$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft File: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft (raw, json) Hash identifier: dlcJIUdmfoc5+TeJ9svvbpJ1c7XteNqmyhVu5DKOpUg= Subject key identifier: 34:7B:32:96:B2:20:06:AD:6A:A6:52:48:04:8E:E2:8C:FC:27:04:3D Authority key identifier: 0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E Certificate issuer: /CN=A91E1936/serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft Manifest number: E3 Signing time: Sun 27 Apr 2025 04:19:34 +0000 Manifest this update: Sun 27 Apr 2025 04:19:33 +0000 Manifest next update: Sun 04 May 2025 04:19:33 +0000 Files and hashes: 1: Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl (hash: huf1ULZQk7QagyjoE3sFqFcwv68gLTECKeCspp+Ou4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=0E1F624A23595199086E182B5FC7C52463A9E55E Validity Not Before: Apr 27 04:19:33 2025 GMT Not After : May 4 04:19:33 2025 GMT Subject: CN=680db055-c581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:33:93:d3:ee:1b:2c:87:8c:77:94:5f:46:42: 73:b9:aa:71:1f:ff:ad:3e:15:aa:2a:4d:e6:c0:8e: a8:2e:8a:02:f4:92:38:31:62:58:b5:54:8c:e6:f3: 6d:22:14:8f:16:a3:6b:7f:87:3c:27:c7:89:5a:ae: 0e:3d:70:c1:34:bc:26:3c:20:29:83:eb:67:08:84: 39:1c:29:c6:5d:9d:ae:5f:81:a1:0a:1d:28:f8:f5: 8e:0b:27:be:35:28:c0:91:e9:fc:fe:eb:91:9d:aa: 22:2a:17:90:1d:0a:37:89:a8:f4:76:ff:0c:3d:dd: c5:ed:1d:bc:39:59:e7:5c:5f:60:ce:b0:1d:ec:38: 25:69:5b:35:67:b1:bd:22:68:c3:f3:4e:4e:94:60: d3:ba:56:0c:98:25:17:79:d1:4b:7c:2f:6a:a3:91: 21:12:9e:7e:3e:73:f6:9e:99:69:b1:8a:cb:13:f5: 22:29:02:fb:4a:c6:ef:c1:42:f7:42:b3:e0:1e:1a: f7:f5:fa:a9:c6:86:16:13:b3:d0:2a:02:a2:5d:18: 6c:5f:8f:ba:4e:28:e7:17:34:62:5c:8b:62:22:df: 41:e2:6b:83:f0:9a:0d:ea:a3:20:ce:e9:75:6e:5b: 87:bf:31:88:7f:ab:f1:b3:30:fc:98:e6:65:41:f3: ff:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:32:96:B2:20:06:AD:6A:A6:52:48:04:8E:E2:8C:FC:27:04:3D X509v3 Authority Key Identifier: keyid:0E:1F:62:4A:23:59:51:99:08:6E:18:2B:5F:C7:C5:24:63:A9:E5:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/77A77D30C63611EEABCC040BC4F9AE02/Dh9iSiNZUZkIbhgrX8fFJGOp5V4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:ba:3e:99:9e:b0:6c:b5:0e:b9:5e:ac:55:bf:20:0f:7f:43: 2a:20:87:c1:7a:c2:bd:b8:c0:67:88:b3:6c:a9:8a:c2:a0:48: 0f:f8:06:1f:66:f5:02:9c:74:a2:f3:6b:a1:bb:42:40:ea:da: 41:82:1d:3a:10:d7:a0:aa:57:be:24:c5:8e:9f:b2:82:b4:48: b0:bd:e0:4e:d6:5a:69:e7:10:b4:e6:3f:87:65:68:24:b6:03: ec:32:29:e6:cc:07:63:e9:35:5e:67:80:00:57:ec:85:93:28: 69:a9:cf:a4:e0:4f:af:2b:c8:1a:b6:4f:7c:49:20:96:9c:6a: 51:de:8b:9c:7c:66:72:f8:13:f3:7e:1f:60:4f:9e:23:1e:e2: 58:17:55:8e:36:7e:5f:67:37:8f:2f:66:75:5a:9e:8a:89:27: e3:6d:44:54:2e:82:62:0c:0c:5f:61:75:14:25:f7:12:0d:64: ca:c9:c4:89:de:9f:a5:d9:8d:ca:f0:6a:1a:69:dc:2d:76:91: b5:60:2d:76:b0:7f:81:37:7a:2d:b2:19:22:0f:d7:23:3d:17: d6:ee:8a:2b:f0:05:4a:d9:1a:e3:42:5a:d4:f4:92:f9:74:70: ff:37:3e:31:dc:fb:8a:47:05:80:b1:2c:63:66:13:41:c3:20: 73:0a:84:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDBFMUY2MjRBMjM1OTUxOTkwODZFMTgyQjVGQzdDNTI0 NjNBOUU1NUUwHhcNMjUwNDI3MDQxOTMzWhcNMjUwNTA0MDQxOTMzWjAYMRYwFAYD VQQDEw02ODBkYjA1NS1jNTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jOT0+4bLIeMd5RfRkJzuapxH/+tPhWqKk3mwI6oLooC9JI4MWJYtVSM5vNt IhSPFqNrf4c8J8eJWq4OPXDBNLwmPCApg+tnCIQ5HCnGXZ2uX4GhCh0o+PWOCye+ NSjAken8/uuRnaoiKheQHQo3iaj0dv8MPd3F7R28OVnnXF9gzrAd7DglaVs1Z7G9 ImjD805OlGDTulYMmCUXedFLfC9qo5EhEp5+PnP2nplpsYrLE/UiKQL7SsbvwUL3 QrPgHhr39fqpxoYWE7PQKgKiXRhsX4+6TijnFzRiXItiIt9B4muD8JoN6qMgzul1 bluHvzGIf6vxszD8mOZlQfP/zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR7Mpay IAataqZSSASO4oz8JwQ9MB8GA1UdIwQYMBaAFA4fYkojWVGZCG4YK1/HxSRjqeVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi83N0E3N0QzMEM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVaa0liaGdyWDhmRkpHT3A1 VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RoOWlTaU5aVVprSWJoZ3JYOGZGSkdPcDVWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi83N0E3N0QzMEM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9EaDlpU2lOWlVa a0liaGdyWDhmRkpHT3A1VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWuj6ZnrBstQ65XqxVvyAPf0MqIIfBesK9uMBniLNsqYrCoEgP+AYf ZvUCnHSi82uhu0JA6tpBgh06ENegqle+JMWOn7KCtEiwveBO1lpp5xC05j+HZWgk tgPsMinmzAdj6TVeZ4AAV+yFkyhpqc+k4E+vK8gatk98SSCWnGpR3oucfGZy+BPz fh9gT54jHuJYF1WONn5fZzePL2Z1Wp6KiSfjbURULoJiDAxfYXUUJfcSDWTKycSJ 3p+l2Y3K8GoaadwtdpG1YC12sH+BN3otshkiD9cjPRfW7oor8AVK2RrjQlrU9JL5 dHD/Nz4x3PuKRwWAsSxjZhNBwyBzCoRB -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net