$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft File: gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json) Hash identifier: s2ybwNn74WZ4mkQQJmlRMNR+SJsvZNvKmN7VeUWMhZI= Subject key identifier: D2:E4:99:84:F3:0C:5D:02:5C:B7:09:AC:FE:5A:E0:45:32:6E:92:33 Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A Certificate issuer: /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft Manifest number: 84 Signing time: Sun 27 Apr 2025 05:23:47 +0000 Manifest this update: Sun 27 Apr 2025 05:23:47 +0000 Manifest next update: Sun 04 May 2025 05:23:47 +0000 Files and hashes: 1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: GOlk4CnaGM7W3L792I+TqmhQ+WDAIep3LxQcI+oH+Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A Validity Not Before: Apr 27 05:23:47 2025 GMT Not After : May 4 05:23:47 2025 GMT Subject: CN=680dbf63-cd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:32:b6:eb:fa:31:cd:44:ab:cb:00:61:24: 99:68:5e:5f:f8:a4:67:52:c8:b0:ec:b6:8a:c3:01: c9:c6:cb:d4:8b:21:f7:fe:30:ca:ca:12:1b:37:4c: 13:92:ff:1a:9f:8a:fc:1c:02:2f:b2:50:f0:86:b0: 6a:f0:82:5f:f5:b9:a8:f6:db:fb:16:16:49:d4:27: a8:b8:1d:dc:d6:6b:17:d2:18:fd:29:50:7a:de:76: 06:eb:e3:8a:8a:e7:87:ed:05:4a:3d:b0:96:41:1f: 76:7f:68:81:f2:d0:a5:a9:b3:b9:08:df:7b:27:27: 15:53:14:8c:c9:04:d4:bb:c5:cb:ae:57:a7:34:5a: 02:65:32:23:d9:88:02:8e:17:71:fb:cd:a0:22:3f: 7b:1c:94:9e:07:12:35:97:dc:e2:97:66:20:c9:2c: fa:66:a6:1a:61:62:d6:7d:d8:f7:82:77:3a:0b:a0: c9:9f:5a:c9:20:0e:14:26:91:70:18:5d:75:96:5e: 50:8f:14:8f:a8:b9:99:33:1a:97:77:7e:e8:08:cf: 20:da:9a:22:3b:42:1e:6c:08:b8:ae:50:b3:02:96: 2a:c5:97:0a:ff:44:c2:3a:a5:94:6b:3a:19:9f:ca: db:0f:1c:66:68:de:a4:23:df:1f:e4:91:ce:89:78: f6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E4:99:84:F3:0C:5D:02:5C:B7:09:AC:FE:5A:E0:45:32:6E:92:33 X509v3 Authority Key Identifier: keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a3:64:ee:73:0d:16:ae:d5:51:04:a5:3b:0b:d6:63:ba:1a: b9:70:da:82:05:87:d4:f0:c8:4c:b2:d7:c6:a3:2a:f9:96:a3: 78:8a:bd:4b:48:36:fb:9c:a0:c5:8c:14:c5:fa:3a:5f:b0:e0: 0f:a6:f0:e3:d4:00:62:3b:1e:99:0d:36:2b:ea:d3:55:d4:6d: 48:a6:f9:3d:b6:3e:8d:35:6e:73:01:d3:eb:b2:f9:58:1b:81: 65:fb:df:65:12:ea:5c:6f:51:ec:ca:f0:8d:e3:ed:dd:08:e3: 4e:91:d7:49:67:f2:ba:0f:d9:8f:18:2d:f1:af:ce:aa:d8:04: 4c:05:5d:2a:43:de:1a:d5:19:25:0d:c5:c7:0a:00:4e:ef:33: 95:54:14:2b:6a:c7:7c:ac:4f:3b:f3:51:56:15:ab:87:c5:6c: 3d:b6:07:df:0e:b0:f9:50:de:de:95:87:19:8b:a6:90:ad:d5: ab:e3:2c:95:84:79:45:52:72:c4:4d:c6:6f:c5:fa:6c:79:14: 77:11:d7:68:3d:ae:1e:9b:5b:d4:58:78:09:68:7e:f9:94:6b: 59:b9:e6:c8:26:cf:07:50:e4:3c:fe:9b:c7:22:9b:b3:d6:42: 62:2b:3a:27:7d:67:f8:44:43:b7:af:28:03:d1:45:45:76:53: 5f:97:08:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDgzMUE4OTEzNkRFMTI3QTAwQTY5RDNFMDZGRDBEMzcx N0Y3Q0U5OUEwHhcNMjUwNDI3MDUyMzQ3WhcNMjUwNTA0MDUyMzQ3WjAYMRYwFAYD VQQDEw02ODBkYmY2My1jZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPUytuv6Mc1Eq8sAYSSZaF5f+KRnUsiw7LaKwwHJxsvUiyH3/jDKyhIbN0wT kv8an4r8HAIvslDwhrBq8IJf9bmo9tv7FhZJ1CeouB3c1msX0hj9KVB63nYG6+OK iueH7QVKPbCWQR92f2iB8tClqbO5CN97JycVUxSMyQTUu8XLrlenNFoCZTIj2YgC jhdx+82gIj97HJSeBxI1l9zil2YgySz6ZqYaYWLWfdj3gnc6C6DJn1rJIA4UJpFw GF11ll5QjxSPqLmZMxqXd37oCM8g2poiO0IebAi4rlCzApYqxZcK/0TCOqWUazoZ n8rbDxxmaN6kI98f5JHOiXj2dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLkmYTz DF0CXLcJrP5a4EUybpIzMB8GA1UdIwQYMBaAFIMaiRNt4SegCmnT4G/Q03F/fOma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GRDNFMzg5RTVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2QUthZFBnYjlEVGNYOTg2 Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GRDNFMzg5RTVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2 QUthZFBnYjlEVGNYOTg2Wm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDo2Tucw0WrtVRBKU7C9Zjuhq5cNqCBYfU8MhMstfGoyr5lqN4ir1L SDb7nKDFjBTF+jpfsOAPpvDj1ABiOx6ZDTYr6tNV1G1Ipvk9tj6NNW5zAdPrsvlY G4Fl+99lEupcb1HsyvCN4+3dCONOkddJZ/K6D9mPGC3xr86q2ARMBV0qQ94a1Rkl DcXHCgBO7zOVVBQrasd8rE8781FWFauHxWw9tgffDrD5UN7elYcZi6aQrdWr4yyV hHlFUnLETcZvxfpseRR3EddoPa4em1vUWHgJaH75lGtZuebIJs8HUOQ8/pvHIpuz 1kJiKzonfWf4REO3rygD0UVFdlNflwgt -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net