$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json) Hash identifier: LH6Bs/dXTbl3nul4YsU27jRk0yeJ0ckW2y81gsq0Fco= Subject key identifier: 53:B9:2F:D0:30:C1:D2:B7:06:51:7A:1F:31:C8:C2:93:35:2A:64:C2 Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft Manifest number: 055F Signing time: Sat 26 Apr 2025 23:03:00 +0000 Manifest this update: Sat 26 Apr 2025 23:03:00 +0000 Manifest next update: Sat 03 May 2025 23:03:00 +0000 Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: CujMkmKBW7xV32yu709tnQGCC97p5hlgAA79vG1W6co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297 Validity Not Before: Apr 26 23:03:00 2025 GMT Not After : May 3 23:03:00 2025 GMT Subject: CN=680d6624-4489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:a8:0d:cd:6b:d3:c2:bd:c4:75:18:2d:5e: eb:a5:7a:3d:5b:60:e8:97:30:ec:f3:0a:d3:cb:ab: ca:cc:0a:fa:cc:98:41:42:ad:64:d2:bd:b5:8a:55: 21:e7:e5:33:6d:57:f6:c0:27:3e:cf:00:ea:0c:a9: 0d:9a:04:49:60:6d:03:53:14:93:64:83:85:2f:e8: 76:02:49:77:64:7a:8f:bf:61:ea:61:2a:11:c5:3f: ff:73:3c:5e:01:c6:b5:58:69:a8:71:3f:95:ea:8c: 28:9b:51:be:78:6a:62:95:8c:ba:7d:b8:a3:fa:4e: a7:b6:41:06:c0:2a:8b:f8:16:36:1e:47:2f:46:e4: 5c:9d:e6:b1:28:c7:f2:19:34:4e:90:cd:1c:15:43: 30:e0:9e:7e:59:e5:99:5c:4b:78:50:21:89:b0:1a: 18:a8:80:ee:cf:3c:22:f4:f4:76:48:c1:6f:fc:f8: 27:a3:95:79:3a:01:30:c4:7e:22:94:b2:94:d3:e4: 31:7c:c9:ee:c1:37:69:ec:db:af:67:ac:50:b4:8a: 14:ac:5b:85:a7:20:61:e6:4e:41:ef:fa:0b:43:48: ad:f9:4e:48:0e:f4:e8:4f:c2:db:5b:99:7d:7e:71: d3:50:95:9c:91:3f:be:6c:4c:ee:3f:c3:b7:b8:e2: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B9:2F:D0:30:C1:D2:B7:06:51:7A:1F:31:C8:C2:93:35:2A:64:C2 X509v3 Authority Key Identifier: keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a7:ec:d4:51:52:4c:dd:a0:1d:1b:50:ad:23:04:0f:8f:6e: 46:14:4f:26:e2:21:a5:bf:a3:b4:ee:d1:97:0b:e2:52:13:1e: e2:61:fa:77:9b:45:6a:fb:94:e6:72:47:66:94:63:76:a1:4e: 48:06:ba:26:bf:aa:d2:a6:0b:f1:17:92:e7:cf:30:6b:cb:0c: c6:1f:86:5e:b7:93:44:b4:e3:a5:5e:ca:69:f7:4d:35:27:68: 85:84:c6:40:5c:0b:57:e5:0a:a6:6e:46:29:89:f9:a6:9e:72: bd:97:2e:f7:27:d3:9f:10:04:a8:5b:1e:0b:8d:77:88:2e:ca: 27:8d:58:df:88:6b:5d:38:e2:51:cc:57:0f:40:b6:10:8c:57: 3c:38:0a:52:b5:16:d0:7c:a7:2e:b9:b1:9a:e5:d5:aa:84:4c: 09:5b:57:88:99:61:69:f9:62:1f:c7:c3:43:55:35:f8:ce:99: f5:63:5e:f5:3a:00:1c:10:30:c6:12:39:8f:a5:a3:7e:8f:1b: aa:a0:aa:4f:0c:35:21:57:cc:31:61:f2:01:e0:46:60:62:d9: e2:6f:f8:b6:57:b2:dc:bc:36:fd:a2:26:4e:42:0a:93:9f:c2: eb:c3:c5:29:bd:c7:bf:3b:7f:c8:cf:47:be:a5:2f:9a:e3:7f: d8:b2:bb:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDAzMzVBNDgwMEY5OTQxNzAwOUQwODU2NUJFQUU2MDI5 MjM0QkQyOTcwHhcNMjUwNDI2MjMwMzAwWhcNMjUwNTAzMjMwMzAwWjAYMRYwFAYD VQQDEw02ODBkNjYyNC00NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYioDc1r08K9xHUYLV7rpXo9W2DolzDs8wrTy6vKzAr6zJhBQq1k0r21ilUh 5+UzbVf2wCc+zwDqDKkNmgRJYG0DUxSTZIOFL+h2Akl3ZHqPv2HqYSoRxT//czxe Aca1WGmocT+V6owom1G+eGpilYy6fbij+k6ntkEGwCqL+BY2HkcvRuRcneaxKMfy GTROkM0cFUMw4J5+WeWZXEt4UCGJsBoYqIDuzzwi9PR2SMFv/Pgno5V5OgEwxH4i lLKU0+QxfMnuwTdp7NuvZ6xQtIoUrFuFpyBh5k5B7/oLQ0it+U5IDvToT8LbW5l9 fnHTUJWckT++bEzuP8O3uOI5wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFO5L9Aw wdK3BlF6HzHIwpM1KmTCMB8GA1UdIwQYMBaAFAM1pIAPmUFwCdCFZb6uYCkjS9KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wQTE1NTIxOEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFYQUowSVZsdnE1Z0tTTkww cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0F6V2tnQS1aUVhBSjBJVmx2cTVnS1NOTDBwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wQTE1NTIxOEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9BeldrZ0EtWlFY QUowSVZsdnE1Z0tTTkwwcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7p+zUUVJM3aAdG1CtIwQPj25GFE8m4iGlv6O07tGXC+JSEx7iYfp3 m0Vq+5TmckdmlGN2oU5IBromv6rSpgvxF5LnzzBrywzGH4Zet5NEtOOlXspp9001 J2iFhMZAXAtX5QqmbkYpifmmnnK9ly73J9OfEASoWx4LjXeILsonjVjfiGtdOOJR zFcPQLYQjFc8OApStRbQfKcuubGa5dWqhEwJW1eImWFp+WIfx8NDVTX4zpn1Y171 OgAcEDDGEjmPpaN+jxuqoKpPDDUhV8wxYfIB4EZgYtnib/i2V7LcvDb9oiZOQgqT n8Lrw8Upvce/O3/Iz0e+pS+a43/YsrvH -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:42 2025 by rpki-client on console.sobornost.net