$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: 7/4dMN+ECAN6QMPXnVkZfJeChVq8QbeKCncTzPkW9Wk= Subject key identifier: 66:C5:EC:E5:B7:DA:0E:DE:08:2A:A4:9B:91:F1:EF:94:49:8B:59:9A Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: 59 Signing time: Sun 27 Apr 2025 05:58:12 +0000 Manifest this update: Sun 27 Apr 2025 05:58:12 +0000 Manifest next update: Sun 04 May 2025 05:58:12 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: lBOEf9dhn0ihbNJ3a9qizJeCzUlEF2d7XTtUmghr8MA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Apr 27 05:58:12 2025 GMT Not After : May 4 05:58:12 2025 GMT Subject: CN=680dc774-eddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:b5:52:60:c3:92:1c:4a:96:42:29:bb:9f: fe:26:d2:63:ae:f0:65:10:47:8e:4a:18:43:5a:3e: 05:e3:2e:de:94:c7:49:51:1f:cc:67:c5:04:af:2d: 0b:05:f0:47:e5:9d:7b:e7:01:00:19:f1:b0:c5:94: c7:94:5a:98:00:6e:62:e9:9c:a1:11:d8:28:1e:09: 42:9c:52:9c:13:b4:7d:d0:65:f2:49:b8:76:a9:be: 8d:5f:fa:dc:78:85:d3:40:39:26:f9:91:64:74:fb: b3:ab:26:06:6a:93:b1:9a:6e:a3:ee:fd:80:6d:a1: 13:46:54:8a:c9:ed:f6:8d:b8:32:98:d0:83:5c:89: cc:c5:c5:f8:8b:47:5d:bc:76:cc:57:ed:dc:06:38: ed:ba:c0:25:68:9c:fa:e0:c0:fe:41:54:19:05:4a: ab:c1:4f:19:d0:51:07:1e:8e:e8:4b:73:fe:69:6f: e2:ab:a9:0e:0a:85:7f:6a:50:1e:19:6e:6a:cf:dc: 00:10:e8:e4:26:a9:0a:a0:e5:1d:6a:34:da:1d:c7: da:fc:7e:cb:e1:41:ac:57:ed:40:1d:bc:b2:e4:30: 66:8d:66:57:f2:4d:5c:da:44:0e:26:ac:ef:8c:31: d0:c6:62:d8:4b:07:7a:2a:87:99:3e:a2:ba:f6:3d: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C5:EC:E5:B7:DA:0E:DE:08:2A:A4:9B:91:F1:EF:94:49:8B:59:9A X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:bd:17:fe:5a:21:78:b5:7f:3a:5a:7a:2c:bb:4b:4f:88:e7: ad:c6:ae:42:ad:70:3d:28:f1:6d:36:fc:fe:d0:bd:10:df:6a: a0:23:fe:ea:8c:d9:59:98:b0:bc:48:20:dd:d5:bf:19:c4:fa: ed:24:9a:76:e8:81:65:d1:08:75:87:a8:a2:12:46:68:67:35: 1f:b3:58:ee:65:c7:3f:8b:bc:d2:4b:e9:88:03:97:30:52:8d: 01:de:77:4b:6d:76:b9:c0:5a:85:e1:ae:a7:42:b9:2c:2b:b0: 4e:a6:d5:aa:32:82:d5:b2:07:a2:42:61:8a:7d:13:36:99:11: 29:d1:86:23:2f:58:05:20:fe:ef:90:65:0a:b4:ee:d0:1e:31: 18:50:39:65:6d:88:0b:55:a9:64:f8:1e:f1:06:c1:60:7c:cd: 9d:bd:4c:85:e9:88:d6:e3:e4:48:6c:cc:a0:66:21:0e:83:32: 01:a9:47:98:22:f5:c8:e2:40:7b:6a:b5:84:a8:6a:48:00:af: 93:c3:c2:c7:67:7b:b8:3e:7a:d6:f4:36:b1:3c:f9:27:e7:3d: 1c:9e:62:8b:0b:5f:a3:51:e3:fe:41:31:e6:d3:25:84:71:7c: 81:63:74:d7:6f:97:5c:97:a3:a9:de:3d:41:33:06:7d:cb:a4: 6f:a5:98:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoNDQ2ODlDNjcxRkFFRjE5NjdDRjdBOUIxQTMzNjhEOEI5 MTRCN0JBNzAeFw0yNTA0MjcwNTU4MTJaFw0yNTA1MDQwNTU4MTJaMBgxFjAUBgNV BAMTDTY4MGRjNzc0LWVkZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmd7VSYMOSHEqWQim7n/4m0mOu8GUQR45KGENaPgXjLt6Ux0lRH8xnxQSvLQsF 8EflnXvnAQAZ8bDFlMeUWpgAbmLpnKER2CgeCUKcUpwTtH3QZfJJuHapvo1f+tx4 hdNAOSb5kWR0+7OrJgZqk7GabqPu/YBtoRNGVIrJ7faNuDKY0INciczFxfiLR128 dsxX7dwGOO26wCVonPrgwP5BVBkFSqvBTxnQUQcejuhLc/5pb+KrqQ4KhX9qUB4Z bmrP3AAQ6OQmqQqg5R1qNNodx9r8fsvhQaxX7UAdvLLkMGaNZlfyTVzaRA4mrO+M MdDGYthLB3oqh5k+orr2PUeDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZsXs5bfa Dt4IKqSbkfHvlEmLWZowHwYDVR0jBBgwFoAURGicZx+u8ZZ896mxozaNi5FLe6cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2LzA3QUU3QTk2OUNG NjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkdpY1p4LXU4Wlo4OTZteG96YU5pNUZMZTZjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QTQ2LzA3QUU3QTk2OUNGNjExRUY4QTZDODU4MUM0RjlBRTAyL1JHaWNaeC11OFpa ODk2bXhvemFOaTVGTGU2Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABi9F/5aIXi1fzpaeiy7S0+I563GrkKtcD0o8W02/P7QvRDfaqAj/uqM 2VmYsLxIIN3VvxnE+u0kmnbogWXRCHWHqKISRmhnNR+zWO5lxz+LvNJL6YgDlzBS jQHed0ttdrnAWoXhrqdCuSwrsE6m1aoygtWyB6JCYYp9EzaZESnRhiMvWAUg/u+Q ZQq07tAeMRhQOWVtiAtVqWT4HvEGwWB8zZ29TIXpiNbj5EhszKBmIQ6DMgGpR5gi 9cjiQHtqtYSoakgAr5PDwsdne7g+etb0NrE8+SfnPRyeYosLX6NR4/5BMebTJYRx fIFjdNdvl1yXo6nePUEzBn3LpG+lmBE= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net