$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: yvEV+MggXW8z3TQJptswFKNSFC+Z1xxgG3+P3LKF/cU= Subject key identifier: B3:E8:D9:80:64:58:2C:C5:89:FE:AD:3F:95:35:B9:E0:73:79:D3:B7 Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 076A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 075C Signing time: Tue 22 Apr 2025 21:33:28 +0000 Manifest this update: Tue 22 Apr 2025 21:33:27 +0000 Manifest next update: Tue 29 Apr 2025 21:33:27 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: akpY5wFYiMn68CLEeL3y6bHbVnRtv3OrVL4ejDBRgxM=) 2: 24A9BFDE0FD811F08ABAAC1AC4F9AE02.roa (hash: IyER0mz0vb9MAuJJmaVzFEqnaYYgcSDAs66+bdrxMNM=) 3: 69318772F69C11EFBD339C7FC4F9AE02.roa (hash: eFS1nhS/cjjP4D0ssaf1AaxH+1D33Vf2JZuqTy0/YEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 21:33:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1898 (0x76a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Apr 22 21:33:27 2025 GMT Not After : Apr 29 21:33:27 2025 GMT Subject: CN=68080b28-949b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:73:c7:82:99:c3:9c:87:3f:c8:73:9c:3c:e6: 05:ce:84:dc:8a:d5:b0:b8:c8:13:88:d7:1b:5a:68: 50:03:57:52:06:b6:62:eb:31:07:ed:cf:8e:1a:e6: 31:1e:2e:75:93:0b:52:75:e6:52:fb:cb:a0:df:56: 51:e6:55:47:c2:9d:c4:78:83:8c:00:ef:49:4b:04: 2c:0c:ec:e7:2e:38:ae:27:c2:47:b2:0c:96:11:dd: 30:c3:98:6b:8d:d1:84:a7:79:2e:b8:2a:c8:dc:75: bf:40:e7:80:e4:c2:53:9d:e4:b2:bf:ef:61:46:d0: 99:87:77:97:23:5c:f9:a5:dd:41:f5:4a:58:2d:80: f9:4e:64:5c:fa:d7:27:fc:27:25:69:47:0c:c7:5c: 2f:97:06:56:6d:1e:6a:8d:1d:42:96:76:53:59:9d: 8f:9e:da:ec:a4:10:13:d9:1e:31:aa:fa:2b:6d:c2: 0b:49:a2:0f:cb:cc:fb:7a:c5:9b:50:69:e4:34:59: f3:aa:46:15:48:83:3f:37:c4:8f:1e:45:0a:67:f3: a6:6c:e2:4c:93:46:ae:01:ca:1e:44:bb:7e:63:7f: 56:3f:6a:77:9d:80:d8:77:4f:42:db:29:64:10:13: 64:cd:b3:2e:42:9c:c5:57:42:74:5d:78:0d:85:01: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E8:D9:80:64:58:2C:C5:89:FE:AD:3F:95:35:B9:E0:73:79:D3:B7 X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:50:04:27:91:91:b8:8d:9a:f6:dd:76:e3:77:0a:db:98:fa: 3d:f5:31:c8:ff:89:9e:84:c3:6b:ec:f2:70:a7:40:cf:4b:e2: ce:91:bb:33:65:39:77:a2:4b:fe:97:3f:d5:83:12:8c:39:5d: 33:5a:e8:34:1c:5b:a3:99:47:f2:46:5b:43:8f:53:31:53:ac: f2:f7:0f:e4:25:e5:fe:c0:d9:4b:1a:8f:c1:45:f5:1a:77:b1: 3b:1c:23:71:95:f0:ae:e3:2b:c0:20:ab:aa:d7:c4:49:a4:82: c2:3a:68:03:97:a4:3e:94:e7:7a:a2:f6:59:ac:1c:a7:b3:54: 6c:75:d3:4b:6f:9c:9e:80:71:7b:a5:1b:5b:81:2c:e3:0c:ca: 75:c5:9f:79:b4:3d:45:35:6a:95:2d:7f:3e:35:22:e9:5a:3a: c9:f7:f6:7b:90:61:a3:99:1a:9d:4e:e5:96:d9:02:29:1d:4e: 03:96:cf:cd:fa:a4:fd:1b:1c:70:b3:7e:36:33:37:23:a1:4e: 05:20:69:da:0b:86:69:c3:20:b6:11:b3:00:af:db:af:f6:46: 92:26:18:66:14:94:b1:07:7a:19:1b:34:76:19:f9:69:a5:7e: b9:e4:38:6b:09:48:f5:4f:aa:92:ac:a3:92:44:0e:78:68:bf: 43:1d:df:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjUwNDIyMjEzMzI3WhcNMjUwNDI5MjEzMzI3WjAYMRYwFAYD VQQDEw02ODA4MGIyOC05NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XPHgpnDnIc/yHOcPOYFzoTcitWwuMgTiNcbWmhQA1dSBrZi6zEH7c+OGuYx Hi51kwtSdeZS+8ug31ZR5lVHwp3EeIOMAO9JSwQsDOznLjiuJ8JHsgyWEd0ww5hr jdGEp3kuuCrI3HW/QOeA5MJTneSyv+9hRtCZh3eXI1z5pd1B9UpYLYD5TmRc+tcn /CclaUcMx1wvlwZWbR5qjR1ClnZTWZ2PntrspBAT2R4xqvorbcILSaIPy8z7esWb UGnkNFnzqkYVSIM/N8SPHkUKZ/OmbOJMk0auAcoeRLt+Y39WP2p3nYDYd09C2ylk EBNkzbMuQpzFV0J0XXgNhQHLIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPo2YBk WCzFif6tP5U1ueBzedO3MB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoUAQnkZG4jZr23XbjdwrbmPo99THI/4mehMNr7PJwp0DPS+LOkbsz ZTl3okv+lz/VgxKMOV0zWug0HFujmUfyRltDj1MxU6zy9w/kJeX+wNlLGo/BRfUa d7E7HCNxlfCu4yvAIKuq18RJpILCOmgDl6Q+lOd6ovZZrByns1RsddNLb5yegHF7 pRtbgSzjDMp1xZ95tD1FNWqVLX8+NSLpWjrJ9/Z7kGGjmRqdTuWW2QIpHU4Dls/N +qT9Gxxws342MzcjoU4FIGnaC4ZpwyC2EbMAr9uv9kaSJhhmFJSxB3oZGzR2Gflp pX655DhrCUj1T6qSrKOSRA54aL9DHd/F -----END CERTIFICATE-----Generated at Wed Apr 23 00:40:06 2025 by rpki-client on console.sobornost.net