$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: 8ta+lL7RYgBqVCdFR3i1Eu6BdxnS1pNGo8wH4m8guak= Subject key identifier: 81:05:D8:B1:DD:39:49:EA:8E:15:4F:5C:25:70:23:9D:2C:91:7B:EA Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0A3D Signing time: Mon 28 Apr 2025 20:09:51 +0000 Manifest this update: Mon 28 Apr 2025 20:09:51 +0000 Manifest next update: Mon 05 May 2025 20:09:51 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: B18SN/aK3fErHn1JpI0RiWdnIpiuss/U/o3BC9Vnk2s=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: horX5P75gumDA8WyF+ghzmHcSe0CjNBHMfSInHVl7ao=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: hBn0Qcv2Wj2OFO1BXPRpxsQ8U4zswJ2i/kTyMm1Zr1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Apr 28 20:09:51 2025 GMT Not After : May 5 20:09:51 2025 GMT Subject: CN=680fe08f-b039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:fd:01:b1:69:51:23:82:74:54:93:a8:e1: a6:70:f8:0b:6a:96:9a:0b:10:63:7c:ad:d1:6b:f6: 43:7b:ed:ad:0e:09:c3:d9:db:95:87:02:39:81:2f: 23:81:d4:e4:cd:d2:12:e0:92:ae:f8:ab:c7:de:38: 31:f4:c6:48:9b:4e:68:5d:47:d0:52:84:79:b6:ba: 63:12:3c:74:e9:87:01:6a:ab:cb:8c:ed:12:d0:6f: 43:14:11:97:43:ce:48:1d:80:41:f1:b9:3d:17:6e: 91:3b:5c:48:92:12:e5:45:02:fb:ab:21:7b:3f:44: a6:3a:23:67:c1:26:0e:58:66:70:62:fb:a2:b7:db: ef:85:7d:51:8b:2d:f8:07:58:1d:1b:49:79:03:08: b0:03:b5:2b:68:d0:ac:63:63:f1:f7:54:5f:68:d4: dd:16:98:f8:03:24:96:e8:4c:48:3b:5f:f8:b7:99: a2:05:aa:f9:fb:34:46:2f:c7:24:33:a4:c3:9d:ec: 15:6c:d6:a4:8a:64:46:d0:38:72:24:f3:ab:40:fc: 5a:f3:1c:3b:1f:8d:a7:c1:3e:99:a5:ba:87:d0:04: 86:09:3c:bb:b2:6d:4e:68:73:c1:c4:9d:8a:86:7a: a5:3c:f8:f5:22:da:9c:2f:91:43:27:20:c8:bc:c3: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:05:D8:B1:DD:39:49:EA:8E:15:4F:5C:25:70:23:9D:2C:91:7B:EA X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:d8:d7:db:09:fb:7a:3b:47:a3:2a:72:4e:bf:ef:bf:9b:83: f0:60:9a:b1:91:c9:66:57:ce:7d:3a:72:ef:4b:16:3b:11:51: fe:b5:fe:3e:60:78:ec:54:c0:44:3e:16:d0:7b:0e:e8:50:ca: 94:95:e4:c9:5a:d7:47:b0:82:e2:46:35:f3:08:20:5b:33:36: 4e:f3:a4:af:f6:1c:b5:bc:00:b9:d7:fd:47:78:4e:6b:98:07: f0:b1:20:40:03:68:87:da:6b:98:7d:d3:a5:c9:f0:24:f0:38: 7e:97:75:79:c8:86:85:77:76:67:48:e3:9c:b0:ef:88:68:22: 94:5f:00:37:08:a8:9a:5b:fb:cf:8d:af:22:10:d8:64:9c:ad: 11:24:47:15:17:7c:55:47:39:14:7a:7b:31:b1:df:61:2f:3d: e7:89:d8:87:80:f9:a7:01:43:01:5e:3d:06:68:71:e3:bd:7e: db:de:e4:95:76:a6:0a:b0:99:63:d2:d9:89:44:86:74:3d:45: 54:f0:70:87:73:53:66:9b:38:ca:e0:57:70:45:98:66:39:2a: 44:0c:5d:cc:fb:ae:67:5c:07:84:cd:c6:4c:04:09:6d:f0:4f: 58:02:32:3e:bf:b6:03:75:3f:6a:d1:81:cb:76:91:a4:cc:b0: 5f:34:61:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjUwNDI4MjAwOTUxWhcNMjUwNTA1MjAwOTUxWjAYMRYwFAYD VQQDEw02ODBmZTA4Zi1iMDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHX9AbFpUSOCdFSTqOGmcPgLapaaCxBjfK3Ra/ZDe+2tDgnD2duVhwI5gS8j gdTkzdIS4JKu+KvH3jgx9MZIm05oXUfQUoR5trpjEjx06YcBaqvLjO0S0G9DFBGX Q85IHYBB8bk9F26RO1xIkhLlRQL7qyF7P0SmOiNnwSYOWGZwYvuit9vvhX1Riy34 B1gdG0l5AwiwA7UraNCsY2Px91RfaNTdFpj4AySW6ExIO1/4t5miBar5+zRGL8ck M6TDnewVbNakimRG0DhyJPOrQPxa8xw7H42nwT6ZpbqH0ASGCTy7sm1OaHPBxJ2K hnqlPPj1ItqcL5FDJyDIvMMmVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEF2LHd OUnqjhVPXCVwI50skXvqMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB32NfbCft6O0ejKnJOv++/m4PwYJqxkclmV859OnLvSxY7EVH+tf4+ YHjsVMBEPhbQew7oUMqUleTJWtdHsILiRjXzCCBbMzZO86Sv9hy1vAC51/1HeE5r mAfwsSBAA2iH2muYfdOlyfAk8Dh+l3V5yIaFd3ZnSOOcsO+IaCKUXwA3CKiaW/vP ja8iENhknK0RJEcVF3xVRzkUensxsd9hLz3nidiHgPmnAUMBXj0GaHHjvX7b3uSV dqYKsJlj0tmJRIZ0PUVU8HCHc1NmmzjK4FdwRZhmOSpEDF3M+65nXAeEzcZMBAlt 8E9YAjI+v7YDdT9q0YHLdpGkzLBfNGEi -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:59 2025 by rpki-client on console.sobornost.net