$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft File: jhzB2_q9QLZBTCPj39iRRVJ98yE.mft (raw, json) Hash identifier: 7eX+j2KaekXIrL1ezuxmf7HSGAnv+cQ8Eoh6Ob0Cfzw= Subject key identifier: 3C:16:D5:43:6D:08:FA:F6:DA:B0:BE:CB:22:34:8A:38:EA:C1:0B:C9 Authority key identifier: 8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 Certificate issuer: /CN=A9186363/serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft Manifest number: 4D Signing time: Sun 27 Apr 2025 06:08:30 +0000 Manifest this update: Sun 27 Apr 2025 06:08:30 +0000 Manifest next update: Sun 04 May 2025 06:08:30 +0000 Files and hashes: 1: jhzB2_q9QLZBTCPj39iRRVJ98yE.crl (hash: czojiXLOTwhPz152EgsX+8cskr1kudDvSFdDKsmWDj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186363, serialNumber=8E1CC1DBFABD40B6414C23E3DFD89145527DF321 Validity Not Before: Apr 27 06:08:30 2025 GMT Not After : May 4 06:08:30 2025 GMT Subject: CN=680dc9de-df1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:99:ff:be:37:89:9c:52:67:c6:f5:23:81: f5:78:85:ae:55:7d:69:8c:22:40:56:a5:47:4d:3a: 12:ee:c6:eb:21:b4:a9:73:a7:7f:3c:fd:5b:2c:2f: 42:c7:b4:1a:b7:6d:8f:34:27:e8:f4:0e:ae:3f:23: bd:6d:49:64:63:17:ef:c7:e5:1d:8c:04:fd:f8:f5: 97:6a:57:b6:26:64:3d:13:3b:74:7f:2a:45:b5:fe: 3a:8c:9d:38:ce:9b:41:c9:2c:4f:a1:e0:2f:e0:02: 9b:cb:0a:7f:6f:a6:9d:eb:c3:a7:e0:ea:8d:96:fd: 1b:5e:ab:bf:38:75:3e:b7:31:03:df:16:68:d2:77: b4:b0:63:a3:b4:cf:75:6b:2b:af:d3:af:b9:30:db: eb:e9:2e:44:4c:1e:e7:68:09:60:d3:1e:43:f1:99: 80:dc:8d:f7:0b:93:86:17:0d:a4:ea:e8:2b:38:a4: 51:19:93:ae:23:0a:d3:3c:8e:42:90:36:5f:3f:af: 9a:70:4a:9d:42:d9:91:ef:87:88:45:9a:58:04:e1: 88:d3:37:ed:7c:b7:0b:10:85:b4:1e:b0:17:30:c7: 6a:c4:7a:81:51:be:bb:ef:7e:a7:47:40:35:53:a4: 8e:0d:9a:bf:5e:99:52:cb:70:3e:33:bc:42:99:d5: 77:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:16:D5:43:6D:08:FA:F6:DA:B0:BE:CB:22:34:8A:38:EA:C1:0B:C9 X509v3 Authority Key Identifier: keyid:8E:1C:C1:DB:FA:BD:40:B6:41:4C:23:E3:DF:D8:91:45:52:7D:F3:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhzB2_q9QLZBTCPj39iRRVJ98yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/BD863D72AFAC11EFB886D651C4F9AE02/jhzB2_q9QLZBTCPj39iRRVJ98yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:4f:5a:2d:e3:46:f9:09:85:07:9f:61:1b:85:b4:6c:c1:b9: