$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json) Hash identifier: FDCRiIaXZ04dwi+us/r/GGuxgDVyAKfHhUH7tm7/sQI= Subject key identifier: BA:FB:F2:C7:F2:8B:AF:A1:E9:65:73:1A:BF:DA:8D:13:DA:44:1D:70 Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft Manifest number: 0166 Signing time: Sun 27 Apr 2025 02:57:23 +0000 Manifest this update: Sun 27 Apr 2025 02:57:23 +0000 Manifest next update: Sun 04 May 2025 02:57:22 +0000 Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: Eem/x/HknoaKMCPIFThnyIsgzTmP719PWA7DaSq8w+4=) 2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: 22aaI99D5AWtJSeJ++1PDVBO7upMl84FHbNH+yIrm8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Apr 27 02:57:23 2025 GMT Not After : May 4 02:57:22 2025 GMT Subject: CN=680d9d13-ab54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:3d:fc:f1:6f:c2:ea:ed:92:67:b2:84:76: 12:f7:d4:9e:d3:54:17:d3:36:aa:7b:85:5c:24:95: f5:10:be:b6:05:0e:24:14:0e:b1:e7:55:70:e9:03: bf:eb:19:93:10:8f:16:5b:32:55:ec:7e:6d:26:f0: a1:80:a0:2b:25:39:39:59:bc:8c:27:93:62:54:4e: 14:1e:82:e1:dd:74:47:5a:08:50:93:49:28:13:eb: 68:09:94:ba:a0:87:6e:ac:b4:a7:c9:f2:12:f9:24: 00:58:ee:20:f3:a8:a2:4b:58:5a:a7:28:ff:a4:e3: a9:25:bf:77:0a:65:1d:95:a1:f4:64:f4:65:01:22: 11:06:b8:2f:17:bd:1d:4c:d2:4d:51:c1:08:42:e3: 0f:ef:4f:2c:a9:fc:99:ee:66:da:56:d9:62:bb:8d: f0:82:e9:e9:45:1d:fe:47:36:67:b1:bc:2a:27:e1: 1d:4e:d9:9d:2a:c6:09:4b:6d:7f:6c:50:e8:f0:d9: 4e:36:d9:dd:b2:5f:e2:88:70:d8:70:e9:94:4f:8e: ee:1f:f9:7f:93:a5:91:1c:7b:ba:f7:49:5e:d2:99: 3a:4d:e9:46:c7:85:80:40:cb:ae:6f:dd:94:c4:8d: 39:34:4d:10:2a:6a:ef:0b:86:80:23:c1:65:36:eb: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:F2:C7:F2:8B:AF:A1:E9:65:73:1A:BF:DA:8D:13:DA:44:1D:70 X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:99:17:64:65:40:83:65:dd:86:54:18:05:36:0f:f9:75:6e: 0a:f3:e1:15:60:ef:db:61:ec:cf:d1:65:da:e7:e9:c9:14:b0: 5d:82:35:a8:c2:32:b0:63:16:6b:ef:66:8d:24:33:30:22:48: e5:f5:07:9f:7e:3b:a4:b0:ff:0c:06:83:04:f0:45:b6:f9:1a: f4:a4:10:78:8d:99:31:5a:b1:f9:9a:cb:48:48:0c:64:b9:18: 74:01:50:65:fa:f7:85:8b:d2:6e:f3:2a:cc:c2:09:25:66:90: 7d:ac:48:b1:6a:1d:32:84:73:8f:57:fb:6f:c2:f2:4a:63:cd: 4c:7c:a0:8e:83:58:26:fc:84:5f:b7:d2:9d:50:2d:34:49:fb: 70:75:9b:79:f0:65:64:3b:69:ea:80:35:fc:6b:6b:0e:69:17: 35:99:66:ae:59:a8:36:8f:22:9d:3c:80:23:4a:b5:d6:9f:3c: b4:e8:3b:74:7e:ea:6d:0e:3b:08:e4:e3:01:1f:2c:c7:60:07: a3:0b:cb:23:57:f3:a6:7d:c4:27:28:b1:a3:4c:1b:d8:ee:2d: 16:0c:41:4c:03:14:10:80:db:e5:17:7a:ac:cb:30:e7:8c:37: cf:e5:e8:25:ec:f3:a1:8a:8e:17:67:24:c7:41:c9:db:18:c9: a7:5e:89:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjUwNDI3MDI1NzIzWhcNMjUwNTA0MDI1NzIyWjAYMRYwFAYD VQQDEw02ODBkOWQxMy1hYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQ49/PFvwurtkmeyhHYS99Se01QX0zaqe4VcJJX1EL62BQ4kFA6x51Vw6QO/ 6xmTEI8WWzJV7H5tJvChgKArJTk5WbyMJ5NiVE4UHoLh3XRHWghQk0koE+toCZS6 oIdurLSnyfIS+SQAWO4g86iiS1hapyj/pOOpJb93CmUdlaH0ZPRlASIRBrgvF70d TNJNUcEIQuMP708sqfyZ7mbaVtliu43wgunpRR3+RzZnsbwqJ+EdTtmdKsYJS21/ bFDo8NlONtndsl/iiHDYcOmUT47uH/l/k6WRHHu690le0pk6TelGx4WAQMuub92U xI05NE0QKmrvC4aAI8FlNusHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr78sfy i6+h6WVzGr/ajRPaRB1wMB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS81NUM4MDNDQTA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0 TW1zLTFIeU9TbDM1aWVRdkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxmRdkZUCDZd2GVBgFNg/5dW4K8+EVYO/bYezP0WXa5+nJFLBdgjWo wjKwYxZr72aNJDMwIkjl9QeffjuksP8MBoME8EW2+Rr0pBB4jZkxWrH5mstISAxk uRh0AVBl+veFi9Ju8yrMwgklZpB9rEixah0yhHOPV/tvwvJKY81MfKCOg1gm/IRf t9KdUC00SftwdZt58GVkO2nqgDX8a2sOaRc1mWauWag2jyKdPIAjSrXWnzy06Dt0 fuptDjsI5OMBHyzHYAejC8sjV/OmfcQnKLGjTBvY7i0WDEFMAxQQgNvlF3qsyzDn jDfP5egl7POhio4XZyTHQcnbGMmnXokY -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:49 2025 by rpki-client on console.sobornost.net