$ rpki-client -vvf rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft File: gg6Gox8rF_yjbfi-YIssk2qDvYA.mft (raw, json) Hash identifier: xdyI+Jkev2NuYZil1ipSimns2NhcXm03DJ5oOMLT2IQ= Subject key identifier: E2:9C:4C:03:F8:1B:BF:3B:17:B2:D4:E1:16:40:15:38:D1:B0:46:C3 Authority key identifier: 82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 Certificate issuer: /CN=A918B837/serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Certificate serial: 0B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft Manifest number: 0B0E Signing time: Mon 28 Apr 2025 19:36:33 +0000 Manifest this update: Mon 28 Apr 2025 19:36:32 +0000 Manifest next update: Mon 05 May 2025 19:36:32 +0000 Files and hashes: 1: gg6Gox8rF_yjbfi-YIssk2qDvYA.crl (hash: eQVO53GgFmAQmN1Asox8ymVUypjHrWChydRLfIEWgLQ=) 2: 3D4023BE283611EBA9595178C4F9AE02.roa (hash: p0gLqXYHMAKfZmsW1hgHdRTIbATt3w5OE3zBkqIYM3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2837 (0xb15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B837, serialNumber=820E86A31F2B17FCA36DF8BE608B2C936A83BD80 Validity Not Before: Apr 28 19:36:32 2025 GMT Not After : May 5 19:36:32 2025 GMT Subject: CN=680fd8c0-1d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:e3:0f:b3:aa:5e:72:fb:f0:92:35:c8:2d: bc:06:81:b6:27:2b:5f:cb:cb:e4:67:16:76:3d:cb: 65:13:09:10:e7:97:5f:7a:c0:cb:6b:9e:19:b6:8e: 52:4f:57:07:dc:5b:ca:f1:28:e8:6e:22:f0:0a:e0: b4:86:99:eb:a7:01:51:ed:8f:d3:b3:92:fc:42:8f: 4c:bd:f4:bb:45:be:89:57:c6:ef:2f:1f:f0:fb:8f: fa:10:0e:51:60:bc:83:6f:f5:f6:17:21:04:e5:5d: 29:fd:8c:dd:2a:be:8f:e5:06:c7:89:ce:e4:62:ad: 7a:b9:ee:fa:8b:e6:47:dd:96:28:50:fa:ea:1f:f1: 37:80:26:e2:a9:62:f1:7a:24:d9:70:9b:7c:f7:87: 42:db:ff:f5:24:cf:fc:1c:fb:ba:0e:5a:99:a3:f3: df:c5:b7:e7:60:7d:47:1d:82:4c:13:83:cf:a1:b0: fc:37:dd:c0:ce:cc:a9:2d:4b:aa:62:67:74:fc:ee: 11:64:60:4d:5d:c2:09:23:70:cb:44:9b:c7:17:ab: 1c:ab:af:08:c4:88:da:f3:28:12:22:a0:57:84:7d: 03:53:65:ed:81:37:a1:4f:4c:29:11:00:71:8f:49: 64:4d:69:75:7c:b2:eb:ad:fa:cd:4e:c3:02:0b:18: e0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9C:4C:03:F8:1B:BF:3B:17:B2:D4:E1:16:40:15:38:D1:B0:46:C3 X509v3 Authority Key Identifier: keyid:82:0E:86:A3:1F:2B:17:FC:A3:6D:F8:BE:60:8B:2C:93:6A:83:BD:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg6Gox8rF_yjbfi-YIssk2qDvYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B837/83300E2E3E0911EAA4E13F19C4F9AE02/gg6Gox8rF_yjbfi-YIssk2qDvYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0d:45:ea:13:1c:51:34:be:e5:02:65:c4:be:7d:a0:ca:97: 