$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft File: gez_R_JbIULxDfbUmuDiGf7XR_g.mft (raw, json) Hash identifier: JsfuO/Q5DoLrTL1ZHTseJf3tJn/PZihidgPcQkLw9/g= Subject key identifier: 8D:98:DF:C7:C5:21:35:27:69:A3:2B:B0:29:11:6A:C5:4C:5E:18:9C Authority key identifier: 81:EC:FF:47:F2:5B:21:42:F1:0D:F6:D4:9A:E0:E2:19:FE:D7:47:F8 Certificate issuer: /CN=A913E5D6/serialNumber=81ECFF47F25B2142F10DF6D49AE0E219FED747F8 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft Manifest number: 07E6 Signing time: Thu 24 Apr 2025 20:51:00 +0000 Manifest this update: Thu 24 Apr 2025 20:51:00 +0000 Manifest next update: Thu 01 May 2025 20:51:00 +0000 Files and hashes: 1: gez_R_JbIULxDfbUmuDiGf7XR_g.crl (hash: v3B9rGAIYXp2EnW9dFpMin8nbmxEH60LJECsHs3BIyY=) 2: B287525CE81011EA926BE66FC4F9AE02.roa (hash: qhioOnup64H2Oct1uVBt6trwRt6rR40e8Cq4NvfLSAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.crl rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E5D6, serialNumber=81ECFF47F25B2142F10DF6D49AE0E219FED747F8 Validity Not Before: Apr 24 20:51:00 2025 GMT Not After : May 1 20:51:00 2025 GMT Subject: CN=680aa434-009e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:83:d5:9c:6f:03:79:2d:d5:3f:bb:41:38: cd:96:8f:ba:3a:e4:cb:4d:25:a8:6b:d3:2a:71:01: 44:d8:3a:d6:65:05:9f:2f:15:80:5a:e5:51:a8:0f: a4:fb:ed:ae:ba:55:9d:39:99:22:f1:39:cc:47:17: f2:a4:8c:8f:10:1c:2a:19:24:d9:b7:44:fa:c7:8d: 50:ab:bf:4c:4d:bb:12:c0:de:96:c6:2a:e0:12:b6: b2:59:10:41:4e:bb:03:66:07:42:d2:34:bf:b6:f9: 2a:3e:db:01:52:04:7f:ec:b6:2a:64:f5:2c:04:9e: e1:e1:c9:87:08:38:a6:a3:1f:00:ac:cd:32:b7:19: 34:e0:fe:8c:17:31:56:d1:ab:9e:72:e3:ee:36:07: c3:a6:7c:48:e3:66:3e:61:72:96:f9:c8:e2:32:38: cb:20:1e:a4:2f:7b:18:78:2a:88:d8:61:c9:88:14: ba:26:7c:23:7b:d3:54:61:69:c5:46:ae:24:9c:86: 89:38:a5:1f:c7:f7:c4:15:db:46:64:5f:7b:7f:aa: 7b:48:4e:ca:38:cb:3e:85:28:5a:a2:a5:4e:29:51: 07:17:66:15:c2:ae:85:07:d2:65:15:28:04:61:7f: 7d:30:3a:29:40:6b:34:ce:e3:9f:ca:e4:07:ed:05: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:98:DF:C7:C5:21:35:27:69:A3:2B:B0:29:11:6A:C5:4C:5E:18:9C X509v3 Authority Key Identifier: keyid:81:EC:FF:47:F2:5B:21:42:F1:0D:F6:D4:9A:E0:E2:19:FE:D7:47:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gez_R_JbIULxDfbUmuDiGf7XR_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5D6/5A52F912E75A11EAB96F9D60C4F9AE02/gez_R_JbIULxDfbUmuDiGf7XR_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:dd:0a:46:f8:65:b6:0a:da:ed:60:a4:43:96:a6:31:fb:93: 