$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json) Hash identifier: flI50RZ/QSzUvHruHJ+2o25nyYNmjKYwvLXKxocBre4= Subject key identifier: 06:66:58:17:FC:09:F8:C6:81:69:71:19:9B:5D:CF:27:FE:45:F8:16 Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Certificate serial: 2F61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft Manifest number: 2F36 Signing time: Mon 28 Apr 2025 15:33:49 +0000 Manifest this update: Mon 28 Apr 2025 15:33:48 +0000 Manifest next update: Mon 05 May 2025 15:33:48 +0000 Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: Whdvw7CitADUfSpSFdePvp084dKAb3PlnpPO1GZx9io=) 2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zMgG3GuNf+zDyezkOM45N+LyqO/kzryLIYKrCSpbqDo=) 3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: vhNYX3z+Zi/YDPj0M1GT/QNGQGsFRe3lw3Q5mL3YNtQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12129 (0x2f61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B Validity Not Before: Apr 28 15:33:48 2025 GMT Not After : May 5 15:33:48 2025 GMT Subject: CN=680f9fdd-b3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:57:aa:ba:14:c6:39:4a:d4:c4:0e:f4:5a: d9:83:d2:7d:1f:33:b0:48:4c:10:30:83:30:ec:62: ca:cc:5b:61:ef:50:e4:c1:b5:99:11:a2:f6:b5:b8: 6c:64:94:05:15:b2:25:9e:75:7d:dd:3e:b0:b2:96: b7:85:a9:b8:a7:43:5a:bb:cb:4c:49:8f:4d:57:98: a4:3f:7f:8f:f5:94:db:d1:f9:f1:3b:37:11:0c:25: f4:9c:c7:4c:83:c7:72:53:07:61:2d:b5:92:47:c4: a5:af:1c:4b:74:dd:89:08:af:f8:b3:ba:b7:37:10: b4:41:b8:03:31:3e:ee:d4:62:9d:61:ac:38:8c:a3: 33:2b:08:4e:8d:5e:c9:e3:fa:27:7b:2f:d2:66:73: 51:f6:ef:4f:2d:81:db:17:c7:7b:ee:f9:22:f5:0e: f3:95:a1:ca:e0:ac:fb:2c:84:c8:b7:6f:7c:e1:0b: 3d:54:3d:b6:65:cc:07:d1:ec:b4:fe:a4:59:cd:77: 2c:82:7e:01:01:0e:58:5c:27:2b:ee:81:5f:0a:1d: 8b:b2:25:5e:33:59:ad:ff:a1:b4:8d:5c:62:fd:99: cf:86:b6:a0:2c:7b:5d:d8:71:40:a6:36:0d:81:5c: e1:be:a8:3e:c8:66:fa:62:31:bd:ac:7c:b0:85:98: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:66:58:17:FC:09:F8:C6:81:69:71:19:9B:5D:CF:27:FE:45:F8:16 X509v3 Authority Key Identifier: keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c4:5e:9a:78:78:33:ea:a0:a1:66:13:dd:d8:5d:5b:bc:4b: 0d:22:b9:b4:d2:42:e0:fe:ec:35:37:42:68:af:24:68:2b:9e: ad:9f:b2:1c:69:22:2b:8b:e1:27:35:3b:f6:d3:cc:32:95:9a: f1:7f:e4:c5:4f:3c:55:4a:90:5b:a1:fc:1f:c6:e7:cc:b9:ff: f9:16:a7:6f:b1:e0:0d:c2:00:1f:d9:48:06:30:8f:74:86:9f: 73:a7:dc:4c:23:76:db:a5:f2:54:08:25:2a:a7:cf:32:d5:1d: 07:f0:89:a1:38:25:0e:bd:88:16:c4:ed:74:e9:06:8b:6a:6e: 44:d3:09:94:d2:f1:be:90:28:fd:30:0a:7a:7a:2c:21:6b:a9: e2:96:44:fd:34:b5:95:fa:2c:11:ee:88:77:df:e0:ab:67:75: b8:f4:de:cc:33:a1:f3:bc:c2:2d:58:ed:c7:2b:f0:ce:09:0a: 2f:8d:02:72:19:e2:7a:02:f8:6c:3a:2c:b6:17:db:26:7a:38: 9f:52:d7:6a:b0:f3:ea:19:05:ae:a0:54:0c:e3:12:a8:05:14: 08:a0:87:a6:45:06:e4:51:3d:9f:6d:f1:c0:21:d9:b1:d5:e1: ff:de:2d:30:c2:de:20:f9:38:05:d7:8b:4b:58:6b:67:12:c1: 35:a2:46:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICL2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3NjIxMTAvBgNVBAUTKERDQjMwRUNGNzhBMTMzNzVFRTUyNTI3OEY5Q0ZEMzBG N0M1OEFBOEIwHhcNMjUwNDI4MTUzMzQ4WhcNMjUwNTA1MTUzMzQ4WjAYMRYwFAYD VQQDEw02ODBmOWZkZC1iM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCJXqroUxjlK1MQO9FrZg9J9HzOwSEwQMIMw7GLKzFth71DkwbWZEaL2tbhs ZJQFFbIlnnV93T6wspa3ham4p0Nau8tMSY9NV5ikP3+P9ZTb0fnxOzcRDCX0nMdM g8dyUwdhLbWSR8SlrxxLdN2JCK/4s7q3NxC0QbgDMT7u1GKdYaw4jKMzKwhOjV7J 4/oney/SZnNR9u9PLYHbF8d77vki9Q7zlaHK4Kz7LITIt2984Qs9VD22ZcwH0ey0 /qRZzXcsgn4BAQ5YXCcr7oFfCh2LsiVeM1mt/6G0jVxi/ZnPhragLHtd2HFApjYN gVzhvqg+yGb6YjG9rHywhZiIcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZmWBf8 CfjGgWlxGZtdzyf+RfgWMB8GA1UdIwQYMBaAFNyzDs94oTN17lJSePnP0w98WKqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjc2Mi84QUFFMEY4QzI4 MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0zWHVVbEo0LWNfVEQzeFlx b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNMTU96M2loTTNYdVVsSjQtY19URDN4WXFvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mjc2Mi84QUFFMEY4QzI4MzcxMUUzQjUyQkQzM0I1OTExRUEzMi8zTE1PejNpaE0z WHVVbEo0LWNfVEQzeFlxb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwxF6aeHgz6qChZhPd2F1bvEsNIrm00kLg/uw1N0JoryRoK56tn7Ic aSIri+EnNTv208wylZrxf+TFTzxVSpBbofwfxufMuf/5FqdvseANwgAf2UgGMI90 hp9zp9xMI3bbpfJUCCUqp88y1R0H8ImhOCUOvYgWxO106QaLam5E0wmU0vG+kCj9 MAp6eiwha6nilkT9NLWV+iwR7oh33+CrZ3W49N7MM6HzvMItWO3HK/DOCQovjQJy GeJ6AvhsOiy2F9smejifUtdqsPPqGQWuoFQM4xKoBRQIoIemRQbkUT2fbfHAIdmx 1eH/3i0wwt4g+TgF14tLWGtnEsE1okYV -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:11 2025 by rpki-client on console.sobornost.net