$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft File: 2DvcT6zNnbegvEa0JE6jEHBgS5c.mft (raw, json) Hash identifier: /CB2ozr3mJat2o6tnyeZIJ5TGzL9u1jlIqZPo9zpQhQ= Subject key identifier: 20:7A:45:0F:E0:63:6D:74:4F:9B:1A:84:49:C4:7C:79:BD:88:94:5F Authority key identifier: D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97 Certificate issuer: /CN=A914F870/serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft Manifest number: 33 Signing time: Sun 27 Apr 2025 06:27:29 +0000 Manifest this update: Sun 27 Apr 2025 06:27:29 +0000 Manifest next update: Sun 04 May 2025 06:27:29 +0000 Files and hashes: 1: 2DvcT6zNnbegvEa0JE6jEHBgS5c.crl (hash: D+TCLA44sT6iP8IAWh4IPLfmdILB7P82yf70mAtjvuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F870, serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97 Validity Not Before: Apr 27 06:27:29 2025 GMT Not After : May 4 06:27:29 2025 GMT Subject: CN=680dce51-63d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:70:08:20:08:fe:62:0d:87:d1:3d:82:e0: af:02:09:5f:84:eb:5f:36:21:63:a8:3a:eb:7d:16: b2:81:6d:a6:a4:10:7b:49:11:27:8c:5a:90:1a:cd: 04:53:2b:82:08:38:ac:88:df:ea:25:30:37:9b:8a: 2a:a4:c8:79:a2:7c:01:39:16:60:4b:a6:6f:04:12: bb:43:aa:da:15:df:4f:57:f8:53:dd:36:70:05:3d: f4:46:4b:c2:0b:98:20:e3:9f:e6:d4:a8:e8:bd:da: 33:67:39:54:6c:03:c1:01:73:ee:2a:e8:82:32:82: 5c:f2:8e:cd:13:a1:e1:13:e4:d3:d7:10:21:3d:6a: d4:34:bb:e7:f5:be:43:ec:09:4b:1e:2c:38:42:35: 64:98:d9:c9:7c:67:37:72:9b:2c:8c:ff:71:9b:53: 7e:8e:fb:e4:6c:3f:aa:3b:77:60:91:b2:fd:71:91: 88:ac:52:db:2d:bd:56:e0:b5:31:a9:52:4b:d3:0a: 10:f7:83:87:67:31:bc:b3:f4:96:da:cb:3b:c8:47: 52:81:09:54:0f:24:a3:dc:a9:a7:a5:b2:28:41:04: a8:2f:2b:30:32:80:5b:34:18:10:89:bb:72:1a:1e: f9:b4:89:1a:3a:04:22:1a:00:00:d9:d8:a4:cf:3d: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:45:0F:E0:63:6D:74:4F:9B:1A:84:49:C4:7C:79:BD:88:94:5F X509v3 Authority Key Identifier: keyid:D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:85:30:75:29:83:db:0f:de:46:b3:1a:19:33:70:1a:11:2f: dd:03:ad:37:9a:ef:68:a1:75:83:69:47:d6:2f:70:76:90:03: cd:fc:48:65:7f:1b:94:9d:cc:ee:35:8a:7f:82:db:f8:d9:6a: cd:0a:3f:8c:6b:d2:67:2e:27:95:6d:2c:6c:ec:8c:8a:f0:19: f6:7e:31:ec:46:e8:21:72:d2:4b:0e:79:8e:99:36:97:30:04: 76:d7:d2:64:e3:3e:8c:f0:9a:c8:42:0a:3f:80:78:5c:51:61: 08:80:3a:4d:3b:52:42:ef:c6:f7:e7:e0:9e:57:8f:ff:06:ce: 24:79:55:98:2c:0b:96:95:e6:01:ae:c1:d3:9d:6b:50:cb:7e: 89:56:9e:07:11:3f:d6:54:02:12:c5:6a:1d:95:45:72:cc:45: 62:cc:1d:f6:f7:c2:23:5a:49:0b:1a:e6:21:f0:f3:c1:f3:b9: 9c:cb:0d:45:2f:9d:47:0a:58:35:6f:d2:84:19:7f:72:b2:a5: 07:07:09:67:c1:77:a9:28:d6:6e:54:c8:e4:5f:c5:ce:e1:28: f2:cb:64:9a:4b:42:5a:d8:3b:b0:fe:b0:33:3b:00:e1:49:a2: 95:e3:9a:2d:b2:32:53:2e:c4:c4:2d:d9:91:2f:b5:e8:60:16: 33:42:86:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Rjg3MDExMC8GA1UEBRMoRDgzQkRDNEZBQ0NEOURCN0EwQkM0NkI0MjQ0RUEzMTA3 MDYwNEI5NzAeFw0yNTA0MjcwNjI3MjlaFw0yNTA1MDQwNjI3MjlaMBgxFjAUBgNV BAMTDTY4MGRjZTUxLTYzZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQOHAIIAj+Yg2H0T2C4K8CCV+E6182IWOoOut9FrKBbaakEHtJESeMWpAazQRT K4IIOKyI3+olMDebiiqkyHmifAE5FmBLpm8EErtDqtoV309X+FPdNnAFPfRGS8IL mCDjn+bUqOi92jNnOVRsA8EBc+4q6IIyglzyjs0ToeET5NPXECE9atQ0u+f1vkPs CUseLDhCNWSY2cl8ZzdymyyM/3GbU36O++RsP6o7d2CRsv1xkYisUtstvVbgtTGp UkvTChD3g4dnMbyz9JbayzvIR1KBCVQPJKPcqaelsihBBKgvKzAygFs0GBCJu3Ia Hvm0iRo6BCIaAADZ2KTPPWfZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIHpFD+Bj bXRPmxqEScR8eb2IlF8wHwYDVR0jBBgwFoAU2DvcT6zNnbegvEa0JE6jEHBgS5cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGODcwL0QyRTI0Qzk4RDdF MjExRUZBRjBCM0I3REM0RjlBRTAyLzJEdmNUNnpObmJlZ3ZFYTBKRTZqRUhCZ1M1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkR2Y1Q2ek5uYmVndkVhMEpFNmpFSEJnUzVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG ODcwL0QyRTI0Qzk4RDdFMjExRUZBRjBCM0I3REM0RjlBRTAyLzJEdmNUNnpObmJl Z3ZFYTBKRTZqRUhCZ1M1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABaFMHUpg9sP3kazGhkzcBoRL90DrTea72ihdYNpR9YvcHaQA838SGV/ G5SdzO41in+C2/jZas0KP4xr0mcuJ5VtLGzsjIrwGfZ+MexG6CFy0ksOeY6ZNpcw BHbX0mTjPozwmshCCj+AeFxRYQiAOk07UkLvxvfn4J5Xj/8GziR5VZgsC5aV5gGu wdOda1DLfolWngcRP9ZUAhLFah2VRXLMRWLMHfb3wiNaSQsa5iHw88HzuZzLDUUv nUcKWDVv0oQZf3KypQcHCWfBd6ko1m5UyORfxc7hKPLLZJpLQlrYO7D+sDM7AOFJ opXjmi2yMlMuxMQt2ZEvtehgFjNChnk= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:46 2025 by rpki-client on console.sobornost.net