$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft File: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft (raw, json) Hash identifier: yUuoKVSBudqN6RUdalSCC9M7R+RrkFGWCtv5wnPC4kA= Subject key identifier: CD:03:00:9A:3C:8C:11:9D:67:A3:4B:15:DE:49:BB:41:7F:7A:41:E9 Authority key identifier: DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 Certificate issuer: /CN=A9186214/serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Certificate serial: 2A04 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft Manifest number: 2A04 Signing time: Mon 28 Apr 2025 15:41:38 +0000 Manifest this update: Mon 28 Apr 2025 15:41:37 +0000 Manifest next update: Mon 05 May 2025 15:41:37 +0000 Files and hashes: 1: 3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl (hash: DV+NkGcQZs8s9XObPbtu1VJyq8+U7Lmu6JhYHKWa2iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10756 (0x2a04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=DD4930E3E42DFE3BFFF481B179770D1AB1575BC3 Validity Not Before: Apr 28 15:41:37 2025 GMT Not After : May 5 15:41:37 2025 GMT Subject: CN=680fa1b1-d233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:ef:e3:7d:03:9d:1a:0b:79:8c:f5:70:ee: 36:9e:a0:5a:f6:44:47:a5:15:85:1c:6a:d5:9d:8c: 08:79:14:22:9f:d7:68:a7:9b:99:a2:9a:16:9f:34: 40:f7:ed:05:2c:88:96:cb:7c:19:2f:81:36:1b:bc: 54:57:27:df:ed:30:a9:72:a5:50:1d:73:3f:86:57: f4:6f:ea:42:c2:fd:0e:d0:79:91:ce:3c:e8:dd:0d: ff:6e:3c:d0:9b:9f:b8:6f:ef:b0:93:b3:42:4a:2e: 63:8d:6b:86:b2:5d:62:aa:96:6f:3b:b2:b1:1d:f9: 83:8b:c0:a3:3d:e6:eb:31:54:c3:c0:97:b5:36:6a: 18:91:f9:c2:8b:50:33:24:db:65:60:11:43:2e:1f: 5c:68:ac:34:21:9a:04:02:42:ec:a2:79:ef:bb:34: fd:fc:3f:1e:9d:a8:73:73:94:e0:14:2c:fc:2b:f8: f4:20:fc:07:0b:0e:2d:9d:60:db:73:47:3c:1c:50: 12:b8:72:83:7f:20:b3:67:a4:12:84:7b:69:76:e5: 1e:07:b0:10:c0:be:0f:9f:2d:7d:aa:5a:25:4c:77: 3b:fb:07:5d:0c:6d:fa:12:0c:c3:c0:24:b8:af:1f: 82:c4:b3:68:00:f7:62:e7:9e:f8:af:07:e9:0d:57: 31:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:03:00:9A:3C:8C:11:9D:67:A3:4B:15:DE:49:BB:41:7F:7A:41:E9 X509v3 Authority Key Identifier: keyid:DD:49:30:E3:E4:2D:FE:3B:FF:F4:81:B1:79:77:0D:1A:B1:57:5B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/D78599BC331A11E4AF2AB37CC4F9AE02/3Ukw4-Qt_jv_9IGxeXcNGrFXW8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:64:47:24:5c:93:fa:69:81:71:af:f0:0c:a8:0a:09:85:a2: da:a9:d5:a5:4d:bc:d0:dc:97:5a:45:25:4f:52:7c:1a:77:cf: 49:34:94:ae:67:96:99:db:ff:58:8f:83:d0:4c:5e:69:d0:85: 27:af:89:23:d5:41:9f:20:b2:26:b3:74:21:e8:d0:e3:5a:a9: 31:3d:9b:70:f9:58:3e:a2:8d:89:d0:fa:bb:78:86:3b:f8:b1: 58:6b:d8:0d:38:70:f5:7a:24:cc:24:53:04:61:60:b9:aa:00: 8f:17:78:30:b3:04:31:1c:1c:24:57:27:c5:5b:30:55:a6:4b: 1c:46:c3:65:b6:74:a5:3c:75:9b:7f:7f:e9:35:0f:cf:bb:a2: 5f:6a:89:8e:b8:6c:17:85:08:24:ac:c1:77:77:c1:67:e1:5f: 6b:2b:90:10:1f:a6:c2:42:c4:89:d4:97:20:11:ba:d9:9f:a6: 02:3a:00:fd:9b:a6:db:53:8b:06:8c:8f:61:aa:8a:27:67:3e: 02:59:2d:be:80:ba:eb:91:85:be:3b:85:f6:cf:ad:4a:97:56: 17:b8:8c:87:cc:3d:d2:67:f4:42:c8:27:ca:30:d6:3b:ba:4f: e7:e0:69:46:4b:ea:18:1e:4b:bb:ac:3a:7c:b4:b5:1b:0f:2d: 33:c4:bb:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKERENDkzMEUzRTQyREZFM0JGRkY0ODFCMTc5NzcwRDFB QjE1NzVCQzMwHhcNMjUwNDI4MTU0MTM3WhcNMjUwNTA1MTU0MTM3WjAYMRYwFAYD VQQDEw02ODBmYTFiMS1kMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4a3v430DnRoLeYz1cO42nqBa9kRHpRWFHGrVnYwIeRQin9dop5uZopoWnzRA 9+0FLIiWy3wZL4E2G7xUVyff7TCpcqVQHXM/hlf0b+pCwv0O0HmRzjzo3Q3/bjzQ m5+4b++wk7NCSi5jjWuGsl1iqpZvO7KxHfmDi8CjPebrMVTDwJe1NmoYkfnCi1Az JNtlYBFDLh9caKw0IZoEAkLsonnvuzT9/D8enahzc5TgFCz8K/j0IPwHCw4tnWDb c0c8HFASuHKDfyCzZ6QShHtpduUeB7AQwL4Pny19qlolTHc7+wddDG36EgzDwCS4 rx+CxLNoAPdi5574rwfpDVcxUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0DAJo8 jBGdZ6NLFd5Ju0F/ekHpMB8GA1UdIwQYMBaAFN1JMOPkLf47//SBsXl3DRqxV1vD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9ENzg1OTlCQzMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9qdl85SUd4ZVhjTkdyRlhX OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNVa3c0LVF0X2p2XzlJR3hlWGNOR3JGWFc4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9ENzg1OTlCQzMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi8zVWt3NC1RdF9q dl85SUd4ZVhjTkdyRlhXOE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ZEckXJP6aYFxr/AMqAoJhaLaqdWlTbzQ3JdaRSVPUnwad89JNJSu Z5aZ2/9Yj4PQTF5p0IUnr4kj1UGfILIms3Qh6NDjWqkxPZtw+Vg+oo2J0Pq7eIY7 +LFYa9gNOHD1eiTMJFMEYWC5qgCPF3gwswQxHBwkVyfFWzBVpkscRsNltnSlPHWb f3/pNQ/Pu6JfaomOuGwXhQgkrMF3d8Fn4V9rK5AQH6bCQsSJ1JcgEbrZn6YCOgD9 m6bbU4sGjI9hqoonZz4CWS2+gLrrkYW+O4X2z61Kl1YXuIyHzD3SZ/RCyCfKMNY7 uk/n4GlGS+oYHku7rDp8tLUbDy0zxLvV -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:12 2025 by rpki-client on console.sobornost.net