$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft File: PmqgA4_dRmnJDxiDgji35BAt3Bk.mft (raw, json) Hash identifier: Zwszu49LSM8MIWf40xGXPhOrFCi4ocz8J47mJFqanuE= Subject key identifier: 84:03:04:F4:7C:99:DD:7A:F6:02:46:92:B8:45:CC:20:8A:F0:CB:6B Authority key identifier: 3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 Certificate issuer: /CN=A9161322/serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft Manifest number: F3 Signing time: Fri 25 Apr 2025 04:18:56 +0000 Manifest this update: Fri 25 Apr 2025 04:18:55 +0000 Manifest next update: Fri 02 May 2025 04:18:55 +0000 Files and hashes: 1: PmqgA4_dRmnJDxiDgji35BAt3Bk.crl (hash: z5nphzNsNzvIy7ro+agFxD1znB0f7cXGEcTvvpdZDZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=3E6AA0038FDD4669C90F18838238B7E4102DDC19 Validity Not Before: Apr 25 04:18:55 2025 GMT Not After : May 2 04:18:55 2025 GMT Subject: CN=680b0d30-8c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:1a:2a:bc:70:24:fd:f5:11:27:d7:3b:41: 77:02:5c:de:3c:3d:0f:6c:7f:d2:b5:55:b2:6a:3d: 87:d3:a5:e3:ee:63:50:a6:45:0a:64:9c:cd:74:6a: f6:a0:79:f9:b1:1a:b6:0c:ca:d9:96:35:83:17:27: a2:5d:a5:8b:23:79:be:61:1a:d8:e6:80:cf:2b:6c: 79:ed:b8:35:78:20:ce:f9:1d:f8:b5:f4:cf:e1:43: b6:e8:a9:d6:d7:7a:47:dc:93:c6:7e:d3:ff:1a:76: cf:58:33:c4:34:60:f7:b6:67:a1:0b:52:c6:5e:0f: 33:64:39:75:bf:03:0b:49:dc:39:9c:9a:31:c6:a6: 13:dd:8f:98:3e:47:67:8d:bc:e1:f8:d8:61:f4:ee: 54:83:c6:d6:15:08:ab:58:c0:88:2f:68:06:76:f7: 8f:af:e3:5c:ea:75:5c:6c:09:e9:78:4c:44:75:42: 76:b8:36:09:c5:87:3f:51:67:d5:3d:1c:02:de:3c: da:71:b3:02:64:ca:22:69:fd:ed:f7:3b:3c:d7:d1: 2c:38:2c:19:0c:2a:be:2a:27:bc:e4:2e:c8:f1:fa: 8a:5b:d9:82:4f:bb:9e:21:ba:72:84:49:ca:42:95: 41:bf:47:09:e0:43:64:02:85:41:a7:30:f5:b0:2c: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:03:04:F4:7C:99:DD:7A:F6:02:46:92:B8:45:CC:20:8A:F0:CB:6B X509v3 Authority Key Identifier: keyid:3E:6A:A0:03:8F:DD:46:69:C9:0F:18:83:82:38:B7:E4:10:2D:DC:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PmqgA4_dRmnJDxiDgji35BAt3Bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/4F40D670B05111EE8CDDB161C4F9AE02/PmqgA4_dRmnJDxiDgji35BAt3Bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:dc:3b:6d:f3:ac:c5:7b:3a:08:7f:53:1c:fc:5d:c1:36:bc: 65:56:f8:af:97:90:ac:98:94:df:e0:fe:79:be:b8:ff:8f:96: 29:2c:c3:81:17:ea:26:bf:a2:d5:6c:af:fa:86:d2:3e:d9:af: 59:13:8d:78:3b:d9:6a:23:90:65:1b:f5:87:05:b9:49:40:68: 70:89:35:90:6b:0f:87:3c:34:53:3f:02:58:05:a1:3d:1e:4b: 92:62:15:d0:93:60:2f:71:e4:a0:d9:6c:21:0f:01:c9:3b:e6: a3:8e:db:09:df:9a:ed:71:18:e1:8f:a5:f3:33:25:fc:8f:92: cf:94:ee:66:ab:ef:d7:a8:65:a4:65:42:03:ec:23:96:ab:2b: 95:04:d5:1b:f8:2a:7e:d7:00:af:52:ea:12:ff:89:44:84:7e: 1f:f3:fa:6b:51:cf:0c:f9:d7:5f:80:9e:3a:80:c3:9e:cc:cd: 66:b5:27:6f:a7:0e:3e:cd:da:73:36:be:af:7b:74:1c:75:58: 87:fc:3c:3c:17:4d:46:1d:0b:19:c9:e0:1d:99:da:2c:bb:fe: b9:6b:82:2b:a3:ed:92:58:f4:d2:34:20:90:dc:aa:fb:c0:e8: 25:bc:46:18:8f:ec:ce:16:2d:66:2c:63:44:1d:4e:4a:30:7b: d8:19:8a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDNFNkFBMDAzOEZERDQ2NjlDOTBGMTg4MzgyMzhCN0U0 MTAyRERDMTkwHhcNMjUwNDI1MDQxODU1WhcNMjUwNTAyMDQxODU1WjAYMRYwFAYD VQQDEw02ODBiMGQzMC04Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmf4aKrxwJP31ESfXO0F3AlzePD0PbH/StVWyaj2H06Xj7mNQpkUKZJzNdGr2 oHn5sRq2DMrZljWDFyeiXaWLI3m+YRrY5oDPK2x57bg1eCDO+R34tfTP4UO26KnW 13pH3JPGftP/GnbPWDPENGD3tmehC1LGXg8zZDl1vwMLSdw5nJoxxqYT3Y+YPkdn jbzh+Nhh9O5Ug8bWFQirWMCIL2gGdvePr+Nc6nVcbAnpeExEdUJ2uDYJxYc/UWfV PRwC3jzacbMCZMoiaf3t9zs819EsOCwZDCq+Kie85C7I8fqKW9mCT7ueIbpyhEnK QpVBv0cJ4ENkAoVBpzD1sCwpAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQDBPR8 md169gJGkrhFzCCK8MtrMB8GA1UdIwQYMBaAFD5qoAOP3UZpyQ8Yg4I4t+QQLdwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80RjQwRDY3MEIw NTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJtbkpEeGlEZ2ppMzVCQXQz QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BtcWdBNF9kUm1uSkR4aURnamkzNUJBdDNCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80RjQwRDY3MEIwNTExMUVFOENEREIxNjFDNEY5QUUwMi9QbXFnQTRfZFJt bkpEeGlEZ2ppMzVCQXQzQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq3Dtt86zFezoIf1Mc/F3BNrxlVvivl5CsmJTf4P55vrj/j5YpLMOB F+omv6LVbK/6htI+2a9ZE414O9lqI5BlG/WHBblJQGhwiTWQaw+HPDRTPwJYBaE9 HkuSYhXQk2AvceSg2WwhDwHJO+ajjtsJ35rtcRjhj6XzMyX8j5LPlO5mq+/XqGWk ZUID7COWqyuVBNUb+Cp+1wCvUuoS/4lEhH4f8/prUc8M+ddfgJ46gMOezM1mtSdv pw4+zdpzNr6ve3QcdViH/Dw8F01GHQsZyeAdmdosu/65a4Iro+2SWPTSNCCQ3Kr7 wOglvEYYj+zOFi1mLGNEHU5KMHvYGYp/ -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:55 2025 by rpki-client on console.sobornost.net