$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft File: GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft (raw, json) Hash identifier: QL5w3goTu+Nc6FtdhVXKOAZqq7b8dRGCeNU07LDMLWs= Subject key identifier: 0B:10:66:00:94:D8:18:29:8E:E0:0D:2A:27:41:EF:4B:3C:31:1F:12 Authority key identifier: 18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 Certificate issuer: /CN=A91DACA7/serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft Manifest number: 92 Signing time: Sun 27 Apr 2025 05:15:23 +0000 Manifest this update: Sun 27 Apr 2025 05:15:22 +0000 Manifest next update: Sun 04 May 2025 05:15:22 +0000 Files and hashes: 1: GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl (hash: MqzbNh2nAP2EG5Mqo44bcOQnopdpMvoEN7L6wJ58QOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=18815B34C869284B4323C9169936770FDD0B4236 Validity Not Before: Apr 27 05:15:22 2025 GMT Not After : May 4 05:15:22 2025 GMT Subject: CN=680dbd6b-ddb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:5c:e1:0b:03:01:75:af:d8:a7:6b:bb:b0: 26:d6:38:a3:30:ea:1d:f8:62:e2:9a:84:63:dc:86: 62:3a:ae:f8:95:63:bd:a3:05:a3:7c:7e:18:ee:e0: 8c:81:7c:0d:f8:4a:46:39:bf:be:a2:c3:7a:9d:b8: 6a:ac:42:7c:ab:4b:e1:91:57:1b:31:73:8a:13:c2: 2a:bc:78:7a:b1:48:58:c8:d1:40:29:96:9b:95:d8: 23:25:77:25:fe:2f:5d:fc:c5:e6:5c:da:4e:1d:4a: a9:d6:41:09:09:52:7e:f4:1a:08:27:f6:57:ba:96: 37:90:f7:b8:e7:fa:6e:50:34:ed:74:6e:8d:5f:02: 43:14:28:e5:67:9e:52:74:3f:1b:11:33:2a:5a:ce: d5:2e:70:37:8f:c0:72:4b:15:9f:b3:45:aa:71:e1: d1:04:f3:f2:03:9a:61:25:69:c8:88:24:6e:08:e1: cc:9a:42:c7:ce:3e:28:c8:7e:43:0c:38:60:51:40: d2:38:8c:70:64:1b:96:4e:e9:49:69:30:01:dc:2e: 7d:28:59:82:9c:9e:b7:f1:1c:1e:92:f3:ff:ce:2c: 4d:f3:9f:59:80:70:1c:6a:e9:32:8c:13:50:28:bc: ef:57:e0:b3:e1:20:de:1d:98:30:99:a9:f1:74:e1: 4f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:10:66:00:94:D8:18:29:8E:E0:0D:2A:27:41:EF:4B:3C:31:1F:12 X509v3 Authority Key Identifier: keyid:18:81:5B:34:C8:69:28:4B:43:23:C9:16:99:36:77:0F:DD:0B:42:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GIFbNMhpKEtDI8kWmTZ3D90LQjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/59B9418645B211EFA5DF6D19C4F9AE02/GIFbNMhpKEtDI8kWmTZ3D90LQjY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dd:63:0e:b1:31:f4:0f:ae:f2:7d:7f:88:91:09:f5:41:30: 30:e8:f4:c1:d6:d0:95:e2:0f:3f:e7:11:ec:f0:76:0c:9d:40: 2b:99:d3:cd:1e:ba:c3:0c:73:23:53:96:f1:65:bf:2d:9f:37: 90:19:24:b0:7c:6b:aa:e5:22:b9:89:21:11:84:b1:b8:32:bc: c9:a9:8d:c1:93:72:b5:4d:c5:a5:77:b1:4d:a9:b1:17:73:eb: b8:b0:f2:4c:95:c1:ce:42:2f:74:59:b9:6d:b4:2e:87:1d:09: 64:ac:1f:54:f2:9b:71:55:f8:f0:11:18:06:49:4b:61:0c:56: f0:72:07:7f:d0:34:bf:33:7f:43:b6:b9:72:fe:88:d0:2a:83: 82:4d:45:0a:85:91:eb:6f:26:91:94:e5:b8:85:96:49:c3:69: 19:5e:eb:77:48:cc:6e:0f:eb:03:54:2c:20:1a:e1:82:49:ac: 2c:9a:13:9e:59:7c:32:7f:12:89:c1:04:c9:96:85:f0:1c:7b: 37:6a:6f:e3:35:0e:77:de:b8:8b:32:6d:ee:68:b0:d4:07:a5: b1:1b:8a:06:76:41:d0:66:21:13:be:a0:5e:44:71:50:1f:d7: 8b:67:a2:59:b8:4b:f6:94:c0:5f:8d:96:04:ab:ce:92:54:78: 94:56:10:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDE4ODE1QjM0Qzg2OTI4NEI0MzIzQzkxNjk5MzY3NzBG REQwQjQyMzYwHhcNMjUwNDI3MDUxNTIyWhcNMjUwNTA0MDUxNTIyWjAYMRYwFAYD VQQDEw02ODBkYmQ2Yi1kZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtdc4QsDAXWv2Kdru7Am1jijMOod+GLimoRj3IZiOq74lWO9owWjfH4Y7uCM gXwN+EpGOb++osN6nbhqrEJ8q0vhkVcbMXOKE8IqvHh6sUhYyNFAKZabldgjJXcl /i9d/MXmXNpOHUqp1kEJCVJ+9BoIJ/ZXupY3kPe45/puUDTtdG6NXwJDFCjlZ55S dD8bETMqWs7VLnA3j8BySxWfs0WqceHRBPPyA5phJWnIiCRuCOHMmkLHzj4oyH5D DDhgUUDSOIxwZBuWTulJaTAB3C59KFmCnJ638RwekvP/zixN859ZgHAcaukyjBNQ KLzvV+Cz4SDeHZgwmanxdOFPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsQZgCU 2BgpjuANKidB70s8MR8SMB8GA1UdIwQYMBaAFBiBWzTIaShLQyPJFpk2dw/dC0I2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81OUI5NDE4NjQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtFdERJOGtXbVRaM0Q5MExR alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dJRmJOTWhwS0V0REk4a1dtVFozRDkwTFFqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QUNBNy81OUI5NDE4NjQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9HSUZiTk1ocEtF dERJOGtXbVRaM0Q5MExRalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/3WMOsTH0D67yfX+IkQn1QTAw6PTB1tCV4g8/5xHs8HYMnUArmdPN HrrDDHMjU5bxZb8tnzeQGSSwfGuq5SK5iSERhLG4MrzJqY3Bk3K1TcWld7FNqbEX c+u4sPJMlcHOQi90WblttC6HHQlkrB9U8ptxVfjwERgGSUthDFbwcgd/0DS/M39D trly/ojQKoOCTUUKhZHrbyaRlOW4hZZJw2kZXut3SMxuD+sDVCwgGuGCSawsmhOe WXwyfxKJwQTJloXwHHs3am/jNQ533riLMm3uaLDUB6WxG4oGdkHQZiETvqBeRHFQ H9eLZ6JZuEv2lMBfjZYEq86SVHiUVhDN -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net