$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json) Hash identifier: yFPoTe+IHwZTSb8qIqI2m4jMjRk+/iG5LRdgupA/S1A= Subject key identifier: 9C:EB:98:89:A7:0F:FC:AC:6C:71:61:D6:D9:5C:F4:68:25:0F:BE:62 Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft Manifest number: 29 Signing time: Sun 27 Apr 2025 06:33:05 +0000 Manifest this update: Sun 27 Apr 2025 06:33:04 +0000 Manifest next update: Sun 04 May 2025 06:33:04 +0000 Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: WNEp4s1levDmuhC6L2Wqk39P85tsQptmSFaFg6iW96A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Validity Not Before: Apr 27 06:33:04 2025 GMT Not After : May 4 06:33:04 2025 GMT Subject: CN=680dcfa1-234e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:ac:17:5c:2f:b0:ce:a5:2a:24:be:e0:99: d2:af:47:e6:bc:91:cb:ce:8a:1a:eb:67:18:0d:b0: 78:94:12:b7:0d:a8:bf:12:a9:a0:80:cd:fb:56:84: 6f:ed:28:0c:d8:c2:64:00:23:bf:0f:9c:4e:e8:d7: 22:6e:43:f7:90:56:69:ca:da:35:3f:ea:0f:01:cd: 20:bd:7e:28:ad:72:da:32:66:de:44:49:56:a3:df: 48:ba:04:0c:43:7a:82:c1:07:b2:6a:5f:a9:3e:93: 81:8a:fb:91:b5:1e:a6:bc:1c:e2:07:40:94:c2:f0: 32:51:6c:6d:2d:d7:d0:3d:d2:27:15:50:38:56:c8: c5:53:10:39:7a:89:e3:a3:e9:f2:23:1c:b2:03:04: e5:5e:a7:c7:f3:95:04:ae:d2:39:ef:17:7c:ae:f9: 5e:e2:5b:cd:d2:18:1a:98:ec:44:24:43:65:cd:ae: b0:2b:86:d4:62:0c:e6:30:5e:71:a5:c1:50:0f:54: b2:53:ff:cb:06:b3:34:ec:dc:77:0b:a7:83:79:9f: 1f:76:6c:01:f9:21:46:7d:ac:2f:66:4b:f8:28:9d: 41:99:ac:68:c3:93:e1:fa:c7:be:f9:e4:a9:a2:32: 67:76:59:6a:9e:40:e0:d9:59:98:d1:0a:71:d2:ed: 07:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:98:89:A7:0F:FC:AC:6C:71:61:D6:D9:5C:F4:68:25:0F:BE:62 X509v3 Authority Key Identifier: keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a0:1c:20:9f:6a:7d:5d:fc:6d:d4:4c:bc:78:2e:0d:01:b5: 6c:61:b6:40:41:06:32:28:51:98:f8:6b:57:38:57:1d:fd:70: b9:95:65:ea:2d:73:90:7e:3b:a7:85:8a:4c:82:cc:d0:f0:85: 47:c4:09:6a:1a:a3:02:c0:82:ac:23:b4:14:f6:0a:fb:41:02: 1b:25:95:50:23:2f:6c:c4:ae:24:ff:99:18:1d:25:da:3d:42: b8:a3:34:9a:2a:5c:e1:bd:94:ed:2d:e2:18:cd:56:c7:31:73: 10:a3:fb:23:87:62:e6:fb:d3:54:20:11:0f:f1:ae:1c:34:fe: 9e:1e:9d:db:23:a0:87:64:d2:b9:9d:ea:16:c3:ef:3a:d4:b3: 0d:c4:24:4e:08:90:36:15:3a:76:f4:2f:15:63:3f:ab:28:35: 02:b2:1d:5b:1b:a0:df:ac:8c:d4:06:6e:29:ae:34:3f:86:8d: 81:e9:5e:a6:cf:b8:fa:60:7a:0c:5d:3b:96:2f:56:ba:5d:98: 68:06:82:45:28:21:bf:46:eb:8d:90:f2:0b:30:1d:5e:ff:c4: 8b:53:7a:b5:2c:c5:be:43:cf:0a:3d:5f:61:76:c8:b6:a8:f6: 16:9b:8a:c8:89:be:b1:6c:d7:c3:e2:41:2d:31:54:15:89:3f: ea:43:f1:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoQTY4NUY1MUE3REQzRjAyNkNGMjhFMjFGMDNBMTQwNjk5 REI4RkU4QzAeFw0yNTA0MjcwNjMzMDRaFw0yNTA1MDQwNjMzMDRaMBgxFjAUBgNV BAMTDTY4MGRjZmExLTIzNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEn6wXXC+wzqUqJL7gmdKvR+a8kcvOihrrZxgNsHiUErcNqL8SqaCAzftWhG/t KAzYwmQAI78PnE7o1yJuQ/eQVmnK2jU/6g8BzSC9fiitctoyZt5ESVaj30i6BAxD eoLBB7JqX6k+k4GK+5G1Hqa8HOIHQJTC8DJRbG0t19A90icVUDhWyMVTEDl6ieOj 6fIjHLIDBOVep8fzlQSu0jnvF3yu+V7iW83SGBqY7EQkQ2XNrrArhtRiDOYwXnGl wVAPVLJT/8sGszTs3HcLp4N5nx92bAH5IUZ9rC9mS/gonUGZrGjDk+H6x7755Kmi Mmd2WWqeQODZWZjRCnHS7QenAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnOuYiacP /KxscWHW2Vz0aCUPvmIwHwYDVR0jBBgwFoAUpoX1Gn3T8CbPKOIfA6FAaZ24/oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0VCMDBBOEM4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENiUEtPSWZBNkZBYVoyNF9v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcG9YMUduM1Q4Q2JQS09JZkE2RkFhWjI0X293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0VCMDBBOEM4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENi UEtPSWZBNkZBYVoyNF9vdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALigHCCfan1d/G3UTLx4Lg0BtWxhtkBBBjIoUZj4a1c4Vx39cLmVZeot c5B+O6eFikyCzNDwhUfECWoaowLAgqwjtBT2CvtBAhsllVAjL2zEriT/mRgdJdo9 QrijNJoqXOG9lO0t4hjNVscxcxCj+yOHYub701QgEQ/xrhw0/p4endsjoIdk0rmd 6hbD7zrUsw3EJE4IkDYVOnb0LxVjP6soNQKyHVsboN+sjNQGbimuND+GjYHpXqbP uPpgegxdO5YvVrpdmGgGgkUoIb9G642Q8gswHV7/xItTerUsxb5Dzwo9X2F2yLao 9habisiJvrFs18PiQS0xVBWJP+pD8RA= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net