$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft File: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft (raw, json) Hash identifier: 6U+PX5blRf6pa4tHl1ZJ5Tkp3u5r0DJptEfSp9eZAjM= Subject key identifier: 66:D5:A7:CC:E6:25:35:AA:19:2E:54:F4:38:18:94:44:8B:C7:DE:CF Authority key identifier: DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 Certificate issuer: /CN=A9185D4E/serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft Manifest number: 6D Signing time: Sun 27 Apr 2025 05:42:38 +0000 Manifest this update: Sun 27 Apr 2025 05:42:37 +0000 Manifest next update: Sun 04 May 2025 05:42:37 +0000 Files and hashes: 1: 3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl (hash: pPvdohYwueCe6xWt9lhVucgS3ho7hve4rADmTenAjd0=) 2: 75B289249B4311EFA6D2403DC4F9AE02.roa (hash: C1wubfWXdpG304JONiKw+mbOc+sIyxib62Hzqan2NP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D4E, serialNumber=DC6A2374C514E8CF4AC764A0F3C846F09B33D282 Validity Not Before: Apr 27 05:42:37 2025 GMT Not After : May 4 05:42:37 2025 GMT Subject: CN=680dc3ce-d9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:33:cf:69:56:6e:1d:6e:29:20:3d:b3:5b:1b: 6a:63:b6:92:bb:48:e1:ce:72:03:7c:b8:3b:3e:5b: a9:a9:6e:1e:62:03:ca:b9:35:a0:1d:c5:b2:ab:1e: 52:49:f0:6e:58:47:88:ff:ec:04:6f:dd:69:cc:b7: c9:7d:4d:7d:2d:c1:c6:74:23:1a:d8:f5:f1:5d:b7: 0d:a2:6a:c1:d1:44:1c:c2:b7:10:4a:6c:00:45:17: ac:2f:13:65:6a:32:f9:4d:16:3c:df:fb:14:f3:36: c8:ec:3d:a7:71:0c:3b:51:b1:72:04:5e:da:4c:68: 39:99:49:17:07:0e:ef:35:58:ee:d5:1f:90:eb:21: 93:4d:fb:28:3b:7b:7d:ed:dd:1b:5d:ae:81:81:1d: 29:1f:a5:b3:66:14:03:3f:09:3e:6a:e4:9e:fd:dd: 88:2d:21:35:c5:df:d2:33:4f:6c:9a:40:3c:1d:77: 43:95:de:6c:09:92:41:dc:06:d3:04:03:63:74:53: eb:fe:4f:ce:88:4d:f9:ca:c6:33:27:a3:af:dc:b4: 57:7e:56:33:e5:d6:ac:2b:25:50:89:e1:5a:1f:89: bd:93:c6:49:b6:b8:20:ba:eb:f1:e9:25:9b:01:9f: 72:3e:6d:19:05:9f:b0:01:a3:ad:12:bd:9b:db:53: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D5:A7:CC:E6:25:35:AA:19:2E:54:F4:38:18:94:44:8B:C7:DE:CF X509v3 Authority Key Identifier: keyid:DC:6A:23:74:C5:14:E8:CF:4A:C7:64:A0:F3:C8:46:F0:9B:33:D2:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/6423BE067FF211EF90E14F60C4F9AE02/3GojdMUU6M9Kx2Sg88hG8Jsz0oI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7d:be:8d:24:25:2d:9a:5b:0b:ae:91:cf:c4:d3:21:3a:7b: c7:e7:64:21:28:26:14:2c:67:e5:89:3e:6e:a5:fb:ea:fb:7d: f4:85:70:83:85:0a:68:58:92:90:3f:6d:68:27:55:4d:98:8a: fe:cc:52:cc:9a:98:04:87:cc:02:eb:6d:32:d4:3f:0a:eb:16: 43:d1:c5:82:68:07:7c:61:92:5d:28:a9:d6:31:0d:cc:c6:ec: c2:49:8b:8c:95:ce:f1:6a:32:ba:b4:26:76:d2:3d:ca:7b:6c: 54:b0:56:68:af:17:4e:93:8f:f9:cc:e5:0c:87:8c:4c:70:63: b6:e4:d4:dc:88:48:62:86:ef:eb:17:14:ef:b9:26:55:ed:e7: 7b:e8:4c:f6:1b:b2:f0:b3:2b:fb:39:0e:00:ad:83:a3:29:52: 58:b3:4e:b7:8f:f1:21:96:2c:d2:af:e1:ce:94:a8:a4:5d:07: 48:ac:75:68:07:3f:75:c0:f4:6c:a1:c3:dc:e9:56:a0:df:3a: 81:23:84:6e:95:2e:73:fb:7f:71:72:9a:95:d0:1e:8f:f7:15: bc:0d:2c:21:32:c3:51:bd:5e:62:ab:c0:fe:ac:84:8f:11:f1: a3:a0:46:cf:e8:fa:ca:cd:72:6d:3b:ab:8c:99:a0:f7:29:6c: 9e:01:8e:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NUQ0RTExMC8GA1UEBRMoREM2QTIzNzRDNTE0RThDRjRBQzc2NEEwRjNDODQ2RjA5 QjMzRDI4MjAeFw0yNTA0MjcwNTQyMzdaFw0yNTA1MDQwNTQyMzdaMBgxFjAUBgNV BAMTDTY4MGRjM2NlLWQ5Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXM89pVm4dbikgPbNbG2pjtpK7SOHOcgN8uDs+W6mpbh5iA8q5NaAdxbKrHlJJ 8G5YR4j/7ARv3WnMt8l9TX0twcZ0IxrY9fFdtw2iasHRRBzCtxBKbABFF6wvE2Vq MvlNFjzf+xTzNsjsPadxDDtRsXIEXtpMaDmZSRcHDu81WO7VH5DrIZNN+yg7e33t 3RtdroGBHSkfpbNmFAM/CT5q5J793YgtITXF39IzT2yaQDwdd0OV3mwJkkHcBtME A2N0U+v+T86ITfnKxjMno6/ctFd+VjPl1qwrJVCJ4Vofib2Txkm2uCC66/HpJZsB n3I+bRkFn7ABo60SvZvbU6m9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZtWnzOYl NaoZLlT0OBiURIvH3s8wHwYDVR0jBBgwFoAU3GojdMUU6M9Kx2Sg88hG8Jsz0oIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RDRFLzY0MjNCRTA2N0ZG MjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05S3gyU2c4OGhHOEpzejBv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvM0dvamRNVVU2TTlLeDJTZzg4aEc4SnN6MG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 RDRFLzY0MjNCRTA2N0ZGMjExRUY5MEUxNEY2MEM0RjlBRTAyLzNHb2pkTVVVNk05 S3gyU2c4OGhHOEpzejBvSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACJ9vo0kJS2aWwuukc/E0yE6e8fnZCEoJhQsZ+WJPm6l++r7ffSFcIOF CmhYkpA/bWgnVU2Yiv7MUsyamASHzALrbTLUPwrrFkPRxYJoB3xhkl0oqdYxDczG 7MJJi4yVzvFqMrq0JnbSPcp7bFSwVmivF06Tj/nM5QyHjExwY7bk1NyISGKG7+sX FO+5JlXt53voTPYbsvCzK/s5DgCtg6MpUlizTreP8SGWLNKv4c6UqKRdB0isdWgH P3XA9Gyhw9zpVqDfOoEjhG6VLnP7f3FympXQHo/3FbwNLCEyw1G9XmKrwP6shI8R 8aOgRs/o+srNcm07q4yZoPcpbJ4Bjv0= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net