$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft File: ghDUN1ZlSxBwXVqz83vwGni3jEc.mft (raw, json) Hash identifier: 1Hc/yovjPWUp/Z58dw6rWdy8gqtsP6IpHq/9Fac0+rs= Subject key identifier: 7F:F3:6B:5B:1D:E0:46:0E:D2:91:4A:47:FF:AF:48:04:31:F0:D4:4E Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft Manifest number: 07E6 Signing time: Sat 26 Apr 2025 20:45:15 +0000 Manifest this update: Sat 26 Apr 2025 20:45:14 +0000 Manifest next update: Sat 03 May 2025 20:45:14 +0000 Files and hashes: 1: ghDUN1ZlSxBwXVqz83vwGni3jEc.crl (hash: Xlu7p7skPLt5hCdjpuM+ZEr7HECF82Hu1LotE3Hw5ho=) 2: 1361FD26EC2011EA8DFD251FC4F9AE02.roa (hash: AKMar7M+pQ4y6XoQFhZVW0JujFvWAFeIi5OqHavhpXY=) 3: FF0025F80B7811EEB2EFC643C4F9AE02.roa (hash: q8NO+KLP5CuELgICWVCpo8gcxUyHjK7jNGZWSmFkgjE=) 4: D8B25C54EC2211EA84C17E26C4F9AE02.roa (hash: blrAgl3fjG1pjrvf4Xs1bBFsczydDh5kF9/bkGOAsSQ=) 5: 36CDE30CEC2411EA8B0DDA2CC4F9AE02.roa (hash: kCdoRWjX7vh3I5Nidiix3CmYE03MKnq+oXPvSl8Xnds=) 6: F652771EEB7611EA8235FB4AC4F9AE02.roa (hash: e0wK1EfjjzOwAebCT+bRt55wU2Y1pEBpk2uJbmvJGI8=) 7: 5056827E1D1711EB9918046AC4F9AE02.roa (hash: QIJzT5GapeGSiWUEH6w75YrO1W7X/FkG1tF+eQj92Fk=) 8: 35A8CF1EEC2411EA8B0DDA2CC4F9AE02.roa (hash: Y77Vm4FDvzInxKFqdlF/vRWJ/K3yltYPE+Pe0UH2y2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Apr 26 20:45:14 2025 GMT Not After : May 3 20:45:14 2025 GMT Subject: CN=680d45da-2117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:b2:02:16:fe:d8:b8:f5:2b:20:f1:13:10: 13:75:a7:59:3a:5c:9d:b8:0e:c5:43:c5:b1:34:0d: f1:8b:c7:7d:53:4f:11:21:60:36:9b:3b:03:7a:d4: 7d:86:4d:4d:54:de:d0:9f:0c:04:1e:d7:08:b6:43: 12:f8:eb:08:1e:55:d7:4a:8d:f8:f7:51:00:e6:fd: 44:b6:f6:24:45:8a:e7:cb:e5:88:55:15:f2:96:72: 97:af:ef:e6:e1:c3:21:8f:5f:08:1b:b0:14:d4:89: 90:f8:14:0a:5f:3e:cc:ea:3f:4f:1b:25:94:8d:d3: e0:ad:2c:c3:b8:36:42:d7:f0:b8:d2:70:da:88:78: 12:3d:a8:91:fa:f0:24:c6:ad:3c:5c:47:1f:05:f8: 73:ea:c4:27:99:e1:2f:e3:5c:ca:b0:b7:3a:1c:24: f8:97:d4:a5:9b:cc:c6:e0:14:9a:3b:00:d9:fc:fa: c9:27:de:37:29:ec:e0:39:98:c4:d0:82:da:30:d4: c4:a6:3b:8f:b2:78:b6:bc:a9:de:5a:c7:b0:07:56: 15:18:c6:9b:45:9b:0d:2c:cd:88:74:92:91:df:69: 4b:28:63:2b:27:89:10:cc:75:a7:0d:b8:21:ac:38: 