$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: XMZwngkjspuvPA86IrxbroubQl7zxpqyRuRbB/QYJGc= Subject key identifier: 25:61:19:F5:02:90:A0:22:A1:04:67:FE:EA:6F:95:3F:68:D6:B2:A6 Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 3481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 347C Signing time: Mon 28 Apr 2025 15:07:42 +0000 Manifest this update: Mon 28 Apr 2025 15:07:42 +0000 Manifest next update: Mon 05 May 2025 15:07:42 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: AK0YcaORZnln2pfhLlTG140GBkBBGjbFshV9a6nC0IQ=) 2: 450B9058E3B511EF8A23824BC4F9AE02.roa (hash: r37bpTTUcU1lH0DUSQwsabLyee9wQt2kebjFicJO4a8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13441 (0x3481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: Apr 28 15:07:42 2025 GMT Not After : May 5 15:07:42 2025 GMT Subject: CN=680f99be-2cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:1a:ba:49:03:fb:d1:37:1a:2a:7d:bd:27: 3c:ab:cd:5d:8c:57:dc:24:09:c6:95:4f:bb:36:4c: 28:9a:30:b9:39:38:db:ad:aa:77:89:96:71:78:4c: 95:3f:55:ea:9c:c8:64:59:0b:59:3f:72:d6:fa:dd: 5e:9b:da:70:f6:0c:f7:79:1a:79:fb:1d:de:95:bd: 67:74:98:d5:4d:b6:0a:be:c5:1e:8f:0e:46:da:d6: 22:79:43:c0:65:c1:5b:9a:33:ad:f8:8f:67:87:8b: 05:a9:cd:58:31:55:56:68:16:f2:c6:48:b0:3c:cb: 52:2e:fb:39:a0:02:43:97:e0:8d:e4:b7:9e:d5:26: f4:9f:2f:74:cd:9e:4b:99:96:3b:14:c5:9c:7d:45: 09:e5:1d:dd:38:58:e2:4f:99:00:eb:6a:a1:90:6c: f5:98:98:fa:c7:ff:77:bf:5a:3a:6a:b1:6d:d4:2d: 59:c2:34:a3:12:94:6a:92:03:5b:ad:57:b3:59:ad: 34:fd:dd:fb:64:9b:8f:d5:4a:cc:8b:b2:a3:10:25: d9:4b:e3:c2:2b:06:6d:11:c9:5f:fa:f3:db:4b:79: ac:77:5c:f3:05:de:4b:ab:1d:4b:ab:82:a3:a8:b4: e3:b5:ed:dd:90:d7:1d:0c:98:1c:05:7c:20:2f:04: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:61:19:F5:02:90:A0:22:A1:04:67:FE:EA:6F:95:3F:68:D6:B2:A6 X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:69:67:1b:2f:04:72:e3:27:6d:72:99:59:ad:ae:08:f1:85: 3b:25:5f:54:b6:85:c4:45:77:85:7a:89:9e:6b:e1:e0:a0:df: 1f:6c:45:75:c9:19:88:fa:94:45:28:f0:30:cb:39:21:d2:ca: 8d:d6:be:43:79:99:7c:93:f0:d6:b1:f9:de:17:0b:36:6b:34: 41:17:ee:0c:82:71:28:33:5a:85:b3:93:36:8d:7a:8c:60:66: b6:50:e7:4f:2d:e5:eb:85:0b:68:f8:82:a4:76:c1:77:2c:11: 5f:3b:8e:97:76:3e:0f:26:1d:a2:5a:8d:7a:39:25:e8:80:62: 48:2a:ff:af:44:5d:ab:36:7a:a4:e6:3e:30:c2:36:ef:51:ec: 2d:56:13:e1:3b:2e:bf:48:58:dc:95:02:c8:d8:02:a9:3a:75: e5:60:95:e0:a2:0a:8f:10:a7:11:fd:16:68:b9:e3:6d:ef:d2: b8:04:51:73:73:b9:0d:3e:e5:0c:28:5d:bc:f4:e1:b4:d9:f8: a9:c0:9d:c6:ef:58:8a:33:9c:fa:5e:6b:9d:f7:73:ca:7b:be: 1c:23:f1:fb:44:cc:fa:82:b4:a3:ec:6a:7c:03:e7:b2:99:c3: c9:03:7a:ab:5f:8f:49:32:30:60:b1:84:ee:fd:93:34:ee:60: dd:36:77:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjUwNDI4MTUwNzQyWhcNMjUwNTA1MTUwNzQyWjAYMRYwFAYD VQQDEw02ODBmOTliZS0yY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN0aukkD+9E3Gip9vSc8q81djFfcJAnGlU+7NkwomjC5OTjbrap3iZZxeEyV P1XqnMhkWQtZP3LW+t1em9pw9gz3eRp5+x3elb1ndJjVTbYKvsUejw5G2tYieUPA ZcFbmjOt+I9nh4sFqc1YMVVWaBbyxkiwPMtSLvs5oAJDl+CN5Lee1Sb0ny90zZ5L mZY7FMWcfUUJ5R3dOFjiT5kA62qhkGz1mJj6x/93v1o6arFt1C1ZwjSjEpRqkgNb rVezWa00/d37ZJuP1UrMi7KjECXZS+PCKwZtEclf+vPbS3msd1zzBd5Lqx1Lq4Kj qLTjte3dkNcdDJgcBXwgLwRCowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVhGfUC kKAioQRn/upvlT9o1rKmMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZaWcbLwRy4ydtcplZra4I8YU7JV9UtoXERXeFeomea+HgoN8fbEV1 yRmI+pRFKPAwyzkh0sqN1r5DeZl8k/DWsfneFws2azRBF+4MgnEoM1qFs5M2jXqM YGa2UOdPLeXrhQto+IKkdsF3LBFfO46Xdj4PJh2iWo16OSXogGJIKv+vRF2rNnqk 5j4wwjbvUewtVhPhOy6/SFjclQLI2AKpOnXlYJXgogqPEKcR/RZoueNt79K4BFFz c7kNPuUMKF289OG02fipwJ3G71iKM5z6Xmud93PKe74cI/H7RMz6grSj7Gp8A+ey mcPJA3qrX49JMjBgsYTu/ZM07mDdNndZ -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net