$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: XxInUT0uARhU0gNxWogTOkPTFM1vUSZiwFRFwr2A8uI= Subject key identifier: 79:15:1D:DD:13:23:C1:22:E4:37:6B:94:7D:08:43:D1:F9:A6:30:5E Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 64 Signing time: Sun 27 Apr 2025 05:51:11 +0000 Manifest this update: Sun 27 Apr 2025 05:51:11 +0000 Manifest next update: Sun 04 May 2025 05:51:11 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: vjSeYFrTSOW59xh+DBZljhJXuxH2KaHpW/yNL+TTQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Apr 27 05:51:11 2025 GMT Not After : May 4 05:51:11 2025 GMT Subject: CN=680dc5cf-10f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:ca:54:f0:06:f5:16:ea:9c:86:13:76:73: 67:21:c8:32:55:6b:56:f1:c2:9f:4d:62:65:16:ea: b6:74:67:13:8b:22:ea:39:24:e2:df:0b:f8:11:f8: c6:02:26:76:64:8a:34:62:3a:83:4c:41:5a:c0:61: b1:da:0f:f3:4b:34:d9:3b:17:a7:9d:56:3d:f8:5f: 2e:d9:5c:59:2e:85:2e:53:53:8e:b3:35:cf:28:8c: 97:1b:ad:f2:1b:86:f3:6e:db:ab:cc:c2:4b:b0:b0: c5:42:99:45:af:dc:d0:f9:0d:8c:d9:d8:cb:e0:dd: e1:cb:52:58:d3:8a:dd:c0:d4:c8:b2:74:b0:54:79: 3e:81:96:2c:ee:c1:1e:13:59:4d:45:96:27:f9:41: 36:fa:61:d5:9b:0e:0e:8f:f9:cc:35:46:ae:ff:e3: 7f:96:7b:77:d3:d0:a5:34:15:ef:6a:d0:a4:bd:cc: 64:85:0d:21:b3:f8:76:43:38:3d:96:4c:9f:d7:bc: 44:39:b8:9b:85:ef:90:94:a3:ea:ee:2e:8b:41:bd: e8:e3:90:96:68:cc:d1:9d:54:f1:cd:9d:24:5c:ce: ea:74:70:e3:1f:4c:86:01:4b:f6:f0:2e:05:fc:04: af:84:7f:74:dc:c6:65:97:78:4e:e8:48:2f:6a:84: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:1D:DD:13:23:C1:22:E4:37:6B:94:7D:08:43:D1:F9:A6:30:5E X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8f:e2:b0:66:d6:26:32:b9:a6:f4:1a:76:ef:0c:7c:58:21: 4b:d7:bb:98:9f:d9:30:7f:37:66:fc:4d:d9:ab:ae:90:6c:19: 98:d8:b0:50:ef:f9:98:25:de:51:5e:67:89:56:e5:61:f7:7c: 53:5d:5d:b8:ab:4b:16:0d:00:c1:50:69:ef:0d:6f:32:f4:d4: 61:0c:ed:52:7d:99:e5:f7:e0:ff:98:6c:ff:67:73:bb:6f:35: c5:fa:e3:0e:ac:51:c8:6e:89:af:ba:6c:4c:9c:2d:71:a4:48: 37:1c:5f:77:01:df:52:be:8e:9f:04:8a:8d:45:8a:09:7b:91: e0:a5:07:f1:5c:f1:30:f9:f7:48:15:7d:c1:7a:6f:0f:63:04: fb:b0:f8:f7:06:04:58:7b:27:68:ea:d9:e8:88:6c:0c:b6:e7: 77:58:54:96:be:bb:d3:2f:fa:1a:6f:38:69:3a:27:74:dd:6a: 80:5c:16:f7:30:d5:fd:ed:05:4f:d4:6c:73:2c:4d:7a:93:99: dd:d7:01:26:82:86:e8:ed:3a:df:df:02:eb:b9:99:e4:2c:09: 35:d3:45:f3:09:d8:c8:05:96:8b:2b:2d:88:b4:ea:d9:64:0b: a5:80:06:be:6e:17:0c:94:b2:4f:eb:ee:06:0a:57:da:0d:64: 54:2a:8f:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoNzI3MEYzNDI5OUEyMUVBNUIwQzc2RUQzRDdFQjJFMDdC QjY3MjNGNzAeFw0yNTA0MjcwNTUxMTFaFw0yNTA1MDQwNTUxMTFaMBgxFjAUBgNV BAMTDTY4MGRjNWNmLTEwZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC69MpU8Ab1FuqchhN2c2chyDJVa1bxwp9NYmUW6rZ0ZxOLIuo5JOLfC/gR+MYC JnZkijRiOoNMQVrAYbHaD/NLNNk7F6edVj34Xy7ZXFkuhS5TU46zNc8ojJcbrfIb hvNu26vMwkuwsMVCmUWv3ND5DYzZ2Mvg3eHLUljTit3A1MiydLBUeT6BlizuwR4T WU1Flif5QTb6YdWbDg6P+cw1Rq7/43+We3fT0KU0Fe9q0KS9zGSFDSGz+HZDOD2W TJ/XvEQ5uJuF75CUo+ruLotBvejjkJZozNGdVPHNnSRczup0cOMfTIYBS/bwLgX8 BK+Ef3TcxmWXeE7oSC9qhC0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeRUd3RMj wSLkN2uUfQhD0fmmMF4wHwYDVR0jBBgwFoAUcnDzQpmiHqWwx27T1+suB7tnI/cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0FFMDI4MDU2OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklf Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25EelFwbWlIcVd3eDI3VDEtc3VCN3RuSV9jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0FFMDI4MDU2OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2NuRHpRcG1pSHFX d3gyN1QxLXN1Qjd0bklfYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACCP4rBm1iYyuab0GnbvDHxYIUvXu5if2TB/N2b8TdmrrpBsGZjYsFDv +Zgl3lFeZ4lW5WH3fFNdXbirSxYNAMFQae8NbzL01GEM7VJ9meX34P+YbP9nc7tv NcX64w6sUchuia+6bEycLXGkSDccX3cB31K+jp8Eio1Figl7keClB/Fc8TD590gV fcF6bw9jBPuw+PcGBFh7J2jq2eiIbAy253dYVJa+u9Mv+hpvOGk6J3TdaoBcFvcw 1f3tBU/UbHMsTXqTmd3XASaChujtOt/fAuu5meQsCTXTRfMJ2MgFlosrLYi06tlk C6WABr5uFwyUsk/r7gYKV9oNZFQqjwg= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net