$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft File: udznqYvOfA4oMosTy-q1Qx0PZr0.mft (raw, json) Hash identifier: bqcg1Ho4Oy7aIy2ra0TvVxfPKytl8B/11zZBWbet81g= Subject key identifier: 33:C8:E8:75:6C:BF:E7:29:2A:13:FE:63:F5:08:A4:55:B3:6A:E7:55 Authority key identifier: B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD Certificate issuer: /CN=A91C0C0C/serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft Manifest number: 038D Signing time: Mon 28 Apr 2025 04:37:56 +0000 Manifest this update: Mon 28 Apr 2025 04:37:56 +0000 Manifest next update: Mon 05 May 2025 04:37:56 +0000 Files and hashes: 1: udznqYvOfA4oMosTy-q1Qx0PZr0.crl (hash: GlmWpAnvshI/Scid8LXULj/c4iCwJ4f9y0YxyM2T7Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 04:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C0C, serialNumber=B9DCE7A98BCE7C0E28328B13CBEAB5431D0F66BD Validity Not Before: Apr 28 04:37:56 2025 GMT Not After : May 5 04:37:56 2025 GMT Subject: CN=680f0624-3c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:8d:b5:3d:8c:7e:a8:5d:b7:89:20:2b:b3: 30:7c:b9:5c:64:18:09:3f:fa:55:67:37:d0:1b:8a: 9b:34:b9:ea:c8:ad:24:c9:d9:fe:fc:6c:29:b1:59: 19:1b:62:e9:68:f5:57:e3:ef:53:83:25:af:60:9b: aa:07:f0:5d:a6:74:f5:b4:f5:a6:d2:08:a3:b5:76: 78:18:c9:c5:f6:d0:92:2b:54:9e:74:3c:bb:4d:90: 65:c2:61:2f:0d:22:63:62:19:b6:92:5e:f0:56:db: 17:fd:16:6d:85:5e:88:d6:b7:12:4e:c6:93:18:fa: 45:42:20:ae:a0:c8:0a:5b:99:bf:df:4d:81:2e:10: 62:75:c7:b6:f2:3a:c7:93:23:4e:75:b0:a7:1e:ca: 35:55:2e:08:00:e6:8a:85:2d:e3:0f:94:bc:96:b4: ea:e0:66:51:84:1b:24:a0:60:f1:ee:0b:9e:74:33: 3e:c3:c8:99:06:92:c4:b1:fe:1d:2e:02:e5:14:09: 13:ad:a0:b9:a7:53:fb:39:5d:eb:e6:76:1f:41:90: 6a:32:b6:de:d1:c0:e1:a8:f9:b7:93:fb:15:83:d2: 89:a6:85:e9:0a:cb:50:d7:de:bb:e8:64:da:2b:d4: de:f3:3b:7e:31:f4:3b:96:8a:3b:7d:d9:9d:46:e4: 4c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C8:E8:75:6C:BF:E7:29:2A:13:FE:63:F5:08:A4:55:B3:6A:E7:55 X509v3 Authority Key Identifier: keyid:B9:DC:E7:A9:8B:CE:7C:0E:28:32:8B:13:CB:EA:B5:43:1D:0F:66:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/udznqYvOfA4oMosTy-q1Qx0PZr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C0C/359B8D3E9DFF11ECA4A58848C4F9AE02/udznqYvOfA4oMosTy-q1Qx0PZr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1f:8d:86:35:d2:b1:e0:2a:c1:9f:18:f5:e8:ef:8a:27:36: 