18:e7:81:4c:bd:5c:1f:93:4b:0f:a9:47:22:0a:f4:16:3d:fd: f3:3e:01:00:b2:2e:cf:1a:0e:29:38:a1:11:f3:15:90:fe:87: a7:a7:1f:db:0b:e4:57:21:ce:69:2b:43:52:4d:19:ac:e7:6c: 15:8a:23:a6:d2:ce:1f:b5:ff:22:5c:e5:2a:6b:28:62:a6:30: c4:2c:86:c3:27:5a:13:38:c3:f0:4d:f3:1a:fe:47:1c:aa:37: 3f:79:0e:f6:f9:b4:98:56:79:e3:a7:e4:4b:28:d3:cb:be:fd: 1c:6b:7e:50:bb:4f:21:a9:06:13:be:7e:ef:13:49:45:32:6d: e1:f0:e8:ce:60:30:1f:a4:e0:41:ef:0c:b4:7a:7e:ad:4f:5c: 0c:42:47:a2:ff:54:41:1b:84:77:da:b9:e6:7b:4a:39:41:03: c5:d1:1f:78:73:73:3c:64:10:f1:7a:96:ca:1d:c1:33:3b:52: c8:61:d0:bc:75:ca:e8:51:15:84:8f:2a:e6:cc:71:59:10:21: d6:00:8a:70:ab:6e:2c:4c:f7:c1:4f:c8:13:c1:a4:80:dc:ce: cf:4f:13:97:34:43:63:45:e8:64:1b:a6:1b:14:d7:42:1e:d6: 37:0f:d3:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U1RDYxMTAvBgNVBAUTKDgxRUNGRjQ3RjI1QjIxNDJGMTBERjZENDlBRTBFMjE5 RkVENzQ3RjgwHhcNMjUwNDI0MjA1MTAwWhcNMjUwNTAxMjA1MTAwWjAYMRYwFAYD VQQDEw02ODBhYTQzNC0wMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEKD1ZxvA3kt1T+7QTjNlo+6OuTLTSWoa9MqcQFE2DrWZQWfLxWAWuVRqA+k ++2uulWdOZki8TnMRxfypIyPEBwqGSTZt0T6x41Qq79MTbsSwN6WxirgErayWRBB TrsDZgdC0jS/tvkqPtsBUgR/7LYqZPUsBJ7h4cmHCDimox8ArM0ytxk04P6MFzFW 0auecuPuNgfDpnxI42Y+YXKW+cjiMjjLIB6kL3sYeCqI2GHJiBS6Jnwje9NUYWnF Rq4knIaJOKUfx/fEFdtGZF97f6p7SE7KOMs+hShaoqVOKVEHF2YVwq6FB9JlFSgE YX99MDopQGs0zuOfyuQH7QU1PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2Y38fF ITUnaaMrsCkRasVMXhicMB8GA1UdIwQYMBaAFIHs/0fyWyFC8Q321Jrg4hn+10f4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTVENi81QTUyRjkxMkU3 NUExMUVBQjk2RjlENjBDNEY5QUUwMi9nZXpfUl9KYklVTHhEZmJVbXVEaUdmN1hS X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dlel9SX0piSVVMeERmYlVtdURpR2Y3WFJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTVENi81QTUyRjkxMkU3NUExMUVBQjk2RjlENjBDNEY5QUUwMi9nZXpfUl9KYklV THhEZmJVbXVEaUdmN1hSX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAh3QpG+GW2CtrtYKRDlqYx+5MY54FMvVwfk0sPqUciCvQWPf3zPgEA si7PGg4pOKER8xWQ/oenpx/bC+RXIc5pK0NSTRms52wViiOm0s4ftf8iXOUqayhi pjDELIbDJ1oTOMPwTfMa/kccqjc/eQ72+bSYVnnjp+RLKNPLvv0ca35Qu08hqQYT vn7vE0lFMm3h8OjOYDAfpOBB7wy0en6tT1wMQkei/1RBG4R32rnme0o5QQPF0R94 c3M8ZBDxepbKHcEzO1LIYdC8dcroURWEjyrmzHFZECHWAIpwq24sTPfBT8gTwaSA 3M7PTxOXNENjRehkG6YbFNdCHtY3D9P6 -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:20 2025 by rpki-client on console.sobornost.net