$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: T5sp0cArvC1JyzPpSbfmHnpjTdovQinupwFOKDp1Ftk= Subject key identifier: 7C:95:12:30:0E:DB:FA:B1:EA:35:5E:8A:27:C6:14:47:3F:6C:30:85 Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 34D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 34A5 Signing time: Mon 28 Apr 2025 14:33:53 +0000 Manifest this update: Mon 28 Apr 2025 14:33:52 +0000 Manifest next update: Mon 05 May 2025 14:33:52 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: Wabs7y8LDsVzVFdbhaQNCprJcUbE48IGW2JtFG73YEM=) 2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=) 3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=) 4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=) 5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13520 (0x34d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: Apr 28 14:33:52 2025 GMT Not After : May 5 14:33:52 2025 GMT Subject: CN=680f91d1-5f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:15:ba:15:ca:fe:05:a4:8e:05:e3:ae:1b: c5:e6:fb:c9:fa:2c:43:9e:88:61:a6:c2:b7:15:f2: aa:48:39:11:1e:d3:d9:f7:2e:8c:e6:95:f7:dc:21: 08:94:a4:30:dc:e0:3e:c8:a7:a2:dc:40:8d:a3:33: 2f:29:5f:77:53:75:0f:05:27:54:da:34:b7:17:06: 95:0e:c8:ae:32:4c:80:37:f5:b7:31:3d:11:21:52: 86:3b:0a:4c:89:73:d8:9e:cf:88:5b:ac:56:c8:2b: c4:a7:6f:57:b8:d4:8e:44:03:b1:a4:13:a2:a1:be: 46:82:f2:3a:1b:5c:60:74:07:b6:ac:74:fe:01:34: d1:ac:f1:ef:d7:d4:40:31:5c:04:a3:98:52:6d:2e: 86:97:5a:3d:e5:bc:cc:52:73:0e:f4:52:14:26:49: 15:8f:ae:90:d9:61:44:a6:f6:5c:6e:65:20:c1:83: b4:bd:52:0a:be:45:50:b2:03:1c:58:28:4a:3a:37: fa:4e:45:3a:38:6f:ac:f8:59:a2:58:35:8e:20:94: 30:a7:ac:1c:b7:f4:54:97:f7:36:7b:e9:32:f0:11: 2d:7a:0e:6d:24:f5:9e:46:4a:a5:da:1c:9f:43:e1: dd:b7:cd:be:08:8e:d2:69:05:89:44:60:cb:84:e7: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:95:12:30:0E:DB:FA:B1:EA:35:5E:8A:27:C6:14:47:3F:6C:30:85 X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:dd:15:d2:3a:fb:d1:8d:c3:46:6e:7b:ec:2d:92:3b:8b:3b: ac:7e:44:54:e3:0c:3a:74:b5:5f:cb:64:ab:d7:6d:95:fa:84: 2a:cc:7e:0a:cf:94:31:3d:9e:07:49:8b:8b:b9:3a:d4:20:ca: 35:4d:a6:3b:0d:a4:8f:2f:e1:5a:7c:42:5d:b7:b6:c5:67:f8: 3c:e4:08:20:2b:52:ac:28:b7:99:32:45:c3:e0:41:6b:1a:be: 09:47:02:24:0e:21:5b:f2:94:91:3f:65:5e:3d:97:ce:a5:6d: 5e:20:f7:b7:73:4b:ff:e3:c8:15:c7:63:65:57:b9:55:e3:ed: d3:f1:a1:c2:2a:a6:40:2e:17:26:57:c4:83:63:6d:0a:ec:64: ea:82:1c:6c:82:4b:ec:b8:f4:af:95:54:ce:a5:e1:1d:1e:ca: 52:77:ee:1e:8c:67:5c:9c:3c:2e:c2:24:cf:cb:c4:c7:36:c5: c2:31:a3:76:2e:b3:95:da:37:8b:52:db:44:53:04:76:0c:38: 29:85:78:83:6c:54:44:86:37:65:05:77:5f:a9:ed:13:71:35: 12:b5:29:78:6d:df:d3:20:4d:85:f1:3e:80:f5:ae:d1:cd:56: e4:5a:7f:7f:1d:5e:8e:9a:1f:6e:5d:c6:69:67:75:98:2f:4f: 7e:27:c0:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjUwNDI4MTQzMzUyWhcNMjUwNTA1MTQzMzUyWjAYMRYwFAYD VQQDEw02ODBmOTFkMS01ZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8cVuhXK/gWkjgXjrhvF5vvJ+ixDnohhpsK3FfKqSDkRHtPZ9y6M5pX33CEI lKQw3OA+yKei3ECNozMvKV93U3UPBSdU2jS3FwaVDsiuMkyAN/W3MT0RIVKGOwpM iXPYns+IW6xWyCvEp29XuNSORAOxpBOiob5GgvI6G1xgdAe2rHT+ATTRrPHv19RA MVwEo5hSbS6Gl1o95bzMUnMO9FIUJkkVj66Q2WFEpvZcbmUgwYO0vVIKvkVQsgMc WChKOjf6TkU6OG+s+FmiWDWOIJQwp6wct/RUl/c2e+ky8BEteg5tJPWeRkql2hyf Q+Hdt82+CI7SaQWJRGDLhOf1RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyVEjAO 2/qx6jVeiifGFEc/bDCFMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn3RXSOvvRjcNGbnvsLZI7izusfkRU4ww6dLVfy2Sr122V+oQqzH4K z5QxPZ4HSYuLuTrUIMo1TaY7DaSPL+FafEJdt7bFZ/g85AggK1KsKLeZMkXD4EFr Gr4JRwIkDiFb8pSRP2VePZfOpW1eIPe3c0v/48gVx2NlV7lV4+3T8aHCKqZALhcm V8SDY20K7GTqghxsgkvsuPSvlVTOpeEdHspSd+4ejGdcnDwuwiTPy8THNsXCMaN2 LrOV2jeLUttEUwR2DDgphXiDbFREhjdlBXdfqe0TcTUStSl4bd/TIE2F8T6A9a7R zVbkWn9/HV6Omh9uXcZpZ3WYL09+J8Bn -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net