$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: aXqBGRR6WeXlPFerxgqylnCH8oFt+//MginVqe7Xu/c= Subject key identifier: 05:6A:30:82:14:9C:37:11:45:A8:B6:CB:32:E8:09:95:F4:84:28:61 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 017B Signing time: Sun 27 Apr 2025 00:52:35 +0000 Manifest this update: Sun 27 Apr 2025 00:52:34 +0000 Manifest next update: Sun 04 May 2025 00:52:34 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: B9/X8Zzm9qyjVqzv2pabWry6umX1mMueKKnePufOPAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Apr 27 00:52:34 2025 GMT Not After : May 4 00:52:34 2025 GMT Subject: CN=680d7fd2-7a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:90:69:72:09:ca:c2:e2:81:6a:12:78:14: c7:87:7c:87:39:9e:f2:93:80:fc:22:1c:d5:db:3e: f6:98:fe:b9:40:c9:a7:97:a8:3e:db:99:7d:b4:a0: 9f:c7:47:7d:85:47:22:2b:eb:1c:79:d8:d8:b1:09: 72:c8:90:ae:40:00:e4:bc:9c:c7:d9:55:bc:cd:bb: 39:49:7e:39:c0:21:7c:fa:57:35:e8:f2:52:a9:b8: e6:e2:82:3b:68:6a:5b:97:21:64:14:d5:99:55:15: 8a:ba:e4:97:50:22:29:6f:8f:e8:ae:c4:9c:bc:eb: 8f:fb:da:23:e8:6b:b7:1d:9e:66:43:bd:75:40:a5: 01:74:3b:ee:7c:d9:b9:90:94:c5:fb:a4:40:64:87: ec:39:42:a3:2e:cc:c0:12:fa:51:aa:02:e9:78:5e: cb:fc:c5:93:d3:f7:12:05:eb:40:90:a2:cf:a8:d9: 85:29:51:bb:4e:a6:c8:88:25:f9:ca:78:a6:f9:a0: 27:a8:5e:32:d6:d4:8e:79:37:48:c9:bf:06:52:56: 6b:69:6d:3e:a0:33:59:56:d4:e4:87:1c:a5:8e:5e: 79:c8:d4:0d:72:ae:6d:3b:59:c2:73:ab:4e:9b:ba: 3b:4b:27:e0:a8:a9:bc:01:ef:0c:dd:d4:37:7b:2e: 84:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6A:30:82:14:9C:37:11:45:A8:B6:CB:32:E8:09:95:F4:84:28:61 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:55:32:85:5d:14:a7:c1:af:01:cd:fc:e6:a6:59:b5:83:31: 83:85:b6:5b:d5:4c:89:fe:11:51:89:d5:0e:e3:4f:f1:a9:aa: 07:e0:34:ea:cf:f1:fe:f1:04:e5:20:d6:37:63:32:e6:ef:91: 47:1d:7e:4f:af:7e:3b:23:a0:de:89:fa:00:43:e2:b9:b5:95: 55:99:ef:37:71:62:72:80:cc:79:6b:9e:7a:9b:e2:ce:f1:6f: 10:4e:22:db:7d:84:dc:e0:1a:cb:a0:c8:1c:f1:77:64:d3:23: 8e:83:a2:87:5f:2e:1b:a2:8a:05:d4:8b:00:7c:d6:bb:a8:29: b6:7d:4d:9d:f2:9e:d6:7c:b3:35:fe:d5:8d:32:24:dd:11:ce: ae:10:04:80:66:42:c4:2b:5e:89:a7:e1:dc:80:b1:40:99:a6: 97:16:ac:33:0a:b9:21:d9:6d:30:e2:bf:36:9e:48:00:18:51: e9:2c:75:64:63:84:09:7c:5a:97:63:79:68:5b:4f:73:35:7b: 27:f6:e5:19:5f:9f:92:a9:b1:46:7f:c6:e5:50:ad:7d:db:37: 3b:a8:ad:76:b6:52:3f:5c:03:db:58:a6:e0:2d:ad:3d:a2:d6: 23:86:f9:74:13:d3:25:03:c1:2c:77:fe:26:27:34:ce:c5:10: 6e:87:a7:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUwNDI3MDA1MjM0WhcNMjUwNTA0MDA1MjM0WjAYMRYwFAYD VQQDEw02ODBkN2ZkMi03YTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvr6QaXIJysLigWoSeBTHh3yHOZ7yk4D8IhzV2z72mP65QMmnl6g+25l9tKCf x0d9hUciK+scedjYsQlyyJCuQADkvJzH2VW8zbs5SX45wCF8+lc16PJSqbjm4oI7 aGpblyFkFNWZVRWKuuSXUCIpb4/orsScvOuP+9oj6Gu3HZ5mQ711QKUBdDvufNm5 kJTF+6RAZIfsOUKjLszAEvpRqgLpeF7L/MWT0/cSBetAkKLPqNmFKVG7TqbIiCX5 ynim+aAnqF4y1tSOeTdIyb8GUlZraW0+oDNZVtTkhxyljl55yNQNcq5tO1nCc6tO m7o7SyfgqKm8Ae8M3dQ3ey6EFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVqMIIU nDcRRai2yzLoCZX0hChhMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeVTKFXRSnwa8Bzfzmplm1gzGDhbZb1UyJ/hFRidUO40/xqaoH4DTq z/H+8QTlINY3YzLm75FHHX5Pr347I6DeifoAQ+K5tZVVme83cWJygMx5a556m+LO 8W8QTiLbfYTc4BrLoMgc8Xdk0yOOg6KHXy4boooF1IsAfNa7qCm2fU2d8p7WfLM1 /tWNMiTdEc6uEASAZkLEK16Jp+HcgLFAmaaXFqwzCrkh2W0w4r82nkgAGFHpLHVk Y4QJfFqXY3loW09zNXsn9uUZX5+SqbFGf8blUK192zc7qK12tlI/XAPbWKbgLa09 otYjhvl0E9MlA8Esd/4mJzTOxRBuh6dT -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net