$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft File: Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json) Hash identifier: DX5E/TIokXxnnWAWPDJtRL6W9CuTnbF+DUqMoXyVP/0= Subject key identifier: 4E:5F:4C:B5:9A:28:94:0C:40:BA:16:13:13:13:5B:5B:DD:A4:B7:93 Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft Manifest number: 37 Signing time: Fri 25 Apr 2025 06:34:54 +0000 Manifest this update: Fri 25 Apr 2025 06:34:53 +0000 Manifest next update: Fri 02 May 2025 06:34:53 +0000 Files and hashes: 1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: 563t1PZZG7m2T9KlCsSxxfSeIBk+B4ZKUAyTv1QIffw=) 2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: H+Re+gqiRgpMCNcLPAgkDV7non7PY7SZMMWDfs8kqJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827 Validity Not Before: Apr 25 06:34:53 2025 GMT Not After : May 2 06:34:53 2025 GMT Subject: CN=680b2d0d-8ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:28:51:6f:88:b0:ad:31:83:53:ca:12:e1: 68:45:bb:67:b6:96:a4:64:ec:18:b8:0e:bb:af:a9: 5c:be:54:53:b8:59:21:e1:6e:d1:b2:fe:c4:c9:12: b5:ad:ac:c5:c4:58:3a:24:e3:07:89:da:f1:f3:87: 81:b6:e8:31:a9:ff:b7:23:98:77:56:95:61:28:e2: 62:92:e5:0c:de:b2:f3:49:ee:51:24:f7:05:46:93: 82:3c:2d:65:a9:bb:98:6f:53:9a:1c:3f:5c:01:8a: ca:36:6e:bb:18:48:27:a7:51:69:17:8d:aa:c9:a9: ef:99:17:d1:d4:fc:5b:fb:da:ae:23:37:30:9a:d6: b2:9f:4e:31:0e:34:da:48:3f:dc:81:ca:2a:fc:31: 0b:f0:ba:a3:60:7c:4b:a8:25:d9:70:0b:4f:27:37: 17:3c:70:0c:ed:3d:fd:e4:71:0c:a2:43:2d:36:64: 8d:85:4f:16:43:a9:4b:8a:f4:6a:80:ee:eb:b3:70: b3:30:42:c8:10:96:07:6f:df:ed:7d:a5:73:03:b8: 54:f3:a1:73:3d:8e:f6:66:e7:2b:13:76:2d:a4:f3: b3:a6:1f:fb:b4:bd:ab:a9:b1:5a:ce:ef:8e:b0:23: 2d:d1:ab:6b:3b:51:65:3d:a2:6e:52:ff:31:55:46: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5F:4C:B5:9A:28:94:0C:40:BA:16:13:13:13:5B:5B:DD:A4:B7:93 X509v3 Authority Key Identifier: keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b3:a8:8b:43:0e:45:f0:d2:2f:82:cc:cb:e5:45:ae:a8:ee: d6:e7:af:77:7b:df:9c:92:c0:85:ea:3e:8a:bc:88:d7:fd:96: c8:84:ed:0e:65:c7:d6:b2:b0:09:0d:e4:79:e1:29:f3:fe:a5: 1c:d3:27:66:0e:15:40:ad:f0:25:e6:19:7b:6b:35:e4:7a:21: 90:11:df:c2:8a:c0:5d:fd:d8:d4:28:9f:d6:1e:b0:6e:09:70: e3:eb:95:7f:29:b1:c4:7f:f8:0a:6a:56:b1:2a:ae:5b:55:3b: c7:81:d6:cb:10:72:12:c0:2d:e6:45:67:29:bb:5e:8c:9a:c8: 61:4d:0c:cc:11:3d:52:1c:f8:fd:6c:2f:74:63:2c:99:70:28: 4a:6f:d3:da:41:96:46:84:23:0a:df:d8:97:bc:7f:e7:af:cf: 35:c5:20:6e:9f:bd:50:cb:2d:57:d3:01:d8:4b:0e:e9:58:bb: 34:bc:03:57:14:46:f8:65:13:fa:6e:98:59:e4:2f:4e:87:57: 4c:b0:bf:9e:60:4a:8e:fa:eb:eb:fb:d1:92:64:41:8d:c8:4d: 5e:68:b4:37:c2:57:2a:48:22:6b:74:2c:41:ce:0c:58:78:4f: ee:27:1a:ce:a2:4b:59:55:77:d1:37:0b:32:ea:42:e0:cd:dc: 2a:f6:e1:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMUE2RUI3NUIyQjQ3MTM2MEVENUE5MjVDMzUxQ0M0MEMx OTQxNjgyNzAeFw0yNTA0MjUwNjM0NTNaFw0yNTA1MDIwNjM0NTNaMBgxFjAUBgNV BAMTDTY4MGIyZDBkLThlYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjTyhRb4iwrTGDU8oS4WhFu2e2lqRk7Bi4DruvqVy+VFO4WSHhbtGy/sTJErWt rMXEWDok4weJ2vHzh4G26DGp/7cjmHdWlWEo4mKS5QzesvNJ7lEk9wVGk4I8LWWp u5hvU5ocP1wBiso2brsYSCenUWkXjarJqe+ZF9HU/Fv72q4jNzCa1rKfTjEONNpI P9yByir8MQvwuqNgfEuoJdlwC08nNxc8cAztPf3kcQyiQy02ZI2FTxZDqUuK9GqA 7uuzcLMwQsgQlgdv3+19pXMDuFTzoXM9jvZm5ysTdi2k87OmH/u0vaupsVrO746w Iy3Rq2s7UWU9om5S/zFVRvlHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTl9MtZoo lAxAuhYTExNbW92kt5MwHwYDVR0jBBgwFoAUGm63WytHE2DtWpJcNRzEDBlBaCcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzMzMDk2RUM4RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFD Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR202M1d5dEhFMkR0V3BKY05SekVEQmxCYUNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzMzMDk2RUM4RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL0dtNjNXeXRIRTJE dFdwSmNOUnpFREJsQmFDYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACWzqItDDkXw0i+CzMvlRa6o7tbnr3d735ySwIXqPoq8iNf9lsiE7Q5l x9aysAkN5HnhKfP+pRzTJ2YOFUCt8CXmGXtrNeR6IZAR38KKwF392NQon9YesG4J cOPrlX8pscR/+ApqVrEqrltVO8eB1ssQchLALeZFZym7XoyayGFNDMwRPVIc+P1s L3RjLJlwKEpv09pBlkaEIwrf2Je8f+evzzXFIG6fvVDLLVfTAdhLDulYuzS8A1cU RvhlE/pumFnkL06HV0ywv55gSo766+v70ZJkQY3ITV5otDfCVypIImt0LEHODFh4 T+4nGs6iS1lVd9E3CzLqQuDN3Cr24YA= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:03 2025 by rpki-client on console.sobornost.net