76:df:61:ea:a2:00:a7:7b:9f:9d:9d:b3:55:d1:7a:53:a5:38: 02:d2:6c:e5:27:cf:14:70:fe:55:62:cc:df:78:5d:84:40:2f: 5d:bb:9a:8c:d6:56:62:fc:48:8e:16:d9:1f:41:94:ec:48:e6: 63:42:a0:4a:df:bb:ea:ea:01:61:da:f5:d9:a5:8d:88:77:1c: db:96:a1:e3:8b:c1:6d:1a:da:bc:7e:bb:cd:b5:d2:cd:3c:e0: cb:7b:39:d7:6b:d1:73:db:5b:ed:30:7d:66:c4:d9:e2:7a:29: 1f:79:c7:ac:57:4b:a7:8c:91:0a:14:d8:c7:f6:90:21:d4:3a: e7:20:bc:a0:c5:1d:fa:c2:36:5e:20:6f:31:7c:6d:16:86:d8: 00:f7:3d:42:62:cd:c8:d3:8f:5e:1c:a9:0b:b0:61:3d:91:cf: cc:1e:59:80:a8:6d:ad:e0:3b:63:12:d6:61:8d:77:92:6a:f4: d5:7f:e1:b3:a7:e7:54:cc:d8:40:f1:25:d2:74:70:ac:ee:3b: f7:4d:a5:7d:17:08:1c:1a:51:d3:10:1c:3c:71:84:ee:b9:e3: 02:db:4d:14:84:c9:ec:12:97:c2:31:9c:06:80:d7:1d:23:28: 73:4a:ca:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI4MzcxMTAvBgNVBAUTKDgyMEU4NkEzMUYyQjE3RkNBMzZERjhCRTYwOEIyQzkz NkE4M0JEODAwHhcNMjUwNDI4MTkzNjMyWhcNMjUwNTA1MTkzNjMyWjAYMRYwFAYD VQQDEw02ODBmZDhjMC0xZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRDjD7OqXnL78JI1yC28BoG2Jytfy8vkZxZ2PctlEwkQ55dfesDLa54Zto5S T1cH3FvK8SjobiLwCuC0hpnrpwFR7Y/Ts5L8Qo9MvfS7Rb6JV8bvLx/w+4/6EA5R YLyDb/X2FyEE5V0p/YzdKr6P5QbHic7kYq16ue76i+ZH3ZYoUPrqH/E3gCbiqWLx eiTZcJt894dC2//1JM/8HPu6DlqZo/PfxbfnYH1HHYJME4PPobD8N93AzsypLUuq Ymd0/O4RZGBNXcIJI3DLRJvHF6scq68IxIja8ygSIqBXhH0DU2XtgTehT0wpEQBx j0lkTWl1fLLrrfrNTsMCCxjgcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKcTAP4 G787F7LU4RZAFTjRsEbDMB8GA1UdIwQYMBaAFIIOhqMfKxf8o234vmCLLJNqg72A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjgzNy84MzMwMEUyRTNF MDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZfeWpiZmktWUlzc2sycUR2 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnNkdveDhyRl95amJmaS1ZSXNzazJxRHZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjgzNy84MzMwMEUyRTNFMDkxMUVBQTRFMTNGMTlDNEY5QUUwMi9nZzZHb3g4ckZf eWpiZmktWUlzc2sycUR2WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVDUXqExxRNL7lAmXEvn2gypd232HqogCne5+dnbNV0XpTpTgC0mzl J88UcP5VYszfeF2EQC9du5qM1lZi/EiOFtkfQZTsSOZjQqBK37vq6gFh2vXZpY2I dxzblqHji8FtGtq8frvNtdLNPODLeznXa9Fz21vtMH1mxNnieikfecesV0unjJEK FNjH9pAh1DrnILygxR36wjZeIG8xfG0WhtgA9z1CYs3I049eHKkLsGE9kc/MHlmA qG2t4DtjEtZhjXeSavTVf+Gzp+dUzNhA8SXSdHCs7jv3TaV9FwgcGlHTEBw8cYTu ueMC200UhMnsEpfCMZwGgNcdIyhzSsro -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:38 2025 by rpki-client on console.sobornost.net