$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: ifNb2fgTQ2jwwCmaktdSzNE/gv42iOqsqnkYSUMErC0= Subject key identifier: 25:12:B6:5D:7E:BF:C3:D9:C9:11:2B:75:99:AC:76:E9:DF:CF:3A:92 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 3478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 3478 Signing time: Sat 26 Apr 2025 14:31:44 +0000 Manifest this update: Sat 26 Apr 2025 14:31:44 +0000 Manifest next update: Sat 03 May 2025 14:31:44 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: 8YQkAbNLsvsvZRjKDyPsnjLXeDbvhPknNDcY+ac6uZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13432 (0x3478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Apr 26 14:31:44 2025 GMT Not After : May 3 14:31:44 2025 GMT Subject: CN=680cee50-6fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:3d:1c:6c:9a:2d:67:20:b5:ae:df:1c:c2: 8b:84:5f:41:a0:4d:4d:27:74:1e:95:13:60:57:6b: 05:ac:59:40:b4:28:e2:50:7e:fb:13:4f:a9:38:82: 97:5c:c6:f8:c9:8c:fd:74:2e:85:7c:c8:a2:64:71: ed:d9:7e:0c:b2:88:0a:37:b2:49:93:87:f3:87:80: 06:8c:5f:2e:4c:73:05:50:8f:42:5c:6a:d8:3b:b3: 30:93:b8:82:86:90:81:f2:4e:6d:0b:10:1c:0d:ee: 41:25:a3:25:65:35:a0:5c:38:de:e9:50:9e:78:74: a1:0c:fb:b1:75:8d:8f:c4:cf:91:45:b6:bb:b8:2d: 67:71:bc:85:63:58:0d:a3:60:9a:0a:67:d7:0c:36: 55:52:d8:52:7f:2b:5d:6d:bc:a8:5c:44:10:63:e1: 2b:51:cc:91:f0:ee:29:cb:6b:04:5d:5f:0e:de:8c: 03:a8:6e:ae:2a:74:1a:d8:4c:e3:20:3c:56:c9:87: 8f:08:a0:64:20:07:d0:e0:b9:e2:55:52:d7:42:71: 6f:06:2c:fc:69:ca:9e:d5:40:c4:0e:04:29:e1:81: 89:e9:6f:4d:ed:94:60:84:d6:c0:77:d9:b1:28:ec: d9:80:04:79:b0:38:45:90:57:58:92:af:ee:93:f4: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:12:B6:5D:7E:BF:C3:D9:C9:11:2B:75:99:AC:76:E9:DF:CF:3A:92 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8e:be:55:d8:41:a9:45:64:c1:a1:ec:42:f3:8e:e2:dc:aa: d0:4f:7f:a3:c6:ba:be:61:75:21:03:60:b4:eb:ce:c7:b8:62: c5:d5:c2:2c:8d:39:8f:09:45:28:f7:3c:08:0c:db:af:7f:79: e5:3d:6e:3b:a9:47:cd:46:ae:8f:d6:c9:68:c1:7c:0e:84:53: 2a:4e:71:e8:04:a4:4b:60:68:f9:3f:b0:d2:f9:ae:aa:4a:0b: 0a:0a:52:4b:32:2d:e1:d0:8d:6e:98:2a:7e:01:f7:ea:d5:63: 29:73:94:a0:d2:87:bf:8b:b6:3f:97:27:e1:a3:44:bc:48:57: bc:4e:db:ef:67:dc:da:60:f7:5a:f9:8e:bc:89:6b:26:22:fc: 5c:24:71:12:63:55:c1:fc:91:ab:65:b2:b8:b6:32:6e:c0:6f: 0b:1b:a0:0a:52:1c:45:0b:44:ed:35:69:c0:68:0f:68:89:0d: 34:90:6e:56:fc:6e:6e:0b:76:a5:d8:fa:7e:49:8b:d1:f8:a6: d5:3c:4e:7a:7c:52:75:02:e1:88:57:eb:a4:bd:fd:a4:26:5e: 80:e7:77:0b:d7:31:4e:53:3b:5a:73:01:1b:b8:83:6c:32:ca: 78:fc:87:ab:51:52:87:9e:92:0c:c9:36:40:1c:4c:bd:f7:6c: f4:87:06:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUwNDI2MTQzMTQ0WhcNMjUwNTAzMTQzMTQ0WjAYMRYwFAYD VQQDEw02ODBjZWU1MC02ZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCQ9HGyaLWcgta7fHMKLhF9BoE1NJ3QelRNgV2sFrFlAtCjiUH77E0+pOIKX XMb4yYz9dC6FfMiiZHHt2X4MsogKN7JJk4fzh4AGjF8uTHMFUI9CXGrYO7Mwk7iC hpCB8k5tCxAcDe5BJaMlZTWgXDje6VCeeHShDPuxdY2PxM+RRba7uC1ncbyFY1gN o2CaCmfXDDZVUthSfytdbbyoXEQQY+ErUcyR8O4py2sEXV8O3owDqG6uKnQa2Ezj IDxWyYePCKBkIAfQ4LniVVLXQnFvBiz8acqe1UDEDgQp4YGJ6W9N7ZRghNbAd9mx KOzZgAR5sDhFkFdYkq/uk/QE0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUStl1+ v8PZyRErdZmsdunfzzqSMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUjr5V2EGpRWTBoexC847i3KrQT3+jxrq+YXUhA2C0687HuGLF1cIs jTmPCUUo9zwIDNuvf3nlPW47qUfNRq6P1slowXwOhFMqTnHoBKRLYGj5P7DS+a6q SgsKClJLMi3h0I1umCp+Affq1WMpc5Sg0oe/i7Y/lyfho0S8SFe8TtvvZ9zaYPda +Y68iWsmIvxcJHESY1XB/JGrZbK4tjJuwG8LG6AKUhxFC0TtNWnAaA9oiQ00kG5W /G5uC3al2Pp+SYvR+KbVPE56fFJ1AuGIV+ukvf2kJl6A53cL1zFOUztacwEbuINs Msp4/IerUVKHnpIMyTZAHEy992z0hwYP -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:42 2025 by rpki-client on console.sobornost.net