$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: lGaZzPgvEoqCfVWyLD8y3cUaOCX0W15HkaxX645B6u0= Subject key identifier: AF:4B:4F:9F:47:54:16:83:9B:25:6B:5B:75:16:9A:7B:2F:2A:46:EB Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 07C3 Signing time: Sat 26 Apr 2025 20:48:21 +0000 Manifest this update: Sat 26 Apr 2025 20:48:21 +0000 Manifest next update: Sat 03 May 2025 20:48:21 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: gjfz7npNyx7d2FfCcSwrV0avgXW4yXp5ybBgfoez+Y8=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: bbD/CkiY8PoLpDlyreN0bTO0yQS0iLZL1KAfcB5xBxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Apr 26 20:48:21 2025 GMT Not After : May 3 20:48:21 2025 GMT Subject: CN=680d4695-5d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f7:fe:9d:fa:04:e9:5e:ea:cf:f4:cc:ff:29: 9c:96:c0:8f:be:1d:3a:18:3f:55:7e:9f:4e:47:15: ce:33:4b:c1:cc:57:05:7b:3d:88:5c:0f:9f:f4:b1: 8a:9b:c3:05:ee:9d:c5:51:b1:c6:2b:80:ca:3f:78: 13:31:9f:33:c9:0d:20:c2:70:8a:a4:dd:ab:10:e6: 65:54:e8:8f:21:da:8d:83:ab:ce:b9:31:ab:b4:22: a9:f2:09:8f:19:e8:1a:62:a1:68:79:b5:7d:2e:79: ad:1c:9d:19:d1:eb:9e:16:5a:5f:cb:7a:0c:ac:84: a6:08:46:fa:54:bf:5b:db:e8:6e:a3:a0:7c:5b:e6: e4:4a:f6:8c:a6:8b:41:84:ac:49:16:a8:7a:0f:12: df:e3:8a:ea:e5:84:d7:0b:42:71:06:57:3a:d2:31: e7:1a:e2:92:da:0d:a6:5c:b7:a0:54:57:1f:67:5b: e5:ed:5e:e1:50:31:fb:22:8a:34:e6:f7:ec:0b:ea: 9b:ea:be:51:03:56:0e:5b:8c:04:c1:99:e8:dd:cb: 5d:93:ab:4c:78:7f:63:2e:1d:7e:36:88:66:6e:71: aa:78:95:af:95:dc:42:c8:43:93:6d:77:92:2c:96: 09:7b:74:72:b8:e5:80:f9:e2:6d:6c:0d:df:73:ba: a2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4B:4F:9F:47:54:16:83:9B:25:6B:5B:75:16:9A:7B:2F:2A:46:EB X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:31:97:c3:c4:32:0b:a8:aa:5a:40:64:c0:fd:85:cc:a3:72: db:6c:a6:eb:72:73:f2:97:17:97:0f:16:c2:91:3f:4a:f3:22: 03:58:c7:89:01:1a:aa:3d:1a:24:72:fb:eb:1d:c8:07:0e:36: 8c:a5:e1:f4:67:e9:e8:6c:44:fe:0c:19:eb:84:c7:64:50:34: 6a:0f:b5:17:13:e3:55:e2:a6:7b:16:46:52:d7:c4:4f:c1:2e: 63:67:5b:51:7f:c7:90:48:e0:36:bf:fd:c5:9a:0a:f3:1e:c7: 66:9a:af:01:96:9c:39:b4:5e:a9:d7:52:84:13:39:57:49:3c: 37:d0:9d:72:69:cb:11:a8:c7:25:82:66:9d:97:fc:b1:bb:3f: 92:b5:08:b7:30:69:c9:a2:9d:3b:72:12:c0:ec:51:b0:fa:1e: 6a:3b:2c:21:4d:dd:33:17:9c:3f:ae:5b:82:57:68:77:54:6b: f8:67:11:ca:88:3c:5e:c5:1f:be:5f:e5:f7:1a:b8:fc:33:1d: fe:fd:2c:f1:70:89:ec:d7:f9:5f:db:14:b0:5a:e7:04:ca:2f: 20:67:ce:20:3f:bf:8a:f9:6b:a1:37:85:4d:7d:03:d7:f5:93: 47:4f:ef:e3:35:55:8e:bb:f0:40:96:e3:da:cc:76:bf:af:22: c1:89:46:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwNDI2MjA0ODIxWhcNMjUwNTAzMjA0ODIxWjAYMRYwFAYD VQQDEw02ODBkNDY5NS01ZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ff+nfoE6V7qz/TM/ymclsCPvh06GD9Vfp9ORxXOM0vBzFcFez2IXA+f9LGK m8MF7p3FUbHGK4DKP3gTMZ8zyQ0gwnCKpN2rEOZlVOiPIdqNg6vOuTGrtCKp8gmP GegaYqFoebV9LnmtHJ0Z0eueFlpfy3oMrISmCEb6VL9b2+huo6B8W+bkSvaMpotB hKxJFqh6DxLf44rq5YTXC0JxBlc60jHnGuKS2g2mXLegVFcfZ1vl7V7hUDH7Ioo0 5vfsC+qb6r5RA1YOW4wEwZno3ctdk6tMeH9jLh1+NohmbnGqeJWvldxCyEOTbXeS LJYJe3RyuOWA+eJtbA3fc7qiTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9LT59H VBaDmyVrW3UWmnsvKkbrMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3MZfDxDILqKpaQGTA/YXMo3LbbKbrcnPylxeXDxbCkT9K8yIDWMeJ ARqqPRokcvvrHcgHDjaMpeH0Z+nobET+DBnrhMdkUDRqD7UXE+NV4qZ7FkZS18RP wS5jZ1tRf8eQSOA2v/3FmgrzHsdmmq8Blpw5tF6p11KEEzlXSTw30J1yacsRqMcl gmadl/yxuz+StQi3MGnJop07chLA7FGw+h5qOywhTd0zF5w/rluCV2h3VGv4ZxHK iDxexR++X+X3Grj8Mx3+/SzxcIns1/lf2xSwWucEyi8gZ84gP7+K+WuhN4VNfQPX 9ZNHT+/jNVWOu/BAluPazHa/ryLBiUYB -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:53 2025 by rpki-client on console.sobornost.net