$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft File: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft (raw, json) Hash identifier: xGXzYLFTJfK0ovDJNubSyinWkvl6CBk25ga5sO1ngvo= Subject key identifier: C1:F6:63:48:64:81:0A:15:E4:3F:9C:57:53:7B:C4:87:CE:8D:82:93 Authority key identifier: 37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 Certificate issuer: /CN=A91EA409/serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft Manifest number: 59 Signing time: Sun 27 Apr 2025 05:57:52 +0000 Manifest this update: Sun 27 Apr 2025 05:57:52 +0000 Manifest next update: Sun 04 May 2025 05:57:52 +0000 Files and hashes: 1: N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl (hash: P87dDbpP6TORhWm9mktfNSxcJMgFJ6TRB5uhoyaIXc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA409, serialNumber=377835CDA2BD6367EF0FEB5EA58198F8183A87C1 Validity Not Before: Apr 27 05:57:52 2025 GMT Not After : May 4 05:57:52 2025 GMT Subject: CN=680dc760-8c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:9f:96:58:8f:ef:2d:e9:3f:32:a8:75:8a: a5:f8:92:22:62:09:7e:1e:ce:bf:54:1f:31:14:59: 8e:9e:07:e5:01:6f:48:6b:a8:85:28:f4:8b:c7:1d: 85:c0:4a:35:a2:45:d9:7d:81:c8:c9:77:80:6d:6d: 83:da:8e:46:60:99:2c:2d:ae:60:2d:76:72:14:d7: 3f:48:a0:d0:be:74:01:1b:9c:d9:a7:5b:38:27:a9: c7:2a:10:f8:61:37:4d:78:56:14:1e:f0:2f:fd:24: 18:b4:67:63:64:1e:f2:c6:6e:31:8a:35:dc:2c:44: aa:d4:c1:4e:bd:f4:81:2b:7d:a6:ee:9c:b6:0d:89: f9:62:4d:c8:27:b1:55:27:e5:04:94:1e:64:c9:9d: bc:7d:03:a9:a0:e9:17:ed:41:52:77:e0:1c:6c:8f: 33:ff:89:93:07:2f:6e:63:62:d3:4b:2a:9c:26:5e: b6:3d:82:de:cb:61:53:dd:ba:4f:6a:9c:0f:52:58: 73:72:88:65:3c:42:4c:22:21:9f:61:75:dc:57:59: 42:c0:3d:fd:15:0c:48:f6:9d:4c:fa:a9:af:66:3f: 45:1e:a0:5f:ab:7b:1f:03:3b:78:59:9b:a9:89:d4: b0:9f:c7:5b:d4:29:0c:91:75:81:07:92:27:16:2a: 7b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F6:63:48:64:81:0A:15:E4:3F:9C:57:53:7B:C4:87:CE:8D:82:93 X509v3 Authority Key Identifier: keyid:37:78:35:CD:A2:BD:63:67:EF:0F:EB:5E:A5:81:98:F8:18:3A:87:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA409/0289F6FC9CAC11EFAB595516C4F9AE02/N3g1zaK9Y2fvD-tepYGY-Bg6h8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:04:a3:37:40:3e:30:64:4d:de:3a:87:ef:75:fe:63:a5:a4: 29:e4:79:16:63:b5:48:6d:d3:e7:f0:fd:5e:2b:87:fc:63:2b: df:1c:29:51:b2:ee:8e:cd:45:5f:88:27:82:6a:2b:65:ea:f4: d6:fd:b1:92:ab:cd:38:79:24:18:b6:f2:ab:02:d3:0e:b1:c3: fe:25:44:5d:e9:28:84:5b:70:dc:ce:86:e9:20:e4:72:1c:a2: 2e:86:12:9a:9b:9c:e1:ed:36:6b:29:a3:1e:76:43:94:44:2a: fa:73:34:ad:0a:7d:53:97:81:3b:c8:4c:a0:b3:b6:2f:3b:b9: c1:09:ee:0f:76:e8:e8:ed:aa:f8:97:88:93:da:70:9b:b7:3c: 0d:1d:39:30:78:7b:cd:d4:94:ee:68:d7:1f:dd:51:a3:20:bd: 2b:72:b4:a5:3f:52:b5:bf:11:d0:31:32:78:c3:73:e4:05:e0: c7:7c:82:0a:43:31:96:67:f7:09:bb:ef:42:32:db:1c:23:6c: 01:eb:4a:ef:04:cf:c7:02:2d:a7:f9:f8:9e:d2:77:2f:39:2e: 83:66:c5:c3:c0:1f:3c:f1:3a:85:46:98:ab:4a:f5:d3:5d:09: 29:95:ce:03:03:88:25:c1:e7:b0:ea:73:cb:61:fa:3b:3e:ba: d0:b1:60:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTQwOTExMC8GA1UEBRMoMzc3ODM1Q0RBMkJENjM2N0VGMEZFQjVFQTU4MTk4Rjgx ODNBODdDMTAeFw0yNTA0MjcwNTU3NTJaFw0yNTA1MDQwNTU3NTJaMBgxFjAUBgNV BAMTDTY4MGRjNzYwLThjNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0P5+WWI/vLek/Mqh1iqX4kiJiCX4ezr9UHzEUWY6eB+UBb0hrqIUo9IvHHYXA SjWiRdl9gcjJd4BtbYPajkZgmSwtrmAtdnIU1z9IoNC+dAEbnNmnWzgnqccqEPhh N014VhQe8C/9JBi0Z2NkHvLGbjGKNdwsRKrUwU699IErfabunLYNifliTcgnsVUn 5QSUHmTJnbx9A6mg6RftQVJ34BxsjzP/iZMHL25jYtNLKpwmXrY9gt7LYVPduk9q nA9SWHNyiGU8QkwiIZ9hddxXWULAPf0VDEj2nUz6qa9mP0UeoF+rex8DO3hZm6mJ 1LCfx1vUKQyRdYEHkicWKnsFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwfZjSGSB ChXkP5xXU3vEh86NgpMwHwYDVR0jBBgwFoAUN3g1zaK9Y2fvD+tepYGY+Bg6h8Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBNDA5LzAyODlGNkZDOUNB QzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJmdkQtdGVwWUdZLUJnNmg4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjNnMXphSzlZMmZ2RC10ZXBZR1ktQmc2aDhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB NDA5LzAyODlGNkZDOUNBQzExRUZBQjU5NTUxNkM0RjlBRTAyL04zZzF6YUs5WTJm dkQtdGVwWUdZLUJnNmg4RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYEozdAPjBkTd46h+91/mOlpCnkeRZjtUht0+fw/V4rh/xjK98cKVGy 7o7NRV+IJ4JqK2Xq9Nb9sZKrzTh5JBi28qsC0w6xw/4lRF3pKIRbcNzOhukg5HIc oi6GEpqbnOHtNmspox52Q5REKvpzNK0KfVOXgTvITKCzti87ucEJ7g926OjtqviX iJPacJu3PA0dOTB4e83UlO5o1x/dUaMgvStytKU/UrW/EdAxMnjDc+QF4Md8ggpD MZZn9wm770Iy2xwjbAHrSu8Ez8cCLaf5+J7Sdy85LoNmxcPAHzzxOoVGmKtK9dNd CSmVzgMDiCXB57Dqc8th+js+utCxYBc= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net