$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft File: UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft (raw, json) Hash identifier: bIIWIfPu0aHsGG3NmeQuXlx9wqNgQxd1By07VTohP3Q= Subject key identifier: 00:E3:63:16:C8:15:D7:9F:41:23:48:A3:C6:68:83:AA:75:B7:19:C2 Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Certificate serial: 306B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft Manifest number: 305D Signing time: Mon 28 Apr 2025 15:32:10 +0000 Manifest this update: Mon 28 Apr 2025 15:32:09 +0000 Manifest next update: Mon 05 May 2025 15:32:09 +0000 Files and hashes: 1: UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl (hash: hiYzHF+QDGEP8RV5txZe8B9hjZ7mniNQafI8NXHS0Ig=) 2: E5DB5238DFBD11EC8E203126C4F9AE02.roa (hash: 8yPXIp2srpOMXwXrVDBAhf+m6VYRXr2aEaNExsEirN4=) 3: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (hash: WamiUU84cAcc5WGx4lslvANbP3TtO/lIaFT/y7zUmEY=) 4: 446A425EA6BB11ED9D458785C4F9AE02.roa (hash: WhKdctnJM8x/P3lLuqtSYgwShQQZa8r7EVnRQb0csbo=) 5: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (hash: T37Xr3jND0OgDmWZSLZeRiJ8MSQ6+oBhyzh33K0Hddg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12395 (0x306b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F Validity Not Before: Apr 28 15:32:09 2025 GMT Not After : May 5 15:32:09 2025 GMT Subject: CN=680f9f79-9e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:87:41:61:98:8c:8f:a2:ea:c8:ec:8b:7b: 77:90:6c:f8:1e:5f:52:cf:81:56:7d:cc:c5:e6:d5: 17:27:c2:24:d0:50:3a:2e:0f:06:8b:7c:55:8a:1e: e7:b7:b0:c9:b6:fe:23:8e:67:1b:71:63:46:93:62: 96:65:79:ba:b7:41:e8:d6:ed:9f:41:86:30:2e:8e: 56:64:92:ae:f8:4b:58:6c:f3:fb:c5:b6:3b:2f:ef: be:06:c3:80:98:fe:96:ce:18:d1:70:35:60:c7:2e: 87:61:fe:33:9a:a9:ad:6a:1e:09:f3:c0:2c:35:4f: 93:4e:ab:10:80:cb:27:69:e8:17:7c:36:94:e2:3f: bf:22:b5:c9:dc:4a:1c:ad:cf:5d:c0:9c:c7:de:8c: 82:eb:35:ab:89:52:7e:02:44:67:b6:cb:31:f1:d6: 0d:ef:fd:71:f6:54:24:4d:68:4a:d0:85:e8:ba:2b: 93:da:b0:67:f2:93:3c:38:04:f8:42:6c:3a:5e:2a: cc:dc:4c:c4:45:fe:90:be:84:aa:01:b7:ba:1d:6a: c1:4a:34:33:39:3c:6f:9c:ed:cf:2a:f2:b5:69:b7: bc:ba:47:bf:1f:19:0f:d0:88:f7:98:71:d6:fa:e2: cf:b3:46:30:1a:5f:43:45:8f:47:c4:17:87:5c:fd: 73:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E3:63:16:C8:15:D7:9F:41:23:48:A3:C6:68:83:AA:75:B7:19:C2 X509v3 Authority Key Identifier: keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b0:69:cf:22:7a:5a:48:a5:90:e1:56:c3:b4:1d:b0:37:2f: a0:9b:d9:ed:f0:ce:4c:1a:e2:35:9b:53:3a:1b:02:c7:65:db: 2a:40:45:6b:d7:fd:3e:a8:d3:70:01:e7:f4:bd:96:d6:32:27: 50:84:62:71:65:01:e8:71:3f:aa:1a:61:2b:6e:10:61:5a:66: 02:6b:85:b7:d8:48:06:af:93:3f:87:04:83:5c:af:49:e5:8e: 73:d4:a2:98:66:d1:67:b9:f6:22:cb:72:2d:71:cb:2e:10:87: c3:60:0d:4c:13:d4:27:84:35:ed:a9:fa:eb:bf:7d:5e:a3:1d: 4b:8e:b3:89:b9:2d:7a:df:be:d5:01:89:9f:e2:6b:84:90:e7: 09:b6:b3:d8:e1:f7:ff:19:1b:d4:37:41:46:ec:64:1c:cf:60: f5:3c:f2:9b:72:a8:60:d3:9f:ed:e2:2c:ef:4b:e8:a7:e4:54: 6c:cc:b9:9a:cd:08:71:d6:67:2a:52:14:6f:2c:9c:a1:00:20: 34:c2:d9:97:74:d2:74:76:4d:44:5c:5e:ca:4f:be:39:5d:30: 41:27:2c:fd:74:b2:0f:55:70:ca:27:1d:a2:12:e0:db:ce:5c: 3a:bb:db:df:33:a4:b7:9c:1d:6d:f2:82:32:f6:38:f3:59:36: 8a:b8:94:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1 QjMxMkMwNkYwHhcNMjUwNDI4MTUzMjA5WhcNMjUwNTA1MTUzMjA5WjAYMRYwFAYD VQQDEw02ODBmOWY3OS05ZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVCHQWGYjI+i6sjsi3t3kGz4Hl9Sz4FWfczF5tUXJ8Ik0FA6Lg8Gi3xVih7n t7DJtv4jjmcbcWNGk2KWZXm6t0Ho1u2fQYYwLo5WZJKu+EtYbPP7xbY7L+++BsOA mP6WzhjRcDVgxy6HYf4zmqmtah4J88AsNU+TTqsQgMsnaegXfDaU4j+/IrXJ3Eoc rc9dwJzH3oyC6zWriVJ+AkRntssx8dYN7/1x9lQkTWhK0IXouiuT2rBn8pM8OAT4 Qmw6XirM3EzERf6QvoSqAbe6HWrBSjQzOTxvnO3PKvK1abe8uke/HxkP0Ij3mHHW +uLPs0YwGl9DRY9HxBeHXP1zwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADjYxbI FdefQSNIo8Zog6p1txnCMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS8xNEI3NkJDOEVEMEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpF dG9vUndpMm44NlpiTVN3RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8sGnPInpaSKWQ4VbDtB2wNy+gm9nt8M5MGuI1m1M6GwLHZdsqQEVr 1/0+qNNwAef0vZbWMidQhGJxZQHocT+qGmErbhBhWmYCa4W32EgGr5M/hwSDXK9J 5Y5z1KKYZtFnufYiy3ItccsuEIfDYA1ME9QnhDXtqfrrv31eox1LjrOJuS16377V AYmf4muEkOcJtrPY4ff/GRvUN0FG7GQcz2D1PPKbcqhg05/t4izvS+in5FRszLma zQhx1mcqUhRvLJyhACA0wtmXdNJ0dk1EXF7KT745XTBBJyz9dLIPVXDKJx2iEuDb zlw6u9vfM6S3nB1t8oIy9jjzWTaKuJTw -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:48 2025 by rpki-client on console.sobornost.net