$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft File: GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json) Hash identifier: d3n+yZqz9LOOcLTtQi34nINvZv+EJaC9seI4zKeX3WI= Subject key identifier: 91:8E:4A:1A:37:93:9B:A7:23:C9:EC:F2:44:90:40:05:4B:EB:46:18 Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 Certificate issuer: /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft Manifest number: 01C4 Signing time: Sun 27 Apr 2025 02:00:35 +0000 Manifest this update: Sun 27 Apr 2025 02:00:35 +0000 Manifest next update: Sun 04 May 2025 02:00:35 +0000 Files and hashes: 1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: Z/Rrde109eN3m42mJKvVzGmEn19HoTX12OzA4f8G0Y4=) 2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: VfnSyxBIbBT07iKfw+b+BeFv7FAgwNfbIt+sEwvLAj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97 Validity Not Before: Apr 27 02:00:35 2025 GMT Not After : May 4 02:00:35 2025 GMT Subject: CN=680d8fc3-4ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e6:16:95:a8:42:d7:25:8a:39:c2:59:ae:d7: c3:fd:b1:0d:e0:b3:87:d5:c3:2d:01:e9:68:c8:a5: f6:d7:58:f4:5f:75:da:d3:ed:74:2c:29:04:2e:55: d7:62:04:f9:82:79:1a:d7:dc:de:39:3b:60:ee:3e: 03:1f:65:c0:c7:48:2f:b9:d5:ec:5b:69:8f:fe:26: ff:2c:e2:5a:9b:0c:3b:5e:8b:85:a3:cf:a8:39:50: e9:52:bb:75:17:38:27:48:67:8d:24:e4:e5:3f:a4: 87:a2:77:c9:f3:ea:6b:f1:58:93:e7:a2:96:c8:0c: 22:a0:3e:f2:4a:08:d9:03:c1:54:1c:ce:0b:1b:25: f1:af:d0:ba:a0:3f:44:cf:3c:2b:1a:72:c5:6d:78: 03:75:f6:21:bd:c1:91:11:90:4d:0d:e4:bf:72:83: 23:a0:73:0e:fe:20:39:b6:74:72:7b:cb:9a:d3:df: 1f:46:ce:6d:9b:7d:b7:16:f0:30:fd:3f:db:2f:b7: ab:0c:7b:72:67:bb:e2:5b:40:81:70:83:85:0d:03: 23:d2:19:e7:b8:60:27:46:46:b6:67:55:0e:f4:82: df:61:88:5a:ae:41:ec:a7:90:76:46:7c:1c:db:68: 17:cb:a8:0c:a6:27:16:e0:40:eb:bd:c3:e3:3f:4e: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:4A:1A:37:93:9B:A7:23:C9:EC:F2:44:90:40:05:4B:EB:46:18 X509v3 Authority Key Identifier: keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:ce:52:8a:04:8e:9f:b0:97:ff:0b:9c:1e:57:72:21:4e:fd: 28:db:6a:15:b1:40:ef:52:f7:20:c1:6c:8d:0b:89:62:ae:78: 9a:7c:90:9e:a5:bf:3b:36:1d:7a:03:8d:fc:9f:d8:3c:87:62: cf:c7:f8:49:4b:73:d8:33:6d:19:f9:59:c6:43:2b:78:25:3c: 62:f7:ae:bb:eb:8a:74:ec:9d:01:09:b2:c7:16:9e:4d:27:e3: c6:95:ad:61:bc:5b:60:fc:3d:56:4d:fa:52:ee:ff:48:1a:6a: 61:ab:b1:b0:54:4b:81:f5:18:30:0f:f6:54:1a:b1:1f:3b:d8: 49:8f:2a:46:c2:3e:f8:13:b3:d4:42:9d:d7:be:6c:5e:6a:5d: 9e:d3:aa:72:d0:48:07:07:b7:9b:20:80:a7:8f:02:ee:2e:7f: 8e:24:34:21:18:31:5f:ba:e3:b4:60:bc:30:35:b0:e2:8c:50: 07:9b:49:49:13:40:3e:89:22:a2:10:a1:eb:a5:ea:ed:84:76: 62:03:22:59:a7:fa:1b:9c:43:16:cd:2b:b3:bb:bc:96:22:a3: 18:28:aa:7e:ec:97:39:15:92:14:2a:2e:98:be:47:4b:ea:bf: f0:2e:5e:66:13:d2:00:d1:35:db:83:5f:c5:2a:51:a8:a2:ec: 4a:0e:d8:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RUExMTAvBgNVBAUTKDFCMjVFQzU5RDA3RjkzNDI0QjkwQzIyRDM0RUNBQjIy QUQ4NTJBOTcwHhcNMjUwNDI3MDIwMDM1WhcNMjUwNTA0MDIwMDM1WjAYMRYwFAYD VQQDEw02ODBkOGZjMy00ZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+YWlahC1yWKOcJZrtfD/bEN4LOH1cMtAeloyKX211j0X3Xa0+10LCkELlXX YgT5gnka19zeOTtg7j4DH2XAx0gvudXsW2mP/ib/LOJamww7XouFo8+oOVDpUrt1 FzgnSGeNJOTlP6SHonfJ8+pr8ViT56KWyAwioD7ySgjZA8FUHM4LGyXxr9C6oD9E zzwrGnLFbXgDdfYhvcGREZBNDeS/coMjoHMO/iA5tnRye8ua098fRs5tm323FvAw /T/bL7erDHtyZ7viW0CBcIOFDQMj0hnnuGAnRka2Z1UO9ILfYYharkHsp5B2Rnwc 22gXy6gMpicW4EDrvcPjP06X0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGOSho3 k5unI8ns8kSQQAVL60YYMB8GA1UdIwQYMBaAFBsl7FnQf5NCS5DCLTTsqyKthSqX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFQS81Mjk4ODRFMDZG NjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2swSkxrTUl0Tk95cklxMkZL cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d5WHNXZEJfazBKTGtNSXROT3lySXEyRktwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZFQS81Mjk4ODRFMDZGNjAxMUVEQTVGRkZGMDlDNEY5QUUwMi9HeVhzV2RCX2sw SkxrTUl0Tk95cklxMkZLcGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8zlKKBI6fsJf/C5weV3IhTv0o22oVsUDvUvcgwWyNC4lirniafJCe pb87Nh16A438n9g8h2LPx/hJS3PYM20Z+VnGQyt4JTxi966764p07J0BCbLHFp5N J+PGla1hvFtg/D1WTfpS7v9IGmphq7GwVEuB9RgwD/ZUGrEfO9hJjypGwj74E7PU Qp3Xvmxeal2e06py0EgHB7ebIICnjwLuLn+OJDQhGDFfuuO0YLwwNbDijFAHm0lJ E0A+iSKiEKHrperthHZiAyJZp/obnEMWzSuzu7yWIqMYKKp+7Jc5FZIUKi6YvkdL 6r/wLl5mE9IA0TXbg1/FKlGoouxKDthF -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:12 2025 by rpki-client on console.sobornost.net