$ rpki-client -vvf rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft File: OGxcstbg7GFBrrc_STUhsFIKPPo.mft (raw, json) Hash identifier: mmXA4RyFg5RP/MzPo8uegg0n4tQND3liMt8wEuXscl4= Subject key identifier: FC:F7:D7:F6:A1:57:FA:92:3D:B6:D5:DE:BC:85:EC:9F:DF:D4:0F:E1 Authority key identifier: 38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA Certificate issuer: /CN=A9123AB4/serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Certificate serial: 1D2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft Manifest number: 1D22 Signing time: Mon 28 Apr 2025 16:15:15 +0000 Manifest this update: Mon 28 Apr 2025 16:15:15 +0000 Manifest next update: Mon 05 May 2025 16:15:15 +0000 Files and hashes: 1: OGxcstbg7GFBrrc_STUhsFIKPPo.crl (hash: ZSd5rGc4R1uAbQhC56HMGFeOHcx+eyQKwL+sKtFTCZU=) 2: DE5B018C8D8B11EBB959991DC4F9AE02.roa (hash: jfTk7qLtFGzciF3MjfSmzCLIXIS5E+uoDhIbl0HSies=) 3: DD9C07828D8B11EBB959991DC4F9AE02.roa (hash: gqOrlTvQP7NE8QcpWskAg9stXohxZ5iMQQauxzl2p0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7471 (0x1d2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123AB4, serialNumber=386C5CB2D6E0EC6141AEB73F493521B0520A3CFA Validity Not Before: Apr 28 16:15:15 2025 GMT Not After : May 5 16:15:15 2025 GMT Subject: CN=680fa993-669b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:ae:1f:ea:d8:43:3f:c1:8c:51:6a:b5:68: 82:e2:ef:f5:95:ae:86:df:bd:55:da:7f:0f:24:c1: 00:fa:9e:43:e4:3e:d0:10:16:a7:a2:4d:3a:36:c2: 7d:32:c6:ea:2f:09:b6:5f:f2:41:94:6d:1c:f1:e2: 87:ca:89:25:4b:cd:86:f3:c5:c9:ba:21:3b:6b:cd: 1a:69:c0:2d:6a:11:5c:be:64:b0:c3:94:ad:31:19: 9e:67:02:b6:41:9b:06:7b:42:e5:8a:4e:5f:f1:80: ca:27:7a:49:9a:8d:96:27:68:1d:e9:9f:91:54:ad: 69:ca:b1:78:7c:26:2f:a3:da:b1:69:a5:4e:9c:ef: ce:ed:e7:74:40:25:38:59:db:5b:1e:89:03:28:46: ce:f0:6c:21:0a:3c:72:c1:06:91:8d:dc:ab:c9:94: f6:fc:5e:bb:1a:3a:a2:e3:48:4a:61:c9:b9:ef:5b: 8b:df:1d:8a:e7:f0:a8:c1:93:de:6c:fe:0d:12:9b: 13:60:ba:0d:71:df:d4:97:25:52:ef:66:7b:5d:a7: 44:a3:a9:ba:9e:a1:ce:7f:2e:1e:ea:ef:ca:28:da: ea:32:6a:9e:ea:0d:c5:80:80:9a:58:3d:2e:70:cd: 5c:7c:00:51:ba:4f:8f:0e:dc:d3:ed:31:16:03:c4: 41:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F7:D7:F6:A1:57:FA:92:3D:B6:D5:DE:BC:85:EC:9F:DF:D4:0F:E1 X509v3 Authority Key Identifier: keyid:38:6C:5C:B2:D6:E0:EC:61:41:AE:B7:3F:49:35:21:B0:52:0A:3C:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OGxcstbg7GFBrrc_STUhsFIKPPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123AB4/1FB040A0B17411E68EC88518C4F9AE02/OGxcstbg7GFBrrc_STUhsFIKPPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:6e:ae:e9:2d:2d:d7:ea:93:4a:af:ae:ba:2d:91:ab:c9:68: