$ rpki-client -vvf rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft File: GH7u6irWB7ylQi0JLdrMGZCPL9c.mft (raw, json) Hash identifier: ew0j8MCpgHT49q5/s1+C/Px+OBQq8OPm2wtOd8ze9cM= Subject key identifier: 90:E2:72:45:9B:5B:20:22:03:C6:C1:FF:D6:B7:F8:3B:93:66:EB:30 Authority key identifier: 18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 Certificate issuer: /CN=A91767B4/serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft Manifest number: 01C3 Signing time: Sun 27 Apr 2025 02:01:37 +0000 Manifest this update: Sun 27 Apr 2025 02:01:36 +0000 Manifest next update: Sun 04 May 2025 02:01:36 +0000 Files and hashes: 1: GH7u6irWB7ylQi0JLdrMGZCPL9c.crl (hash: 0wRn+JPHWhzqKaisWdkDoP+or2dE8PT8lNvhL4ioz2w=) 2: 57C505EA708411EDA8B14246C4F9AE02.roa (hash: YPKVhjI0QOxJDGKIkbhIcG0QRVYBhpe0iKALRG6i8e4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91767B4, serialNumber=187EEEEA2AD607BCA5422D092DDACC19908F2FD7 Validity Not Before: Apr 27 02:01:36 2025 GMT Not After : May 4 02:01:36 2025 GMT Subject: CN=680d9001-eb62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:40:d9:91:f8:9f:df:25:48:79:36:94:61: be:60:cb:f4:18:01:f8:66:98:4d:6b:fb:aa:ab:45: c9:9f:fb:45:fb:94:af:6d:92:2a:bd:f8:04:23:46: 24:c1:3f:b9:34:82:e6:1d:97:30:5a:88:91:b7:d1: 92:9c:45:b3:24:89:7d:a5:9c:d7:8a:9e:38:11:36: 14:89:6b:49:aa:bb:6f:16:e5:77:88:dd:62:ad:6a: 3a:11:b8:e0:b5:78:e3:ed:41:7e:41:80:2f:c2:a4: 07:fe:0d:b3:ca:c5:a0:9b:c5:80:59:a5:74:bf:5f: f8:fb:2f:86:b2:ab:2a:76:a7:42:b8:72:98:9f:65: 1a:0a:be:94:21:1c:81:00:a9:9c:a2:c9:30:91:61: d9:32:58:66:92:5d:e4:f2:86:aa:d5:4d:8b:10:a4: 89:1c:fb:d8:c4:0a:66:91:3d:15:e5:c0:74:43:39: 59:93:18:f4:ea:b8:7a:e9:2e:b1:81:81:e6:e7:59: 55:c4:d6:c5:ce:cc:c6:40:69:3a:52:16:29:da:2f: a8:60:8a:66:02:57:cf:2b:d9:9c:39:2f:1e:1d:f4: 96:a9:85:d2:00:56:2a:eb:32:f7:89:20:40:92:86: c8:8b:be:c2:d4:d4:c4:03:0e:41:60:99:45:1f:c0: 50:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E2:72:45:9B:5B:20:22:03:C6:C1:FF:D6:B7:F8:3B:93:66:EB:30 X509v3 Authority Key Identifier: keyid:18:7E:EE:EA:2A:D6:07:BC:A5:42:2D:09:2D:DA:CC:19:90:8F:2F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GH7u6irWB7ylQi0JLdrMGZCPL9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91767B4/8026F394708011ED9E4C6A2DC4F9AE02/GH7u6irWB7ylQi0JLdrMGZCPL9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6c:fb:77:57:65:e0:e1:3f:6c:d3:93:ba:78:00:3a:f6:a1: 