$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: OKITbbKhzKqc4OdApDkIZhpACUo7fZ2kxFXvLwjHsKE= Subject key identifier: 27:D0:C1:99:C4:71:28:4C:B1:D9:A0:90:34:DE:98:75:46:1E:F6:E0 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 09E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09AE Signing time: Mon 28 Apr 2025 20:34:25 +0000 Manifest this update: Mon 28 Apr 2025 20:34:24 +0000 Manifest next update: Mon 05 May 2025 20:34:24 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: UVwGA0DoZG9vaJS/TJNW5u0NU3d8dZTfP5daCwr6ccc=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: 838b7qHkfNcVQ+dG+2+ikVBrip48qajejDAv66Es7Do=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: lHubJpI54TUZB9ErKrK2Uh2G0dB2IBaNDMotiEzD5Do=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: t6q2fLRleWOAh29sMouXev7NxP/StSGtuqhQ1bcdSrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2534 (0x9e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Apr 28 20:34:24 2025 GMT Not After : May 5 20:34:24 2025 GMT Subject: CN=680fe650-964f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ee:46:a9:6e:19:ec:3a:9b:8e:98:44:76:c0: 89:65:f1:4c:7a:85:c0:2a:87:b9:ae:54:ba:da:81: 63:76:a1:c9:03:26:b5:78:42:83:9f:f2:e4:af:81: 43:f1:68:26:9b:87:ad:e0:9a:12:60:67:d1:5e:f9: 68:ae:e7:45:5f:79:e6:e3:e4:95:80:6e:c5:bc:cb: 3f:2d:d0:cc:c2:2e:09:60:f4:24:0d:ff:53:ea:5f: 8e:2e:89:19:f1:65:61:69:15:d0:fc:1f:60:35:6f: 24:a9:cb:4d:eb:09:38:fe:0f:06:c5:77:09:b8:f1: 73:da:2d:0f:95:1f:23:5b:ca:0d:03:f0:02:0b:aa: dc:05:0f:c6:1d:15:36:e3:da:bf:37:a3:dc:29:be: 62:14:da:d3:ae:26:d6:b6:2c:f6:70:d0:25:5f:97: 2d:31:30:9e:21:98:8e:66:5d:22:ca:44:69:1f:0b: 14:f7:c7:36:22:f4:34:8d:5c:74:64:70:0b:b5:34: 06:71:10:35:1b:49:e3:19:18:8a:fb:83:23:ed:fd: 9f:dd:29:9d:e7:cd:97:51:19:3f:0c:1d:11:24:83: 0e:24:99:d5:d3:dd:13:6e:48:14:45:7d:c3:de:9b: 16:ab:75:d4:26:f5:2c:8c:a0:6e:79:75:de:36:f4: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:C1:99:C4:71:28:4C:B1:D9:A0:90:34:DE:98:75:46:1E:F6:E0 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:6c:95:0e:eb:7a:66:84:8d:f1:0b:0f:7f:46:6e:8f:80:bb: 41:ba:b4:d6:30:17:f6:4b:6e:0c:aa:4c:6b:79:ae:8b:1c:f5: 9a:98:c2:19:8f:5e:6d:a1:cb:42:cf:63:72:8a:4f:6d:9d:e3: f9:3f:df:3a:86:1e:95:8c:76:e9:85:04:31:00:4e:6c:4f:2f: 99:4b:32:37:d3:d0:35:43:14:0d:57:3e:51:69:bc:42:9f:77: 73:e7:22:3b:54:30:60:5b:08:85:ae:dc:5b:93:94:2d:5d:a2: 1c:e1:cc:54:17:c7:72:e7:36:85:56:9c:4b:3e:36:64:90:a6: 15:32:e0:cb:0b:f5:f8:c5:b0:94:91:ae:97:71:28:7e:35:aa: 35:36:a7:20:0e:b0:bf:44:66:7b:b9:ae:cc:ba:87:4c:b1:39: bc:0d:d1:02:93:8b:4c:01:5c:90:4c:4c:4c:48:8f:f7:1c:66: 6c:6c:cd:68:e2:e3:94:ac:4e:45:9a:e5:46:05:87:a6:58:8b: 34:78:6b:3e:ee:95:18:41:fd:d5:51:b2:4c:dc:ab:f9:5a:2d: dc:94:bb:6e:16:8b:43:6b:86:7e:d6:c0:2c:ec:4d:1e:73:e3: 5c:30:56:0a:5b:4b:6f:43:e6:58:09:5b:ba:98:35:c3:73:52: 5d:c8:27:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwNDI4MjAzNDI0WhcNMjUwNTA1MjAzNDI0WjAYMRYwFAYD VQQDEw02ODBmZTY1MC05NjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu5GqW4Z7DqbjphEdsCJZfFMeoXAKoe5rlS62oFjdqHJAya1eEKDn/Lkr4FD 8Wgmm4et4JoSYGfRXvlorudFX3nm4+SVgG7FvMs/LdDMwi4JYPQkDf9T6l+OLokZ 8WVhaRXQ/B9gNW8kqctN6wk4/g8GxXcJuPFz2i0PlR8jW8oNA/ACC6rcBQ/GHRU2 49q/N6PcKb5iFNrTribWtiz2cNAlX5ctMTCeIZiOZl0iykRpHwsU98c2IvQ0jVx0 ZHALtTQGcRA1G0njGRiK+4Mj7f2f3Smd582XURk/DB0RJIMOJJnV090TbkgURX3D 3psWq3XUJvUsjKBueXXeNvQvKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfQwZnE cShMsdmgkDTemHVGHvbgMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsbJUO63pmhI3xCw9/Rm6PgLtBurTWMBf2S24Mqkxrea6LHPWamMIZ j15toctCz2Nyik9tneP5P986hh6VjHbphQQxAE5sTy+ZSzI309A1QxQNVz5RabxC n3dz5yI7VDBgWwiFrtxbk5QtXaIc4cxUF8dy5zaFVpxLPjZkkKYVMuDLC/X4xbCU ka6XcSh+Nao1NqcgDrC/RGZ7ua7MuodMsTm8DdECk4tMAVyQTExMSI/3HGZsbM1o 4uOUrE5FmuVGBYemWIs0eGs+7pUYQf3VUbJM3Kv5Wi3clLtuFotDa4Z+1sAs7E0e c+NcMFYKW0tvQ+ZYCVu6mDXDc1JdyCeC -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:06 2025 by rpki-client on console.sobornost.net