$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: ZtfLx1r597MuoqiMziCl9hrzi6DJhTsNoDMLpYRGJ9E= Subject key identifier: 89:B3:D1:AC:A5:1A:E5:8A:67:5F:EF:BF:60:EB:C4:34:26:5C:A0:35 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 197F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 1973 Signing time: Mon 28 Apr 2025 16:35:05 +0000 Manifest this update: Mon 28 Apr 2025 16:35:04 +0000 Manifest next update: Mon 05 May 2025 16:35:04 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: axdhoC92ALzFo3ArMXM0N4ufWV+q4O2jNkCxzsggsY0=) 2: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: Rgcy8bLfZuMZaK0O0JgH1tVB2CHU0nZokr3ybevC1XM=) 3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 1AEdA1dYtxSEeV6/iG9fPyT5XqCCH+yVS2KSQ0ngLNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6527 (0x197f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Apr 28 16:35:04 2025 GMT Not After : May 5 16:35:04 2025 GMT Subject: CN=680fae39-5922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:59:8a:e7:76:15:b3:d8:35:90:4d:a1:d9: 60:51:5d:89:29:61:93:d7:9c:7a:7d:39:b4:8a:62: e4:5a:d8:44:61:00:bb:4e:46:79:8e:3f:bb:18:56: 5b:23:65:50:e7:4f:05:a9:04:d8:98:d8:52:1e:a9: ae:16:11:87:b8:76:58:dd:45:24:57:d1:40:34:d0: d3:dc:02:73:0f:40:64:a6:d5:d2:13:39:3e:ff:a1: bc:ab:f4:da:c8:8e:6f:66:42:6a:7f:00:c0:63:8b: 4e:9e:b1:6c:67:50:b3:d7:0c:45:48:a2:4d:17:11: 1b:b4:ed:b4:26:8a:22:1f:33:04:ac:6d:9c:60:ef: ef:38:81:30:36:56:e6:1d:09:0f:57:67:c2:36:a6: 69:c0:a9:1d:ac:fa:c5:50:48:76:ce:61:6c:c1:bd: 64:c9:67:d8:da:ce:1f:ca:ae:e9:61:63:ad:c4:ed: 34:56:a9:cc:f9:5d:80:28:85:35:62:26:d9:ff:7a: 5d:fb:ff:42:83:6d:b6:13:10:14:1f:dc:19:c6:13: 69:c3:70:af:03:f2:40:5c:2a:0b:04:26:5d:ec:e1: 31:fb:9a:45:6a:80:0c:d0:2e:43:18:ce:23:d3:7b: ae:a2:5f:a1:de:6a:1b:5e:cf:9e:7c:74:82:46:36: d3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B3:D1:AC:A5:1A:E5:8A:67:5F:EF:BF:60:EB:C4:34:26:5C:A0:35 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d2:7a:11:04:15:d5:67:e6:32:e4:c2:49:78:80:b0:77:a1: 78:2d:d7:92:9e:f5:55:6e:31:30:fe:48:7c:d9:19:db:c4:5f: 34:dc:ae:de:73:17:c3:a7:23:1d:2a:33:51:ee:dc:52:4f:15: c7:8e:12:a8:c6:e6:38:1b:0c:1c:a6:32:8b:c5:8a:32:d7:00: 06:99:6b:d5:5f:c4:b6:d7:37:a3:b0:9f:ec:bc:4c:2b:b1:cc: 3c:49:85:94:19:dd:31:10:ee:a5:dd:fa:95:25:d4:d2:33:96: c9:1b:a8:e5:4b:d1:46:93:9e:bb:ef:d6:ae:ba:11:a2:2e:1c: af:50:2d:38:52:bb:54:6c:ad:a8:ad:38:11:c7:5c:59:81:5c: 5f:04:eb:5e:05:c2:c5:0e:6f:30:1b:02:cc:a0:7b:41:66:16: 72:94:29:5d:ff:97:47:5b:42:6b:be:41:0a:11:33:fa:54:8b: f5:5c:05:4c:98:23:96:53:02:98:14:d2:28:2a:9a:9c:ef:85: 29:b8:b8:3e:29:f5:1c:15:73:b4:04:87:00:96:1a:de:ca:de: 40:7b:05:01:2c:de:5e:0a:96:ec:bb:3e:3e:70:d3:42:52:40: 24:80:36:b3:24:84:c7:bb:db:f2:a5:ba:e8:21:d3:53:1c:f4: 7b:ab:b1:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUwNDI4MTYzNTA0WhcNMjUwNTA1MTYzNTA0WjAYMRYwFAYD VQQDEw02ODBmYWUzOS01OTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBhZiud2FbPYNZBNodlgUV2JKWGT15x6fTm0imLkWthEYQC7TkZ5jj+7GFZb I2VQ508FqQTYmNhSHqmuFhGHuHZY3UUkV9FANNDT3AJzD0BkptXSEzk+/6G8q/Ta yI5vZkJqfwDAY4tOnrFsZ1Cz1wxFSKJNFxEbtO20JooiHzMErG2cYO/vOIEwNlbm HQkPV2fCNqZpwKkdrPrFUEh2zmFswb1kyWfY2s4fyq7pYWOtxO00VqnM+V2AKIU1 YibZ/3pd+/9Cg222ExAUH9wZxhNpw3CvA/JAXCoLBCZd7OEx+5pFaoAM0C5DGM4j 03uuol+h3mobXs+efHSCRjbTHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImz0ayl GuWKZ1/vv2DrxDQmXKA1MB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr0noRBBXVZ+Yy5MJJeICwd6F4LdeSnvVVbjEw/kh82RnbxF803K7e cxfDpyMdKjNR7txSTxXHjhKoxuY4GwwcpjKLxYoy1wAGmWvVX8S21zejsJ/svEwr scw8SYWUGd0xEO6l3fqVJdTSM5bJG6jlS9FGk56779auuhGiLhyvUC04UrtUbK2o rTgRx1xZgVxfBOteBcLFDm8wGwLMoHtBZhZylCld/5dHW0JrvkEKETP6VIv1XAVM mCOWUwKYFNIoKpqc74UpuLg+KfUcFXO0BIcAlhreyt5AewUBLN5eCpbsuz4+cNNC UkAkgDazJITHu9vypbroIdNTHPR7q7Gb -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:51 2025 by rpki-client on console.sobornost.net