$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft File: -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json) Hash identifier: Y5Xhdy07C49pJhx2PAkGRJT7oT+u/L3sr0AFQYLc0TU= Subject key identifier: 52:C7:B9:9C:1F:A5:13:41:18:FF:30:E9:1C:73:95:89:55:B0:1C:CB Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft Manifest number: 71 Signing time: Sun 27 Apr 2025 05:45:09 +0000 Manifest this update: Sun 27 Apr 2025 05:45:08 +0000 Manifest next update: Sun 04 May 2025 05:45:08 +0000 Files and hashes: 1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: InoBBbaJ2He3xbMm0kw8KlJPmS7HW/D+GAByZ/9u7IE=) 2: C276060084F011EF9D52F573C4F9AE02.roa (hash: hxIYLbruoqfDi/xrn9CXp1sbfMBKSVxgZzJC+/gZxDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B Validity Not Before: Apr 27 05:45:08 2025 GMT Not After : May 4 05:45:08 2025 GMT Subject: CN=680dc464-78a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:d3:68:3c:40:57:af:e2:f9:0a:58:48:04: 3d:1c:16:36:95:0f:06:63:1c:87:e3:63:4d:18:b3: 68:6d:98:05:9b:a4:d6:ac:70:32:68:4d:e2:bc:f8: db:e6:50:55:4b:7a:17:24:6d:59:95:60:89:73:96: 30:ca:15:6d:78:91:fb:8e:1f:7b:74:99:d9:47:5f: 8e:7c:54:f9:a0:8e:77:19:f7:aa:ff:c7:83:96:3f: d9:88:a9:41:2d:63:d8:ab:81:ff:a4:cd:04:3e:85: 9f:bf:b9:67:f4:c3:cb:68:10:aa:73:65:04:70:c3: 60:42:4a:84:a1:6c:93:88:d4:e7:2a:64:df:05:20: 3a:c1:75:9f:ae:58:c2:38:02:5b:a2:88:e6:19:a5: 8c:27:93:23:28:20:47:cb:6b:ef:70:4c:c8:7e:79: 89:4a:ca:df:93:63:a2:6b:b8:27:11:71:8d:77:b3: cc:4e:59:38:6e:8c:fa:a0:98:1e:86:5d:23:e2:68: 38:fb:57:8d:43:c1:69:f9:5d:77:d4:c4:16:c0:55: 1d:bb:d2:74:32:dc:b2:1f:34:b3:2a:cf:57:ab:6d: 41:70:e4:be:8e:15:43:51:8c:18:46:d1:d8:04:51: ea:53:31:c9:98:69:0a:6a:f4:e6:c0:fc:ec:2b:1e: 55:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C7:B9:9C:1F:A5:13:41:18:FF:30:E9:1C:73:95:89:55:B0:1C:CB X509v3 Authority Key Identifier: keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b6:e3:d1:fa:4a:dd:40:1b:13:1e:04:77:2d:f4:31:ee:db: 15:27:97:4d:e7:55:3d:d3:94:7a:c0:e2:f9:5e:5c:fe:f5:9c: de:b8:b9:5e:d3:fe:29:2f:d0:57:76:56:52:61:a0:4d:b4:ce: 24:14:bf:ad:70:5c:2f:cf:b8:ff:a6:a3:d8:68:6e:61:8c:16: 30:bd:e4:3b:72:14:09:66:97:b3:b2:c0:7a:15:ab:da:da:eb: 74:e1:f7:5a:4d:c1:ef:36:5c:b2:92:19:5c:cc:a1:af:b8:c9: 98:80:aa:df:9f:ed:2b:ca:be:b7:6f:86:b2:9e:f4:d6:4c:2d: 56:bb:c6:71:e5:f4:64:06:84:cf:29:6f:24:cc:90:8b:96:36: 99:e5:45:81:52:58:8f:44:7c:17:15:57:ad:98:43:51:7b:98: 88:17:36:8b:97:05:08:ec:c2:60:c4:d0:10:cf:11:c5:96:5f: da:20:ba:86:33:ed:01:62:2a:92:d6:e8:7c:ed:f5:c4:a6:11: a8:2b:48:a6:4b:a1:5d:83:d5:3a:b8:c8:37:82:4a:6c:68:2a: d6:ee:48:c8:23:47:28:d8:04:c0:4b:3b:00:b6:02:3f:a2:f9: 28:66:0d:2a:73:dc:8e:b5:4d:32:9f:73:5c:4a:8d:bd:21:46: f0:7a:ba:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjUyNTExMC8GA1UEBRMoRkJGRjg4QURFOTkzNjY4OUIzMjQxNDVCRkU2M0I3NEQ1 N0FBQUMwQjAeFw0yNTA0MjcwNTQ1MDhaFw0yNTA1MDQwNTQ1MDhaMBgxFjAUBgNV BAMTDTY4MGRjNDY0LTc4YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKedNoPEBXr+L5ClhIBD0cFjaVDwZjHIfjY00Ys2htmAWbpNascDJoTeK8+Nvm UFVLehckbVmVYIlzljDKFW14kfuOH3t0mdlHX458VPmgjncZ96r/x4OWP9mIqUEt Y9irgf+kzQQ+hZ+/uWf0w8toEKpzZQRww2BCSoShbJOI1OcqZN8FIDrBdZ+uWMI4 AluiiOYZpYwnkyMoIEfLa+9wTMh+eYlKyt+TY6JruCcRcY13s8xOWThujPqgmB6G XSPiaDj7V41DwWn5XXfUxBbAVR270nQy3LIfNLMqz1erbUFw5L6OFUNRjBhG0dgE UepTMcmYaQpq9ObA/OwrHlU3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUse5nB+l E0EY/zDpHHOViVWwHMswHwYDVR0jBBgwFoAU+/+IremTZomzJBRb/mO3TVeqrAsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTI1L0VBMDIzNDFDODRF RDExRUZCOUZGMkQ1QUM0RjlBRTAyLy1fLUlyZW1UWm9tekpCUmJfbU8zVFZlcXJB cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLV8tSXJlbVRab216SkJSYl9tTzNUVmVxckFzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NTI1L0VBMDIzNDFDODRFRDExRUZCOUZGMkQ1QUM0RjlBRTAyLy1fLUlyZW1UWm9t ekpCUmJfbU8zVFZlcXJBcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+249H6St1AGxMeBHct9DHu2xUnl03nVT3TlHrA4vleXP71nN64uV7T /ikv0Fd2VlJhoE20ziQUv61wXC/PuP+mo9hobmGMFjC95DtyFAlml7OywHoVq9ra 63Th91pNwe82XLKSGVzMoa+4yZiAqt+f7SvKvrdvhrKe9NZMLVa7xnHl9GQGhM8p byTMkIuWNpnlRYFSWI9EfBcVV62YQ1F7mIgXNouXBQjswmDE0BDPEcWWX9oguoYz 7QFiKpLW6Hzt9cSmEagrSKZLoV2D1Tq4yDeCSmxoKtbuSMgjRyjYBMBLOwC2Aj+i +ShmDSpz3I61TTKfc1xKjb0hRvB6up4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net