$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft File: dGJBrad929_qD-FE7-ITkeP8T9k.mft (raw, json) Hash identifier: R7cxP2rNCLTLRJ3fPtA944vGg+5+0pFU+MYdUhgduKI= Subject key identifier: 62:56:8C:AE:A3:0A:44:36:47:5C:B5:69:17:E1:21:45:79:21:A1:35 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0CC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft Manifest number: 0CA7 Signing time: Mon 28 Apr 2025 18:23:24 +0000 Manifest this update: Mon 28 Apr 2025 18:23:23 +0000 Manifest next update: Mon 05 May 2025 18:23:23 +0000 Files and hashes: 1: dGJBrad929_qD-FE7-ITkeP8T9k.crl (hash: xizFLms67pc28wLJBoWFnGgUFcEcUMeVzL6i2KK2u3Y=) 2: 2B9FBCB0DEC911EBA828524CC4F9AE02.roa (hash: es9j3LKTp+AUW2ig2BE9iWWW6VD0Nb77D+iullPdt18=) 3: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (hash: pjQH54VRYOq5PMku0jKMJ5PyMS22lF1mGoeoJ8lvLEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3272 (0xcc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7, serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Validity Not Before: Apr 28 18:23:23 2025 GMT Not After : May 5 18:23:23 2025 GMT Subject: CN=680fc79c-667d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:36:09:41:ba:76:22:71:68:f7:82:e8:da:15: 65:cd:c0:06:ef:f7:fa:e9:03:e6:ae:27:9e:3f:98: 33:e8:81:1c:b8:39:ab:43:58:a5:d5:24:a8:4a:f8: f1:d9:0c:ac:12:ba:a7:29:f2:01:cc:0e:e1:95:b7: 65:36:b8:2f:63:62:af:00:0d:cc:56:f1:91:19:7a: 71:d8:76:09:eb:a1:31:bd:02:d0:f9:48:f8:45:6b: 09:8e:15:dc:2e:91:ac:b7:77:c1:08:df:d6:8b:a1: 86:74:72:a8:54:c6:bd:4a:ac:8a:94:da:ec:fb:3e: 25:b6:bb:0a:06:ab:be:e7:c0:6f:bc:93:25:a0:bf: 7b:a3:bb:39:d3:6c:9a:ae:82:8e:69:ca:98:af:ed: 67:bc:93:76:44:4e:10:d4:02:bc:b2:68:d5:76:89: d7:3b:98:fd:cb:c0:73:30:89:1a:34:f2:6c:ba:b3: 6a:bf:c1:b1:ea:7d:55:6d:b9:6a:84:3b:ac:a4:2f: 4e:b8:73:b3:87:5e:29:c2:c9:30:31:2a:65:44:ab: 9b:ba:19:42:9d:e9:66:5b:17:de:bf:2c:f0:d6:72: 43:9b:2f:8a:71:87:e5:30:07:23:2c:b8:c6:74:13: c7:f9:cd:32:c2:af:32:d7:90:9d:68:c7:8e:c0:0c: 7d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:56:8C:AE:A3:0A:44:36:47:5C:B5:69:17:E1:21:45:79:21:A1:35 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0b:f9:c5:98:a0:3d:62:eb:d7:c1:b4:28:96:37:81:cd:a5: 30:16:d2:34:19:75:b6:cb:40:9d:44:cb:32:e1:36:05:d9:0e: ec:01:c2:e8:49:cc:aa:7c:cd:47:f6:69:c8:e0:1b:b0:70:11: 06:fa:9a:30:25:cc:dd:53:84:ce:5f:e6:a9:05:b6:c6:dc:17: e5:7d:50:7e:e0:8f:e5:40:69:26:7a:b9:58:ee:92:3b:b9:cd: 65:4d:77:bd:ec:c8:00:34:bc:81:aa:30:d6:a9:13:92:66:19: be:34:32:3e:18:de:f1:f7:f9:a7:6d:15:75:28:0d:aa:5e:28: 6e:6f:3a:01:78:7c:8f:70:08:d5:59:e5:34:53:3f:21:84:38: cb:e0:ee:61:9b:2b:6f:65:1a:6a:61:8f:0f:3a:92:47:8d:45: 48:f6:d7:61:43:2f:4a:17:ea:15:81:13:f4:61:03:d1:ac:cb: e7:e3:af:1c:57:a4:d8:eb:e7:e1:82:5e:88:a0:6f:15:74:57: a9:89:31:13:d7:ac:f3:33:c6:5a:4e:ce:1f:90:2f:e3:f4:67: fc:2c:72:e9:de:eb:3a:58:f8:71:7a:27:39:fe:82:b1:38:c7: dd:07:87:d5:18:1d:e5:dc:9b:48:be:45:65:ea:81:c2:a8:e6: 46:c9:bf:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUwNDI4MTgyMzIzWhcNMjUwNTA1MTgyMzIzWjAYMRYwFAYD VQQDEw02ODBmYzc5Yy02NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zYJQbp2InFo94Lo2hVlzcAG7/f66QPmrieeP5gz6IEcuDmrQ1il1SSoSvjx 2QysErqnKfIBzA7hlbdlNrgvY2KvAA3MVvGRGXpx2HYJ66ExvQLQ+Uj4RWsJjhXc LpGst3fBCN/Wi6GGdHKoVMa9SqyKlNrs+z4ltrsKBqu+58BvvJMloL97o7s502ya roKOacqYr+1nvJN2RE4Q1AK8smjVdonXO5j9y8BzMIkaNPJsurNqv8Gx6n1Vbblq hDuspC9OuHOzh14pwskwMSplRKubuhlCnelmWxfevyzw1nJDmy+KcYflMAcjLLjG dBPH+c0ywq8y15CdaMeOwAx9BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJWjK6j CkQ2R1y1aRfhIUV5IaE1MB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0JCNy81RTFGQ0VCQ0YzRjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5 X3FELUZFNy1JVGtlUDhUOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6C/nFmKA9YuvXwbQoljeBzaUwFtI0GXW2y0CdRMsy4TYF2Q7sAcLo ScyqfM1H9mnI4BuwcBEG+powJczdU4TOX+apBbbG3BflfVB+4I/lQGkmerlY7pI7 uc1lTXe97MgANLyBqjDWqROSZhm+NDI+GN7x9/mnbRV1KA2qXihubzoBeHyPcAjV WeU0Uz8hhDjL4O5hmytvZRpqYY8POpJHjUVI9tdhQy9KF+oVgRP0YQPRrMvn468c V6TY6+fhgl6IoG8VdFepiTET16zzM8ZaTs4fkC/j9Gf8LHLp3us6WPhxeic5/oKx OMfdB4fVGB3l3JtIvkVl6oHCqOZGyb8P -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:53 2025 by rpki-client on console.sobornost.net