$ rpki-client -vvf rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft File: GF_2ZH4elndQE3e1UVR5uelGEGc.mft (raw, json) Hash identifier: wbNYTkIFk/Qiji3/LW6MOW21z7ePhOCSt18XtXRLaQY= Subject key identifier: 31:71:76:DC:BA:9C:93:91:05:0A:05:C9:4D:90:07:61:23:95:3B:E3 Authority key identifier: 18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 Certificate issuer: /CN=A9193C85/serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Certificate serial: 1182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft Manifest number: 1177 Signing time: Mon 28 Apr 2025 17:26:59 +0000 Manifest this update: Mon 28 Apr 2025 17:26:59 +0000 Manifest next update: Mon 05 May 2025 17:26:59 +0000 Files and hashes: 1: GF_2ZH4elndQE3e1UVR5uelGEGc.crl (hash: LlpnDneqpWMOrvDxXTovKxquOmGjzb/M2ZGKDlVAmrc=) 2: A1E87910832A11ECA409521EC4F9AE02.roa (hash: pWwzKrBi4ex9pqtRPtIPRabSwqTwDTnYV8iW2v8i1Fg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4482 (0x1182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193C85, serialNumber=185FF6647E1E9677501377B5515479B9E9461067 Validity Not Before: Apr 28 17:26:59 2025 GMT Not After : May 5 17:26:59 2025 GMT Subject: CN=680fba63-24bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:cc:75:30:73:d9:8c:42:4d:02:e6:2f:48: 0d:cf:d9:92:28:d1:92:03:a8:a7:f5:3b:68:ab:ea: 78:bc:9d:e9:be:da:89:52:58:47:fb:0e:66:17:29: 2e:fa:b5:1d:37:a6:eb:10:4c:b1:4b:df:95:fa:a2: e6:a2:ab:df:9b:76:95:c5:d6:11:2e:23:be:65:27: d4:0a:e5:92:12:42:e9:9d:de:ac:de:46:76:95:61: cf:30:cf:bb:f2:80:51:aa:4e:38:ae:62:45:43:d6: 74:df:1b:91:78:2b:2d:f9:98:b8:4f:7b:16:e4:61: 35:b9:46:5c:34:1d:78:b0:e8:01:19:db:e8:5a:1e: 83:09:1f:21:b8:54:af:e5:39:71:9e:5c:2b:a9:e6: 10:cc:e4:83:73:39:be:0c:fc:e1:c9:34:ae:bb:82: 65:f7:f1:01:32:7e:3e:e6:cd:c9:cc:f2:65:ce:b1: 83:2c:4d:53:2b:c7:48:9b:44:e7:fc:fd:f2:11:ee: 2e:eb:17:d1:14:37:5a:a9:58:de:0d:c6:ae:6b:0b: 71:d2:75:6a:0d:8d:95:b6:9a:10:7e:e0:f1:3f:a2: f6:22:87:4e:00:4b:2c:39:0f:8b:1b:4f:d5:ed:5e: 87:76:d7:00:27:89:b2:dd:a5:a1:74:95:71:54:38: 50:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:76:DC:BA:9C:93:91:05:0A:05:C9:4D:90:07:61:23:95:3B:E3 X509v3 Authority Key Identifier: keyid:18:5F:F6:64:7E:1E:96:77:50:13:77:B5:51:54:79:B9:E9:46:10:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GF_2ZH4elndQE3e1UVR5uelGEGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193C85/4FF4CB72FDE011E88EDE4513C4F9AE02/GF_2ZH4elndQE3e1UVR5uelGEGc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:45:9f:ac:2c:93:86:42:cd:55:17:c7:b2:c6:3a:9b:e5:3f: 