$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: lpJMS5tgQXYldK0hdE52GatDVOJkS5H8wroWi1n/5uA= Subject key identifier: D2:1A:F3:FD:50:5F:EE:56:27:9E:00:32:1D:73:4E:77:3F:67:71:B7 Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: 3E Signing time: Sun 27 Apr 2025 06:18:52 +0000 Manifest this update: Sun 27 Apr 2025 06:18:51 +0000 Manifest next update: Sun 04 May 2025 06:18:51 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: Qj1WXRA5QYy5hEPiICk6nlMO9B7rXzr+xpqGundU8oY=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: HaAP7uUg1XzzgFWY/CdSRARMCuA2gGNyuumYnBvV1lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: Apr 27 06:18:51 2025 GMT Not After : May 4 06:18:51 2025 GMT Subject: CN=680dcc4b-0a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:b9:c1:78:e4:7b:9b:f9:7b:a8:92:39:68: 74:c4:01:82:0d:8c:76:3b:11:a6:f5:33:c1:37:c4: df:fe:b8:4a:2b:19:41:44:3f:2a:2d:b7:b9:e8:ef: e3:43:c0:b5:05:ba:f4:32:1a:59:66:cc:0f:4f:a4: a4:4f:7f:4c:60:f2:dc:f7:45:c6:0e:ae:c5:b6:00: 5a:b2:dd:e8:d3:75:8c:8f:00:ff:47:31:41:dc:43: 49:95:d9:23:a2:8a:be:4e:c9:28:0f:d7:b6:f7:81: ee:8e:b9:07:bd:ea:d2:7b:39:17:1b:d2:ee:a7:6f: 77:d1:5c:84:37:7b:1c:3a:c7:aa:91:f4:66:3a:97: ee:b9:74:3f:84:38:18:7a:96:57:21:3b:5d:3a:c4: ce:6c:5e:33:da:b7:6f:01:6c:b6:41:6c:76:12:7b: a2:a4:8a:17:28:da:c9:90:ec:40:c9:e5:4b:99:2a: 17:83:82:2d:9e:2c:b1:32:fd:fb:16:22:4b:7f:ec: b0:1f:ad:06:6c:a2:03:02:4c:73:bc:24:e4:bf:23: 24:ef:1a:00:d9:0b:2b:26:22:c8:f3:c8:79:1d:bd: 63:5f:7d:2d:2a:61:df:0d:5f:ce:1a:a3:56:7d:a0: 2a:96:51:1a:cf:0d:d0:e6:a9:dd:60:47:a2:67:89: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1A:F3:FD:50:5F:EE:56:27:9E:00:32:1D:73:4E:77:3F:67:71:B7 X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:25:89:c3:b7:be:04:07:92:8c:68:48:d2:74:c3:91:d9:e6: 6d:a6:27:c1:b4:23:ea:96:1a:b2:f2:e2:fb:0e:ac:14:d1:1a: d9:4d:1a:97:68:a2:00:06:3f:85:1e:90:d2:cd:f7:6a:bb:86: 1c:de:4c:c1:07:d0:f0:41:8c:f7:c1:8f:32:ca:79:0a:65:60: a9:11:29:b0:14:94:fa:cd:a2:33:4c:b1:48:df:ca:10:73:0a: 2a:c9:91:72:1b:98:f6:9a:0d:c7:61:a8:5c:8a:7b:bb:3a:c6: 6c:0c:00:c8:0a:fe:83:73:ae:d1:00:a3:d3:db:a3:f3:28:79: 57:d8:ed:73:5d:51:a4:e4:59:27:42:dc:fe:4d:24:72:df:4d: 6b:a9:f2:48:88:8a:1c:94:29:fd:5e:3a:23:ae:23:c9:d2:5d: 2b:0d:f9:aa:c6:c7:de:39:d1:63:9b:f2:3d:98:30:3d:41:7d: 0f:36:04:4a:66:76:ba:6d:20:e4:61:62:cd:3d:d6:6e:5b:2a: 19:60:1a:24:2a:bc:b7:dd:94:d1:b8:1e:fa:48:ff:56:68:d0: 6c:a1:66:00:1a:35:74:c0:37:9a:5e:52:37:28:02:5a:1e:24: 8f:c1:9d:ca:5e:86:cc:6a:84:e8:9d:6e:fd:19:92:cc:b9:38: ad:09:5f:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDQTExMC8GA1UEBRMoQUU3M0I3MDU0OEZGNDIyRUQwMkQ1OUQxQ0EyNTc5M0Ew NUU5RTQyQTAeFw0yNTA0MjcwNjE4NTFaFw0yNTA1MDQwNjE4NTFaMBgxFjAUBgNV BAMTDTY4MGRjYzRiLTBhODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfDbnBeOR7m/l7qJI5aHTEAYINjHY7Eab1M8E3xN/+uEorGUFEPyott7no7+ND wLUFuvQyGllmzA9PpKRPf0xg8tz3RcYOrsW2AFqy3ejTdYyPAP9HMUHcQ0mV2SOi ir5OySgP17b3ge6OuQe96tJ7ORcb0u6nb3fRXIQ3exw6x6qR9GY6l+65dD+EOBh6 llchO106xM5sXjPat28BbLZBbHYSe6Kkihco2smQ7EDJ5UuZKheDgi2eLLEy/fsW Ikt/7LAfrQZsogMCTHO8JOS/IyTvGgDZCysmIsjzyHkdvWNffS0qYd8NX84ao1Z9 oCqWURrPDdDmqd1gR6JniYrnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0hrz/VBf 7lYnngAyHXNOdz9ncbcwHwYDVR0jBBgwFoAUrnO3BUj/Qi7QLVnRyiV5OgXp5Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2RENBLzUwMTA5ODc2Q0Ix RjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVD by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcm5PM0JVal9RaTdRTFZuUnlpVjVPZ1hwNUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 RENBLzUwMTA5ODc2Q0IxRjExRUZCN0FDMjc4NkM0RjlBRTAyL3JuTzNCVWpfUWk3 UUxWblJ5aVY1T2dYcDVDby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHIlicO3vgQHkoxoSNJ0w5HZ5m2mJ8G0I+qWGrLy4vsOrBTRGtlNGpdo ogAGP4UekNLN92q7hhzeTMEH0PBBjPfBjzLKeQplYKkRKbAUlPrNojNMsUjfyhBz CirJkXIbmPaaDcdhqFyKe7s6xmwMAMgK/oNzrtEAo9Pbo/MoeVfY7XNdUaTkWSdC 3P5NJHLfTWup8kiIihyUKf1eOiOuI8nSXSsN+arGx9450WOb8j2YMD1BfQ82BEpm drptIORhYs091m5bKhlgGiQqvLfdlNG4HvpI/1Zo0GyhZgAaNXTAN5peUjcoAloe JI/BncpehsxqhOidbv0Zksy5OK0JX4Y= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net