$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft File: UgupTND7nnwUDfvAzFi5PPVMIvM.mft (raw, json) Hash identifier: hpUd0DZm0zAg/uOBGXdGt+T95+eeyYETn9mDgoYA9SI= Subject key identifier: 8C:52:BB:CA:F2:09:3F:70:63:DD:A5:6B:D1:1F:46:08:79:4C:0B:FD Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 Certificate issuer: /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft Manifest number: 77 Signing time: Fri 25 Apr 2025 05:45:32 +0000 Manifest this update: Fri 25 Apr 2025 05:45:32 +0000 Manifest next update: Fri 02 May 2025 05:45:32 +0000 Files and hashes: 1: UgupTND7nnwUDfvAzFi5PPVMIvM.crl (hash: xCwwizPfHIMIfZROPxSBS8qnU/dTj4Yvs1+2W9emiEk=) 2: D79D112E6C7F11EF92105459C4F9AE02.roa (hash: HfxBV0ZJ9ixuR1eesZIIiZUZrrfXBYTU4Z7Ry5c0lbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3 Validity Not Before: Apr 25 05:45:32 2025 GMT Not After : May 2 05:45:32 2025 GMT Subject: CN=680b217c-47fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:d7:76:2d:95:e5:76:18:96:61:83:81:c6: 36:93:99:66:87:bc:90:2c:f0:c5:49:33:c5:e4:2e: 7f:95:93:e5:15:08:3e:86:3d:8c:69:b3:16:4e:79: 07:6c:e3:c8:b2:d4:cc:73:d9:97:88:16:32:88:f7: 2d:9e:56:e5:9b:24:75:c2:17:26:8e:66:15:af:e2: 6b:6e:3c:9d:c8:97:0b:d2:22:41:d4:04:bf:96:5a: 5f:62:e5:aa:5d:e8:14:cb:f7:a0:e3:70:ad:61:43: 6c:13:70:c7:df:ef:1a:c5:44:43:f8:37:4f:d3:d6: 16:46:13:f9:bb:95:89:88:c0:d7:cf:6e:64:9b:b8: ea:2b:86:d7:17:7d:2c:5c:2e:8e:f6:2d:aa:4b:a5: 34:41:9c:2b:4d:87:c6:18:c6:74:39:ec:2a:bb:a1: b1:81:ab:52:0b:4a:7f:ac:29:91:2f:ae:c0:75:8b: 77:c6:99:92:a6:d9:28:a6:96:6e:79:ae:64:6f:f8: 2d:5d:57:21:35:e1:6d:fb:e1:fb:23:e9:28:47:d0: c2:a1:57:49:e5:5a:e0:2c:14:ab:43:e7:e4:6b:33: d9:d5:0c:9e:2d:91:d9:8b:d5:d8:59:d2:0b:f3:1c: 38:70:58:0e:5b:99:6b:48:01:5f:75:19:69:c2:c5: 41:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:52:BB:CA:F2:09:3F:70:63:DD:A5:6B:D1:1F:46:08:79:4C:0B:FD X509v3 Authority Key Identifier: keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:15:5c:43:2e:3d:79:85:35:e7:ec:84:24:a8:bf:21:17:3a: da:b8:42:08:ac:9a:11:34:df:a7:18:d0:71:65:75:fb:d0:ca: 12:a0:41:c6:e0:d8:78:86:84:ae:f6:a1:35:7e:9f:f5:04:0d: a4:9a:43:30:fb:39:d4:18:64:7d:92:b2:c8:0c:e2:dc:5e:0f: 21:54:1b:72:d0:b2:5b:36:2d:30:14:e0:0b:93:00:0f:d2:49: 5d:da:a1:d9:1d:52:4b:16:5d:ef:9c:dd:2f:ca:19:fd:cb:85: 6a:40:55:d9:3b:21:a6:27:e8:a2:a1:f3:77:db:a8:f4:7b:5d: ab:ad:64:63:c6:93:72:b9:f2:39:8b:89:0d:f9:a9:6a:6a:8a: 48:1e:2f:0b:32:ed:b9:9e:f8:83:66:a8:f7:42:00:4d:1e:44: c3:28:58:ed:0b:db:11:71:fb:fa:3d:09:58:d4:eb:95:72:8e: 22:46:c4:f6:e0:6a:91:ac:0a:8b:92:b0:ae:c1:4a:e2:bf:ed: b1:4e:8f:1d:e9:b2:99:fe:4c:9c:a9:6f:8a:3c:3b:7c:b3:93: 83:b6:fa:53:e8:c8:d3:c2:81:94:1f:19:6c:78:a8:02:a3:61: 4a:e7:89:ce:b3:f6:14:e5:0c:10:16:2f:ae:51:97:36:70:6d: 85:e9:87:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODk4MTExMC8GA1UEBRMoNTIwQkE5NENEMEZCOUU3QzE0MERGQkMwQ0M1OEI5M0NG NTRDMjJGMzAeFw0yNTA0MjUwNTQ1MzJaFw0yNTA1MDIwNTQ1MzJaMBgxFjAUBgNV BAMTDTY4MGIyMTdjLTQ3ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGP9d2LZXldhiWYYOBxjaTmWaHvJAs8MVJM8XkLn+Vk+UVCD6GPYxpsxZOeQds 48iy1Mxz2ZeIFjKI9y2eVuWbJHXCFyaOZhWv4mtuPJ3IlwvSIkHUBL+WWl9i5apd 6BTL96DjcK1hQ2wTcMff7xrFREP4N0/T1hZGE/m7lYmIwNfPbmSbuOorhtcXfSxc Lo72LapLpTRBnCtNh8YYxnQ57Cq7obGBq1ILSn+sKZEvrsB1i3fGmZKm2Simlm55 rmRv+C1dVyE14W374fsj6ShH0MKhV0nlWuAsFKtD5+RrM9nVDJ4tkdmL1dhZ0gvz HDhwWA5bmWtIAV91GWnCxUFXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjFK7yvIJ P3Bj3aVr0R9GCHlMC/0wHwYDVR0jBBgwFoAUUgupTND7nnwUDfvAzFi5PPVMIvMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OTgxLzFDRjZDRDc0NkM3 RjExRUY5MTREN0Q1N0M0RjlBRTAyL1VndXBUTkQ3bm53VURmdkF6Rmk1UFBWTUl2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWd1cFRORDdubndVRGZ2QXpGaTVQUFZNSXZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OTgxLzFDRjZDRDc0NkM3RjExRUY5MTREN0Q1N0M0RjlBRTAyL1VndXBUTkQ3bm53 VURmdkF6Rmk1UFBWTUl2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwVXEMuPXmFNefshCSovyEXOtq4QgismhE036cY0HFldfvQyhKgQcbg 2HiGhK72oTV+n/UEDaSaQzD7OdQYZH2SssgM4txeDyFUG3LQsls2LTAU4AuTAA/S SV3aodkdUksWXe+c3S/KGf3LhWpAVdk7IaYn6KKh83fbqPR7XautZGPGk3K58jmL iQ35qWpqikgeLwsy7bme+INmqPdCAE0eRMMoWO0L2xFx+/o9CVjU65VyjiJGxPbg apGsCouSsK7BSuK/7bFOjx3pspn+TJypb4o8O3yzk4O2+lPoyNPCgZQfGWx4qAKj YUrnic6z9hTlDBAWL65RlzZwbYXphyM= -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:22 2025 by rpki-client on console.sobornost.net