$ rpki-client -vvf rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft File: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft (raw, json) Hash identifier: YyRPRxGgaB/9k4yD4Iektq+n2e+Xz5N5ZuwruQ3Ehpw= Subject key identifier: 60:A1:6D:E1:E0:8F:1C:1A:9F:BF:2F:40:84:C1:D0:57:D1:10:05:C6 Authority key identifier: DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C Certificate issuer: /CN=A9199AFB/serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Certificate serial: 02F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft Manifest number: 02ED Signing time: Sun 27 Apr 2025 00:56:53 +0000 Manifest this update: Sun 27 Apr 2025 00:56:53 +0000 Manifest next update: Sun 04 May 2025 00:56:52 +0000 Files and hashes: 1: 3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl (hash: 9v/fFkKYhJ9TOdN7x2Yo/HHc4PjDrJvVK/MUrgleKLs=) 2: 9E9EC628D9C511EC81B54F47C4F9AE02.roa (hash: eVqCt6jrx+C1JB/X7OKow2VBehCM/YMsmg/5OjY9iwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199AFB, serialNumber=DC617CFAEDF8BFB0A3ECF7D67142E6C1D526435C Validity Not Before: Apr 27 00:56:53 2025 GMT Not After : May 4 00:56:52 2025 GMT Subject: CN=680d80d5-c408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:cd:94:32:07:00:50:38:f8:29:a9:93:74: 08:95:cc:6f:73:57:a1:bc:e2:48:04:f4:ce:a8:08: 26:13:e0:d0:64:21:ec:05:84:f5:5c:30:9b:ca:81: 57:d3:99:dc:79:fb:e3:40:a0:6e:0e:3e:c4:0a:7e: 5e:65:2c:9c:da:78:f4:c0:3f:ac:b0:3c:72:f0:d4: df:b4:ae:0a:5c:16:7a:e3:f9:32:f4:cb:ee:ae:f2: be:46:bc:2f:49:f6:9c:d0:1b:3b:e7:86:db:db:72: e9:cb:ca:32:0f:14:5a:be:c5:a8:90:7a:e2:ef:b5: 8a:bc:e7:50:8b:1f:46:ff:20:fb:50:b3:42:84:23: 67:bd:ab:78:9f:9b:84:33:f4:52:35:50:0c:9e:80: 7e:62:20:61:59:8c:05:1f:29:31:54:ec:75:39:7a: 5b:fa:45:a2:cf:3a:8a:41:00:d4:cb:b1:87:79:d9: d5:dd:99:6a:c8:dd:b1:1f:f0:bd:cb:3e:27:7f:e5: 7a:11:fc:06:ae:5e:c4:c8:56:2e:8d:90:fe:8a:64: 07:a0:a7:6c:7b:ba:2b:c5:cb:bf:7d:b5:e3:c7:47: ff:47:72:01:b5:d9:e7:5e:26:0d:1b:7f:1b:5c:a7: a6:73:cd:39:87:f4:c3:36:37:d8:4a:25:28:1b:86: 4d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:6D:E1:E0:8F:1C:1A:9F:BF:2F:40:84:C1:D0:57:D1:10:05:C6 X509v3 Authority Key Identifier: keyid:DC:61:7C:FA:ED:F8:BF:B0:A3:EC:F7:D6:71:42:E6:C1:D5:26:43:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GF8-u34v7Cj7PfWcULmwdUmQ1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199AFB/4434D590D9C211EC887F9846C4F9AE02/3GF8-u34v7Cj7PfWcULmwdUmQ1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:17:2e:dc:49:ce:18:fa:a2:1b:6a:e0:ee:7d:36:5e:01:d7: 