$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: RjL1t8WfbmReov8OcTVFRoLbb7ci+6ClF0ChIyX6F6I= Subject key identifier: 71:F5:7B:B7:C8:5A:15:56:F3:E3:A5:3C:7E:69:B4:73:AB:FB:2F:18 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 081B Signing time: Sat 26 Apr 2025 20:34:25 +0000 Manifest this update: Sat 26 Apr 2025 20:34:25 +0000 Manifest next update: Sat 03 May 2025 20:34:25 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: 8YosmbvzBREFq9V9o60cP/5uWGl6zf0b6nndH+uShaA=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: HLJ4E+O4+cyS3vrwMtki5z6A2KFnmKhIcHCO2Ezqz2E=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: I3TylIitR1gs3qeVyLm/iGnBJAcsnmMydwLVLUYv63M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Apr 26 20:34:25 2025 GMT Not After : May 3 20:34:25 2025 GMT Subject: CN=680d4351-93eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:49:90:22:28:3c:a3:57:30:f3:ad:98:11: 31:2c:df:ec:0a:be:93:90:e0:60:71:2d:c7:5e:5c: 49:25:77:3b:87:c1:3d:44:93:c3:6d:a8:49:2a:9d: 49:6a:ac:95:5d:75:7d:0a:4d:4e:75:cc:48:12:aa: 5a:60:ae:5a:3a:95:c1:ad:b8:ba:79:5c:72:b7:36: c7:3c:19:bd:34:86:e7:21:4c:7d:bf:62:a8:f4:f4: b4:e4:7d:df:43:c1:6b:c2:83:25:26:31:5f:d7:d8: f3:47:23:d5:f4:d0:84:75:77:a8:e8:3e:37:9f:d0: e4:31:8b:a7:98:4d:4a:86:8f:34:2f:73:bd:72:8d: 29:68:87:d2:43:c8:a7:1a:41:95:0d:59:5b:ba:d9: c0:5e:9a:b4:45:70:9d:93:9b:0c:2c:bb:40:8f:85: 24:83:2c:cc:97:d9:2c:65:1c:c6:7a:e8:bc:e8:53: c9:ff:80:d2:c6:b8:84:09:bd:32:14:d3:ba:51:73: 64:bf:7b:43:17:53:f4:f9:d4:30:d3:fc:8d:33:3d: 95:59:eb:ce:f5:c3:24:cd:0d:d2:39:2b:01:ca:6a: d4:91:19:bc:9e:45:34:fd:d2:19:0b:13:fc:46:47: 60:22:58:f0:76:a8:9e:92:97:1d:e5:94:24:09:cd: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F5:7B:B7:C8:5A:15:56:F3:E3:A5:3C:7E:69:B4:73:AB:FB:2F:18 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e1:ab:64:1f:77:15:ca:85:a6:41:c1:3d:47:7a:48:c9:bd: 21:49:17:b3:4c:0b:8a:2b:78:5f:7f:47:3b:74:dc:69:db:5b: 9a:50:8a:84:30:0c:7b:9d:b5:ce:72:c3:ed:39:c8:e3:27:66: 45:e3:27:50:f1:bf:98:d0:b7:2b:04:16:0f:a9:97:22:67:ef: 17:e3:6a:d4:bd:22:e7:09:eb:1b:6d:06:15:8f:c0:b3:4b:f0: 45:03:44:c4:c3:39:78:bb:1f:ee:cb:dc:bd:36:49:89:e1:f1: bc:7f:db:a8:63:5c:af:e6:c6:54:86:dd:77:a0:c6:30:13:dc: 0a:d9:c9:66:a0:35:6f:8c:cc:3e:2b:de:31:3c:38:db:c1:7d: df:75:44:26:9d:f3:45:26:df:b3:45:65:f5:9b:ae:d4:3a:c0: 24:5a:43:85:11:61:8b:69:f1:25:d6:0f:4b:99:5a:73:39:24: ed:1e:d1:7d:a7:d6:b6:6a:41:6d:1c:63:bc:a1:04:85:6d:0e: b7:93:9d:49:8d:08:f4:ac:52:72:86:a4:f6:32:f6:b9:04:d0: 8b:81:4c:d9:ce:66:51:1e:ac:f1:ca:39:f5:a3:3f:93:7f:f0: f2:47:41:dd:d5:3f:ad:97:6c:8d:e0:a7:08:c7:0b:7d:bd:41: 29:9d:4d:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjUwNDI2MjAzNDI1WhcNMjUwNTAzMjAzNDI1WjAYMRYwFAYD VQQDEw02ODBkNDM1MS05M2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApndJkCIoPKNXMPOtmBExLN/sCr6TkOBgcS3HXlxJJXc7h8E9RJPDbahJKp1J aqyVXXV9Ck1OdcxIEqpaYK5aOpXBrbi6eVxytzbHPBm9NIbnIUx9v2Ko9PS05H3f Q8FrwoMlJjFf19jzRyPV9NCEdXeo6D43n9DkMYunmE1Kho80L3O9co0paIfSQ8in GkGVDVlbutnAXpq0RXCdk5sMLLtAj4UkgyzMl9ksZRzGeui86FPJ/4DSxriECb0y FNO6UXNkv3tDF1P0+dQw0/yNMz2VWevO9cMkzQ3SOSsBymrUkRm8nkU0/dIZCxP8 RkdgIljwdqiekpcd5ZQkCc1j+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH1e7fI WhVW8+OlPH5ptHOr+y8YMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq4atkH3cVyoWmQcE9R3pIyb0hSRezTAuKK3hff0c7dNxp21uaUIqE MAx7nbXOcsPtOcjjJ2ZF4ydQ8b+Y0LcrBBYPqZciZ+8X42rUvSLnCesbbQYVj8Cz S/BFA0TEwzl4ux/uy9y9NkmJ4fG8f9uoY1yv5sZUht13oMYwE9wK2clmoDVvjMw+ K94xPDjbwX3fdUQmnfNFJt+zRWX1m67UOsAkWkOFEWGLafEl1g9LmVpzOSTtHtF9 p9a2akFtHGO8oQSFbQ63k51JjQj0rFJyhqT2Mva5BNCLgUzZzmZRHqzxyjn1oz+T f/DyR0Hd1T+tl2yN4KcIxwt9vUEpnU3S -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:54 2025 by rpki-client on console.sobornost.net