$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: OdWUKiiDlctp0Mmj7JH+j9K/73vIZ26SOIc3dzPBSS0= Subject key identifier: 06:28:8E:B5:F9:B9:4E:37:C0:AA:54:78:B7:22:EA:CC:9B:D1:BF:74 Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 34 Signing time: Sun 27 Apr 2025 06:26:32 +0000 Manifest this update: Sun 27 Apr 2025 06:26:32 +0000 Manifest next update: Sun 04 May 2025 06:26:32 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: CdA0PxeffWy9DldlaFNB6CuaOthycCqUGmN65Vus/us=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: XLgRz6Ys+AWKVb/kmctJ9W9xNxym6vJibxlk+kHS4Ys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Apr 27 06:26:32 2025 GMT Not After : May 4 06:26:32 2025 GMT Subject: CN=680dce18-7fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:6e:6a:fd:01:83:df:1d:33:79:c8:1f:6e: 31:99:7a:e2:b5:37:66:97:19:9c:54:29:d2:70:9d: b2:78:07:15:68:b1:56:d4:30:90:f8:d8:4b:9a:92: f5:e3:b6:96:ae:16:99:04:db:de:02:36:d5:3c:b0: 3b:d3:3d:2c:f3:a8:d4:85:35:c9:53:04:12:d4:ec: 62:3a:91:15:0c:c6:eb:a9:e5:c9:ae:f8:23:d5:32: e9:24:ec:37:41:10:28:d5:1b:56:22:44:e5:a2:79: f9:d7:53:61:63:a5:21:56:ba:8f:f3:cf:84:28:ba: d9:2e:fe:47:b1:b9:70:5f:87:ee:e4:72:03:2d:45: c1:da:d4:fb:51:ea:3c:1b:1c:8b:0e:9e:93:9b:92: 20:79:f8:cc:2c:1c:7d:b0:a1:6e:56:83:80:af:9a: b5:ce:d5:32:d1:a7:80:d1:a0:9a:a7:50:31:db:af: b9:64:fe:ed:72:d8:f2:c3:a8:6a:33:c3:a9:5e:e7: 7b:4c:4c:9f:17:b6:7b:80:69:ad:8e:53:47:ce:3d: 23:37:36:65:d5:eb:73:c9:d0:de:f7:56:54:5e:b2: 65:2f:07:44:3d:1f:f3:54:40:de:05:f4:22:73:eb: b6:a9:4d:24:76:da:ee:ae:2b:38:63:d4:a9:9d:fe: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:28:8E:B5:F9:B9:4E:37:C0:AA:54:78:B7:22:EA:CC:9B:D1:BF:74 X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f1:fc:22:2b:cb:de:1a:25:33:0c:23:a7:11:b2:3a:bf:72: 80:82:e6:e6:f3:5f:c1:29:b7:34:1a:39:e1:d4:97:78:73:15: 65:0f:a9:b3:00:d5:15:d6:ad:ee:78:c2:4b:6b:78:03:8a:46: d3:b1:c6:c1:eb:ed:cc:5e:ec:b2:53:3f:32:89:b1:29:5f:be: 1d:7f:c3:c1:30:74:82:ee:e5:1a:b5:99:82:ce:4a:c1:28:1f: fe:a4:61:94:3c:f7:8e:54:eb:52:20:ee:52:ca:92:2a:4a:95: 47:10:54:84:d0:85:fa:a5:31:68:a6:93:07:67:39:d3:e7:de: 1c:3c:a6:51:e9:c7:28:f6:c0:47:e1:98:63:5b:e4:a8:32:6b: b3:67:ab:41:8f:14:df:07:21:75:6f:79:25:2b:1f:cf:d7:d7: 92:70:0e:28:ec:1f:d8:37:6c:0d:60:a3:28:df:6a:15:bd:fb: 64:a3:bd:fd:0d:c3:a7:06:ca:90:e4:90:8d:7e:88:ee:4d:3d: 59:e9:5f:19:b1:59:f8:fc:b9:db:26:15:69:f2:4d:fb:e2:b5: 3f:20:c6:2e:5f:f1:2b:b9:89:fa:b1:43:c8:60:0e:2b:d7:5a: 23:6c:df:1a:cd:df:bc:e8:38:52:69:5e:5c:fd:5d:f7:ae:2e: b7:5a:61:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzFGNTExMC8GA1UEBRMoNDkxMzY2NzVFN0UyMzRFN0QyRjg4NDU5OThFMkM2MkRC NDg4ODJDQTAeFw0yNTA0MjcwNjI2MzJaFw0yNTA1MDQwNjI2MzJaMBgxFjAUBgNV BAMTDTY4MGRjZTE4LTdmYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf+W5q/QGD3x0zecgfbjGZeuK1N2aXGZxUKdJwnbJ4BxVosVbUMJD42EuakvXj tpauFpkE294CNtU8sDvTPSzzqNSFNclTBBLU7GI6kRUMxuup5cmu+CPVMukk7DdB ECjVG1YiROWiefnXU2FjpSFWuo/zz4Qoutku/kexuXBfh+7kcgMtRcHa1PtR6jwb HIsOnpObkiB5+MwsHH2woW5Wg4CvmrXO1TLRp4DRoJqnUDHbr7lk/u1y2PLDqGoz w6le53tMTJ8XtnuAaa2OU0fOPSM3NmXV63PJ0N73VlResmUvB0Q9H/NUQN4F9CJz 67apTSR22u6uKzhj1Kmd/qwRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBiiOtfm5 TjfAqlR4tyLqzJvRv3QwHwYDVR0jBBgwFoAUSRNmdefiNOfS+IRZmOLGLbSIgsow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzMUY1L0E3NTREMzgwRDZF QzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1JObWRlZmlOT2ZTLUlSWm1PTEdMYlNJZ3NvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz MUY1L0E3NTREMzgwRDZFQzExRUZBMjc5OUM2OUM0RjlBRTAyL1NSTm1kZWZpTk9m Uy1JUlptT0xHTGJTSWdzby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKrx/CIry94aJTMMI6cRsjq/coCC5ubzX8EptzQaOeHUl3hzFWUPqbMA 1RXWre54wktreAOKRtOxxsHr7cxe7LJTPzKJsSlfvh1/w8EwdILu5Rq1mYLOSsEo H/6kYZQ8945U61Ig7lLKkipKlUcQVITQhfqlMWimkwdnOdPn3hw8plHpxyj2wEfh mGNb5Kgya7Nnq0GPFN8HIXVveSUrH8/X15JwDijsH9g3bA1goyjfahW9+2Sjvf0N w6cGypDkkI1+iO5NPVnpXxmxWfj8udsmFWnyTfvitT8gxi5f8Su5ifqxQ8hgDivX WiNs3xrN37zoOFJpXlz9XfeuLrdaYV4= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net