$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft File: UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft (raw, json) Hash identifier: tt1cEpVPPtCU82bXu+YPCyFCMOaCa0rJY2C0jUzGNIE= Subject key identifier: 8A:F7:36:D5:50:63:7D:2A:7F:DE:B3:2D:8B:50:D7:81:94:A4:52:07 Authority key identifier: 52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 Certificate issuer: /CN=A916B30C/serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft Manifest number: F2 Signing time: Sun 27 Apr 2025 04:08:43 +0000 Manifest this update: Sun 27 Apr 2025 04:08:43 +0000 Manifest next update: Sun 04 May 2025 04:08:43 +0000 Files and hashes: 1: UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl (hash: R1jroRppfNMLwc6p3KPr8DHM+Kf3K2upztEFzrXxEn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B30C, serialNumber=52B3E83B1621AFB3DCCF0ACF67F27EE0B1D6C836 Validity Not Before: Apr 27 04:08:43 2025 GMT Not After : May 4 04:08:43 2025 GMT Subject: CN=680dadcb-0e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5c:76:db:33:77:e7:e3:ef:87:c1:ae:4a:a7: 40:20:60:9d:08:ff:64:57:7a:79:97:cd:08:86:e7: 3e:6c:db:a9:d4:13:56:4b:fa:16:2d:9a:9f:f8:c2: 70:f1:b3:cf:20:1c:1f:bc:d7:6e:ab:a6:dd:7f:ec: 54:53:53:be:62:f9:f2:9a:d5:2c:06:13:5d:c4:df: 8e:da:4f:6f:c9:b9:6e:9c:0a:2d:1c:78:b1:fe:29: db:5e:d3:62:4f:eb:6f:40:c6:4a:a4:32:dc:c1:f7: d3:a2:75:47:d6:ef:e8:45:66:26:04:62:40:db:8c: 16:fa:4f:5a:32:bb:b7:12:29:ac:d4:7e:81:10:b2: d4:22:ff:f3:1f:d1:75:cf:6d:a7:02:2c:c7:d8:6d: 54:3e:50:18:9f:5f:46:62:59:36:df:96:3c:ec:b7: 4f:cf:6e:74:2b:fa:9e:93:2f:40:ca:21:11:cf:47: 9d:d4:d2:49:48:f4:24:58:07:8e:5a:f6:0b:fc:84: cc:d1:44:81:57:1a:39:24:2a:46:36:85:87:d4:a8: 98:80:3d:69:da:9e:0a:dd:c2:dc:44:33:4d:f0:90: cd:c4:a3:09:22:ce:d7:ba:b5:54:0f:f2:34:75:13: 4a:37:a7:29:3e:fd:b4:72:0e:e0:69:58:6e:98:06: 73:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:36:D5:50:63:7D:2A:7F:DE:B3:2D:8B:50:D7:81:94:A4:52:07 X509v3 Authority Key Identifier: keyid:52:B3:E8:3B:16:21:AF:B3:DC:CF:0A:CF:67:F2:7E:E0:B1:D6:C8:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UrPoOxYhr7PczwrPZ_J-4LHWyDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/9A87543AB05E11EE97C78B75C4F9AE02/UrPoOxYhr7PczwrPZ_J-4LHWyDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c0:11:52:9d:b5:b4:d0:7e:8c:f3:22:b3:00:e2:0b:68:ce: 4d:82:de:70:6c:01:3d:fa:59:58:74:93:57:97:d5:cc:87:db: 65:5f:72:5d:3a:81:02:f1:d1:e8:8b:61:72:07:53:4c:c1:4f: ed:dc:aa:73:d3:c7:99:52:c8:83:35:b2:fd:3c:6e:6e:73:1c: cb:99:3e:65:f9:15:fe:60:c6:43:a3:b7:9c:15:4a:54:2f:7f: aa:b6:2b:d8:ec:3a:bf:dc:1f:6b:a7:1c:78:e5:03:79:8e:36: e3:53:31:e1:bc:e7:ab:a7:6c:3c:05:9e:2d:70:d2:3d:00:6b: f3:15:53:69:52:b2:3a:d0:0f:5c:bb:5c:bb:e4:2e:ee:55:08: 00:2e:d6:74:42:83:c1:21:bb:dd:b7:6a:46:0c:e3:6b:6f:06: 7f:b9:0f:6f:c3:6d:06:2e:9b:2c:a7:00:3e:2e:d8:92:e3:80: 9d:60:f7:d7:91:fe:d3:b0:1e:90:bd:2e:6f:82:e5:bd:b5:06: fe:41:05:05:4c:84:72:93:d8:3a:df:ce:13:e0:2f:e8:41:0f: 2b:82:52:59:76:5a:92:02:bc:61:17:a2:17:98:e5:12:f7:b4: 43:e2:6e:49:f2:ae:29:0f:b7:34:92:34:fb:9a:54:a2:36:b7: af:e7:22:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIzMEMxMTAvBgNVBAUTKDUyQjNFODNCMTYyMUFGQjNEQ0NGMEFDRjY3RjI3RUUw QjFENkM4MzYwHhcNMjUwNDI3MDQwODQzWhcNMjUwNTA0MDQwODQzWjAYMRYwFAYD VQQDEw02ODBkYWRjYi0wZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplx22zN35+Pvh8GuSqdAIGCdCP9kV3p5l80Ihuc+bNup1BNWS/oWLZqf+MJw 8bPPIBwfvNduq6bdf+xUU1O+YvnymtUsBhNdxN+O2k9vyblunAotHHix/inbXtNi T+tvQMZKpDLcwffTonVH1u/oRWYmBGJA24wW+k9aMru3Eims1H6BELLUIv/zH9F1 z22nAizH2G1UPlAYn19GYlk235Y87LdPz250K/qeky9AyiERz0ed1NJJSPQkWAeO WvYL/ITM0USBVxo5JCpGNoWH1KiYgD1p2p4K3cLcRDNN8JDNxKMJIs7XurVUD/I0 dRNKN6cpPv20cg7gaVhumAZzjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr3NtVQ Y30qf96zLYtQ14GUpFIHMB8GA1UdIwQYMBaAFFKz6DsWIa+z3M8Kz2fyfuCx1sg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85QTg3NTQzQUIw NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3UGN6d3JQWl9KLTRMSFd5 RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyUG9PeFlocjdQY3p3clBaX0otNExIV3lEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjMwQy85QTg3NTQzQUIwNUUxMUVFOTdDNzhCNzVDNEY5QUUwMi9VclBvT3hZaHI3 UGN6d3JQWl9KLTRMSFd5RFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVwBFSnbW00H6M8yKzAOILaM5Ngt5wbAE9+llYdJNXl9XMh9tlX3Jd OoEC8dHoi2FyB1NMwU/t3Kpz08eZUsiDNbL9PG5ucxzLmT5l+RX+YMZDo7ecFUpU L3+qtivY7Dq/3B9rpxx45QN5jjbjUzHhvOerp2w8BZ4tcNI9AGvzFVNpUrI60A9c u1y75C7uVQgALtZ0QoPBIbvdt2pGDONrbwZ/uQ9vw20GLpsspwA+LtiS44CdYPfX kf7TsB6QvS5vguW9tQb+QQUFTIRyk9g6384T4C/oQQ8rglJZdlqSArxhF6IXmOUS 97RD4m5J8q4pD7c0kjT7mlSiNrev5yL2 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:48 2025 by rpki-client on console.sobornost.net