$ rpki-client -vvf rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft File: M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft (raw, json) Hash identifier: HOz/jnOnVO5O5gBpgsZnIj+qDEFmVRQy2e6SsdsdJXI= Subject key identifier: 69:C4:AE:50:41:21:FB:4C:AE:56:50:4A:82:0F:9A:63:21:D7:57:4E Authority key identifier: 33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 Certificate issuer: /CN=A919337F/serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft Manifest number: 0C93 Signing time: Mon 28 Apr 2025 18:22:24 +0000 Manifest this update: Mon 28 Apr 2025 18:22:24 +0000 Manifest next update: Mon 05 May 2025 18:22:24 +0000 Files and hashes: 1: M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl (hash: Sv3ZiadFm+kQo2iwQ0b+OaADt54vt1RS57TtjRWCEw4=) 2: D0566D20F25411E9AEDBEA62C4F9AE02.roa (hash: JRm3KZLihVfX2Mjt/YikIApeielUsAEctutVAu4actQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919337F, serialNumber=33740622DF86B3BFE7BF4ABD5DF1361587F03912 Validity Not Before: Apr 28 18:22:24 2025 GMT Not After : May 5 18:22:24 2025 GMT Subject: CN=680fc760-364d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:43:d8:c5:c3:51:2c:ec:67:1e:31:32:f2: ac:55:6c:f5:3b:65:c7:af:e7:a4:30:8d:89:cf:af: 20:30:95:19:04:29:08:37:31:db:de:8c:df:d3:ff: 70:ca:b8:5a:82:9a:71:58:b9:66:df:67:70:f7:65: 43:c4:75:64:ed:d1:f9:f6:f7:d5:16:7e:4a:91:46: 1e:e6:38:bf:c3:66:48:08:4f:85:18:27:85:86:19: 1d:a5:75:95:26:8c:d2:a3:cb:d0:d3:25:29:24:72: b8:10:dd:6d:ef:f1:79:f8:c3:1e:5f:71:a9:8b:c5: 6a:c2:f3:3e:2e:a8:ea:06:fb:c1:89:f8:e7:9a:4e: 60:a5:62:03:d2:d2:8b:af:eb:47:1c:d9:ed:2b:61: d3:60:8f:2a:b1:ce:86:94:48:76:1e:b6:d9:f4:39: 86:f8:94:34:3c:09:33:7f:f1:9e:8a:a2:ca:8d:bd: ec:3e:b5:98:be:d0:28:3b:c0:60:3e:92:b6:13:ff: 80:a3:e2:45:c1:30:82:21:85:af:69:d0:f6:3b:23: 99:f0:b4:32:9f:bb:b3:09:ef:16:0e:b3:5e:8d:3e: 38:ea:54:a3:ad:79:6e:2f:70:36:38:fe:ad:71:42: 0f:76:8c:47:3d:3b:82:52:9f:bb:fa:bb:a8:02:5e: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C4:AE:50:41:21:FB:4C:AE:56:50:4A:82:0F:9A:63:21:D7:57:4E X509v3 Authority Key Identifier: keyid:33:74:06:22:DF:86:B3:BF:E7:BF:4A:BD:5D:F1:36:15:87:F0:39:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3QGIt-Gs7_nv0q9XfE2FYfwORI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919337F/1E17E01CF25411E9AD3BFB61C4F9AE02/M3QGIt-Gs7_nv0q9XfE2FYfwORI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fa:dd:57:9a:fd:f9:46:cf:65:b7:a3:52:2a:54:ab:f1:8a: 45:43:10:e3:00:0b:ae:03:b9:a9:10:96:9d:83:0e:5a:1f:07: 48:01:f0:68:57:56:6b:83:6e:ca:8e:50:73:11:54:32:1f:b2: 8b:b5:2a:ce:ad:e0:1a:3e:3a:5d:e9:33:8f:80:f7:4f:32:26: df:01:c5:33:26:0a:fd:3c:2d:1e:1f:87:b0:22:b8:56:a5:95: cf:20:99:71:54:97:f5:b7:44:11:ab:48:4d:bb:86:41:fe:7e: b8:d8:7e:67:e2:d6:aa:14:3a:32:d6:34:be:c9:db:20:36:64: 4f:42:9a:df:78:59:d8:2d:fa:5a:04:59:df:87:d9:bd:29:05: d0:a9:2b:cf:13:fa:a9:75:07:ed:12:e4:8f:42:56:12:d1:c0: a5:35:64:25:18:d6:64:66:ae:fa:c6:71:d7:63:56:3e:8b:6f: 09:c2:41:48:0c:d0:91:cd:86:b2:8e:f5:48:cf:99:d7:de:ce: 7d:91:4e:57:38:68:63:40:61:fc:78:f0:33:56:a4:47:81:e9: af:73:69:8a:5e:91:25:74:13:b6:ca:74:e3:2b:ff:21:da:d0: de:18:1c:d2:5c:eb:88:f4:bd:57:3f:b0:c5:36:31:9c:e9:90: ca:db:71:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzN0YxMTAvBgNVBAUTKDMzNzQwNjIyREY4NkIzQkZFN0JGNEFCRDVERjEzNjE1 ODdGMDM5MTIwHhcNMjUwNDI4MTgyMjI0WhcNMjUwNTA1MTgyMjI0WjAYMRYwFAYD VQQDEw02ODBmYzc2MC0zNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8FD2MXDUSzsZx4xMvKsVWz1O2XHr+ekMI2Jz68gMJUZBCkINzHb3ozf0/9w yrhagppxWLlm32dw92VDxHVk7dH59vfVFn5KkUYe5ji/w2ZICE+FGCeFhhkdpXWV JozSo8vQ0yUpJHK4EN1t7/F5+MMeX3Gpi8VqwvM+LqjqBvvBifjnmk5gpWID0tKL r+tHHNntK2HTYI8qsc6GlEh2HrbZ9DmG+JQ0PAkzf/GeiqLKjb3sPrWYvtAoO8Bg PpK2E/+Ao+JFwTCCIYWvadD2OyOZ8LQyn7uzCe8WDrNejT446lSjrXluL3A2OP6t cUIPdoxHPTuCUp+7+ruoAl5YMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnErlBB IftMrlZQSoIPmmMh11dOMB8GA1UdIwQYMBaAFDN0BiLfhrO/579KvV3xNhWH8DkS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM3Ri8xRTE3RTAxQ0Yy NTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3X252MHE5WGZFMkZZZndP UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zUUdJdC1HczdfbnYwcTlYZkUyRllmd09SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM3Ri8xRTE3RTAxQ0YyNTQxMUU5QUQzQkZCNjFDNEY5QUUwMi9NM1FHSXQtR3M3 X252MHE5WGZFMkZZZndPUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw+t1Xmv35Rs9lt6NSKlSr8YpFQxDjAAuuA7mpEJadgw5aHwdIAfBo V1Zrg27KjlBzEVQyH7KLtSrOreAaPjpd6TOPgPdPMibfAcUzJgr9PC0eH4ewIrhW pZXPIJlxVJf1t0QRq0hNu4ZB/n642H5n4taqFDoy1jS+ydsgNmRPQprfeFnYLfpa BFnfh9m9KQXQqSvPE/qpdQftEuSPQlYS0cClNWQlGNZkZq76xnHXY1Y+i28JwkFI DNCRzYayjvVIz5nX3s59kU5XOGhjQGH8ePAzVqRHgemvc2mKXpEldBO2ynTjK/8h 2tDeGBzSXOuI9L1XP7DFNjGc6ZDK23FK -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:48 2025 by rpki-client on console.sobornost.net