$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft File: h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft (raw, json) Hash identifier: 8RytMYhRcy7Hr3Pp64RVZTgtAEAibOGAoiFetAVHux8= Subject key identifier: A1:8F:C7:59:37:99:5B:DA:90:75:CB:13:12:1D:30:46:61:DE:9F:BB Authority key identifier: 87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 Certificate issuer: /CN=A9174880/serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Certificate serial: 347E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft Manifest number: 347E Signing time: Mon 28 Apr 2025 14:16:46 +0000 Manifest this update: Mon 28 Apr 2025 14:16:45 +0000 Manifest next update: Mon 05 May 2025 14:16:45 +0000 Files and hashes: 1: h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl (hash: tFXrRyzHKndgXlME4RjDSecK4fuTwKJ1f8QcQKvuzT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13438 (0x347e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=879062503FD208466F74EA9AF87670A87D86A736 Validity Not Before: Apr 28 14:16:45 2025 GMT Not After : May 5 14:16:45 2025 GMT Subject: CN=680f8dce-ba5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:2b:3b:77:f7:3f:4f:ea:9c:bb:ca:99:56: 05:b2:ad:97:11:0e:e6:01:f7:89:c4:3b:08:87:36: 8d:21:f5:d2:89:22:cd:c2:9c:20:b5:0f:1b:a9:6f: 34:f2:66:de:09:d9:fb:66:a6:f0:f7:ad:4d:52:aa: 39:4c:70:10:ce:bc:b8:3f:89:42:cd:6a:55:f7:4a: 58:6b:18:82:1b:53:cd:a7:60:6b:19:fe:1f:ce:d3: ec:07:fb:9a:01:ff:b1:ad:cd:21:7c:df:41:93:2c: 5a:9f:5b:d3:62:99:ae:ec:35:e7:13:24:14:4e:2c: ec:1c:a3:bf:93:c4:26:91:01:bb:c6:3c:60:38:3a: 64:bb:bd:57:99:3f:a4:2f:03:74:68:e7:ff:b9:b4: 9b:49:fd:1c:f2:8c:be:f1:74:bf:4f:76:c7:14:a0: 5a:a8:66:f9:03:9f:b2:ed:6e:e9:b7:2d:1a:ce:d0: 89:dc:0b:1b:17:f3:a2:59:69:c5:ef:00:e9:26:b8: 7b:82:03:35:a5:36:87:17:3f:fd:36:e4:91:3d:7f: 97:70:e0:5a:7a:aa:4b:cf:ee:b1:9d:4f:03:26:72: ce:76:8e:13:5e:65:b2:60:11:e8:8d:a5:7e:de:e0: 05:ae:92:1a:06:b4:d6:27:8e:4f:5c:66:a4:34:75: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:C7:59:37:99:5B:DA:90:75:CB:13:12:1D:30:46:61:DE:9F:BB X509v3 Authority Key Identifier: keyid:87:90:62:50:3F:D2:08:46:6F:74:EA:9A:F8:76:70:A8:7D:86:A7:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/846EC0401D6A11E2BB7014A808B02CD2/h5BiUD_SCEZvdOqa-HZwqH2GpzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:e3:3a:e8:81:cc:7b:6e:b7:07:bf:8a:90:fb:80:6c:4a: ab:e0:4a:ff:75:20:30:88:3f:dc:4d:69:4a:ce:04:7f:ec:87: 6d:ab:a0:04:b0:e1:86:ae:ce:85:37:38:0b:93:2a:f2:0d:1b: 5c:2c:29:40:ac:a9:e2:dc:0a:87:06:f0:9e:0c:b6:64:de:4e: 81:e4:5f:ef:07:0d:22:01:16:c9:1c:22:27:64:63:61:60:52: 03:cc:2a:69:9b:39:2c:88:09:e4:d5:60:05:b2:63:44:17:34: 40:ab:cd:8f:ee:04:93:3e:96:aa:a9:fe:e6:d1:cf:63:c7:5d: d2:0f:04:69:f6:d6:e2:2b:0c:b8:1c:3f:b0:f3:5f:3f:c3:b6: 95:cf:af:3a:78:31:bf:57:34:e5:87:60:1f:5a:7c:6c:58:1a: 32:a0:73:a9:3d:66:fc:d4:47:66:83:1c:7b:2b:11:db:a9:db: 5c:4b:ed:00:b9:4b:f7:18:4d:8c:66:4c:fe:2f:20:21:9e:ce: e4:50:1d:88:3a:2f:84:a1:f4:40:5b:8b:84:3b:4a:aa:94:1b: ad:fd:20:ea:c6:d7:dc:a6:6f:cb:cf:ac:1c:6e:75:db:ac:10: 50:a1:61:82:51:eb:e9:1b:41:98:87:2b:9b:20:b2:ca:5d:9c: ce:f1:a1:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDg3OTA2MjUwM0ZEMjA4NDY2Rjc0RUE5QUY4NzY3MEE4 N0Q4NkE3MzYwHhcNMjUwNDI4MTQxNjQ1WhcNMjUwNTA1MTQxNjQ1WjAYMRYwFAYD VQQDEw02ODBmOGRjZS1iYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwArO3f3P0/qnLvKmVYFsq2XEQ7mAfeJxDsIhzaNIfXSiSLNwpwgtQ8bqW80 8mbeCdn7Zqbw961NUqo5THAQzry4P4lCzWpV90pYaxiCG1PNp2BrGf4fztPsB/ua Af+xrc0hfN9Bkyxan1vTYpmu7DXnEyQUTizsHKO/k8QmkQG7xjxgODpku71XmT+k LwN0aOf/ubSbSf0c8oy+8XS/T3bHFKBaqGb5A5+y7W7pty0aztCJ3AsbF/OiWWnF 7wDpJrh7ggM1pTaHFz/9NuSRPX+XcOBaeqpLz+6xnU8DJnLOdo4TXmWyYBHojaV+ 3uAFrpIaBrTWJ45PXGakNHWDCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGPx1k3 mVvakHXLExIdMEZh3p+7MB8GA1UdIwQYMBaAFIeQYlA/0ghGb3Tqmvh2cKh9hqc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC84NDZFQzA0MDFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NFWnZkT3FhLUhad3FIMkdw elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2g1QmlVRF9TQ0VadmRPcWEtSFp3cUgyR3B6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC84NDZFQzA0MDFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9oNUJpVURfU0NF WnZkT3FhLUhad3FIMkdwelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoUOM66IHMe263B7+KkPuAbEqr4Er/dSAwiD/cTWlKzgR/7Idtq6AE sOGGrs6FNzgLkyryDRtcLClArKni3AqHBvCeDLZk3k6B5F/vBw0iARbJHCInZGNh YFIDzCppmzksiAnk1WAFsmNEFzRAq82P7gSTPpaqqf7m0c9jx13SDwRp9tbiKwy4 HD+w818/w7aVz686eDG/VzTlh2AfWnxsWBoyoHOpPWb81Edmgxx7KxHbqdtcS+0A uUv3GE2MZkz+LyAhns7kUB2IOi+EofRAW4uEO0qqlBut/SDqxtfcpm/Lz6wcbnXb rBBQoWGCUevpG0GYhyubILLKXZzO8aHv -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:10 2025 by rpki-client on console.sobornost.net