b0:9f:7b:60:6f:ce:8a:a6:bd:1c:ba:33:de:5f:91:ab:3b:6e: 72:a0:77:3b:3a:db:20:00:6c:00:69:ef:9e:22:78:26:19:29: d9:63:5d:e1:9f:e3:ff:21:ff:77:72:8a:d8:cb:5c:96:a0:1a: ed:e4:9d:f7:32:f6:f1:cd:61:84:b9:9f:88:22:30:9b:c6:7b: 89:0c:8d:ae:fc:d8:c3:ae:fe:82:a8:d2:ae:e7:72:2b:6d:88: 0c:62:a2:01:11:d6:ea:44:75:8a:40:22:7e:99:48:66:81:ad: 75:c8:ef:32:bc:99:05:10:e8:c4:df:b4:5a:dc:05:f9:83:c9: 05:39:28:97:f7:6d:25:9e:3f:e6:6b:8c:17:0b:26:63:40:cf: b4:0a:5e:77:a2:33:ba:d2:48:38:72:18:1b:f3:d1:b5:d9:d7: 1e:e8:f5:aa:ad:d4:f5:94:b9:32:44:0f:df:39:74:90:85:b1: 2c:92:e2:45:73:ce:f7:18:6c:d2:20:70:92:36:97:3a:82:3c: d9:fd:12:a8:0b:11:c9:5c:4f:0f:d0:39:86:76:95:d5:a1:e5: eb:30:17:35:c8:b3:50:eb:a5:50:a0:c4:3f:96:24:9f:c4:ca: 31:8f:15:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NjM2MzExMC8GA1UEBRMoOEUxQ0MxREJGQUJENDBCNjQxNEMyM0UzREZEODkxNDU1 MjdERjMyMTAeFw0yNTA0MjcwNjA4MzBaFw0yNTA1MDQwNjA4MzBaMBgxFjAUBgNV BAMTDTY4MGRjOWRlLWRmMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbAJn/vjeJnFJnxvUjgfV4ha5VfWmMIkBWpUdNOhLuxushtKlzp388/VssL0LH tBq3bY80J+j0Dq4/I71tSWRjF+/H5R2MBP349ZdqV7YmZD0TO3R/KkW1/jqMnTjO m0HJLE+h4C/gApvLCn9vpp3rw6fg6o2W/Rteq784dT63MQPfFmjSd7SwY6O0z3Vr K6/Tr7kw2+vpLkRMHudoCWDTHkPxmYDcjfcLk4YXDaTq6Cs4pFEZk64jCtM8jkKQ Nl8/r5pwSp1C2ZHvh4hFmlgE4YjTN+18twsQhbQesBcwx2rEeoFRvrvvfqdHQDVT pI4Nmr9emVLLcD4zvEKZ1XdlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPBbVQ20I +vbasL7LIjSKOOrBC8kwHwYDVR0jBBgwFoAUjhzB2/q9QLZBTCPj39iRRVJ98yEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2MzYzL0JEODYzRDcyQUZB QzExRUZCODg2RDY1MUM0RjlBRTAyL2poekIyX3E5UUxaQlRDUGozOWlSUlZKOTh5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvamh6QjJfcTlRTFpCVENQajM5aVJSVko5OHlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2 MzYzL0JEODYzRDcyQUZBQzExRUZCODg2RDY1MUM0RjlBRTAyL2poekIyX3E5UUxa QlRDUGozOWlSUlZKOTh5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALJPWi3jRvkJhQefYRuFtGzBubCfe2BvzoqmvRy6M95fkas7bnKgdzs6 2yAAbABp754ieCYZKdljXeGf4/8h/3dyitjLXJagGu3knfcy9vHNYYS5n4giMJvG e4kMja782MOu/oKo0q7ncittiAxiogER1upEdYpAIn6ZSGaBrXXI7zK8mQUQ6MTf tFrcBfmDyQU5KJf3bSWeP+ZrjBcLJmNAz7QKXneiM7rSSDhyGBvz0bXZ1x7o9aqt 1PWUuTJED985dJCFsSyS4kVzzvcYbNIgcJI2lzqCPNn9EqgLEclcTw/QOYZ2ldWh 5eswFzXIs1DrpVCgxD+WJJ/EyjGPFRY= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net