$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft File: G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json) Hash identifier: Rsyhb/+8+eyaGGx6K7Ceea4OaxvdNXS6fWQtTjICd0o= Subject key identifier: 9F:17:2F:31:24:72:89:2F:A0:1F:6E:38:6E:A2:3D:C7:15:28:8C:AE Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 Certificate issuer: /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Certificate serial: 06F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft Manifest number: 276C Signing time: Mon 28 Apr 2025 16:04:42 +0000 Manifest this update: Mon 28 Apr 2025 16:04:41 +0000 Manifest next update: Mon 05 May 2025 16:04:41 +0000 Files and hashes: 1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: 8c26FAScq6OGcQP7DGAzl2kflzBsr8yRmdIwZBd5ymk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1778 (0x6f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39 Validity Not Before: Apr 28 16:04:41 2025 GMT Not After : May 5 16:04:41 2025 GMT Subject: CN=680fa719-3548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:b7:db:dd:c4:f9:7d:f7:fd:00:ee:0c:8b: 84:76:8c:2b:2e:03:28:08:bd:15:64:05:f0:ec:a6: 08:c1:25:11:d6:0e:bd:19:a0:f1:64:45:6b:ce:73: 13:63:10:b9:9b:a1:f9:46:76:c8:94:04:84:34:c8: 46:0d:77:90:83:0f:5b:b2:3f:e3:45:c6:1c:8b:f4: 98:00:e5:56:33:0e:2e:25:bf:5b:7c:03:85:bc:75: cc:53:ad:3a:98:e3:cd:48:f4:86:22:bb:62:f5:d7: 1e:2e:ce:d7:69:a5:f0:c3:8b:03:c4:23:b2:36:fd: f1:7f:a7:0a:60:11:52:26:f7:f1:8c:f7:c8:80:a7: f9:ab:5c:a8:74:9a:31:3c:51:32:cf:3e:96:67:08: 9f:8a:a2:18:a1:7c:83:78:f8:e8:77:0a:65:c7:c2: 4c:8b:2a:0a:64:c7:ac:10:51:76:55:85:1a:a5:85: d4:74:f6:d5:2c:61:a6:33:68:31:2f:c2:14:55:91: 8b:2e:7f:ab:84:4f:d3:ee:54:a2:64:f6:0c:80:0b: 8b:46:8a:28:cd:fb:14:6b:01:7f:f3:01:27:27:66: ab:59:c6:df:11:7e:ed:b6:6d:a7:98:b5:ea:8e:76: 6c:6b:7f:56:ea:92:01:da:50:86:1d:c2:64:81:e2: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:17:2F:31:24:72:89:2F:A0:1F:6E:38:6E:A2:3D:C7:15:28:8C:AE X509v3 Authority Key Identifier: keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:90:39:24:8a:db:dc:e1:c6:06:4c:bc:4b:8c:7d:d1:c0:33: 3e:ec:12:d6:9e:23:b0:e3:a7:24:ed:8c:d9:cf:d8:29:15:26: d3:e7:b9:79:32:3e:be:62:22:18:6e:90:ed:36:d5:79:17:ef: 96:4d:cd:a2:65:f6:52:f6:34:ad:0f:e4:93:11:48:c2:11:d7: c1:44:0c:31:ba:d4:6d:19:9c:4a:f9:3a:ad:ef:fe:9f:2e:5b: 2c:73:aa:9a:4c:5c:8c:9a:ad:eb:37:26:27:b1:6a:15:54:8a: 34:d8:8e:26:49:69:74:32:6f:b8:07:28:28:71:0f:61:80:11: a3:7f:41:b5:78:e2:9b:4d:41:68:e3:21:90:44:04:03:6f:3f: 27:41:12:e3:ae:14:b6:1b:eb:a8:ee:91:87:fd:95:a9:48:81: 36:02:75:ec:fe:08:c5:96:e3:ac:f6:18:bc:75:9e:e6:75:52: 8f:40:e0:e4:4d:52:a6:c3:6c:ba:b1:7d:d3:2c:2d:b3:d8:b4: dc:f9:47:10:c2:db:59:c7:a9:89:72:91:52:40:0b:06:17:c5: f1:4e:79:34:fb:45:fd:34:d5:83:ce:8e:eb:d5:a8:01:7d:13: b6:ce:88:70:73:39:97:6e:a7:1c:09:0c:cd:f9:50:2b:e8:42: ec:ec:58:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC MDgxMzNFMzkwHhcNMjUwNDI4MTYwNDQxWhcNMjUwNTA1MTYwNDQxWjAYMRYwFAYD VQQDEw02ODBmYTcxOS0zNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslq3293E+X33/QDuDIuEdowrLgMoCL0VZAXw7KYIwSUR1g69GaDxZEVrznMT YxC5m6H5RnbIlASENMhGDXeQgw9bsj/jRcYci/SYAOVWMw4uJb9bfAOFvHXMU606 mOPNSPSGIrti9dceLs7XaaXww4sDxCOyNv3xf6cKYBFSJvfxjPfIgKf5q1yodJox PFEyzz6WZwifiqIYoXyDePjodwplx8JMiyoKZMesEFF2VYUapYXUdPbVLGGmM2gx L8IUVZGLLn+rhE/T7lSiZPYMgAuLRooozfsUawF/8wEnJ2arWcbfEX7ttm2nmLXq jnZsa39W6pIB2lCGHcJkgeJ7TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8XLzEk cokvoB9uOG6iPccVKIyuMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt bU5LLVNHYy16TUt3Z1RQamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIkDkkitvc4cYGTLxLjH3RwDM+7BLWniOw46ck7YzZz9gpFSbT57l5 Mj6+YiIYbpDtNtV5F++WTc2iZfZS9jStD+STEUjCEdfBRAwxutRtGZxK+Tqt7/6f Llssc6qaTFyMmq3rNyYnsWoVVIo02I4mSWl0Mm+4BygocQ9hgBGjf0G1eOKbTUFo 4yGQRAQDbz8nQRLjrhS2G+uo7pGH/ZWpSIE2AnXs/gjFluOs9hi8dZ7mdVKPQODk TVKmw2y6sX3TLC2z2LTc+UcQwttZx6mJcpFSQAsGF8XxTnk0+0X9NNWDzo7r1agB fRO2zohwczmXbqccCQzN+VAr6ELs7Fgc -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:07 2025 by rpki-client on console.sobornost.net