$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json) Hash identifier: 4Ae4+dMzGRbRsUMWub5JQKSCLzJdwkZNbmhkqWNRBvE= Subject key identifier: CD:BB:BD:DC:09:E9:BA:71:90:9C:F0:46:AF:5C:AE:52:7E:94:9C:DB Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft Manifest number: 3B Signing time: Sun 27 Apr 2025 06:19:38 +0000 Manifest this update: Sun 27 Apr 2025 06:19:37 +0000 Manifest next update: Sun 04 May 2025 06:19:37 +0000 Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: 7wO2Jc2m1ZjPKbS3RDxvBjaumT1w7J2Q+vn2VibEY9U=) 2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Validity Not Before: Apr 27 06:19:37 2025 GMT Not After : May 4 06:19:37 2025 GMT Subject: CN=680dcc7a-6b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:68:97:0c:9f:de:fd:7c:7f:9a:3c:ce:10:5e: dc:5e:49:7b:19:d9:d5:3f:18:d7:51:b5:a5:e2:5d: bb:d1:14:c6:3c:c2:27:02:ac:3e:41:e1:18:e2:34: 54:45:e4:a2:9d:c4:d8:a7:70:c4:ec:16:ee:97:2d: 37:c5:d7:c2:70:89:e7:60:d0:92:d4:d1:5c:05:e9: bc:34:0e:47:b0:cc:0a:c2:b6:07:30:ae:fc:9d:41: c3:04:85:78:73:1a:94:01:71:4d:2d:6a:6d:60:87: ad:5b:d9:9a:32:28:f5:df:21:29:f5:e6:6c:2d:77: ae:3f:33:18:67:9e:4b:1c:71:20:bb:aa:f6:70:38: cc:5b:60:56:37:1a:04:f4:c7:35:2c:07:d1:91:d5: 80:e4:42:f9:27:c6:60:a2:d5:ef:39:66:70:32:71: fe:c2:61:70:f5:f5:27:4a:12:01:4f:db:8b:a8:f0: 9d:8c:1a:64:d6:69:dc:25:b8:df:ff:44:dd:27:a2: 75:b9:c2:b4:e0:ee:5e:46:0f:ab:5f:50:af:d4:45: 18:96:23:9f:1e:6a:13:66:a5:d7:90:04:2d:86:46: 7c:a9:f3:ee:11:5b:5d:19:c6:01:9a:56:31:6f:2c: bc:3c:1d:19:72:9d:fd:08:70:7b:6e:1e:df:44:70: 4b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BB:BD:DC:09:E9:BA:71:90:9C:F0:46:AF:5C:AE:52:7E:94:9C:DB X509v3 Authority Key Identifier: keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:da:f4:82:21:99:ba:75:5e:6e:56:b6:81:41:7e:bb:57:14: 94:f9:70:ee:19:71:88:b8:13:0e:79:14:44:f8:02:36:7f:0c: f6:b0:e2:c5:a3:64:73:8a:0e:5b:8b:a6:b3:b6:f1:de:c1:b0: ce:1b:2e:f7:54:93:52:a6:fd:03:d6:d0:05:5a:3b:3b:62:71: 90:65:da:81:e3:b8:34:c3:0b:9e:d0:6f:6c:dc:2e:1a:20:b2: f4:e2:e4:2c:8d:31:4b:fa:89:ed:f3:df:49:93:5b:17:8e:47: d4:4b:79:8c:d7:c9:d1:da:d6:93:ad:71:d7:60:60:6a:ab:f7: b2:2c:95:ba:fc:40:ac:40:87:27:03:5f:ba:b7:08:21:82:f2: 7b:81:14:dd:29:a3:c1:50:0f:b8:e1:d5:25:36:b2:1b:b3:f1: 48:e9:3a:15:a6:49:70:1d:cf:ff:b2:49:f9:07:de:29:ef:b7: a7:a9:11:1b:9f:40:7d:f3:08:de:c2:09:d8:63:70:e5:86:3a: 92:5f:e2:d9:3b:df:07:75:94:65:ed:25:76:8c:7f:01:85:fe: d4:83:fa:34:9d:82:98:c3:66:8d:47:7b:38:f1:16:8f:e8:96: 66:55:58:d6:dc:35:e6:d3:15:59:71:75:25:59:12:ee:a3:6e: a5:92:8c:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJCNjExMC8GA1UEBRMoRUM2NzkxNjkxNzdCOUUxMzFEMERBQTAxMzk4RDcwMDM5 ODI3RDFGNjAeFw0yNTA0MjcwNjE5MzdaFw0yNTA1MDQwNjE5MzdaMBgxFjAUBgNV BAMTDTY4MGRjYzdhLTZiN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2aJcMn979fH+aPM4QXtxeSXsZ2dU/GNdRtaXiXbvRFMY8wicCrD5B4RjiNFRF 5KKdxNincMTsFu6XLTfF18Jwiedg0JLU0VwF6bw0DkewzArCtgcwrvydQcMEhXhz GpQBcU0tam1gh61b2ZoyKPXfISn15mwtd64/MxhnnksccSC7qvZwOMxbYFY3GgT0 xzUsB9GR1YDkQvknxmCi1e85ZnAycf7CYXD19SdKEgFP24uo8J2MGmTWadwluN// RN0nonW5wrTg7l5GD6tfUK/URRiWI58eahNmpdeQBC2GRnyp8+4RW10ZxgGaVjFv LLw8HRlynf0IcHtuHt9EcEuFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzbu93Anp unGQnPBGr1yuUn6UnNswHwYDVR0jBBgwFoAU7GeRaRd7nhMdDaoBOY1wA5gn0fYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkI2L0U2NEIwM0I0Q0I1 OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0dlUmFSZDduaE1kRGFvQk9ZMXdBNWduMGZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkI2L0U2NEIwM0I0Q0I1OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhN ZERhb0JPWTF3QTVnbjBmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/a9IIhmbp1Xm5WtoFBfrtXFJT5cO4ZcYi4Ew55FET4AjZ/DPaw4sWj ZHOKDluLprO28d7BsM4bLvdUk1Km/QPW0AVaOzticZBl2oHjuDTDC57Qb2zcLhog svTi5CyNMUv6ie3z30mTWxeOR9RLeYzXydHa1pOtcddgYGqr97Islbr8QKxAhycD X7q3CCGC8nuBFN0po8FQD7jh1SU2shuz8UjpOhWmSXAdz/+ySfkH3invt6epERuf QH3zCN7CCdhjcOWGOpJf4tk73wd1lGXtJXaMfwGF/tSD+jSdgpjDZo1HezjxFo/o lmZVWNbcNebTFVlxdSVZEu6jbqWSjDo= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net