48:69:33:a4:0b:1b:4a:1e:a3:7c:06:5c:09:2b:0f:b0:7e:55: 7c:ab:78:8a:da:7b:ac:b7:55:05:aa:8d:6d:c2:7a:39:bc:01: 52:58:fa:16:89:87:d1:c4:c5:9d:77:6e:de:a3:41:8c:cd:28: 5a:69:ef:50:79:db:90:0d:a1:e3:d5:40:31:a2:01:50:20:a7: 68:25:32:2f:d9:0a:82:14:11:6d:20:2d:0a:a7:52:f8:f6:6e: c5:45:34:49:5e:33:82:a6:5e:d4:dc:57:22:e1:7e:c2:db:75: 94:d6:5b:a4:ba:64:24:a9:5b:c2:1f:cb:d9:d0:11:37:a4:21: 0f:04:e8:dc:ea:be:35:54:8d:95:85:a2:18:7a:a2:84:8c:6c: aa:44:c6:d2:c6:1c:28:09:86:cc:6f:91:84:f2:f9:22:88:f8: 66:b8:4f:b8:64:28:bb:8a:e6:84:9b:23:cf:ae:9b:76:36:d3: 65:04:ca:c3:89:e7:9e:23:df:0f:d6:f1:77:8c:e4:a2:e5:c6: fd:6c:bf:9c:70:99:c4:4d:56:f0:e9:4f:df:30:bf:ff:36:4b: 6c:52:0b:a0:b5:76:46:31:0c:03:80:b8:38:7c:af:d0:ff:69: f9:5c:52:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNDODUxMTAvBgNVBAUTKDE4NUZGNjY0N0UxRTk2Nzc1MDEzNzdCNTUxNTQ3OUI5 RTk0NjEwNjcwHhcNMjUwNDI4MTcyNjU5WhcNMjUwNTA1MTcyNjU5WjAYMRYwFAYD VQQDEw02ODBmYmE2My0yNGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eTMdTBz2YxCTQLmL0gNz9mSKNGSA6in9Ttoq+p4vJ3pvtqJUlhH+w5mFyku +rUdN6brEEyxS9+V+qLmoqvfm3aVxdYRLiO+ZSfUCuWSEkLpnd6s3kZ2lWHPMM+7 8oBRqk44rmJFQ9Z03xuReCst+Zi4T3sW5GE1uUZcNB14sOgBGdvoWh6DCR8huFSv 5TlxnlwrqeYQzOSDczm+DPzhyTSuu4Jl9/EBMn4+5s3JzPJlzrGDLE1TK8dIm0Tn /P3yEe4u6xfRFDdaqVjeDcauawtx0nVqDY2VtpoQfuDxP6L2IodOAEssOQ+LG0/V 7V6HdtcAJ4my3aWhdJVxVDhQAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFxdty6 nJORBQoFyU2QB2EjlTvjMB8GA1UdIwQYMBaAFBhf9mR+HpZ3UBN3tVFUebnpRhBn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0M4NS80RkY0Q0I3MkZE RTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxuZFFFM2UxVVZSNXVlbEdF R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGXzJaSDRlbG5kUUUzZTFVVlI1dWVsR0VHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0M4NS80RkY0Q0I3MkZERTAxMUU4OEVERTQ1MTNDNEY5QUUwMi9HRl8yWkg0ZWxu ZFFFM2UxVVZSNXVlbEdFR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPRZ+sLJOGQs1VF8eyxjqb5T9IaTOkCxtKHqN8BlwJKw+wflV8q3iK 2nust1UFqo1twno5vAFSWPoWiYfRxMWdd27eo0GMzShaae9QeduQDaHj1UAxogFQ IKdoJTIv2QqCFBFtIC0Kp1L49m7FRTRJXjOCpl7U3Fci4X7C23WU1lukumQkqVvC H8vZ0BE3pCEPBOjc6r41VI2VhaIYeqKEjGyqRMbSxhwoCYbMb5GE8vkiiPhmuE+4 ZCi7iuaEmyPPrpt2NtNlBMrDieeeI98P1vF3jOSi5cb9bL+ccJnETVbw6U/fML// NktsUgugtXZGMQwDgLg4fK/Q/2n5XFKo -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:48 2025 by rpki-client on console.sobornost.net