$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft File: 3nORs21uduLMQKkEd3LACw93Umw.mft (raw, json) Hash identifier: yR8D8gtYliJjGwzXLXEEpH+u6mgirEdZ7GHf1H2icL0= Subject key identifier: 5B:F5:0F:87:D3:29:C6:3D:13:0B:CA:FD:C7:2C:9E:E0:F5:0A:17:11 Authority key identifier: DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C Certificate issuer: /CN=A91E4696/serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft Manifest number: 0164 Signing time: Sun 27 Apr 2025 02:14:17 +0000 Manifest this update: Sun 27 Apr 2025 02:14:16 +0000 Manifest next update: Sun 04 May 2025 02:14:16 +0000 Files and hashes: 1: 3nORs21uduLMQKkEd3LACw93Umw.crl (hash: AIIOFOn8LMHjkKbvJOhaMBlP3uPicfZBTyPJ6WPmwrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=DE7391B36D6E76E2CC40A9047772C00B0F77526C Validity Not Before: Apr 27 02:14:16 2025 GMT Not After : May 4 02:14:16 2025 GMT Subject: CN=680d92f8-89ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c0:8d:e9:8e:5b:51:8a:c8:2d:19:39:7d:aa: 8c:41:3e:54:4e:f7:76:56:fa:09:9b:c0:56:ff:21: 88:74:65:4e:37:b0:50:1a:31:b2:a5:56:bf:c5:df: a7:8e:80:26:a9:2f:79:93:cb:e3:67:55:33:86:7b: 09:b8:65:3e:08:52:0e:ea:7e:12:7b:66:a1:46:66: d3:e3:60:ca:0d:fd:45:43:6a:be:fe:57:af:6f:52: 6c:4f:0d:06:57:06:18:f7:ba:10:0e:aa:ce:dc:ff: 96:65:8b:94:81:a8:bb:32:89:e6:df:03:cd:25:4f: d3:18:f4:26:6e:32:27:f1:dc:c6:4c:29:8a:94:db: 7b:d4:36:a0:bc:98:a6:b2:e5:77:c9:b7:1c:bb:bb: de:6f:fd:2f:8a:1a:05:6f:f7:aa:21:61:35:86:7a: 44:e0:c0:0e:ea:c1:9d:a0:80:b4:e1:0f:9e:54:74: 95:bc:d2:98:39:b1:a5:6b:da:97:c2:25:87:32:69: dd:5e:2f:43:cd:65:eb:34:01:91:d7:17:bd:b2:6d: 6e:74:52:a8:72:1a:78:c3:7b:a2:00:b0:a4:b1:0e: 3a:db:0b:2a:76:45:66:f0:4a:65:b6:22:06:e3:fd: 67:e7:ec:11:16:fc:12:56:d6:d9:5a:a3:ff:33:9d: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:0F:87:D3:29:C6:3D:13:0B:CA:FD:C7:2C:9E:E0:F5:0A:17:11 X509v3 Authority Key Identifier: keyid:DE:73:91:B3:6D:6E:76:E2:CC:40:A9:04:77:72:C0:0B:0F:77:52:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3nORs21uduLMQKkEd3LACw93Umw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/5FCD9FD4005511EEBE7A9241C4F9AE02/3nORs21uduLMQKkEd3LACw93Umw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:99:bb:b9:ef:00:43:e0:6a:37:0a:f9:6a:11:9f:6d:96:e3: 91:ae:b8:48:e8:9e:c1:66:59:b8:b7:8f:3d:85:d5:55:7c:54: 90:6d:72:77:ca:5a:7c:6c:f3:54:40:62:5a:d6:60:34:9c:c2: df:5e:76:bd:f3:23:a0:4b:e8:15:ce:1e:ad:5b:59:7f:fa:b4: 87:3a:7b:81:93:2f:e9:e4:f9:58:ed:d5:88:1e:61:17:69:d0: 63:f9:51:bc:49:e0:00:1f:24:68:32:ab:9a:8a:df:40:95:d4: 94:fa:23:22:9d:e7:ca:e0:b4:ce:41:b2:4e:38:0b:05:a3:b0: 7c:eb:c3:ba:87:92:ff:5a:7b:5b:3f:0c:d5:bd:c4:1a:7c:59: a9:5e:92:ba:3d:4f:03:98:43:43:ed:9a:27:f5:be:58:93:5f: a5:22:08:41:a5:14:bb:4f:08:95:5d:26:da:c6:57:92:17:16: cf:08:82:26:7d:1a:fe:5b:fd:ab:dc:cb:d2:fb:26:d2:16:b2: 49:fb:2e:17:4a:43:0d:3b:f0:bf:89:74:a2:a7:04:42:ae:7a: d3:f5:3b:ce:4d:4d:38:37:10:40:77:f9:d3:ab:a5:5e:93:e1: eb:a1:57:d9:ca:54:dd:f6:84:0b:64:92:34:a3:f0:9f:d9:9e: 70:c3:f8:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKERFNzM5MUIzNkQ2RTc2RTJDQzQwQTkwNDc3NzJDMDBC MEY3NzUyNkMwHhcNMjUwNDI3MDIxNDE2WhcNMjUwNTA0MDIxNDE2WjAYMRYwFAYD VQQDEw02ODBkOTJmOC04OWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosCN6Y5bUYrILRk5faqMQT5UTvd2VvoJm8BW/yGIdGVON7BQGjGypVa/xd+n joAmqS95k8vjZ1UzhnsJuGU+CFIO6n4Se2ahRmbT42DKDf1FQ2q+/levb1JsTw0G VwYY97oQDqrO3P+WZYuUgai7Monm3wPNJU/TGPQmbjIn8dzGTCmKlNt71DagvJim suV3ybccu7veb/0vihoFb/eqIWE1hnpE4MAO6sGdoIC04Q+eVHSVvNKYObGla9qX wiWHMmndXi9DzWXrNAGR1xe9sm1udFKochp4w3uiALCksQ462wsqdkVm8EpltiIG 4/1n5+wRFvwSVtbZWqP/M50CnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFv1D4fT KcY9EwvK/ccsnuD1ChcRMB8GA1UdIwQYMBaAFN5zkbNtbnbizECpBHdywAsPd1Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni81RkNEOUZENDAw NTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1TE1RS2tFZDNMQUN3OTNV bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzNuT1JzMjF1ZHVMTVFLa0VkM0xBQ3c5M1Vtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni81RkNEOUZENDAwNTUxMUVFQkU3QTkyNDFDNEY5QUUwMi8zbk9SczIxdWR1 TE1RS2tFZDNMQUN3OTNVbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBymbu57wBD4Go3CvlqEZ9tluORrrhI6J7BZlm4t489hdVVfFSQbXJ3 ylp8bPNUQGJa1mA0nMLfXna98yOgS+gVzh6tW1l/+rSHOnuBky/p5PlY7dWIHmEX adBj+VG8SeAAHyRoMquait9AldSU+iMinefK4LTOQbJOOAsFo7B868O6h5L/Wntb PwzVvcQafFmpXpK6PU8DmEND7Zon9b5Yk1+lIghBpRS7TwiVXSbaxleSFxbPCIIm fRr+W/2r3MvS+ybSFrJJ+y4XSkMNO/C/iXSipwRCrnrT9TvOTU04NxBAd/nTq6Ve k+HroVfZylTd9oQLZJI0o/Cf2Z5ww/jj -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net