$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: A1SR1aZurRviI3b/FJ8MjlrkGPTfcbMAAkyAfqWODMg= Subject key identifier: 34:0F:4B:FA:EF:EB:78:92:44:9D:08:09:A1:45:FD:E0:8B:4D:F8:68 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: E1 Signing time: Wed 23 Apr 2025 04:37:36 +0000 Manifest this update: Wed 23 Apr 2025 04:37:35 +0000 Manifest next update: Wed 30 Apr 2025 04:37:35 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: BIIFVjXn8kVPIoLnTNBUxlHqQehHdVfsA5fsFJIR0u8=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Apr 23 04:37:35 2025 GMT Not After : Apr 30 04:37:35 2025 GMT Subject: CN=68086e8f-9875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:fc:34:a4:c6:12:6d:1d:15:e1:bd:6b:c6: 61:b3:69:0c:8f:59:a2:c8:7c:8a:df:5f:d2:74:8e: 82:c5:b2:3c:94:cf:1d:64:f3:35:bf:b2:b2:46:17: 75:70:b3:e8:fc:0e:65:0a:ea:91:0d:e8:8e:b8:eb: 5f:25:32:ed:f5:05:ee:d2:df:b1:0e:02:d7:3d:d7: ba:e1:95:ac:96:90:ab:ed:eb:c8:e1:a5:d1:c5:a9: f4:90:8a:e7:cc:77:ef:34:34:5d:0b:cd:a2:86:01: 2e:2c:a7:29:8c:bb:69:1e:0f:85:7a:cf:2e:90:4d: f9:28:a0:0c:f9:f4:40:e2:ba:e4:34:e2:e5:e2:0d: 07:83:62:cf:0c:38:d8:38:5a:5c:c6:b9:98:4d:db: bb:6a:a6:19:74:e8:b4:b3:2c:2f:eb:ab:19:73:75: e0:7a:39:87:a6:f3:42:ad:51:b1:0b:32:ff:8d:08: 69:e4:10:0f:70:59:73:14:9d:9e:fb:ca:9f:96:6d: cd:67:d4:d0:68:ed:dc:21:79:ff:10:86:d9:36:70: a7:2f:4d:6a:52:fd:1b:d5:dd:32:9e:0c:cb:e5:ad: dc:48:d8:6b:15:dd:21:10:38:fd:b1:a4:fc:1c:96: 91:ea:18:76:54:8b:44:58:f4:86:46:d7:a3:06:6f: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0F:4B:FA:EF:EB:78:92:44:9D:08:09:A1:45:FD:E0:8B:4D:F8:68 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:5c:0b:d9:b5:79:54:22:e7:cf:cb:5c:97:0b:50:df:3b:72: 17:0c:7e:dc:5a:06:d2:10:9a:e9:e2:71:d9:fd:40:0f:fc:43: 0c:6f:bf:6c:d3:94:44:86:61:4f:5f:34:a7:26:93:c6:88:be: da:a0:b8:f9:ae:c8:75:5c:00:e7:02:c6:b9:73:ff:5f:b1:7c: cf:67:8a:b1:b5:34:78:0d:cd:85:d0:2f:c9:1e:03:b6:16:36: 2e:c6:fd:64:cc:0b:49:50:cb:94:17:f6:11:c7:2d:e2:5d:35: 0b:d1:2f:a7:91:81:ad:bc:e8:12:2b:05:91:bb:d9:1e:49:22: f9:26:31:f8:8e:8e:2f:a0:83:26:64:b5:cd:23:21:73:e1:05: 67:57:9d:3e:52:1f:0d:23:43:60:00:ad:25:8a:e7:66:b7:62: 88:8e:83:9f:cc:e9:8a:a8:18:30:22:9d:90:9b:fe:42:cc:46: 25:12:f7:2a:74:ef:07:85:80:cc:e0:98:17:c7:b0:eb:2d:e8: a8:77:fe:78:a8:90:da:55:80:fb:28:a5:8b:ea:69:1a:bf:68: 2c:08:75:32:8e:4d:1e:0e:b2:26:26:55:32:b1:d7:da:f9:42: 1b:d3:09:c5:c6:b5:2b:39:a6:fe:41:57:fa:e4:5e:53:d7:e0: 8a:04:db:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjUwNDIzMDQzNzM1WhcNMjUwNDMwMDQzNzM1WjAYMRYwFAYD VQQDEw02ODA4NmU4Zi05ODc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HL8NKTGEm0dFeG9a8Zhs2kMj1miyHyK31/SdI6CxbI8lM8dZPM1v7KyRhd1 cLPo/A5lCuqRDeiOuOtfJTLt9QXu0t+xDgLXPde64ZWslpCr7evI4aXRxan0kIrn zHfvNDRdC82ihgEuLKcpjLtpHg+Fes8ukE35KKAM+fRA4rrkNOLl4g0Hg2LPDDjY OFpcxrmYTdu7aqYZdOi0sywv66sZc3XgejmHpvNCrVGxCzL/jQhp5BAPcFlzFJ2e +8qflm3NZ9TQaO3cIXn/EIbZNnCnL01qUv0b1d0yngzL5a3cSNhrFd0hEDj9saT8 HJaR6hh2VItEWPSGRtejBm9qFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQPS/rv 63iSRJ0ICaFF/eCLTfhoMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFXAvZtXlUIufPy1yXC1DfO3IXDH7cWgbSEJrp4nHZ/UAP/EMMb79s 05REhmFPXzSnJpPGiL7aoLj5rsh1XADnAsa5c/9fsXzPZ4qxtTR4Dc2F0C/JHgO2 FjYuxv1kzAtJUMuUF/YRxy3iXTUL0S+nkYGtvOgSKwWRu9keSSL5JjH4jo4voIMm ZLXNIyFz4QVnV50+Uh8NI0NgAK0liudmt2KIjoOfzOmKqBgwIp2Qm/5CzEYlEvcq dO8HhYDM4JgXx7DrLeiod/54qJDaVYD7KKWL6mkav2gsCHUyjk0eDrImJlUysdfa +UIb0wnFxrUrOab+QVf65F5T1+CKBNup -----END CERTIFICATE-----Generated at Wed Apr 23 06:35:53 2025 by rpki-client on console.sobornost.net