56:88:f5:db:e5:c1:f4:20:62:fc:8b:06:e9:a7:79:aa:64:8c: 1f:9b:f7:ca:da:7f:53:68:84:91:92:ec:d3:d5:20:3c:83:a6: 4e:02:18:9d:64:71:39:09:be:e7:d0:ae:82:62:68:11:ba:22: 19:22:6f:e2:99:9a:1a:29:e9:9a:5f:82:65:f1:5b:22:da:eb: 91:e4:5d:0b:75:a5:96:96:73:02:7b:0b:9b:7f:be:9c:28:a8: c6:39:90:77:d3:18:eb:50:b8:80:be:1c:2e:ca:ae:ff:c0:c7: 1c:d0:5d:97:b1:d1:d8:6c:48:68:52:82:89:b6:d4:cd:cc:12: b1:e5:cc:e8:40:42:51:4b:37:ff:09:fc:11:ea:9a:a5:a5:8b: be:e4:d2:5f:7a:37:a1:72:7a:0c:7c:79:be:ee:92:ee:d7:e1: 3a:77:e4:24:a2:c2:a8:a9:06:d2:9e:17:ef:84:2c:8e:5e:08: 0f:3f:30:34:86:04:4f:c7:44:dd:c3:7a:74:4f:b4:a8:25:22: a1:59:ce:8a:04:c8:68:ef:db:7a:e0:0d:f0:8c:6b:b8:5f:4d: be:93:17:4b:84:fa:db:60:16:e4:b3:4f:7b:19:68:06:f6:1b: e1:6a:e8:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDMEMxMTAvBgNVBAUTKEI5RENFN0E5OEJDRTdDMEUyODMyOEIxM0NCRUFCNTQz MUQwRjY2QkQwHhcNMjUwNDI4MDQzNzU2WhcNMjUwNTA1MDQzNzU2WjAYMRYwFAYD VQQDEw02ODBmMDYyNC0zYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszaNtT2Mfqhdt4kgK7MwfLlcZBgJP/pVZzfQG4qbNLnqyK0kydn+/GwpsVkZ G2LpaPVX4+9TgyWvYJuqB/BdpnT1tPWm0gijtXZ4GMnF9tCSK1SedDy7TZBlwmEv DSJjYhm2kl7wVtsX/RZthV6I1rcSTsaTGPpFQiCuoMgKW5m/302BLhBidce28jrH kyNOdbCnHso1VS4IAOaKhS3jD5S8lrTq4GZRhBskoGDx7guedDM+w8iZBpLEsf4d LgLlFAkTraC5p1P7OV3r5nYfQZBqMrbe0cDhqPm3k/sVg9KJpoXpCstQ19676GTa K9Te8zt+MfQ7loo7fdmdRuRMOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPI6HVs v+cpKhP+Y/UIpFWzaudVMB8GA1UdIwQYMBaAFLnc56mLznwOKDKLE8vqtUMdD2a9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEMwQy8zNTlCOEQzRTlE RkYxMUVDQTRBNTg4NDhDNEY5QUUwMi91ZHpucVl2T2ZBNG9Nb3NUeS1xMVF4MFBa cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vkem5xWXZPZkE0b01vc1R5LXExUXgwUFpyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEMwQy8zNTlCOEQzRTlERkYxMUVDQTRBNTg4NDhDNEY5QUUwMi91ZHpucVl2T2ZB NG9Nb3NUeS1xMVF4MFBacjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtH42GNdKx4CrBnxj16O+KJzZWiPXb5cH0IGL8iwbpp3mqZIwfm/fK 2n9TaISRkuzT1SA8g6ZOAhidZHE5Cb7n0K6CYmgRuiIZIm/imZoaKemaX4Jl8Vsi 2uuR5F0LdaWWlnMCewubf76cKKjGOZB30xjrULiAvhwuyq7/wMcc0F2XsdHYbEho UoKJttTNzBKx5czoQEJRSzf/CfwR6pqlpYu+5NJfejehcnoMfHm+7pLu1+E6d+Qk osKoqQbSnhfvhCyOXggPPzA0hgRPx0Tdw3p0T7SoJSKhWc6KBMho79t64A3wjGu4 X02+kxdLhPrbYBbks097GWgG9hvhauj3 -----END CERTIFICATE-----Generated at Mon Apr 28 08:26:55 2025 by rpki-client on console.sobornost.net