0b:da:eb:74:91:24:b2:ce:12:57:8a:5c:55:d0:ab:e8:17:69: 7e:ff:e5:7f:10:87:66:c2:48:cc:b3:ac:28:60:1e:80:03:80: f0:c4:cb:03:a4:21:d8:8b:c3:c4:9b:10:99:b2:78:01:58:de: bc:56:18:24:23:cb:2b:75:df:a8:5f:4c:ed:3d:5c:82:8b:11: 7c:b3:84:71:79:56:a7:75:31:66:ea:fd:af:f6:99:bb:4b:8d: 49:74:72:5f:ac:fd:12:01:e2:b2:41:82:fb:eb:4f:9f:a0:63: 00:8f:9c:58:8f:bc:e6:bd:b5:d6:3d:5e:72:da:c9:a9:0c:dd: 0d:32:16:d6:bb:71:97:a9:7b:e3:22:d3:5a:84:e4:db:d2:af: da:d3:42:fd:82:03:70:e1:2c:9c:44:18:44:d4:ff:87:de:95: 12:9f:1a:c2:e9:be:95:b6:1d:25:34:50:3e:85:b5:6f:58:97: 55:9c:05:e3:d1:06:f6:bc:23:77:09:d3:9d:44:88:e2:33:a5: 98:33:3d:b9:89:f5:d6:bb:0c:cb:4a:6e:37:e1:54:0a:15:f3: 36:40:30:a7:f5:7b:84:e6:65:6a:06:58:fd:19:e0:68:36:7f: c7:9d:b4:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY3QjQxMTAvBgNVBAUTKDE4N0VFRUVBMkFENjA3QkNBNTQyMkQwOTJEREFDQzE5 OTA4RjJGRDcwHhcNMjUwNDI3MDIwMTM2WhcNMjUwNTA0MDIwMTM2WjAYMRYwFAYD VQQDEw02ODBkOTAwMS1lYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhhA2ZH4n98lSHk2lGG+YMv0GAH4ZphNa/uqq0XJn/tF+5SvbZIqvfgEI0Yk wT+5NILmHZcwWoiRt9GSnEWzJIl9pZzXip44ETYUiWtJqrtvFuV3iN1irWo6Ebjg tXjj7UF+QYAvwqQH/g2zysWgm8WAWaV0v1/4+y+GsqsqdqdCuHKYn2UaCr6UIRyB AKmcoskwkWHZMlhmkl3k8oaq1U2LEKSJHPvYxApmkT0V5cB0QzlZkxj06rh66S6x gYHm51lVxNbFzszGQGk6UhYp2i+oYIpmAlfPK9mcOS8eHfSWqYXSAFYq6zL3iSBA kobIi77C1NTEAw5BYJlFH8BQXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDickWb WyAiA8bB/9a3+DuTZuswMB8GA1UdIwQYMBaAFBh+7uoq1ge8pUItCS3azBmQjy/X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjdCNC84MDI2RjM5NDcw ODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3eWxRaTBKTGRyTUdaQ1BM OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIN3U2aXJXQjd5bFFpMEpMZHJNR1pDUEw5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjdCNC84MDI2RjM5NDcwODAxMUVEOUU0QzZBMkRDNEY5QUUwMi9HSDd1NmlyV0I3 eWxRaTBKTGRyTUdaQ1BMOWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsbPt3V2Xg4T9s05O6eAA69qEL2ut0kSSyzhJXilxV0KvoF2l+/+V/ EIdmwkjMs6woYB6AA4DwxMsDpCHYi8PEmxCZsngBWN68VhgkI8srdd+oX0ztPVyC ixF8s4RxeVandTFm6v2v9pm7S41JdHJfrP0SAeKyQYL760+foGMAj5xYj7zmvbXW PV5y2smpDN0NMhbWu3GXqXvjItNahOTb0q/a00L9ggNw4SycRBhE1P+H3pUSnxrC 6b6Vth0lNFA+hbVvWJdVnAXj0Qb2vCN3CdOdRIjiM6WYMz25ifXWuwzLSm434VQK FfM2QDCn9XuE5mVqBlj9GeBoNn/HnbT/ -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:08 2025 by rpki-client on console.sobornost.net