$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft File: rScP3pmx8Qadq473pXaqLCryxvA.mft (raw, json) Hash identifier: XA9+Wu/NMNs102oOhZTnfYu2hd/4FxW0/q37TWOu/Qk= Subject key identifier: 2D:4E:E3:3C:3F:CD:35:77:F9:11:F4:6A:25:29:9F:BB:BA:02:8D:20 Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft Manifest number: 3491 Signing time: Mon 28 Apr 2025 14:46:12 +0000 Manifest this update: Mon 28 Apr 2025 14:46:11 +0000 Manifest next update: Mon 05 May 2025 14:46:11 +0000 Files and hashes: 1: rScP3pmx8Qadq473pXaqLCryxvA.crl (hash: wQ0LBHneYXShjIJVXffiaxIG3f/OwwgpSUO++T/jE6Y=) 2: 5E26899A1B2211F093230420C4F9AE02.roa (hash: zE8hcTYNfmMkBUxWlaCkDNF/PasBwsyXryHfs3QbRWs=) 3: C64A9D821B2111F0B277571CC4F9AE02.roa (hash: 6EQRx6aa031JyIEDFgnynaOZ+5bnvuDSyDIypITveC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0 Validity Not Before: Apr 28 14:46:11 2025 GMT Not After : May 5 14:46:11 2025 GMT Subject: CN=680f94b4-8db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:16:61:7e:5d:ba:98:b6:d5:9e:af:85:14:ce: d1:60:03:de:9b:c4:bf:4a:d9:f0:3f:bf:72:b9:32: 37:df:5b:2e:0c:0e:75:75:1b:92:c8:eb:30:2d:5d: a7:e8:98:45:53:fa:b8:1d:36:89:3a:42:11:b7:fa: 01:39:68:94:6d:05:fc:87:47:96:fb:06:db:e6:03: 93:a3:58:e1:60:f7:53:cc:d7:95:4c:35:58:0f:de: 55:a6:2c:45:4a:ed:c5:5b:4d:9b:6a:41:72:89:92: 17:d8:6b:5e:42:44:28:0f:65:31:e5:94:ea:ac:e7: d0:6d:d3:d0:ca:e0:e1:82:4c:de:ca:84:14:a8:24: df:db:f0:fd:a3:c7:e1:7b:6d:e6:19:f9:c5:d1:97: f0:7b:1c:2b:17:4e:a2:b2:d7:1a:2d:26:7c:9b:70: 84:67:3a:16:c9:9a:43:c4:2c:16:89:0a:41:21:50: 14:f2:83:e6:94:d2:64:92:e2:ef:d3:77:57:38:7d: 41:7d:d9:bf:fe:0e:88:08:bf:b3:bf:8d:e5:4c:1c: 1a:6c:66:69:6d:d2:88:55:7d:5c:62:d5:09:2f:25: a5:b0:e6:6e:7f:d7:55:4c:69:cf:62:86:79:e6:9a: 56:41:49:71:47:be:2d:6c:83:a7:0e:00:7a:09:25: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4E:E3:3C:3F:CD:35:77:F9:11:F4:6A:25:29:9F:BB:BA:02:8D:20 X509v3 Authority Key Identifier: keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fb:7d:c2:c0:c4:fd:b2:5a:fa:12:4d:9d:58:2f:8c:ad:1a: cd:fa:f7:46:64:44:c0:22:eb:fc:6e:4f:07:41:4b:94:c7:48: 5d:43:99:b7:98:29:93:c6:38:a7:cf:30:92:eb:f3:25:9a:9b: 93:2e:1e:bb:55:18:8f:ef:01:6e:73:09:43:7c:b6:ad:60:42: c0:24:80:c2:1c:d1:34:2a:eb:24:66:3a:b0:70:d8:f4:00:ae: 63:d2:e3:38:62:9e:51:47:ae:e5:d7:3f:ce:8d:d1:f1:cd:98: 97:95:02:c6:32:a0:23:a9:af:1f:76:93:54:68:ab:95:24:43: 72:26:67:83:22:33:44:7c:4d:30:16:7b:e6:26:c9:e6:f3:eb: d9:e0:c6:ee:8f:82:d8:10:fa:7a:c2:48:40:3d:46:b2:7e:e6: 03:dc:df:e5:67:68:7a:ba:16:70:ea:55:7b:d9:0d:e4:c0:52: d8:82:1b:32:e2:d2:37:f1:82:c6:ce:ad:6c:2b:23:10:d9:1b: e1:ab:f1:f2:0d:2c:d4:dc:d2:c2:95:89:f4:b5:70:a1:ff:7a: 85:67:79:77:1a:59:01:43:c6:d9:70:a1:35:49:68:64:32:f7: 9b:79:4a:ee:56:ef:32:a9:81:56:11:6d:6e:52:6d:3c:f8:1d: 75:af:47:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzMDQxMTAvBgNVBAUTKEFEMjcwRkRFOTlCMUYxMDY5REFCOEVGN0E1NzZBQTJD MkFGMkM2RjAwHhcNMjUwNDI4MTQ0NjExWhcNMjUwNTA1MTQ0NjExWjAYMRYwFAYD VQQDEw02ODBmOTRiNC04ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRZhfl26mLbVnq+FFM7RYAPem8S/StnwP79yuTI331suDA51dRuSyOswLV2n 6JhFU/q4HTaJOkIRt/oBOWiUbQX8h0eW+wbb5gOTo1jhYPdTzNeVTDVYD95VpixF Su3FW02bakFyiZIX2GteQkQoD2Ux5ZTqrOfQbdPQyuDhgkzeyoQUqCTf2/D9o8fh e23mGfnF0ZfwexwrF06istcaLSZ8m3CEZzoWyZpDxCwWiQpBIVAU8oPmlNJkkuLv 03dXOH1Bfdm//g6ICL+zv43lTBwabGZpbdKIVX1cYtUJLyWlsOZuf9dVTGnPYoZ5 5ppWQUlxR74tbIOnDgB6CSXt5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1O4zw/ zTV3+RH0aiUpn7u6Ao0gMB8GA1UdIwQYMBaAFK0nD96ZsfEGnauO96V2qiwq8sbw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDMwNC85RUY0MTEzMDFE OEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhRYWRxNDczcFhhcUxDcnl4 dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JTY1AzcG14OFFhZHE0NzNwWGFxTENyeXh2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDMwNC85RUY0MTEzMDFEOEUxMUUyQjE4MjI2RUQwOEIwMkNEMi9yU2NQM3BteDhR YWRxNDczcFhhcUxDcnl4dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7+33CwMT9slr6Ek2dWC+MrRrN+vdGZETAIuv8bk8HQUuUx0hdQ5m3 mCmTxjinzzCS6/MlmpuTLh67VRiP7wFucwlDfLatYELAJIDCHNE0KuskZjqwcNj0 AK5j0uM4Yp5RR67l1z/OjdHxzZiXlQLGMqAjqa8fdpNUaKuVJENyJmeDIjNEfE0w FnvmJsnm8+vZ4Mbuj4LYEPp6wkhAPUayfuYD3N/lZ2h6uhZw6lV72Q3kwFLYghsy 4tI38YLGzq1sKyMQ2Rvhq/HyDSzU3NLClYn0tXCh/3qFZ3l3GlkBQ8bZcKE1SWhk MvebeUruVu8yqYFWEW1uUm08+B11r0fT -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:10 2025 by rpki-client on console.sobornost.net