$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json) Hash identifier: SHpFmqZ0TnQpkc91D+ozzhY+IzZKI+EFHZScBAQShGw= Subject key identifier: 30:52:07:72:D4:CA:84:FE:37:3A:F9:2F:2F:02:60:B0:23:5B:4C:ED Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Certificate serial: 347A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft Manifest number: 5FFC Signing time: Sat 26 Apr 2025 14:15:25 +0000 Manifest this update: Sat 26 Apr 2025 14:15:25 +0000 Manifest next update: Sat 03 May 2025 14:15:25 +0000 Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: RJVTF22NRKuSNBd5ZDqE+e+pFPckXV67GAeD3ykYnm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13434 (0x347a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37 Validity Not Before: Apr 26 14:15:25 2025 GMT Not After : May 3 14:15:25 2025 GMT Subject: CN=680cea7d-e2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:d7:a3:b9:b3:fa:cc:50:fb:27:dc:7a:c4: f4:e0:95:44:1c:1c:75:d4:45:a7:52:59:bb:12:c9: 4c:51:ab:85:42:c9:3d:41:d3:79:99:c4:ce:93:88: 25:41:e1:39:23:e1:61:69:40:34:b6:9e:bb:5d:28: 60:ad:4a:60:1e:5c:e9:cd:86:5d:b1:b5:7e:f6:d5: e0:5f:34:6e:f7:4d:1b:34:24:a3:00:97:c6:49:87: f4:5f:73:01:ed:fa:42:95:fa:24:14:e3:13:16:56: e2:0a:e0:61:b3:1e:38:e8:ce:83:03:37:cb:3a:de: e9:cb:4b:b9:06:f8:e9:e6:7e:91:b6:ce:cb:fc:6c: 92:aa:59:80:b5:e2:42:04:a9:bb:ef:dc:4c:d1:73: c6:9a:b8:36:97:e0:5b:55:df:8e:19:ea:9c:7d:a1: c5:a4:38:31:90:c3:af:5e:9c:d2:10:89:4f:49:ea: 4e:91:23:7c:1c:3e:29:e3:27:02:c3:48:13:e0:e1: c2:3a:e3:be:08:df:a7:16:1d:24:c6:02:36:d3:de: 15:db:80:85:1f:95:db:b8:33:2c:5f:94:5e:0a:33: 87:70:c2:d5:04:11:30:29:26:aa:d0:dd:14:85:0a: 8e:a0:f0:e1:4e:8a:54:59:b3:f5:9d:13:32:ce:2d: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:52:07:72:D4:CA:84:FE:37:3A:F9:2F:2F:02:60:B0:23:5B:4C:ED X509v3 Authority Key Identifier: keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:92:28:e0:13:9d:54:cb:cb:86:6a:aa:d7:16:96:9d:4a:e2: 01:16:f3:0a:fe:31:d6:4f:34:38:19:ae:2c:de:62:fd:39:27: a6:3d:25:55:85:34:11:e9:9a:df:d8:1b:c9:f1:e7:ca:65:63: 1d:ee:80:f8:8d:97:6a:04:26:ee:08:99:df:eb:b8:3e:aa:30: c2:29:1b:ae:2d:f5:a0:76:8a:71:ce:3f:4d:a3:a5:8e:aa:b3: 7f:cc:92:09:74:8e:de:14:d5:07:a5:55:b8:1c:7d:00:c1:d0: 32:6b:67:aa:96:8c:f8:e8:7a:27:bf:e3:6f:a6:44:6f:8f:17: 68:98:18:c5:de:71:63:73:1d:03:e6:3b:b9:ad:c8:58:b3:62: 96:9f:d0:1b:2d:a6:97:e5:7c:88:3f:8b:c5:84:b8:45:ff:21: 4c:5e:e7:8c:eb:6f:7b:3e:34:49:80:29:f7:e4:f6:5f:12:98: f0:1d:00:1a:c8:17:45:13:70:0a:20:31:99:a6:7d:d8:cd:17: 34:07:3d:61:e2:af:27:f7:e1:d7:55:59:b1:58:66:81:d8:85: 6f:89:49:82:b6:be:9e:40:38:9c:a0:41:35:3f:3e:7c:76:58: 86:9b:67:64:19:d0:60:56:15:38:db:a5:87:ae:01:42:d7:11: b5:95:b4:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNGNDFFMDQ4RDIyQjJBMUFFQTRDRTBCODQ0OTUyQTRB MzlENkNCMzcwHhcNMjUwNDI2MTQxNTI1WhcNMjUwNTAzMTQxNTI1WjAYMRYwFAYD VQQDEw02ODBjZWE3ZC1lMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nDXo7mz+sxQ+yfcesT04JVEHBx11EWnUlm7EslMUauFQsk9QdN5mcTOk4gl QeE5I+FhaUA0tp67XShgrUpgHlzpzYZdsbV+9tXgXzRu900bNCSjAJfGSYf0X3MB 7fpClfokFOMTFlbiCuBhsx446M6DAzfLOt7py0u5Bvjp5n6Rts7L/GySqlmAteJC BKm779xM0XPGmrg2l+BbVd+OGeqcfaHFpDgxkMOvXpzSEIlPSepOkSN8HD4p4ycC w0gT4OHCOuO+CN+nFh0kxgI2094V24CFH5XbuDMsX5ReCjOHcMLVBBEwKSaq0N0U hQqOoPDhTopUWbP1nRMyzi2GqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBSB3LU yoT+Nzr5Ly8CYLAjW0ztMB8GA1UdIwQYMBaAFD9B4EjSKyoa6kzguESVKko51ss3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05JcktocnFUT0M0UkpVcVNqbld5 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwSGdTTklyS2hycVRPQzRSSlVxU2puV3l6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05Jckto cnFUT0M0UkpVcVNqbld5emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWkijgE51Uy8uGaqrXFpadSuIBFvMK/jHWTzQ4Ga4s3mL9OSemPSVV hTQR6Zrf2BvJ8efKZWMd7oD4jZdqBCbuCJnf67g+qjDCKRuuLfWgdopxzj9No6WO qrN/zJIJdI7eFNUHpVW4HH0AwdAya2eqloz46Honv+NvpkRvjxdomBjF3nFjcx0D 5ju5rchYs2KWn9AbLaaX5XyIP4vFhLhF/yFMXueM6297PjRJgCn35PZfEpjwHQAa yBdFE3AKIDGZpn3YzRc0Bz1h4q8n9+HXVVmxWGaB2IVviUmCtr6eQDicoEE1Pz58 dliGm2dkGdBgVhU426WHrgFC1xG1lbSk -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:41 2025 by rpki-client on console.sobornost.net