$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft File: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json) Hash identifier: niUBrMpwasJHhC7kih2JLVjnsgEZAyzdNIU4ocx9+E8= Subject key identifier: 21:11:C5:23:2D:1F:4D:70:0B:21:23:86:2D:20:26:5E:A1:91:20:C2 Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 Certificate issuer: /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Certificate serial: 0433 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft Manifest number: 0623 Signing time: Sun 27 Apr 2025 00:00:13 +0000 Manifest this update: Sun 27 Apr 2025 00:00:13 +0000 Manifest next update: Sun 04 May 2025 00:00:13 +0000 Files and hashes: 1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: 56Hf948hlTShdyPiwVUsqWIzfYG5Yu+EhqG8pPkHJFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1075 (0x433) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18 Validity Not Before: Apr 27 00:00:13 2025 GMT Not After : May 4 00:00:13 2025 GMT Subject: CN=680d738d-4f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:03:77:47:1e:a9:58:0c:80:71:4e:55:b4: d7:b6:1d:e2:42:ee:95:2a:2f:17:cd:d0:1b:3f:e1: 09:64:6b:db:1a:6a:0f:d2:10:24:be:31:1a:3e:fb: e0:33:ec:8e:f7:66:47:e0:d4:b3:70:4d:36:0e:8e: f2:d8:8b:b0:5a:8a:5b:4f:d3:29:0e:b5:d9:6c:72: 07:55:aa:74:ed:f2:03:93:5d:45:08:a8:a6:55:ec: e7:c7:11:7d:05:d1:8f:2e:37:5b:14:3a:23:c2:40: 99:d7:5f:eb:1d:ab:2a:70:18:b4:76:96:ed:0b:8b: 35:6e:9f:69:11:84:0c:fc:a0:59:96:35:42:51:55: 04:e0:c7:59:e2:cd:68:77:ba:27:86:2d:d0:07:16: 75:62:b4:ec:67:b3:a9:87:c4:4c:a8:b5:4a:37:6a: d3:11:46:36:15:f3:c9:0f:40:f0:11:6a:4e:07:ca: 7d:28:f0:e4:d1:29:aa:ea:59:b2:18:06:5c:61:a7: 6e:da:15:b1:7a:81:25:88:f4:73:3f:47:43:c5:8e: e9:df:f8:28:16:d5:79:93:da:e5:9e:4d:ca:92:ff: bd:27:29:05:63:5a:09:43:7f:97:7f:87:a8:71:3d: 62:6a:1d:0b:64:f3:eb:2f:a4:b5:0a:1a:6c:98:bf: c5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:C5:23:2D:1F:4D:70:0B:21:23:86:2D:20:26:5E:A1:91:20:C2 X509v3 Authority Key Identifier: keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e8:50:c9:9c:c2:b5:55:45:50:97:1e:d6:51:55:69:e4:d4: 52:27:db:d5:e4:d9:54:18:1a:7f:23:21:73:67:20:74:a8:c1: 10:d2:e2:4b:e1:d2:00:0b:69:70:a8:97:87:b8:36:0f:17:c3: 5a:df:b6:4a:7b:72:ac:44:50:cd:67:3b:ac:4f:de:97:3b:8a: 1c:c3:5e:cf:b1:ed:da:67:f9:cb:b2:93:90:7e:12:40:a5:ac: 8c:97:92:fc:e9:b0:7f:be:5c:ab:4f:54:24:95:5b:f6:0b:17: e5:b9:cb:77:11:f6:3a:1f:5d:f9:5a:53:40:d5:4d:c5:a8:e3: 12:60:34:5d:c3:57:cd:b6:82:75:59:4c:7c:b2:31:94:28:40: 27:f7:c5:1c:15:e7:df:30:24:2d:2d:72:74:b1:c9:c3:b4:a8: 63:43:f6:94:03:1e:6a:68:54:83:e1:1b:ae:7b:4f:90:73:fe: b6:44:cc:fe:35:4d:2e:5d:34:ee:9a:8e:4c:aa:9c:03:a4:94: ad:fa:b3:1b:49:29:d2:14:ec:5e:77:55:a4:c4:d1:42:88:14: 1f:99:6d:02:1b:c3:53:f2:ef:03:b1:4d:df:2a:13:b8:56:f1: 95:90:62:99:86:e4:04:2a:4d:1e:16:04:38:0b:ca:ad:e8:15: 77:23:28:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1N0UxMTAvBgNVBAUTKDNGQzE3MEU4REY1QURCRkExQjYzNzBCNzQ1MEYyOEZB RTBCMzVBMTgwHhcNMjUwNDI3MDAwMDEzWhcNMjUwNTA0MDAwMDEzWjAYMRYwFAYD VQQDEw02ODBkNzM4ZC00ZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR8Dd0ceqVgMgHFOVbTXth3iQu6VKi8XzdAbP+EJZGvbGmoP0hAkvjEaPvvg M+yO92ZH4NSzcE02Do7y2IuwWopbT9MpDrXZbHIHVap07fIDk11FCKimVeznxxF9 BdGPLjdbFDojwkCZ11/rHasqcBi0dpbtC4s1bp9pEYQM/KBZljVCUVUE4MdZ4s1o d7onhi3QBxZ1YrTsZ7Oph8RMqLVKN2rTEUY2FfPJD0DwEWpOB8p9KPDk0Smq6lmy GAZcYadu2hWxeoEliPRzP0dDxY7p3/goFtV5k9rlnk3Kkv+9JykFY1oJQ3+Xf4eo cT1iah0LZPPrL6S1ChpsmL/FkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCERxSMt H01wCyEjhi0gJl6hkSDCMB8GA1UdIwQYMBaAFD/BcOjfWtv6G2Nwt0UPKPrgs1oY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzU3RS82MDJENzZEODVE NzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJfb2JZM0MzUlE4by11Q3pX aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4Rnc2TjlhMl9vYlkzQzNSUThvLXVDeldoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzU3RS82MDJENzZEODVENzMxMUVDQTMyNDg4NTNDNEY5QUUwMi9QOEZ3Nk45YTJf b2JZM0MzUlE4by11Q3pXaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR6FDJnMK1VUVQlx7WUVVp5NRSJ9vV5NlUGBp/IyFzZyB0qMEQ0uJL 4dIAC2lwqJeHuDYPF8Na37ZKe3KsRFDNZzusT96XO4ocw17Pse3aZ/nLspOQfhJA payMl5L86bB/vlyrT1QklVv2Cxfluct3EfY6H135WlNA1U3FqOMSYDRdw1fNtoJ1 WUx8sjGUKEAn98UcFeffMCQtLXJ0scnDtKhjQ/aUAx5qaFSD4Ruue0+Qc/62RMz+ NU0uXTTumo5MqpwDpJSt+rMbSSnSFOxed1WkxNFCiBQfmW0CG8NT8u8DsU3fKhO4 VvGVkGKZhuQEKk0eFgQ4C8qt6BV3IyjE -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net