cf:fb:3d:7c:ab:95:4f:19:6d:2f:27:15:3d:5d:b7:be:49:f2: 3b:c2:33:2e:23:b0:36:60:dd:78:2e:29:21:9c:79:e5:a1:43: 71:5e:f0:56:ec:7c:82:3c:85:45:0c:92:1a:a1:c4:42:0f:e2: e6:94:4b:f1:8a:a6:bf:d2:e0:c2:01:0f:bf:39:cd:33:8a:41: 08:40:eb:c2:d6:ad:2f:3a:b4:18:42:79:89:ea:8d:25:cb:61: da:46:c8:a0:f1:78:9b:bb:4f:85:88:1a:34:eb:47:f8:ba:8b: e1:d0:81:41:05:2e:ab:1b:0f:b9:85:d3:2f:cc:2e:b9:d5:4a: 88:45:fb:0e:df:db:d8:20:6f:09:cc:14:fe:fe:d2:1b:de:1e: 02:b4:f0:4a:f4:ef:3f:a7:a9:b5:fe:22:8a:79:35:14:a4:c5: b8:3b:9b:58:ec:35:1b:3e:e6:b4:f8:b0:11:c6:06:34:a9:98: e2:3b:1c:a5:0b:a4:18:93:b5:20:a4:cb:b2:db:5b:2c:39:52: 08:85:b1:73:b1:f1:e2:8b:69:50:28:2a:94:fe:de:7a:96:5d: 2a:65:d9:be:99:e4:96:19:da:5f:7b:bb:42:a5:09:08:22:92: 83:7c:8e:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNBQjQxMTAvBgNVBAUTKDM4NkM1Q0IyRDZFMEVDNjE0MUFFQjczRjQ5MzUyMUIw NTIwQTNDRkEwHhcNMjUwNDI4MTYxNTE1WhcNMjUwNTA1MTYxNTE1WjAYMRYwFAYD VQQDEw02ODBmYTk5My02NjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMyuH+rYQz/BjFFqtWiC4u/1la6G371V2n8PJMEA+p5D5D7QEBanok06NsJ9 MsbqLwm2X/JBlG0c8eKHyoklS82G88XJuiE7a80aacAtahFcvmSww5StMRmeZwK2 QZsGe0Llik5f8YDKJ3pJmo2WJ2gd6Z+RVK1pyrF4fCYvo9qxaaVOnO/O7ed0QCU4 WdtbHokDKEbO8GwhCjxywQaRjdyryZT2/F67Gjqi40hKYcm571uL3x2K5/CowZPe bP4NEpsTYLoNcd/UlyVS72Z7XadEo6m6nqHOfy4e6u/KKNrqMmqe6g3FgICaWD0u cM1cfABRuk+PDtzT7TEWA8RB4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPz31/ah V/qSPbbV3ryF7J/f1A/hMB8GA1UdIwQYMBaAFDhsXLLW4OxhQa63P0k1IbBSCjz6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0FCNC8xRkIwNDBBMEIx NzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdHRkJycmNfU1RVaHNGSUtQ UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09HeGNzdGJnN0dGQnJyY19TVFVoc0ZJS1BQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0FCNC8xRkIwNDBBMEIxNzQxMUU2OEVDODg1MThDNEY5QUUwMi9PR3hjc3RiZzdH RkJycmNfU1RVaHNGSUtQUG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGbq7pLS3X6pNKr666LZGryWjP+z18q5VPGW0vJxU9Xbe+SfI7wjMu I7A2YN14LikhnHnloUNxXvBW7HyCPIVFDJIaocRCD+LmlEvxiqa/0uDCAQ+/Oc0z ikEIQOvC1q0vOrQYQnmJ6o0ly2HaRsig8Xibu0+FiBo060f4uovh0IFBBS6rGw+5 hdMvzC651UqIRfsO39vYIG8JzBT+/tIb3h4CtPBK9O8/p6m1/iKKeTUUpMW4O5tY 7DUbPua0+LARxgY0qZjiOxylC6QYk7UgpMuy21ssOVIIhbFzsfHii2lQKCqU/t56 ll0qZdm+meSWGdpfe7tCpQkIIpKDfI6t -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:24 2025 by rpki-client on console.sobornost.net