$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft File: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft (raw, json) Hash identifier: 5ABYVA71zAgazxWoJxTinpm30iTupDjtwqvbUIDRlAI= Subject key identifier: FA:A4:23:9B:8F:49:AE:B5:6B:17:5D:5B:AF:CF:1F:3D:9D:6C:8C:F0 Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Certificate serial: 0BF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft Manifest number: 0BDC Signing time: Mon 28 Apr 2025 19:11:55 +0000 Manifest this update: Mon 28 Apr 2025 19:11:54 +0000 Manifest next update: Mon 05 May 2025 19:11:54 +0000 Files and hashes: 1: 3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl (hash: V74NV0emkRnVdACNNU4HWHpBLcm3RyIFaDNuk5bSga0=) 2: 3A5A84F8CB7111EBA9EEF440C4F9AE02.roa (hash: LcxIbKxK3jutvAgu3ThkdTt7YT68VEQAWEq5z0WaOxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3062 (0xbf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F Validity Not Before: Apr 28 19:11:54 2025 GMT Not After : May 5 19:11:54 2025 GMT Subject: CN=680fd2fa-0688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cd:63:4f:a7:74:b5:f8:08:53:12:a9:db:89: 1b:df:81:d4:a5:e0:4b:dc:20:09:49:01:de:c6:58: e1:18:12:ba:64:f7:ec:0a:75:85:6d:33:d1:73:cd: e0:49:ee:57:30:67:6c:e1:d6:9d:90:1d:f1:56:68: d1:40:2d:c4:70:37:d8:3a:49:28:09:a3:ed:4b:19: 75:bc:a4:91:bb:ef:2b:74:32:6e:09:75:15:cc:b8: 03:9d:89:d9:2d:18:46:bd:f5:64:41:8d:6c:72:6a: b9:cc:f2:af:ed:79:3f:43:8e:17:0f:96:4f:86:a2: 1b:cb:35:3f:46:fb:ad:7b:9c:27:dd:0d:2a:a4:25: 7d:fd:9d:50:83:7f:d3:80:d1:df:a5:cf:44:22:d5: 75:3c:39:cb:05:98:91:91:d0:cd:04:2a:e4:94:d1: 2f:3a:a9:05:c7:aa:4c:6b:61:2a:b4:cd:0f:c7:5b: d4:f3:a7:24:6a:3c:ab:c2:8b:c6:89:1d:5f:3f:f9: 6e:93:88:61:f6:3a:6e:e7:91:9e:c8:6e:95:19:d9: 61:53:d7:41:f3:ad:2a:ac:16:95:49:c6:a8:35:0b: 3e:60:f4:a1:04:e8:05:72:8a:04:44:fb:37:78:40: 58:45:22:ba:4b:00:fb:71:42:9e:d2:7e:96:98:33: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A4:23:9B:8F:49:AE:B5:6B:17:5D:5B:AF:CF:1F:3D:9D:6C:8C:F0 X509v3 Authority Key Identifier: keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:36:eb:50:dd:64:36:cc:63:dc:3b:d0:f0:da:9b:3b:73:56: ba:f7:d6:8b:ea:ba:37:86:5c:cf:3e:47:bf:72:54:90:99:39: 53:36:06:04:4a:8f:40:47:b8:95:74:66:fc:11:db:af:cb:7c: 0b:db:67:9c:22:e2:4d:f0:4a:64:a9:1e:29:ee:95:b4:0c:41: 68:ef:d9:af:9b:27:e7:40:e4:99:3a:c2:65:e8:d6:15:f2:e5: 39:da:29:51:5c:57:65:3b:c4:78:e8:16:f1:93:3d:97:d9:9b: a8:80:47:5b:7c:2a:94:b7:f8:7c:a8:00:88:d6:1c:f4:f9:a8: c3:4f:40:bc:6e:ae:87:29:69:7e:1b:94:d1:bf:06:26:16:96: c2:c2:c5:6f:5d:a4:32:ca:52:c2:bb:47:d2:07:93:ef:73:9c: d8:98:b8:d4:0c:27:b9:24:1f:52:ac:fc:46:87:e9:43:a6:8c: 68:49:c5:82:4b:ea:69:e4:ee:89:cb:9f:56:80:9a:78:ce:4e: 9b:16:57:bd:1d:48:7e:4a:12:89:e7:83:f9:04:8f:dc:d4:27: f5:48:1b:36:ef:b5:05:e5:41:3a:a9:92:ef:44:b7:67:c5:6e: 9e:eb:0f:f5:b5:3a:bb:1e:ff:4f:dd:fc:77:7e:09:fd:f7:22: ff:72:74:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC MjU1N0Y0M0YwHhcNMjUwNDI4MTkxMTU0WhcNMjUwNTA1MTkxMTU0WjAYMRYwFAYD VQQDEw02ODBmZDJmYS0wNjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M1jT6d0tfgIUxKp24kb34HUpeBL3CAJSQHexljhGBK6ZPfsCnWFbTPRc83g Se5XMGds4dadkB3xVmjRQC3EcDfYOkkoCaPtSxl1vKSRu+8rdDJuCXUVzLgDnYnZ LRhGvfVkQY1scmq5zPKv7Xk/Q44XD5ZPhqIbyzU/Rvute5wn3Q0qpCV9/Z1Qg3/T gNHfpc9EItV1PDnLBZiRkdDNBCrklNEvOqkFx6pMa2EqtM0Px1vU86ckajyrwovG iR1fP/luk4hh9jpu55GeyG6VGdlhU9dB860qrBaVScaoNQs+YPShBOgFcooERPs3 eEBYRSK6SwD7cUKe0n6WmDPy2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqkI5uP Sa61axddW6/PHz2dbIzwMB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4 NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5 RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC9EMzEzMDY3NjE4NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExF RTN5OUhJN1VUWnl5Vlg5RDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4NutQ3WQ2zGPcO9Dw2ps7c1a699aL6ro3hlzPPke/clSQmTlTNgYE So9AR7iVdGb8Eduvy3wL22ecIuJN8EpkqR4p7pW0DEFo79mvmyfnQOSZOsJl6NYV 8uU52ilRXFdlO8R46Bbxkz2X2ZuogEdbfCqUt/h8qACI1hz0+ajDT0C8bq6HKWl+ G5TRvwYmFpbCwsVvXaQyylLCu0fSB5Pvc5zYmLjUDCe5JB9SrPxGh+lDpoxoScWC S+pp5O6Jy59WgJp4zk6bFle9HUh+ShKJ54P5BI/c1Cf1SBs277UF5UE6qZLvRLdn xW6e6w/1tTq7Hv9P3fx3fgn99yL/cnTl -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:13 2025 by rpki-client on console.sobornost.net