$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: ZGJwFsl+amr7M9BQnJz95yzl7EAQ83fPmP7/QNEIECA= Subject key identifier: E0:4A:0D:2C:F2:ED:25:82:B9:74:D1:50:98:6E:23:77:F0:C8:5A:9F Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 038A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0368 Signing time: Sun 27 Apr 2025 00:42:39 +0000 Manifest this update: Sun 27 Apr 2025 00:42:39 +0000 Manifest next update: Sun 04 May 2025 00:42:39 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: bNIIw1e8c+pCtBqIQ3FJOoeyGkX/56Tc2qUoxXI5dEM=) 2: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: p2XvCNFD6d4VIAif72MiFgokcw+e7+Qk3biI5UhdJ/g=) 3: AA730ACCBCFA11EDAD328D3AC4F9AE02.roa (hash: WToU+UpRxbQJKSr2QGut5hwA296t8z/pXjsZxqDqyvg=) 4: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: oDrhzyW7lkRnV2JdbCV+XPs93kiucplQyCNzYwjrpJw=) 5: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: K97XOnrCVU0606+V1FtEZLw0f6bE1IzyADp5nbB58XM=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: vOZZW9Fz+Ew432aoBZJQA6i/cbgp+fKwlVmKDZ1QXVU=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: 7anCK5rKr6TDez2KdlHaScR0U7zVEjfA29+yLesnrHU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 906 (0x38a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Apr 27 00:42:39 2025 GMT Not After : May 4 00:42:39 2025 GMT Subject: CN=680d7d7f-a6b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:f7:4a:ea:43:b7:84:38:92:4c:05:9d:bb: 0d:91:f0:88:89:6d:49:cf:96:bd:01:9c:a1:c7:24: 4b:a3:57:40:cd:c1:c9:4a:0f:66:1b:3d:83:0e:cd: a6:1c:61:61:31:ac:54:b9:26:e8:ce:6d:48:2e:8c: 09:20:32:31:69:52:cb:64:65:29:ce:13:38:54:8a: 7e:9f:a0:cc:fb:79:85:35:c1:23:dc:7f:0d:15:6e: 9f:12:37:53:4b:31:36:2e:85:91:78:92:00:0a:74: 63:42:e4:7b:90:6b:28:bf:27:8c:88:a5:f7:9f:fa: c4:0a:6a:f9:c4:8a:4b:5c:5d:e3:fe:0e:74:ba:d1: 14:3b:d7:e3:42:08:45:45:ad:d2:2e:24:52:67:ef: 17:af:7c:b3:73:05:1c:11:c7:f8:7a:8c:2a:c2:5c: e8:1a:a2:e7:ca:49:f4:58:aa:a9:e9:c8:fa:e8:9c: c6:de:ec:48:44:9f:09:4a:ea:bb:f6:e9:8a:50:50: cf:6e:3a:66:2b:42:e6:25:a9:6e:0d:f7:f7:0a:43: 9f:2b:b5:10:ff:e7:ac:a0:f6:97:3d:ab:ca:de:59: f6:00:d3:5d:e9:46:cd:15:ab:6e:36:a0:88:ac:6b: a3:4c:61:68:6b:c0:36:d5:8d:ca:2f:3a:fd:28:34: 5e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4A:0D:2C:F2:ED:25:82:B9:74:D1:50:98:6E:23:77:F0:C8:5A:9F X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:6e:13:7b:14:fe:a8:e4:d5:33:2b:c4:20:07:32:02:1d:ee: 8d:1c:e1:17:99:bf:d8:5d:40:9a:1d:71:67:fa:4e:c2:c2:f6: 92:f8:17:01:71:0a:fd:ee:83:0d:63:97:3c:fb:08:e5:cb:25: ea:97:6b:d3:84:d4:45:6b:98:d9:43:bf:bc:b6:53:f4:4c:ff: 71:55:a2:e9:5f:c7:19:de:03:0a:52:70:c0:58:bc:a9:9b:70: ce:b1:b4:4e:44:5a:6e:6f:c5:e2:de:3d:4c:d6:0c:26:96:c8: 1f:ac:1f:f5:46:ba:1e:7b:03:b5:57:24:5f:3b:62:43:f9:eb: 0d:43:d3:f5:63:14:63:53:0a:8f:1e:63:d2:e3:c0:bc:c0:7f: 5a:68:3b:69:ea:ac:ba:bf:09:ff:48:a7:f0:9a:4f:1c:ce:99: 24:6b:63:85:89:1e:27:4b:20:ab:ae:c0:c0:d5:3c:24:9a:52: f4:fc:a8:02:9f:36:ad:e4:e0:41:32:8f:c9:33:40:74:c8:f8: 1e:a8:b9:d1:f7:3f:57:d0:6b:d2:05:94:b2:b7:32:01:3f:c1: 07:a6:02:b2:34:d2:d9:1b:48:ae:fb:5c:b0:f7:2d:55:d3:4a: ef:1c:40:e1:68:d7:f5:0c:40:6e:ac:75:bf:95:30:19:5d:12: ed:a9:39:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjUwNDI3MDA0MjM5WhcNMjUwNTA0MDA0MjM5WjAYMRYwFAYD VQQDEw02ODBkN2Q3Zi1hNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK73SupDt4Q4kkwFnbsNkfCIiW1Jz5a9AZyhxyRLo1dAzcHJSg9mGz2DDs2m HGFhMaxUuSbozm1ILowJIDIxaVLLZGUpzhM4VIp+n6DM+3mFNcEj3H8NFW6fEjdT SzE2LoWReJIACnRjQuR7kGsovyeMiKX3n/rECmr5xIpLXF3j/g50utEUO9fjQghF Ra3SLiRSZ+8Xr3yzcwUcEcf4eowqwlzoGqLnykn0WKqp6cj66JzG3uxIRJ8JSuq7 9umKUFDPbjpmK0LmJaluDff3CkOfK7UQ/+esoPaXPavK3ln2ANNd6UbNFatuNqCI rGujTGFoa8A21Y3KLzr9KDReUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBKDSzy 7SWCuXTRUJhuI3fwyFqfMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRbhN7FP6o5NUzK8QgBzICHe6NHOEXmb/YXUCaHXFn+k7CwvaS+BcB cQr97oMNY5c8+wjlyyXql2vThNRFa5jZQ7+8tlP0TP9xVaLpX8cZ3gMKUnDAWLyp m3DOsbRORFpub8Xi3j1M1gwmlsgfrB/1RroeewO1VyRfO2JD+esNQ9P1YxRjUwqP HmPS48C8wH9aaDtp6qy6vwn/SKfwmk8czpkka2OFiR4nSyCrrsDA1TwkmlL0/KgC nzat5OBBMo/JM0B0yPgeqLnR9z9X0GvSBZSytzIBP8EHpgKyNNLZG0iu+1yw9y1V 00rvHEDhaNf1DEBurHW/lTAZXRLtqTkG -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:21 2025 by rpki-client on console.sobornost.net