$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json) Hash identifier: PDzULpYNhReeLoZZGv/UPXDeZwP9+XZQOSamE/TwPAE= Subject key identifier: 3E:AA:E0:F9:33:A7:83:0C:7F:65:7C:72:9D:20:2C:C7:AE:1D:8A:53 Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft Manifest number: 93 Signing time: Sun 27 Apr 2025 05:16:11 +0000 Manifest this update: Sun 27 Apr 2025 05:16:11 +0000 Manifest next update: Sun 04 May 2025 05:16:11 +0000 Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: OMPkn/BeTQL/77QzoGQ79L751DIKq74ulZ215bZi8VI=) 2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: 6KE/6WiXMHutimLQnkuyk/FwzPL7cpRiOFuQR2vWv2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3 Validity Not Before: Apr 27 05:16:11 2025 GMT Not After : May 4 05:16:11 2025 GMT Subject: CN=680dbd9b-bb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:cb:57:f9:06:0c:7a:06:14:4e:90:51:a8: 6d:88:df:4b:b3:6b:a8:95:a6:44:c0:c0:b3:22:6e: 03:8d:6b:9a:10:7c:91:3a:47:14:71:96:83:af:26: fb:ac:97:0c:c9:2e:8e:9d:c4:75:a0:69:cf:49:92: 26:94:ea:0c:37:ca:0d:67:91:23:de:ad:df:d9:56: 6f:bf:ca:5b:3d:18:70:ae:28:a5:4a:19:91:53:1f: 8c:56:35:bb:a3:53:60:20:c3:99:6a:23:8e:aa:ea: ff:bf:4d:b3:f9:8a:9e:b0:17:b8:2f:f6:41:7c:06: 93:1a:91:9d:2d:7c:d7:cc:1c:16:37:10:fa:ac:5f: 18:fa:8f:85:4d:d3:35:2f:f3:f0:2b:c5:cc:b4:1e: 9c:b6:26:d2:2c:04:ba:9b:3c:7c:62:ac:bf:36:1b: 1a:11:49:05:6f:23:b8:a7:f9:57:25:80:ad:0e:c9: f9:3e:64:cb:8b:3d:ae:8f:82:ab:4b:03:46:db:7a: 94:e4:6c:04:bb:e8:95:bf:5e:ba:34:da:97:4a:be: ef:9c:91:55:9b:d1:b6:c9:43:4b:f7:7e:fd:f3:66: 27:cf:68:36:a1:d2:34:b4:39:37:07:65:ad:53:d4: 88:2d:55:a7:08:e4:e5:38:4d:77:8f:79:b5:85:a3: 5b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AA:E0:F9:33:A7:83:0C:7F:65:7C:72:9D:20:2C:C7:AE:1D:8A:53 X509v3 Authority Key Identifier: keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:4a:fc:2a:22:ef:76:27:d1:42:62:e4:7e:49:8e:4b:b0: 7d:84:09:7d:98:95:b4:ad:3e:ea:f2:f9:f8:f0:13:70:bd:62: ba:d0:4e:f4:5b:6f:12:99:71:51:c1:ee:ad:88:a5:dc:4b:51: 2d:68:99:83:ef:2d:f0:7e:df:f0:03:89:33:9c:17:e2:28:4c: e9:86:c8:49:6d:32:8c:40:2c:7f:1e:f8:76:c3:35:32:09:08: e4:3e:31:60:3b:58:3d:fb:ab:94:4b:1c:9e:b9:ca:90:6d:7e: c5:19:e0:fb:65:4b:a2:6a:43:48:63:de:0c:63:b9:73:d7:87: 93:3f:4d:1a:b8:b0:7f:d8:56:cc:2d:1c:c1:68:d2:4f:f8:64: a2:1f:89:f2:93:bd:f8:34:e0:0b:d7:bb:e8:92:f7:1a:7c:b0: f7:bc:0d:ee:74:e2:14:a2:e1:05:75:5c:a8:2c:3c:2a:e0:db: 10:8b:ee:8f:58:70:86:e5:6e:2a:da:9c:9b:44:01:23:c5:7c: d4:b6:de:a4:68:99:eb:cc:cc:6e:a1:68:a4:61:13:a5:08:1e: f2:8d:bf:6b:8a:71:c7:8c:aa:3f:66:81:93:67:4e:ee:bf:39: 4b:e9:4b:6c:18:d7:9b:f3:77:85:3f:61:5b:40:45:60:df:44: c8:9b:26:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCNjUxMTAvBgNVBAUTKDNGMzZEMEM4MDc2RTdBQ0ZBODNEMDRCNzIzMDcxNzJB ODgyOUQ1QjMwHhcNMjUwNDI3MDUxNjExWhcNMjUwNTA0MDUxNjExWjAYMRYwFAYD VQQDEw02ODBkYmQ5Yi1iYjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZDLV/kGDHoGFE6QUahtiN9Ls2uolaZEwMCzIm4DjWuaEHyROkcUcZaDryb7 rJcMyS6OncR1oGnPSZImlOoMN8oNZ5Ej3q3f2VZvv8pbPRhwriilShmRUx+MVjW7 o1NgIMOZaiOOqur/v02z+YqesBe4L/ZBfAaTGpGdLXzXzBwWNxD6rF8Y+o+FTdM1 L/PwK8XMtB6ctibSLAS6mzx8Yqy/NhsaEUkFbyO4p/lXJYCtDsn5PmTLiz2uj4Kr SwNG23qU5GwEu+iVv166NNqXSr7vnJFVm9G2yUNL937982Ynz2g2odI0tDk3B2Wt U9SILVWnCOTlOE13j3m1haNbKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6q4Pkz p4MMf2V8cp0gLMeuHYpTMB8GA1UdIwQYMBaAFD820MgHbnrPqD0EtyMHFyqIKdWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkI2NS8wMTVGNkRFRTQ1 QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVzLW9QUVMzSXdjWEtvZ3Ax Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B6YlF5QWR1ZXMtb1BRUzNJd2NYS29ncDFiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkI2NS8wMTVGNkRFRTQ1QjcxMUVGQTU5RTEzMzJDNEY5QUUwMi9QemJReUFkdWVz LW9QUVMzSXdjWEtvZ3AxYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkvkr8KiLvdifRQmLkfkmOS7B9hAl9mJW0rT7q8vn48BNwvWK60E70 W28SmXFRwe6tiKXcS1EtaJmD7y3wft/wA4kznBfiKEzphshJbTKMQCx/Hvh2wzUy CQjkPjFgO1g9+6uUSxyeucqQbX7FGeD7ZUuiakNIY94MY7lz14eTP00auLB/2FbM LRzBaNJP+GSiH4nyk734NOAL17vokvcafLD3vA3udOIUouEFdVyoLDwq4NsQi+6P WHCG5W4q2pybRAEjxXzUtt6kaJnrzMxuoWikYROlCB7yjb9rinHHjKo/ZoGTZ07u vzlL6UtsGNeb83eFP2FbQEVg30TImyYg -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net