$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: 961wPbTVYTq7whQTKn2e7R38gxF9KL+R1vlyULGPyKs= Subject key identifier: 8A:9D:60:DA:AE:9A:4F:80:27:FE:30:9C:A1:C3:F6:C9:8B:03:09:AD Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 0957 Signing time: Mon 28 Apr 2025 20:38:45 +0000 Manifest this update: Mon 28 Apr 2025 20:38:44 +0000 Manifest next update: Mon 05 May 2025 20:38:44 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: M3BMvNOwmoHXpyOZDpiYJruPzGNiBrEBUXf5FaE+kOw=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: ofPWMxlhICdSKGTCU/b001ZJjB4sClqS+xTcAblTppI=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: fDW0xK38wNoRy+xNO++3QFj+gKi2Fx9Gapxzp38OmUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Apr 28 20:38:44 2025 GMT Not After : May 5 20:38:44 2025 GMT Subject: CN=680fe754-faf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:1b:0c:a1:a7:52:e6:c2:e0:d5:27:d8:62: 6f:bc:ee:ae:c7:e3:57:c1:7c:bd:34:6a:0b:f7:58: 41:27:7b:aa:c2:b8:09:ca:d0:95:11:77:79:0d:4f: 1b:b2:ee:92:c1:63:c8:14:c7:4d:e8:74:bd:59:49: 47:7c:47:33:83:46:48:d8:a0:27:bb:09:de:c7:32: af:00:ea:c7:7b:74:71:5f:0d:3e:b3:4d:a6:bd:cb: cf:48:ab:cf:e4:09:1e:bf:d2:94:1d:e9:15:6d:61: d2:21:9d:b3:88:d1:5e:de:79:69:f0:70:5a:31:df: 16:ae:de:ae:05:ba:4a:33:44:cf:f9:e0:bc:ac:19: a2:33:d9:73:56:12:68:9f:ad:2e:b5:e8:e2:dd:30: 35:e5:3c:d4:f7:33:f1:c3:d5:86:f3:3d:24:8b:4f: 6e:fc:ac:ec:c6:9d:47:de:7a:76:cc:86:38:44:87: 60:d2:dd:05:53:63:b0:db:4c:4c:17:9a:8d:28:95: 42:0c:ef:f1:71:9b:07:a3:af:4b:ad:51:21:fb:ad: a5:40:c1:17:da:24:a5:34:13:c3:77:07:46:30:4e: 3e:0f:ec:32:2a:e0:de:e3:2e:c0:4b:76:80:de:68: 62:f9:3f:26:b4:3f:68:bd:54:21:53:7c:88:fc:f5: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9D:60:DA:AE:9A:4F:80:27:FE:30:9C:A1:C3:F6:C9:8B:03:09:AD X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:47:21:b2:17:3d:0a:39:ff:66:d5:80:1c:a8:90:bc:99:b5: fe:e4:d9:a4:c5:ab:94:9e:73:c2:ff:ff:11:90:bc:05:d3:65: 65:33:ad:1c:ab:21:f3:59:07:ae:e6:70:8f:fd:2b:6a:7e:3a: 73:b4:6e:97:94:d2:31:ec:0a:f0:c5:0a:02:7f:71:85:2c:ac: 8a:f5:78:6e:66:a5:b8:e5:ce:b4:61:47:62:e8:ac:c7:6d:41: 10:25:12:b1:e6:43:4e:9a:82:2e:6b:a0:ba:eb:98:37:68:46: 54:2e:e7:df:28:1c:65:15:e5:f3:f8:f9:ea:48:99:93:25:1d: 64:d5:26:c6:19:09:b6:20:79:d9:f7:b3:2e:e4:e5:c2:a8:64: 79:13:9c:4c:fd:b9:de:d9:b0:ea:74:0f:28:08:ad:b1:d8:52: 6e:2c:37:6b:e9:fd:1a:98:c7:ef:44:fa:99:bd:62:b3:96:d8: 92:12:af:5f:a5:12:69:c2:6b:20:32:fd:d9:fb:d2:ca:ae:f7: 1a:79:11:c9:c6:90:40:e6:57:7a:ed:39:ee:68:fa:b3:3f:9f: 36:be:4a:72:7f:da:c3:c6:0d:4e:48:25:00:bd:a0:af:92:dd: dc:2a:dd:54:0f:9c:54:75:2f:37:24:ea:06:69:15:9a:c6:90: 5a:96:30:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUwNDI4MjAzODQ0WhcNMjUwNTA1MjAzODQ0WjAYMRYwFAYD VQQDEw02ODBmZTc1NC1mYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0UbDKGnUubC4NUn2GJvvO6ux+NXwXy9NGoL91hBJ3uqwrgJytCVEXd5DU8b su6SwWPIFMdN6HS9WUlHfEczg0ZI2KAnuwnexzKvAOrHe3RxXw0+s02mvcvPSKvP 5Akev9KUHekVbWHSIZ2ziNFe3nlp8HBaMd8Wrt6uBbpKM0TP+eC8rBmiM9lzVhJo n60uteji3TA15TzU9zPxw9WG8z0ki09u/Kzsxp1H3np2zIY4RIdg0t0FU2Ow20xM F5qNKJVCDO/xcZsHo69LrVEh+62lQMEX2iSlNBPDdwdGME4+D+wyKuDe4y7AS3aA 3mhi+T8mtD9ovVQhU3yI/PWa8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqdYNqu mk+AJ/4wnKHD9smLAwmtMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnRyGyFz0KOf9m1YAcqJC8mbX+5NmkxauUnnPC//8RkLwF02VlM60c qyHzWQeu5nCP/StqfjpztG6XlNIx7ArwxQoCf3GFLKyK9XhuZqW45c60YUdi6KzH bUEQJRKx5kNOmoIua6C665g3aEZULuffKBxlFeXz+PnqSJmTJR1k1SbGGQm2IHnZ 97Mu5OXCqGR5E5xM/bne2bDqdA8oCK2x2FJuLDdr6f0amMfvRPqZvWKzltiSEq9f pRJpwmsgMv3Z+9LKrvcaeRHJxpBA5ld67TnuaPqzP582vkpyf9rDxg1OSCUAvaCv kt3cKt1UD5xUdS83JOoGaRWaxpBaljB7 -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:32 2025 by rpki-client on console.sobornost.net