39:97:2c:38:ba:21:50:d1:3d:89:67:8c:84:3e:62:19:fa:99: f0:7c:e5:8e:e2:65:c5:96:95:44:38:49:48:2e:aa:bd:79:93: 2d:bf:30:2a:b0:1e:ab:78:ff:48:85:64:8f:f6:9e:1b:4c:9b: 18:72:d7:8a:5f:26:77:8c:ca:07:d4:a4:80:ab:d9:b9:93:ee: 16:a9:e5:c7:17:e2:c7:72:3f:ea:bf:5a:7f:ab:ae:8a:36:d4: 96:fd:d3:0c:05:8c:c8:13:d8:50:ea:84:90:bd:97:75:6a:36: 73:0b:73:19:2a:f6:00:43:d5:fb:f8:d0:ad:e8:cb:e6:d0:0d: 1c:1b:23:df:f3:e8:c5:65:c1:76:a4:c1:fc:72:b7:68:7a:7b: 14:2f:07:c4:5d:ad:ba:72:e2:e6:22:43:53:3e:be:d6:ea:e0: b8:6a:19:c6:14:62:6d:e4:43:cf:f7:c0:ef:7d:eb:fb:9b:be: 1a:cd:08:dd:04:53:f8:ca:97:5e:62:56:3a:a2:0a:1e:53:ad: c0:e0:50:7b:7a:f0:bb:83:81:f1:d8:a2:03:6b:7b:cd:f9:5b: 83:14:6b:96:77:93:f1:06:d5:14:f8:5d:f3:76:bb:4c:8a:1f: 24:61:de:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBRkIxMTAvBgNVBAUTKERDNjE3Q0ZBRURGOEJGQjBBM0VDRjdENjcxNDJFNkMx RDUyNjQzNUMwHhcNMjUwNDI3MDA1NjUzWhcNMjUwNTA0MDA1NjUyWjAYMRYwFAYD VQQDEw02ODBkODBkNS1jNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBLNlDIHAFA4+Cmpk3QIlcxvc1ehvOJIBPTOqAgmE+DQZCHsBYT1XDCbyoFX 05ncefvjQKBuDj7ECn5eZSyc2nj0wD+ssDxy8NTftK4KXBZ64/ky9MvurvK+Rrwv Sfac0Bs754bb23Lpy8oyDxRavsWokHri77WKvOdQix9G/yD7ULNChCNnvat4n5uE M/RSNVAMnoB+YiBhWYwFHykxVOx1OXpb+kWizzqKQQDUy7GHednV3ZlqyN2xH/C9 yz4nf+V6EfwGrl7EyFYujZD+imQHoKdse7orxcu/fbXjx0f/R3IBtdnnXiYNG38b XKemc805h/TDNjfYSiUoG4ZNywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGChbeHg jxwan78vQITB0FfREAXGMB8GA1UdIwQYMBaAFNxhfPrt+L+wo+z31nFC5sHVJkNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUFGQi80NDM0RDU5MEQ5 QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3Q2o3UGZXY1VMbXdkVW1R MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNHRjgtdTM0djdDajdQZldjVUxtd2RVbVExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUFGQi80NDM0RDU5MEQ5QzIxMUVDODg3Rjk4NDZDNEY5QUUwMi8zR0Y4LXUzNHY3 Q2o3UGZXY1VMbXdkVW1RMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBFy7cSc4Y+qIbauDufTZeAdc5lyw4uiFQ0T2JZ4yEPmIZ+pnwfOWO 4mXFlpVEOElILqq9eZMtvzAqsB6reP9IhWSP9p4bTJsYcteKXyZ3jMoH1KSAq9m5 k+4WqeXHF+LHcj/qv1p/q66KNtSW/dMMBYzIE9hQ6oSQvZd1ajZzC3MZKvYAQ9X7 +NCt6Mvm0A0cGyPf8+jFZcF2pMH8crdoensULwfEXa26cuLmIkNTPr7W6uC4ahnG FGJt5EPP98Dvfev7m74azQjdBFP4ypdeYlY6ogoeU63A4FB7evC7g4Hx2KIDa3vN +VuDFGuWd5PxBtUU+F3zdrtMih8kYd5q -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net