$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft File: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft (raw, json) Hash identifier: ze0zrP5fumpPr+vLKKgzxCQMITgkDyBbswy5JUBXXsw= Subject key identifier: CD:74:9F:C4:71:59:16:0E:CC:83:A5:CD:EA:9A:CA:D6:B0:42:52:8C Authority key identifier: DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 Certificate issuer: /CN=A915D8F3/serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft Manifest number: CE Signing time: Sun 27 Apr 2025 04:32:36 +0000 Manifest this update: Sun 27 Apr 2025 04:32:36 +0000 Manifest next update: Sun 04 May 2025 04:32:36 +0000 Files and hashes: 1: 3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl (hash: ApgV/2DQCZmS8yXnh+AiP1cPLqeRY4Z2RDIyJ+MrLbU=) 2: D47D55EEE5BB11EE8B36C249C4F9AE02.roa (hash: 8mrj6WG5h96Mu545OyQl3U5aMKI1r2gwobV+i2Zi3aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8F3, serialNumber=DE87B667697D46F45505EAA123BAF686DB220781 Validity Not Before: Apr 27 04:32:36 2025 GMT Not After : May 4 04:32:36 2025 GMT Subject: CN=680db364-eae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:58:dc:d7:b1:77:41:7d:08:58:87:5a:ac: bd:aa:78:37:84:45:fc:ba:72:73:c9:43:7f:83:dc: 32:4f:8b:78:f6:68:d4:cc:52:ea:60:61:45:99:1f: 26:ae:cb:25:73:8a:b8:f9:ec:0a:e0:7c:c3:fa:8e: 76:38:97:50:4a:77:52:f3:50:a5:1d:c5:0f:0a:52: 23:ba:63:20:4f:67:b8:ed:23:5a:a5:96:76:93:ae: 89:32:d2:b6:4a:08:64:f1:04:09:94:93:cd:57:5c: 9c:9a:fd:5f:06:12:03:89:df:14:6b:cc:72:08:a0: bd:1a:29:a3:09:15:7b:7a:b4:c7:1f:43:3c:65:f4: b3:29:0f:d3:6a:5f:70:77:00:ff:a3:90:4b:e1:ac: ac:52:18:6a:d2:f3:10:bb:72:ff:3d:e9:86:24:94: cc:ea:4a:ab:a8:29:f4:39:22:86:5e:b5:e6:e3:f4: 6c:d4:01:a8:ed:ea:0d:2e:23:db:15:ce:20:ef:22: 75:bc:a2:44:bd:92:60:31:9f:25:b6:09:0c:5e:c3: e0:22:d1:1d:82:9b:f1:1e:4e:84:33:cb:66:aa:81: ae:63:c4:44:52:18:5f:79:9b:e2:a3:ba:12:e3:77: b8:88:48:23:88:78:49:55:ab:94:2f:f8:3b:2e:f1: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:9F:C4:71:59:16:0E:CC:83:A5:CD:EA:9A:CA:D6:B0:42:52:8C X509v3 Authority Key Identifier: keyid:DE:87:B6:67:69:7D:46:F4:55:05:EA:A1:23:BA:F6:86:DB:22:07:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oe2Z2l9RvRVBeqhI7r2htsiB4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8F3/EA45B3C2E5BA11EE9B607B47C4F9AE02/3oe2Z2l9RvRVBeqhI7r2htsiB4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:83:d5:7e:e3:d2:c3:5b:02:60:29:25:80:b0:b4:cc:c9:48: c6:1d:80:36:1d:90:12:64:eb:fe:d6:88:f3:7b:a8:2e:66:d0: db:6b:53:2a:3d:af:78:4d:82:93:0e:0c:67:ed:94:2b:ac:5c: 2d:0d:f4:45:02:a9:6e:54:06:34:c2:49:f6:7c:76:9a:11:27: 91:17:01:88:2e:4b:31:42:9d:29:5c:6b:25:91:13:1a:21:3e: b3:f6:91:68:b3:82:02:bb:47:56:5b:9e:2a:a8:7d:09:7b:3b: 4d:f2:aa:1e:bc:4d:2c:09:74:d1:06:0e:18:0b:b1:86:84:6f: 6e:65:67:9e:5f:e2:8d:04:e7:db:da:b6:b5:70:ff:d8:d6:9e: 5c:84:f8:75:90:e8:4b:0a:7a:ef:e6:2e:a0:1a:0c:8e:d6:80: c5:58:fc:fc:86:80:70:3b:5f:0b:2b:14:0c:54:8a:7e:6e:76: d9:a0:be:1e:2a:eb:08:e3:f9:32:73:51:57:7e:bf:f5:da:7b: 1e:af:93:c4:37:df:ac:88:6f:ee:80:20:31:fb:39:30:3d:80: c2:8f:88:d9:7b:32:5e:3f:1e:16:a2:af:b3:b8:f0:7e:73:5d: 0a:d8:5b:b0:b6:2b:a7:77:95:30:75:13:c5:1a:64:71:c6:28: 32:ad:2f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RjMxMTAvBgNVBAUTKERFODdCNjY3Njk3RDQ2RjQ1NTA1RUFBMTIzQkFGNjg2 REIyMjA3ODEwHhcNMjUwNDI3MDQzMjM2WhcNMjUwNTA0MDQzMjM2WjAYMRYwFAYD VQQDEw02ODBkYjM2NC1lYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+dY3Nexd0F9CFiHWqy9qng3hEX8unJzyUN/g9wyT4t49mjUzFLqYGFFmR8m rsslc4q4+ewK4HzD+o52OJdQSndS81ClHcUPClIjumMgT2e47SNapZZ2k66JMtK2 Sghk8QQJlJPNV1ycmv1fBhIDid8Ua8xyCKC9GimjCRV7erTHH0M8ZfSzKQ/Tal9w dwD/o5BL4aysUhhq0vMQu3L/PemGJJTM6kqrqCn0OSKGXrXm4/Rs1AGo7eoNLiPb Fc4g7yJ1vKJEvZJgMZ8ltgkMXsPgItEdgpvxHk6EM8tmqoGuY8REUhhfeZvio7oS 43e4iEgjiHhJVauUL/g7LvGH9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM10n8Rx WRYOzIOlzeqaytawQlKMMB8GA1UdIwQYMBaAFN6HtmdpfUb0VQXqoSO69obbIgeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhGMy9FQTQ1QjNDMkU1 QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2UlZCZXFoSTdyMmh0c2lC NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvZTJaMmw5UnZSVkJlcWhJN3IyaHRzaUI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhGMy9FQTQ1QjNDMkU1QkExMUVFOUI2MDdCNDdDNEY5QUUwMi8zb2UyWjJsOVJ2 UlZCZXFoSTdyMmh0c2lCNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkg9V+49LDWwJgKSWAsLTMyUjGHYA2HZASZOv+1ojze6guZtDba1Mq Pa94TYKTDgxn7ZQrrFwtDfRFAqluVAY0wkn2fHaaESeRFwGILksxQp0pXGslkRMa IT6z9pFos4ICu0dWW54qqH0JeztN8qoevE0sCXTRBg4YC7GGhG9uZWeeX+KNBOfb 2ra1cP/Y1p5chPh1kOhLCnrv5i6gGgyO1oDFWPz8hoBwO18LKxQMVIp+bnbZoL4e KusI4/kyc1FXfr/12nser5PEN9+siG/ugCAx+zkwPYDCj4jZezJePx4Woq+zuPB+ c10K2Fuwtiund5UwdRPFGmRxxigyrS9o -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net