$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json) Hash identifier: Z7Vwm7NmpoI+xBebyzK5Sw8PfBhhZ7x4k563qEGw5Pg= Subject key identifier: C5:7E:4E:AB:82:D9:54:62:76:79:0D:9E:2B:31:F2:C1:5A:7B:89:0B Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft Manifest number: 74 Signing time: Sun 27 Apr 2025 05:37:34 +0000 Manifest this update: Sun 27 Apr 2025 05:37:33 +0000 Manifest next update: Sun 04 May 2025 05:37:33 +0000 Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: KK4a73DnVOPntKz0y15beqEA36ObqZPAk5t943WR2ZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4 Validity Not Before: Apr 27 05:37:33 2025 GMT Not After : May 4 05:37:33 2025 GMT Subject: CN=680dc29d-0c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:75:f8:da:f5:85:d5:d4:1a:34:fa:bf:08: 9b:84:05:ee:ba:8e:b8:07:3e:05:c8:3c:1e:4a:67: 88:a4:99:85:77:92:99:19:29:ec:0b:9a:d7:29:fd: 9a:1c:31:e7:e5:3b:5a:9c:fb:16:57:2d:76:67:3c: cb:e2:bf:d3:e3:5c:c6:c1:ef:db:25:62:10:55:34: f2:3c:d7:c1:e6:52:09:97:8b:fb:09:2c:67:3b:f0: 61:24:4a:c6:1e:63:66:84:26:85:ce:4a:e6:b4:63: f4:93:50:00:20:2a:82:84:53:c1:cb:6a:55:8d:e4: d3:05:5e:a9:43:52:4b:e6:81:ba:4b:7a:ea:8d:41: 71:e9:5b:ad:db:90:e8:a5:bb:ba:0c:8e:8c:1c:cf: 1c:c3:fa:a6:bd:62:f9:7e:6e:40:ba:56:ca:cd:16: 3e:26:44:78:04:12:7b:59:e7:ec:82:c3:94:79:63: fd:7a:23:15:79:1c:f9:53:f5:e9:89:6a:35:60:fc: 02:22:93:75:79:fe:42:59:47:5f:f3:56:0f:23:c3: 67:11:6d:fd:c5:c2:39:d9:4b:e1:ea:fb:08:29:b9: 1d:46:de:3f:fa:4a:58:f8:4f:35:1a:39:5d:12:ce: 86:7b:16:94:33:76:f8:8d:01:a7:80:c2:69:a1:65: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:4E:AB:82:D9:54:62:76:79:0D:9E:2B:31:F2:C1:5A:7B:89:0B X509v3 Authority Key Identifier: keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d7:04:a8:a2:d9:1c:b4:9f:52:3f:e0:83:84:97:db:ed:32: ed:11:41:21:5f:09:c6:8d:34:b4:92:26:8a:51:dd:ce:43:66: cf:c2:1c:5f:39:35:4c:dc:44:86:fd:f9:a5:23:7a:09:0c:1c: 38:1e:dd:4d:f1:c0:51:ae:c6:c8:0c:eb:11:48:70:10:8a:9e: 41:77:30:dd:29:60:c4:d2:fb:8c:c4:c9:ef:64:9b:13:b2:a0: 59:67:3e:5c:94:8d:99:08:da:5a:a2:f5:f2:fc:d2:a1:f5:21: 88:ce:87:1d:30:8e:03:4e:0e:94:4b:1d:79:f5:2d:59:d6:fa: b0:e9:30:3d:5d:e0:5a:3a:b3:b0:cc:bb:89:29:86:a3:c5:37: 2f:4c:de:fe:52:08:45:c6:25:07:f1:2c:eb:70:11:59:6d:29: b0:a8:78:74:8b:e0:fb:1d:a7:f5:f5:9a:94:79:fc:2d:64:fc: f4:6a:8e:1d:1d:87:69:86:c5:df:58:aa:a1:a5:e4:49:f1:1f: 2b:bb:d2:e2:e5:d8:6c:e0:e1:6b:f7:fc:c9:46:0f:2f:cf:29: 50:86:48:eb:01:7f:c8:03:2e:af:ba:76:67:f5:33:91:4d:7f: cf:d2:c0:26:bd:62:c1:d1:2e:33:e8:03:ef:59:fb:5a:f5:96: ab:23:b2:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MERBNTExMC8GA1UEBRMoRDc5QkZEODM5QjlEMEUwOUQwNDA1RUQwNEVFNTI5MjBF OTBCN0FDNDAeFw0yNTA0MjcwNTM3MzNaFw0yNTA1MDQwNTM3MzNaMBgxFjAUBgNV BAMTDTY4MGRjMjlkLTBjMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChUnX42vWF1dQaNPq/CJuEBe66jrgHPgXIPB5KZ4ikmYV3kpkZKewLmtcp/Zoc MeflO1qc+xZXLXZnPMviv9PjXMbB79slYhBVNPI818HmUgmXi/sJLGc78GEkSsYe Y2aEJoXOSua0Y/STUAAgKoKEU8HLalWN5NMFXqlDUkvmgbpLeuqNQXHpW63bkOil u7oMjowczxzD+qa9Yvl+bkC6VsrNFj4mRHgEEntZ5+yCw5R5Y/16IxV5HPlT9emJ ajVg/AIik3V5/kJZR1/zVg8jw2cRbf3FwjnZS+Hq+wgpuR1G3j/6Slj4TzUaOV0S zoZ7FpQzdviNAaeAwmmhZSJ/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxX5Oq4LZ VGJ2eQ2eKzHywVp7iQswHwYDVR0jBBgwFoAU15v9g5udDgnQQF7QTuUpIOkLesQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwREE1L0FGODg1RjY2NzNF RDExRUZCMEJBMDI1QUM0RjlBRTAyLzE1djlnNXVkRGduUVFGN1FUdVVwSU9rTGVz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTV2OWc1dWREZ25RUUY3UVR1VXBJT2tMZXNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw REE1L0FGODg1RjY2NzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyLzE1djlnNXVkRGdu UVFGN1FUdVVwSU9rTGVzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFHXBKii2Ry0n1I/4IOEl9vtMu0RQSFfCcaNNLSSJopR3c5DZs/CHF85 NUzcRIb9+aUjegkMHDge3U3xwFGuxsgM6xFIcBCKnkF3MN0pYMTS+4zEye9kmxOy oFlnPlyUjZkI2lqi9fL80qH1IYjOhx0wjgNODpRLHXn1LVnW+rDpMD1d4Fo6s7DM u4kphqPFNy9M3v5SCEXGJQfxLOtwEVltKbCoeHSL4Psdp/X1mpR5/C1k/PRqjh0d h2mGxd9YqqGl5EnxHyu70uLl2Gzg4Wv3/MlGDy/PKVCGSOsBf8gDLq+6dmf1M5FN f8/SwCa9YsHRLjPoA+9Z+1r1lqsjst4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net