$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft File: ux3tVEsnoTcZtI-wA3PNSeDehRc.mft (raw, json) Hash identifier: MyyOx3x6PNmWZd95d+fhspUK4NlH/azscpDa9BOl18I= Subject key identifier: 61:F8:28:1B:80:0E:31:47:0A:39:EB:70:54:D7:88:96:79:72:70:E2 Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft Manifest number: 08AB Signing time: Sat 26 Apr 2025 20:17:33 +0000 Manifest this update: Sat 26 Apr 2025 20:17:32 +0000 Manifest next update: Sat 03 May 2025 20:17:32 +0000 Files and hashes: 1: ux3tVEsnoTcZtI-wA3PNSeDehRc.crl (hash: dXGHgihPlNWbau3AjEtfqET69M9Rq1GizeKloJDmfUw=) 2: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (hash: HHCFckY7O591LILqzlA5i+TVYe0u7mT2Ya4XZsY3L5w=) 3: 2A7A051EB54B11EA85EE266DC4F9AE02.roa (hash: vv1GYbA2AyqRD7ZSBeebG8Ws0r4NHNq0J0Vkh/R0ypw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517 Validity Not Before: Apr 26 20:17:32 2025 GMT Not After : May 3 20:17:32 2025 GMT Subject: CN=680d3f5d-ef71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:49:b6:13:bd:2e:6c:2e:59:b0:5f:8b:c6:e3: e5:6b:c0:80:ce:42:e8:bc:e9:4c:82:7b:cc:ad:9c: cd:ac:86:8c:84:7a:35:2d:f9:c4:82:8f:8c:62:45: 4e:2f:e6:bc:7a:8e:44:3d:44:f6:b1:ee:69:92:4f: 89:0f:8b:23:d2:61:51:3a:92:4b:fb:e8:00:e7:26: 59:f2:a0:31:91:86:41:9d:c2:fc:47:4f:dc:23:27: c6:6d:c1:9a:6f:23:cd:ed:a7:63:9c:7b:58:c1:49: 07:74:e0:0f:62:aa:34:15:a3:02:8b:bb:ca:c1:74: 8b:89:71:48:0b:e2:0e:8c:9d:67:85:69:f9:59:e8: 1f:0d:26:61:20:61:bd:0d:a7:4e:a4:cf:f9:11:da: 76:32:bf:b5:61:37:aa:83:ae:b4:93:0d:d9:14:50: d9:ac:77:9c:82:8d:d3:e8:13:44:d5:01:26:6c:04: 3e:e3:2d:1c:2b:bf:5d:ec:0e:a9:6b:a4:5a:5f:b4: b1:61:2f:eb:85:3d:4e:0a:7e:15:58:1b:ee:1f:a6: 29:0d:23:71:48:83:6c:39:2a:0e:01:4f:c8:da:d7: fe:e3:90:5e:c1:66:77:b3:f6:df:ef:f7:6d:94:c6: 18:25:ac:a3:02:ed:5c:a7:30:8e:f3:ba:ed:14:66: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:28:1B:80:0E:31:47:0A:39:EB:70:54:D7:88:96:79:72:70:E2 X509v3 Authority Key Identifier: keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:a4:34:77:52:69:0e:c3:10:f0:65:97:39:86:1a:5f:5e:a9: ee:2d:7a:e1:34:17:bd:66:66:f5:fb:a7:ad:90:da:de:18:35: 3d:08:e4:56:6d:b1:51:25:88:d9:ec:cf:e2:7d:d7:7f:35:52: 78:02:7e:78:85:dd:f1:76:bf:e9:92:4a:a0:8d:ad:81:e8:0c: bf:56:cd:25:f6:63:0b:e0:f5:e6:bc:98:04:af:08:41:9d:86: 0d:6e:cc:2f:12:91:e4:1f:ff:47:bc:3d:32:dc:7e:e0:7a:14: 51:c9:d6:ee:90:e4:89:60:c1:39:37:32:40:99:a6:9c:7b:e7: 1c:bf:54:2d:ba:d3:83:6c:09:42:ad:6f:4e:fe:d2:7a:66:d2: 2d:5b:5b:ba:2f:f6:81:dd:32:68:43:f6:1b:83:91:c5:4d:0e: f4:b5:53:ca:63:50:e8:d3:40:f1:20:64:40:11:ad:b2:b2:c9: 12:f9:04:0e:24:c2:81:c9:86:71:76:fe:24:04:4d:6a:2c:fb: fd:ae:e0:2e:7c:99:31:55:54:2f:88:33:0a:5d:01:87:3e:30: 1d:67:27:99:d6:b6:23:e2:da:ca:f0:11:6f:0e:2a:8b:ae:b0: a4:02:29:b6:70:a4:bc:2e:4b:4b:a5:8d:ad:4a:34:7b:ab:63: 20:10:7d:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyM0MxMTAvBgNVBAUTKEJCMURFRDU0NEIyN0ExMzcxOUI0OEZCMDAzNzNDRDQ5 RTBERTg1MTcwHhcNMjUwNDI2MjAxNzMyWhcNMjUwNTAzMjAxNzMyWjAYMRYwFAYD VQQDEw02ODBkM2Y1ZC1lZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Um2E70ubC5ZsF+LxuPla8CAzkLovOlMgnvMrZzNrIaMhHo1LfnEgo+MYkVO L+a8eo5EPUT2se5pkk+JD4sj0mFROpJL++gA5yZZ8qAxkYZBncL8R0/cIyfGbcGa byPN7adjnHtYwUkHdOAPYqo0FaMCi7vKwXSLiXFIC+IOjJ1nhWn5WegfDSZhIGG9 DadOpM/5Edp2Mr+1YTeqg660kw3ZFFDZrHecgo3T6BNE1QEmbAQ+4y0cK79d7A6p a6RaX7SxYS/rhT1OCn4VWBvuH6YpDSNxSINsOSoOAU/I2tf+45BewWZ3s/bf7/dt lMYYJayjAu1cpzCO87rtFGbX3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH4KBuA DjFHCjnrcFTXiJZ5cnDiMB8GA1UdIwQYMBaAFLsd7VRLJ6E3GbSPsANzzUng3oUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTIzQy9FNTYyMUE2OEI1 NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9UY1p0SS13QTNQTlNlRGVo UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V4M3RWRXNub1RjWnRJLXdBM1BOU2VEZWhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTIzQy9FNTYyMUE2OEI1NDgxMUVBQjFGNTQwNjZDNEY5QUUwMi91eDN0VkVzbm9U Y1p0SS13QTNQTlNlRGVoUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVpDR3UmkOwxDwZZc5hhpfXqnuLXrhNBe9Zmb1+6etkNreGDU9CORW bbFRJYjZ7M/ifdd/NVJ4An54hd3xdr/pkkqgja2B6Ay/Vs0l9mML4PXmvJgErwhB nYYNbswvEpHkH/9HvD0y3H7gehRRydbukOSJYME5NzJAmaace+ccv1QtutODbAlC rW9O/tJ6ZtItW1u6L/aB3TJoQ/Ybg5HFTQ70tVPKY1Do00DxIGRAEa2ysskS+QQO JMKByYZxdv4kBE1qLPv9ruAufJkxVVQviDMKXQGHPjAdZyeZ1rYj4trK8BFvDiqL rrCkAim2cKS8LktLpY2tSjR7q2MgEH3K -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:06 2025 by rpki-client on console.sobornost.net