$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft File: PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft (raw, json) Hash identifier: R3aI6P+I9LTuaAzBl4nMTZoZPpJpgRlQ3oKjKzSL7O4= Subject key identifier: 75:AA:31:41:AE:17:3D:61:EF:C0:E6:3F:E9:5B:D9:23:EB:16:0C:D1 Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 Certificate issuer: /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft Manifest number: 51 Signing time: Sun 27 Apr 2025 06:09:20 +0000 Manifest this update: Sun 27 Apr 2025 06:09:19 +0000 Manifest next update: Sun 04 May 2025 06:09:19 +0000 Files and hashes: 1: PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl (hash: a1LeuTrwjM+9fyceSoMj1jFhCW99wi9cSnqfoHGXy8I=) 2: D428DE9420CD11F0B635AE70C4F9AE02.roa (hash: f3j7ze7nU/HicYJ4iTkEa5H/gPn17vSx4mQuxNQzZnw=) 3: 8284033420CD11F0BCFE4A70C4F9AE02.roa (hash: VRnXPjHcpYrC4h2blRdJhGhCl3ndeqDoavQMjgsusDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54 Validity Not Before: Apr 27 06:09:19 2025 GMT Not After : May 4 06:09:19 2025 GMT Subject: CN=680dca0f-db31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:a7:6c:48:32:f2:ae:e6:66:3d:15:fd:b6: c4:aa:81:ca:2c:0a:c4:86:f9:d1:a6:3a:ab:a5:44: 49:8d:49:ce:13:f6:08:20:42:85:c9:7e:81:00:f6: 6c:25:97:a0:56:fc:19:c7:81:0c:d8:87:78:a7:5d: 59:c5:5c:1f:79:a7:f9:be:f4:b9:80:29:e4:c1:04: a7:e6:fd:49:5d:da:21:13:4d:d6:92:82:3f:2d:75: 79:b6:d7:c8:46:82:98:5f:d8:f2:0d:2e:bf:47:51: 83:12:d8:d5:d4:59:ef:25:a3:37:f9:76:d6:11:e0: c6:9b:ce:df:7f:50:02:3b:f4:1f:90:db:96:08:e1: a3:72:ee:6b:c1:d7:e8:7d:60:83:7a:60:85:6e:64: 00:24:36:ce:47:e0:d4:97:d9:05:c0:54:1c:c5:d9: 64:ef:db:d7:9d:dc:3c:a2:45:6a:63:c9:08:f7:1b: fe:ab:29:4b:b6:a4:85:cd:df:2f:9e:89:c0:a6:af: 6c:db:96:1b:3b:45:37:c1:98:e3:6d:31:e1:39:24: bf:0a:2a:9d:0e:71:53:6b:3f:d7:f8:7b:fe:26:b8: e8:ec:12:3b:30:b9:c9:bb:73:8a:d8:9c:10:3e:30: 0a:df:cc:af:9f:7e:f4:53:30:51:37:6d:51:13:ce: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AA:31:41:AE:17:3D:61:EF:C0:E6:3F:E9:5B:D9:23:EB:16:0C:D1 X509v3 Authority Key Identifier: keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8c:92:0b:33:7f:1d:94:db:ac:2f:de:79:ca:65:12:75:ff: 04:4d:17:30:a7:ae:1b:44:7a:99:63:4e:46:07:e6:e6:a0:d2: fa:30:e7:9a:de:51:95:4d:80:d4:ec:93:b3:01:a1:17:4a:98: ee:26:e6:2e:ad:02:cd:02:33:8a:fc:d2:6c:0f:9d:18:47:5a: 75:0b:ea:3f:b3:4d:a3:57:31:e0:09:f1:27:8f:58:a0:1c:fe: c7:56:d0:4a:6c:0a:37:1f:03:c8:bf:c2:a8:09:98:89:cf:29: 6b:62:c3:58:9d:e9:cb:87:61:10:c2:bb:c2:8a:24:48:1e:0b: 86:45:08:99:e4:ee:ab:d6:5b:5f:6d:45:7b:34:c3:17:54:59: aa:34:ce:9c:f2:00:4e:bb:4b:0d:e8:17:24:8d:2a:4a:fc:0c: 5f:01:a6:88:8b:5b:6c:cc:51:35:9d:8e:a6:91:7e:1a:60:26: 83:1f:67:bf:ac:35:86:08:e7:b1:9f:18:8d:b4:ba:f0:64:55: ce:76:df:89:44:f5:28:95:5c:9d:f3:2a:d9:f3:b3:74:3b:79: cc:fa:f4:5a:ed:87:00:37:fc:6a:ac:ca:a8:fd:74:a8:4e:8b: 19:62:82:8b:b7:df:16:b2:f6:96:56:0b:a1:f1:c5:d8:b2:52: c5:e3:82:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDg5QjExMC8GA1UEBRMoM0M3NjhGMEMyMzIzRDQ2RDMyMUU4QUM5OTNFNzVCMEIx QjgyMUU1NDAeFw0yNTA0MjcwNjA5MTlaFw0yNTA1MDQwNjA5MTlaMBgxFjAUBgNV BAMTDTY4MGRjYTBmLWRiMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcVqdsSDLyruZmPRX9tsSqgcosCsSG+dGmOqulREmNSc4T9gggQoXJfoEA9mwl l6BW/BnHgQzYh3inXVnFXB95p/m+9LmAKeTBBKfm/Uld2iETTdaSgj8tdXm218hG gphf2PINLr9HUYMS2NXUWe8lozf5dtYR4Mabzt9/UAI79B+Q25YI4aNy7mvB1+h9 YIN6YIVuZAAkNs5H4NSX2QXAVBzF2WTv29ed3DyiRWpjyQj3G/6rKUu2pIXN3y+e icCmr2zblhs7RTfBmONtMeE5JL8KKp0OcVNrP9f4e/4muOjsEjswucm7c4rYnBA+ MArfzK+ffvRTMFE3bVETzsNHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdaoxQa4X PWHvwOY/6VvZI+sWDNEwHwYDVR0jBBgwFoAUPHaPDCMj1G0yHorJk+dbCxuCHlQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODlCLzFCQ0Q0M0I2QjEx MTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcweUhvckprLWRiQ3h1Q0hs US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEhhUERDTWoxRzB5SG9ySmstZGJDeHVDSGxRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw ODlCLzFCQ0Q0M0I2QjExMTExRUY4RTIzMDU2RkM0RjlBRTAyL1BIYVBEQ01qMUcw eUhvckprLWRiQ3h1Q0hsUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeMkgszfx2U26wv3nnKZRJ1/wRNFzCnrhtEepljTkYH5uag0vow55re UZVNgNTsk7MBoRdKmO4m5i6tAs0CM4r80mwPnRhHWnUL6j+zTaNXMeAJ8SePWKAc /sdW0EpsCjcfA8i/wqgJmInPKWtiw1id6cuHYRDCu8KKJEgeC4ZFCJnk7qvWW19t RXs0wxdUWao0zpzyAE67Sw3oFySNKkr8DF8BpoiLW2zMUTWdjqaRfhpgJoMfZ7+s NYYI57GfGI20uvBkVc5234lE9SiVXJ3zKtnzs3Q7ecz69FrthwA3/Gqsyqj9dKhO ixligou33xay9pZWC6HxxdiyUsXjgus= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net