$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json) Hash identifier: ScPNe5ZpiSR2/ZA7GAOe1RiKcXsuDu163usZPveghFw= Subject key identifier: E3:D9:F6:CF:BC:49:F6:67:6B:CB:A2:4B:56:FC:57:CA:62:B3:C4:5F Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft Manifest number: 34A4 Signing time: Mon 28 Apr 2025 14:57:58 +0000 Manifest this update: Mon 28 Apr 2025 14:57:58 +0000 Manifest next update: Mon 05 May 2025 14:57:58 +0000 Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: PtpAFkAyte9imzb87FqTfKIbCa5rCNP8XDnlOGfqkzQ=) 2: F026CE74927411EDB020A481C4F9AE02.roa (hash: D3nZr89FC3B/hYB2ABfVDlFpa9Kx2bcJix0bhxq7u3Y=) 3: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: 7ZkKrwIf5dxU1AyQHdEtx/cZNmt12RU0pVuLQbnEwD8=) 4: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: /XOWg1DL5Ca4WTABh7nowkgqWfXA9qIHVM17A2ry+Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Validity Not Before: Apr 28 14:57:58 2025 GMT Not After : May 5 14:57:58 2025 GMT Subject: CN=680f9776-7d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ca:6c:39:b8:ef:b4:e6:7f:d9:0d:8b:ea:98: e2:46:86:c0:34:b3:8b:96:17:d1:5a:35:76:6b:a5: a5:23:a2:f1:8c:bf:c5:8f:f3:a1:47:0a:7e:64:d4: e9:f3:95:57:74:2f:65:75:de:68:43:b6:ac:be:e4: da:b3:67:ea:96:50:6f:1d:00:b7:54:fe:ed:ea:31: 31:e2:b7:c4:03:d4:15:0c:00:5d:95:1f:49:fc:ff: 04:65:37:5b:c2:a8:1e:2d:ab:12:94:59:37:1a:ba: b6:d7:dd:82:d9:9c:d2:a4:6e:47:20:fd:2a:5d:26: da:ce:b8:60:f2:e4:0c:a4:06:36:19:c2:ba:92:dc: 2e:76:53:a5:c3:4f:11:db:b5:7d:90:cf:4e:8d:15: 2c:5b:c5:c0:63:3d:96:b4:03:b1:8a:14:3f:01:81: 39:8d:7e:5c:b1:9e:ef:e2:ad:9b:03:d6:da:ca:ea: 80:1d:39:03:6c:e9:c3:47:14:8c:4e:04:e2:eb:44: bd:41:fe:ee:e3:a6:24:14:43:4f:22:37:d3:8c:fa: c8:fb:5c:bf:6a:93:ee:61:46:08:8a:98:40:58:6f: 3c:b6:8f:cb:ee:48:a0:4f:7a:7c:a6:7f:34:b0:d6: 74:45:f5:4f:9c:d3:6d:b5:cd:01:d4:84:99:d7:fb: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D9:F6:CF:BC:49:F6:67:6B:CB:A2:4B:56:FC:57:CA:62:B3:C4:5F X509v3 Authority Key Identifier: keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4e:19:9e:74:05:7f:e3:77:18:e6:f4:ae:a7:5b:eb:ce:6d: c9:83:ac:61:94:ea:df:ed:ad:b7:60:9b:7b:55:e9:35:91:0d: 1f:cc:70:54:e3:6f:fb:0f:d1:c7:56:3b:fa:1b:8f:3e:8a:d1: dd:e7:41:7d:2d:09:d0:a8:97:be:44:ba:52:b0:36:d8:81:fc: 39:5d:57:27:70:66:09:78:78:3c:c1:e1:3b:d3:c3:e7:e7:90: c9:8b:df:b4:fa:78:79:da:25:3d:cd:2c:05:cd:62:b3:98:a3: 11:32:80:2f:2f:3c:41:73:6c:2a:c8:73:3a:a7:93:46:80:aa: bb:9d:a2:57:e5:8c:5b:b2:26:ed:63:a9:2c:2b:dc:72:5d:04: 8b:4b:b3:fe:19:aa:b2:16:a5:0a:f3:fe:37:c5:96:38:c3:b0: b4:4a:52:d4:63:ba:c5:55:63:45:72:a2:0f:05:b4:6f:24:a7: 6a:35:ed:42:90:df:99:4a:33:9b:92:99:96:c1:65:89:f4:f7: 84:3c:2f:1e:76:4b:40:a4:77:c3:65:dc:d7:d4:a3:3e:6c:01: dc:7a:67:2d:8f:ff:77:f1:6d:a0:d3:8c:1d:f9:32:47:1c:6b: e9:cd:6e:fe:e5:39:36:5e:9e:af:31:32:19:2f:18:6e:c6:57: 75:fb:da:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2MDkxNTdGMEM1 OUE1MkZEN0YwHhcNMjUwNDI4MTQ1NzU4WhcNMjUwNTA1MTQ1NzU4WjAYMRYwFAYD VQQDEw02ODBmOTc3Ni03ZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+spsObjvtOZ/2Q2L6pjiRobANLOLlhfRWjV2a6WlI6LxjL/Fj/OhRwp+ZNTp 85VXdC9ldd5oQ7asvuTas2fqllBvHQC3VP7t6jEx4rfEA9QVDABdlR9J/P8EZTdb wqgeLasSlFk3Grq2192C2ZzSpG5HIP0qXSbazrhg8uQMpAY2GcK6ktwudlOlw08R 27V9kM9OjRUsW8XAYz2WtAOxihQ/AYE5jX5csZ7v4q2bA9bayuqAHTkDbOnDRxSM TgTi60S9Qf7u46YkFENPIjfTjPrI+1y/apPuYUYIiphAWG88to/L7kigT3p8pn80 sNZ0RfVPnNNttc0B1ISZ1/t3TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPZ9s+8 SfZna8uiS1b8V8pis8RfMB8GA1UdIwQYMBaAFO6oroDXE+ayLbDsYJFX8MWaUv1/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCNy8xQzE2NjQxQzFE OTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVySXRzT3hna1Zmd3hacFNf WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxaXVnTmNUNXJJdHNPeGdrVmZ3eFpwU19YOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCNy8xQzE2NjQxQzFEOTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVy SXRzT3hna1Zmd3hacFNfWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqThmedAV/43cY5vSup1vrzm3Jg6xhlOrf7a23YJt7Vek1kQ0fzHBU 42/7D9HHVjv6G48+itHd50F9LQnQqJe+RLpSsDbYgfw5XVcncGYJeHg8weE708Pn 55DJi9+0+nh52iU9zSwFzWKzmKMRMoAvLzxBc2wqyHM6p5NGgKq7naJX5Yxbsibt Y6ksK9xyXQSLS7P+GaqyFqUK8/43xZY4w7C0SlLUY7rFVWNFcqIPBbRvJKdqNe1C kN+ZSjObkpmWwWWJ9PeEPC8edktApHfDZdzX1KM+bAHcemctj/938W2g04wd+TJH HGvpzW7+5Tk2Xp6vMTIZLxhuxld1+9pK -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:13 2025 by rpki-client on console.sobornost.net