93:5b:53:93:d8:75:59:16:53:8b:e9:04:8c:80:43: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F3:6B:5B:1D:E0:46:0E:D2:91:4A:47:FF:AF:48:04:31:F0:D4:4E X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:36:4c:5d:0d:1c:2f:ca:3d:b4:0e:df:c6:55:81:64:fb:3c: 4e:85:39:4b:2c:ea:2a:7b:c8:4c:16:0a:2d:17:a8:38:82:82: a2:32:af:13:4c:9e:dd:f9:82:0d:2f:89:87:1e:ad:9c:cd:40: 21:1a:69:30:3b:f9:64:25:fd:f0:d6:89:3b:42:c3:1c:80:da: d9:09:0f:e1:2c:a3:2e:85:65:d6:d8:d7:c3:4e:d6:ce:64:28: a9:dc:11:e2:ab:e0:4d:e2:5e:42:7b:f3:1d:38:47:30:38:38: 79:4b:8d:0c:91:e4:9c:31:43:f3:0f:90:79:7a:9c:6c:94:45: 78:32:5c:a0:dd:d8:8b:ba:cd:c7:e9:87:0c:d2:74:d1:01:17: d9:fc:66:23:72:50:6c:34:1b:fc:63:f8:fd:88:3b:ab:b5:77: 36:fd:12:9e:b5:23:84:95:bc:40:31:44:35:b6:09:59:a6:4a: bd:c4:23:72:b7:a8:f7:f6:fe:46:a6:55:3d:db:ec:d5:74:25: f3:ed:8c:72:25:52:78:61:e0:3d:9e:cf:8a:67:0f:a4:5b:f4: bd:c4:ef:55:6e:83:ed:1d:2a:4f:3c:38:79:f9:a2:c3:9e:0e: e5:5c:50:bb:ec:1c:9a:73:9d:d9:fc:af:a5:85:79:84:10:04: 07:d3:f5:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjUwNDI2MjA0NTE0WhcNMjUwNTAzMjA0NTE0WjAYMRYwFAYD VQQDEw02ODBkNDVkYS0yMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYKyAhb+2Lj1KyDxExATdadZOlyduA7FQ8WxNA3xi8d9U08RIWA2mzsDetR9 hk1NVN7QnwwEHtcItkMS+OsIHlXXSo3491EA5v1EtvYkRYrny+WIVRXylnKXr+/m 4cMhj18IG7AU1ImQ+BQKXz7M6j9PGyWUjdPgrSzDuDZC1/C40nDaiHgSPaiR+vAk xq08XEcfBfhz6sQnmeEv41zKsLc6HCT4l9Slm8zG4BSaOwDZ/PrJJ943KezgOZjE 0ILaMNTEpjuPsni2vKneWsewB1YVGMabRZsNLM2IdJKR32lLKGMrJ4kQzHWnDbgh rDiTW1OT2HVZFlOL6QSMgENLIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/za1sd 4EYO0pFKR/+vSAQx8NROMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzNi9FNEM4ODk3MkVCNzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4 QndYVnF6ODN2d0duaTNqRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8NkxdDRwvyj20Dt/GVYFk+zxOhTlLLOoqe8hMFgotF6g4goKiMq8T TJ7d+YINL4mHHq2czUAhGmkwO/lkJf3w1ok7QsMcgNrZCQ/hLKMuhWXW2NfDTtbO ZCip3BHiq+BN4l5Ce/MdOEcwODh5S40MkeScMUPzD5B5epxslEV4Mlyg3diLus3H 6YcM0nTRARfZ/GYjclBsNBv8Y/j9iDurtXc2/RKetSOElbxAMUQ1tglZpkq9xCNy t6j39v5GplU92+zVdCXz7YxyJVJ4YeA9ns+KZw+kW/S9xO9VboPtHSpPPDh5+aLD ng7lXFC77Byac53Z/K+lhXmEEAQH0/Vq -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:59 2025 by rpki-client on console.sobornost.net