$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: Di5cPEuSpEWm9tJTseKjT2eHsakPGnxcT5Aiq3O50vo= Subject key identifier: 1E:D8:86:EB:FD:64:85:E5:C1:2B:4A:90:AC:16:BE:FB:E1:DD:F4:FE Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 48 Signing time: Sun 27 Apr 2025 06:13:43 +0000 Manifest this update: Sun 27 Apr 2025 06:13:43 +0000 Manifest next update: Sun 04 May 2025 06:13:43 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: 6wXem3+PSkOFyDNcg+OHp8ogM4hfBIW6P0/K1QIUqXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Apr 27 06:13:43 2025 GMT Not After : May 4 06:13:43 2025 GMT Subject: CN=680dcb17-c63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a0:5a:5c:e3:3c:c8:8c:b0:a4:18:db:17:74: a9:b8:cc:61:64:59:05:c2:ee:64:7b:fd:11:52:00: 69:d8:1a:ed:e1:47:30:84:01:c7:2b:82:53:a0:5f: 08:b7:43:1c:c4:25:e1:f2:3a:ac:f8:d3:ae:23:77: 9f:f5:bc:fc:07:76:b9:40:f7:09:8d:43:bd:02:12: d7:3e:78:81:6a:04:cb:52:cf:4d:ec:25:e6:2d:dd: 9b:09:76:12:00:3f:ee:5f:0c:13:87:e8:f7:fb:1e: d6:57:c2:e8:17:a5:d5:16:b4:8c:25:cb:6b:5b:c4: 5b:73:3e:bd:2d:22:ec:56:f7:3b:c4:47:a3:0f:b5: 59:9c:a4:89:68:c1:50:77:13:4b:e2:c5:c2:a2:da: 9e:df:7b:ac:d3:fe:56:35:ce:5a:24:7b:a4:cf:b1: 15:f1:d7:8f:b4:5f:79:7e:48:88:76:8b:b6:7f:6b: 79:5f:80:49:e5:9d:e4:ac:fa:0b:40:f7:59:ea:8b: 36:34:29:b5:71:67:a4:29:19:94:b9:b8:9b:d4:b2: 8c:26:b2:80:0a:1f:c6:54:73:2c:79:fd:d7:de:db: 86:61:3d:c9:7d:08:75:df:e2:54:4b:91:5a:64:1b: 6c:1c:e7:07:37:24:e6:e0:21:e5:29:72:9b:f7:90: c9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:D8:86:EB:FD:64:85:E5:C1:2B:4A:90:AC:16:BE:FB:E1:DD:F4:FE X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ca:f1:bc:e0:fd:a3:35:9f:29:cc:50:ee:96:a7:5a:35:16: f4:e3:50:4b:19:f1:c1:07:ef:3e:bc:22:12:d6:45:36:a1:29: 75:26:86:3d:e5:aa:f1:47:35:1f:75:a6:88:d0:15:44:17:0c: 99:5b:bf:e7:10:22:44:64:09:29:c1:f8:3f:be:b6:6e:30:7f: 8a:e9:13:62:71:5b:41:d6:86:67:cb:3d:48:af:dd:a8:43:66: ea:72:19:44:85:48:fd:f6:8f:be:a2:ac:88:68:82:7f:d5:45: 54:de:85:55:66:2c:4a:53:0d:44:08:18:fd:c7:e7:6c:8d:f4: 7b:ae:9e:37:2c:5e:38:d7:d1:de:1e:a1:32:ea:3d:f3:69:34: 1b:4f:32:db:13:e5:22:fc:27:97:04:39:f6:26:de:41:c3:ca: fb:e0:f6:93:4d:9d:80:63:e5:e1:42:22:c3:c7:5d:f3:38:07: 9f:bf:d0:c1:47:6d:93:32:dd:ce:3f:ae:4b:d2:49:51:be:61: 34:8e:f8:1e:61:a4:90:f1:b3:91:91:4e:9a:f7:8a:d4:e6:3f: e9:e1:55:76:7e:b9:de:01:27:05:db:b5:53:51:a0:6a:29:d0: 32:d0:98:35:1f:59:58:29:94:9b:7c:b0:ff:7a:6d:0f:e7:b4: ac:09:36:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTA0MjcwNjEzNDNaFw0yNTA1MDQwNjEzNDNaMBgxFjAUBgNV BAMTDTY4MGRjYjE3LWM2M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5oFpc4zzIjLCkGNsXdKm4zGFkWQXC7mR7/RFSAGnYGu3hRzCEAccrglOgXwi3 QxzEJeHyOqz4064jd5/1vPwHdrlA9wmNQ70CEtc+eIFqBMtSz03sJeYt3ZsJdhIA P+5fDBOH6Pf7HtZXwugXpdUWtIwly2tbxFtzPr0tIuxW9zvER6MPtVmcpIlowVB3 E0vixcKi2p7fe6zT/lY1zloke6TPsRXx14+0X3l+SIh2i7Z/a3lfgEnlneSs+gtA 91nqizY0KbVxZ6QpGZS5uJvUsowmsoAKH8ZUcyx5/dfe24ZhPcl9CHXf4lRLkVpk G2wc5wc3JObgIeUpcpv3kMl1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHtiG6/1k heXBK0qQrBa+++Hd9P4wHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfK8bzg/aM1nynMUO6Wp1o1FvTjUEsZ8cEH7z68IhLWRTahKXUmhj3l qvFHNR91pojQFUQXDJlbv+cQIkRkCSnB+D++tm4wf4rpE2JxW0HWhmfLPUiv3ahD ZupyGUSFSP32j76irIhogn/VRVTehVVmLEpTDUQIGP3H52yN9HuunjcsXjjX0d4e oTLqPfNpNBtPMtsT5SL8J5cEOfYm3kHDyvvg9pNNnYBj5eFCIsPHXfM4B5+/0MFH bZMy3c4/rkvSSVG+YTSO+B5hpJDxs5GRTpr3itTmP+nhVXZ+ud4BJwXbtVNRoGop 0DLQmDUfWVgplJt8sP96bQ/ntKwJNqM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net