:21:c8:e3:1b:68:19:cf:8c: 5f:f8:12:fa:1d:1a:9f:44:36:fa:b6:87:89:2e:4f:d3:33:21: 23:06:50:5b:6e:36:e6:53:41:84:9d:19:d7:45:cf:64:be:68: 68:8d:96:ad:d9:cf:2a:96:97:0b:79:3a:9a:5b:cf:0e:46:a5: 03:74:1f:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUwNDI2MTQyMTQ2WhcNMjUwNTAzMTQyMTQ2WjAYMRYwFAYD VQQDEw02ODBjZWJmYS04NWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH6XtmRowZXJcZ+Bi5M8ggYB0JQtFi4f3Tqk3E2uLmhEZHo4zpCV8H98HhDC yYyIcmFpfMWELgwreTUI5HfHhBM1NLEcT9fDeVKMhBQrdC2tMhiDrqcHtXLuJrPl H+gxsEOoCq31JJQbBg19rbp4R2unOduG85I4Q0pqKlgBtfw1AZqYsw71oT1ww29L mnetE8nq0e1EfhJSYJUJ39MCsDQNlGNIlkHw/VNoX4zusHMSYR3Fx9old7ns5qp2 MTJyf3fgxUOLmAqDGBZ6X2YcADev8COt8tBgeQChPrgD+YnITx5cmovUmn/7xmzL ewqKRjC27tw5quHO1QMCMn2qLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUWbLO2 2SpI4LIkpz+kwQxqOMg4MB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtjB1alhgI8pBYeSZ7F7PJSSJAJ2p2FLJhAG+6vRKmTE4S2w858WlJ lJ7cbD76hJ/vjKvWmbHmxtx57LsRyZh7dskK7tm8hOIbMeB5kx0gRYUBM6u2ASC7 iLa/jBVgfqly+JuIcRo95IzzLB4UCm8LFtg95v40mAsXHOxIgTwW9OLMyNRkUtLu 1NxVepafi/MXwaxf2zim6q3PfPWP9QAEmYZetLw1h+RwJFjvWWJMLRTm1piXSszg oKc2YM92IcjjG2gZz4xf+BL6HRqfRDb6toeJLk/TMyEjBlBbbjbmU0GEnRnXRc9k vmhojZat2c8qlpcLeTqaW88ORqUDdB+E -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:40 2025 by rpki-client on console.sobornost.net