$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft File: A3iO4rrk2AXrzcpmGOLsGhilxOI.mft (raw, json) Hash identifier: 7DP9LqFPHrMQyyVm1CAMW+kd/j2nGMkbuLPCoF0Xcks= Subject key identifier: 2D:DC:9C:20:21:25:AC:7D:C0:48:E6:BD:7E:40:7B:24:4D:C7:50:36 Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 Certificate issuer: /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft Manifest number: 34 Signing time: Sun 27 Apr 2025 06:26:19 +0000 Manifest this update: Sun 27 Apr 2025 06:26:19 +0000 Manifest next update: Sun 04 May 2025 06:26:19 +0000 Files and hashes: 1: A3iO4rrk2AXrzcpmGOLsGhilxOI.crl (hash: VVdFz6SGZVwsuouBR6t2pur231HYBjlTPt5HsfXEggY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2 Validity Not Before: Apr 27 06:26:19 2025 GMT Not After : May 4 06:26:19 2025 GMT Subject: CN=680dce0b-fe07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:1c:9b:c1:fb:4e:01:b8:b0:8a:51:90:b3: fb:2a:6b:82:04:85:1e:16:50:46:f4:68:89:dc:9a: 87:fc:ea:67:ad:0b:b4:59:18:a1:84:26:b7:a5:70: 1b:4d:86:1a:aa:b1:c2:23:6b:da:51:fc:58:93:5a: 72:56:9a:e1:41:9f:64:78:71:3e:84:9c:6c:a5:89: 74:7c:f4:97:1f:b8:2f:93:7a:5a:c3:98:57:3c:f7: 17:74:91:c8:aa:73:2f:66:31:82:85:70:6e:84:aa: 79:93:24:3c:76:74:46:34:ae:c8:ae:02:9c:ba:a5: f3:5a:80:51:a1:9d:e6:d1:39:94:95:d7:8e:8f:0a: 62:b4:f9:b8:99:5c:86:4a:0e:00:c9:5f:bf:61:aa: a4:70:2b:36:46:90:cc:cf:ba:da:fc:df:ed:89:87: ee:5d:b8:2d:b4:fb:96:9f:7c:3e:09:51:2f:63:41: 58:56:ba:5b:ce:ef:8d:ae:39:57:62:8e:d7:57:ab: f7:97:9c:cc:d8:51:af:12:c5:b8:2b:3b:cb:8f:ff: 32:fe:46:d4:b1:e1:f7:43:25:31:92:41:72:ca:b9: e5:e8:92:a9:b1:52:e2:22:f8:42:e2:f0:56:e3:5d: ee:a3:01:cf:f3:7c:ea:91:d8:a9:06:c6:cd:8b:fb: 56:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DC:9C:20:21:25:AC:7D:C0:48:E6:BD:7E:40:7B:24:4D:C7:50:36 X509v3 Authority Key Identifier: keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:3c:6b:d3:6e:c4:e8:b9:5c:71:a1:1c:fe:a5:c8:bd:f9:c3: 7c:fb:e9:ce:9f:a1:ca:4c:e7:09:2c:5c:8c:27:a2:32:44:d1: d1:9f:ae:27:d3:ad:58:a9:0e:65:e2:6a:ca:00:15:37:78:d7: b5:95:33:af:ff:13:92:b2:31:0e:7c:db:35:c5:16:b4:a5:87: 35:43:25:77:98:82:f2:12:72:f3:07:32:d6:da:c9:0b:a5:31: 88:ed:16:03:5a:4c:42:c5:c4:c9:e4:26:78:b8:0d:a7:53:10: 0d:fe:63:93:51:87:20:a7:71:38:5c:fa:54:f9:f1:c4:dc:34: 70:74:b8:0c:2f:a4:3f:7f:5d:fa:b7:13:f4:ed:1e:ad:5f:6d: 0c:21:39:b2:62:2e:39:f6:da:2b:a5:07:2b:87:1d:68:a8:43: 24:7e:ec:af:8f:f7:b9:6c:2b:34:1b:a9:ca:f2:53:19:eb:e4: 47:af:fe:52:dc:be:1e:3b:fc:ca:98:f3:62:da:46:92:e5:39: 32:9c:f3:34:80:5b:22:24:35:9e:b2:e4:60:48:a2:9f:ce:a2: 0b:97:65:65:78:43:25:13:cb:97:b8:1e:0b:9f:24:be:06:c0: fe:e5:02:70:62:e9:05:ad:d3:42:92:b0:33:07:96:aa:80:83: ce:47:a9:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkREOTExMC8GA1UEBRMoMDM3ODhFRTJCQUU0RDgwNUVCQ0RDQTY2MThFMkVDMUEx OEE1QzRFMjAeFw0yNTA0MjcwNjI2MTlaFw0yNTA1MDQwNjI2MTlaMBgxFjAUBgNV BAMTDTY4MGRjZTBiLWZlMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlLRybwftOAbiwilGQs/sqa4IEhR4WUEb0aIncmof86metC7RZGKGEJrelcBtN hhqqscIja9pR/FiTWnJWmuFBn2R4cT6EnGyliXR89JcfuC+TelrDmFc89xd0kciq cy9mMYKFcG6EqnmTJDx2dEY0rsiuApy6pfNagFGhnebROZSV146PCmK0+biZXIZK DgDJX79hqqRwKzZGkMzPutr83+2Jh+5duC20+5affD4JUS9jQVhWulvO742uOVdi jtdXq/eXnMzYUa8SxbgrO8uP/zL+RtSx4fdDJTGSQXLKueXokqmxUuIi+ELi8Fbj Xe6jAc/zfOqR2KkGxs2L+1bJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULdycICEl rH3ASOa9fkB7JE3HUDYwHwYDVR0jBBgwFoAUA3iO4rrk2AXrzcpmGOLsGhilxOIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGREQ5L0JFN0NBQzEyRDZE RTExRUZCMDQ3NEUxQkM0RjlBRTAyL0EzaU80cnJrMkFYcnpjcG1HT0xzR2hpbHhP SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTNpTzRycmsyQVhyemNwbUdPTHNHaGlseE9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG REQ5L0JFN0NBQzEyRDZERTExRUZCMDQ3NEUxQkM0RjlBRTAyL0EzaU80cnJrMkFY cnpjcG1HT0xzR2hpbHhPSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL88a9NuxOi5XHGhHP6lyL35w3z76c6focpM5wksXIwnojJE0dGfrifT rVipDmXiasoAFTd417WVM6//E5KyMQ582zXFFrSlhzVDJXeYgvIScvMHMtbayQul MYjtFgNaTELFxMnkJni4DadTEA3+Y5NRhyCncThc+lT58cTcNHB0uAwvpD9/Xfq3 E/TtHq1fbQwhObJiLjn22iulByuHHWioQyR+7K+P97lsKzQbqcryUxnr5Eev/lLc vh47/MqY82LaRpLlOTKc8zSAWyIkNZ6y5GBIop/OoguXZWV4QyUTy5e4HgufJL4G wP7lAnBi6QWt00KSsDMHlqqAg85HqYI= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net