$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft File: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft (raw, json) Hash identifier: q2bSfdKltJ0yMV/k77TKuc4kYksXwPyXPJMILkMUKoY= Subject key identifier: CE:2B:5E:F1:11:CA:26:50:3B:61:8E:F5:E4:F9:BA:93:2B:01:80:C7 Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8 Certificate issuer: /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8 Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft Manifest number: 0BF1 Signing time: Sun 04 May 2025 18:32:36 +0000 Manifest this update: Sun 04 May 2025 18:32:36 +0000 Manifest next update: Sun 11 May 2025 18:32:36 +0000 Files and hashes: 1: IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl (hash: mDZBF2CnINWq1DyLhCajdV31sjJxOvOs0YbfmmI7GP4=) 2: 01283BC2532011EBAE6D1F37C4F9AE02.roa (hash: +Gukm6enyIbdbaf1JuwEUsgqXGQfDTqeuMKRTtycATA=) 3: D6F76118231C11EF84144357C4F9AE02.roa (hash: es734osl5liZ5XtweVos6tWec0UeUjh4JQH+2AuNXUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C475, serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8 Validity Not Before: May 4 18:32:36 2025 GMT Not After : May 11 18:32:36 2025 GMT Subject: CN=6817b2c4-a23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:c8:a4:21:df:48:22:2a:07:57:ca:67:df: ec:b4:b6:2b:11:8a:90:a9:5f:85:5f:d2:d3:3b:cb: b2:d1:6c:f0:08:e3:67:b6:53:31:43:a3:6a:ec:be: 40:8c:3b:9d:33:82:90:b1:a4:ae:72:9e:a7:a9:9e: be:dc:5b:80:37:18:c5:83:84:bc:56:1f:d3:d6:7e: af:c1:6a:a0:18:72:1e:0c:57:c1:1d:83:2d:18:64: 16:a8:7b:4a:eb:79:9a:68:99:62:ef:7f:d1:9f:61: 52:e3:99:45:44:84:80:25:5b:06:a6:13:09:dd:ca: c1:4a:07:bd:05:21:f5:18:85:be:76:97:a3:ca:7f: 28:1b:c7:5a:a9:dc:5a:12:72:90:cd:58:94:c2:4a: 1d:a9:88:09:c4:ec:44:c4:e2:c6:ed:9b:12:02:a0: 07:6c:1c:eb:87:ec:e8:ee:d7:ab:22:c1:bb:19:1a: fb:a0:b4:5f:2a:4f:af:d6:b4:9c:ee:ce:7b:56:e4: b6:50:58:9f:5b:1e:70:f9:8e:49:ae:79:8f:ac:1c: d9:b9:10:c7:6d:4c:f1:d6:58:bd:dc:cb:af:1c:f7: 59:62:69:f1:1c:bf:5f:9d:1e:95:95:00:ce:57:63: 40:4d:9a:fc:b2:68:f9:9f:c5:59:01:dd:c4:5f:41: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2B:5E:F1:11:CA:26:50:3B:61:8E:F5:E4:F9:BA:93:2B:01:80:C7 X509v3 Authority Key Identifier: keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:78:c7:fa:44:c6:e7:bd:4b:71:4e:94:3b:11:5f:6e:1b:5b: 89:6d:3c:3f:d7:22:8d:28:b8:c2:25:17:54:10:39:33:e2:72: cb:a6:4d:59:00:0e:85:63:85:90:94:6e:0c:3f:ce:3e:02:0d: fb:85:62:0f:7d:33:1b:12:22:2d:1b:1f:fc:10:ab:fc:ae:c2: 07:ad:05:2a:d9:26:53:ea:c9:01:72:86:f6:5f:b7:ec:25:48: 20:71:6b:76:ab:e3:15:a5:96:65:ce:8c:33:74:b9:7a:73:eb: 2b:f8:70:1b:46:61:a8:44:9c:86:12:77:86:e8:54:92:a6:7e: 24:0f:f3:c3:8a:e9:f7:9a:f6:20:d6:7c:ca:5f:f1:7c:38:cf: 88:0d:c3:83:4c:f9:e5:d3:6d:1b:a1:b3:82:ba:97:da:6d:28: b1:76:78:49:22:89:83:e8:d4:09:3d:df:35:dd:70:d4:34:83: 10:8e:eb:ea:e4:da:3f:23:9f:a0:65:51:83:c5:13:74:43:b7: 7e:6e:49:d7:91:70:2e:a6:f7:cc:a3:a8:39:3d:3a:4a:03:2b: ca:e1:90:81:97:ba:15:a1:19:7a:c7:7a:18:25:53:34:05:c7: ce:46:83:61:12:35:74:8a:5b:d2:17:5a:67:a5:39:d7:a2:a6: b0:17:9f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0NzUxMTAvBgNVBAUTKDIyODUwN0VGRjgxQUEyOEU0OTFFMzI2RkJEMURDM0Iz QzkwODcyQjgwHhcNMjUwNTA0MTgzMjM2WhcNMjUwNTExMTgzMjM2WjAYMRYwFAYD VQQDEw02ODE3YjJjNC1hMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gDIpCHfSCIqB1fKZ9/stLYrEYqQqV+FX9LTO8uy0WzwCONntlMxQ6Nq7L5A jDudM4KQsaSucp6nqZ6+3FuANxjFg4S8Vh/T1n6vwWqgGHIeDFfBHYMtGGQWqHtK 63maaJli73/Rn2FS45lFRISAJVsGphMJ3crBSge9BSH1GIW+dpejyn8oG8daqdxa EnKQzViUwkodqYgJxOxExOLG7ZsSAqAHbBzrh+zo7terIsG7GRr7oLRfKk+v1rSc 7s57VuS2UFifWx5w+Y5JrnmPrBzZuRDHbUzx1li93MuvHPdZYmnxHL9fnR6VlQDO V2NATZr8smj5n8VZAd3EX0FUTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4rXvER yiZQO2GO9eT5upMrAYDHMB8GA1UdIwQYMBaAFCKFB+/4GqKOSR4yb70dw7PJCHK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzQ3NS9FMDIyQTA1ODBF OTExMUVBQjBFODc0NDFDNEY5QUUwMi9Jb1VIN19nYW9vNUpIakp2dlIzRHM4a0lj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvVUg3X2dhb281SkhqSnZ2UjNEczhrSWNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzQ3NS9FMDIyQTA1ODBFOTExMUVBQjBFODc0NDFDNEY5QUUwMi9Jb1VIN19nYW9v NUpIakp2dlIzRHM4a0ljcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3eMf6RMbnvUtxTpQ7EV9uG1uJbTw/1yKNKLjCJRdUEDkz4nLLpk1Z AA6FY4WQlG4MP84+Ag37hWIPfTMbEiItGx/8EKv8rsIHrQUq2SZT6skBcob2X7fs JUggcWt2q+MVpZZlzowzdLl6c+sr+HAbRmGoRJyGEneG6FSSpn4kD/PDiun3mvYg 1nzKX/F8OM+IDcODTPnl020bobOCupfabSixdnhJIomD6NQJPd813XDUNIMQjuvq 5No/I5+gZVGDxRN0Q7d+bknXkXAupvfMo6g5PTpKAyvK4ZCBl7oVoRl6x3oYJVM0 BcfORoNhEjV0ilvSF1pnpTnXoqawF5/w -----END CERTIFICATE-----Generated at Sun May 4 20:44:09 2025 by rpki-client on console.sobornost.net