$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft File: DGlwyrnfjpvRDhw-kYkaCafojCA.mft (raw, json) Hash identifier: Qq4dhrLbFdZLY5Cn3kwle/8FptrzncaYyujTNfanLJM= Subject key identifier: C1:A3:3F:9F:0C:46:91:CB:8E:2F:42:C0:6B:BC:4C:BA:91:DD:1F:E7 Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 Certificate issuer: /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft Manifest number: 3E Signing time: Sun 27 Apr 2025 05:27:58 +0000 Manifest this update: Sun 27 Apr 2025 05:27:57 +0000 Manifest next update: Sun 04 May 2025 05:27:57 +0000 Files and hashes: 1: DGlwyrnfjpvRDhw-kYkaCafojCA.crl (hash: QFMVM7s4oDoS/nnZQviLsf7kLtxLAGM3a1aNJHzx8tc=) 2: D1C1AFB2135511F0976BA50CC4F9AE02.roa (hash: 4UcuR0Va16pIipTBZBi5kSdFR7fOLDQRz2cgCZTL1W0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20 Validity Not Before: Apr 27 05:27:57 2025 GMT Not After : May 4 05:27:57 2025 GMT Subject: CN=680dc05e-cddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:1c:b3:d5:60:6a:40:4b:bc:fc:66:47:45: 19:7c:92:5f:c4:a0:92:3c:5b:0a:16:c5:32:49:ae: 91:8e:99:c3:b3:b9:af:63:48:95:62:68:d4:ab:6c: e1:1a:db:bd:ae:20:82:66:92:d5:06:4f:6f:8a:6d: 06:f0:fd:d8:f2:21:c0:9e:ea:2d:9f:b7:25:57:84: b7:bb:80:93:36:47:6b:eb:b2:a4:ae:9f:d2:8a:d9: dd:83:4e:27:5d:8a:d5:21:e6:9a:ea:c2:a1:d9:62: e9:3e:86:5d:d9:5a:cd:69:7d:9e:59:89:f0:d4:99: e2:46:37:7c:ff:9a:5b:3c:7d:23:ed:30:29:b7:fb: c8:92:f7:26:71:d2:ed:8d:8e:ce:4c:a1:88:5d:41: ec:36:65:cf:83:8f:63:1f:19:2e:06:5b:0a:c6:a6: d6:03:47:0d:06:f8:03:0d:32:34:7a:e5:2e:e3:17: f8:cd:f5:1b:83:9b:b8:91:29:75:42:9e:8b:1c:58: 41:81:c8:3f:4b:ed:fc:8b:54:fa:8e:01:7f:b0:d0: a9:03:13:57:1d:7d:12:c7:fa:1f:bb:97:aa:9d:5b: ae:e4:f0:23:4d:44:e9:9d:d5:10:59:4a:77:c3:ed: c0:9e:38:40:f5:08:60:85:14:e5:eb:8a:88:a0:18: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A3:3F:9F:0C:46:91:CB:8E:2F:42:C0:6B:BC:4C:BA:91:DD:1F:E7 X509v3 Authority Key Identifier: keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:b8:09:b6:22:bc:04:97:cc:18:1a:ae:b2:dc:76:13:39:3b: 1e:b2:c7:20:29:e9:f6:6f:fa:8d:c4:f3:39:78:16:34:c6:79: 95:5d:bb:8a:dc:3a:a3:aa:35:0f:01:38:71:5b:56:3c:9d:74: 00:eb:ca:12:f4:e0:38:b7:e3:f0:12:0d:86:14:cf:3e:15:ce: bb:5e:b8:3f:3d:a3:b4:d5:44:b8:ee:d8:d7:5a:8a:d1:c7:bd: 9c:08:a1:26:d5:64:27:a7:cd:ec:e0:4f:f5:44:39:31:84:c1: 17:dc:6e:72:b5:19:24:cb:39:39:33:d9:5c:f6:09:7b:0b:bd: 1a:b0:14:d7:b6:71:e1:94:c3:f0:21:ac:a5:ac:bb:1b:c9:82: 4c:25:bd:df:55:c0:bf:db:4d:24:4d:d9:42:2c:45:b0:2b:d4: 6c:b8:fc:a5:6e:95:4d:30:72:53:08:28:17:06:8f:fc:4a:31: 8a:0d:24:32:9f:a1:73:41:8c:35:4a:55:c2:ba:cb:86:e6:f0: a9:e3:20:a3:e8:33:fe:3e:3f:36:e2:84:c5:39:f5:73:6c:56: 5e:bf:de:9e:c2:9a:eb:9e:9c:cd:2d:2e:cd:eb:28:d1:d2:08: df:cf:19:fd:52:ae:e8:a9:67:28:8b:8e:74:b2:a4:e8:ee:25: 44:9d:14:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTY3MjExMC8GA1UEBRMoMEM2OTcwQ0FCOURGOEU5QkQxMEUxQzNFOTE4OTFBMDlB N0U4OEMyMDAeFw0yNTA0MjcwNTI3NTdaFw0yNTA1MDQwNTI3NTdaMBgxFjAUBgNV BAMTDTY4MGRjMDVlLWNkZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmTxyz1WBqQEu8/GZHRRl8kl/EoJI8WwoWxTJJrpGOmcOzua9jSJViaNSrbOEa 272uIIJmktUGT2+KbQbw/djyIcCe6i2ftyVXhLe7gJM2R2vrsqSun9KK2d2DTidd itUh5prqwqHZYuk+hl3ZWs1pfZ5ZifDUmeJGN3z/mls8fSPtMCm3+8iS9yZx0u2N js5MoYhdQew2Zc+Dj2MfGS4GWwrGptYDRw0G+AMNMjR65S7jF/jN9RuDm7iRKXVC noscWEGByD9L7fyLVPqOAX+w0KkDE1cdfRLH+h+7l6qdW67k8CNNROmd1RBZSnfD 7cCeOED1CGCFFOXrioigGDVLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwaM/nwxG kcuOL0LAa7xMupHdH+cwHwYDVR0jBBgwFoAUDGlwyrnfjpvRDhw+kYkaCafojCAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5NjcyLzg4QURDQTk4Q0JF RjExRUY5MTY1QzI0NkM0RjlBRTAyL0RHbHd5cm5manB2UkRody1rWWthQ2Fmb2pD QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvREdsd3lybmZqcHZSRGh3LWtZa2FDYWZvakNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 NjcyLzg4QURDQTk4Q0JFRjExRUY5MTY1QzI0NkM0RjlBRTAyL0RHbHd5cm5manB2 UkRody1rWWthQ2Fmb2pDQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEW4CbYivASXzBgarrLcdhM5Ox6yxyAp6fZv+o3E8zl4FjTGeZVdu4rc OqOqNQ8BOHFbVjyddADryhL04Di34/ASDYYUzz4VzrteuD89o7TVRLju2NdaitHH vZwIoSbVZCenzezgT/VEOTGEwRfcbnK1GSTLOTkz2Vz2CXsLvRqwFNe2ceGUw/Ah rKWsuxvJgkwlvd9VwL/bTSRN2UIsRbAr1Gy4/KVulU0wclMIKBcGj/xKMYoNJDKf oXNBjDVKVcK6y4bm8KnjIKPoM/4+PzbihMU59XNsVl6/3p7CmuuenM0tLs3rKNHS CN/PGf1SruipZyiLjnSypOjuJUSdFAk= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net