$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft File: LejyFtzSvsbTj-vwHgbYqZAnDr8.mft (raw, json) Hash identifier: mztmBjP5nijZYBxwURmdicATFfKHBmXakIRsC/6X2ks= Subject key identifier: AB:4D:E7:56:BF:FB:84:19:E4:6E:93:32:47:53:3C:49:C7:FA:34:B3 Authority key identifier: 2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF Certificate issuer: /CN=A911AD81/serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft Manifest number: 6F Signing time: Sun 27 Apr 2025 05:47:58 +0000 Manifest this update: Sun 27 Apr 2025 05:47:57 +0000 Manifest next update: Sun 04 May 2025 05:47:57 +0000 Files and hashes: 1: LejyFtzSvsbTj-vwHgbYqZAnDr8.crl (hash: uRCC8PXAe3LVDOTQtQsp8qaAoc2wDaLQRgLSutxjors=) 2: 0E0C2FDA8A9211EF928F7977C4F9AE02.roa (hash: D50MfgKogwzT5uP2v0jQRRWmVMAdx71+85AyPtqqgw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AD81, serialNumber=2DE8F216DCD2BEC6D38FEBF01E06D8A990270EBF Validity Not Before: Apr 27 05:47:57 2025 GMT Not After : May 4 05:47:57 2025 GMT Subject: CN=680dc50d-dd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:09:30:a0:da:55:a9:8c:b8:c3:38:cb:19: d7:36:61:e2:1c:2e:d1:76:64:8c:8e:45:c3:0e:b4: a4:c2:fc:ba:a9:e6:d5:bb:6c:a1:27:c0:3d:b3:e6: 88:f2:24:89:04:d9:57:c5:3d:32:8d:7b:89:d0:41: 46:a3:2a:65:c8:2a:c2:af:81:c3:11:8d:e9:77:4d: 1b:2e:c4:4c:61:a8:e2:dd:25:61:7e:13:87:00:06: 56:f2:79:2e:ca:34:75:fa:20:ad:a6:41:94:ae:cf: 7c:ec:5e:eb:e1:73:87:1f:9f:94:de:61:99:35:89: 79:16:2e:09:2b:33:99:cc:a2:bf:1b:96:89:39:6f: c9:4a:9a:d3:41:e4:32:59:96:53:fb:85:a9:b2:ac: 83:69:be:9c:8e:65:c4:95:0a:fd:96:67:22:1e:02: 55:9b:2a:59:7e:0b:81:c1:f4:2f:3c:eb:f0:23:8a: 0e:07:60:56:f4:20:ce:f6:c7:c0:8a:2e:c6:7b:de: 5a:08:f8:ee:5d:3c:7d:a2:a0:61:cb:c4:a8:69:69: 3a:4e:c6:c8:84:08:21:c8:bc:e6:2b:29:66:5a:d0: c3:e4:17:f9:bc:f7:d1:23:0a:2e:b1:b1:e9:0c:c6: 90:c8:ae:d2:6e:65:c4:79:d5:cc:27:7e:04:7b:25: 50:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4D:E7:56:BF:FB:84:19:E4:6E:93:32:47:53:3C:49:C7:FA:34:B3 X509v3 Authority Key Identifier: keyid:2D:E8:F2:16:DC:D2:BE:C6:D3:8F:EB:F0:1E:06:D8:A9:90:27:0E:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LejyFtzSvsbTj-vwHgbYqZAnDr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD81/87D3520A89E111EF8921404DC4F9AE02/LejyFtzSvsbTj-vwHgbYqZAnDr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f1:85:0b:76:ac:9a:5f:b3:0d:45:76:7c:f7:76:c1:56:95: db:99:5a:3e:1f:75:7f:8b:de:28:c8:bd:41:e8:7a:40:2c:ab: 82:c7:91:af:f5:c8:e8:f2:71:b3:b7:e1:20:8a:75:76:4c:96: e2:c8:7d:81:02:e9:0b:ae:5c:66:79:e3:87:6e:ae:b3:98:e9: c5:23:ef:a6:ff:c9:e0:53:64:2c:e0:de:03:c3:ad:a6:82:3b: 9f:c2:88:51:b2:2b:6d:47:18:62:68:82:bf:00:ad:b5:b5:42: 44:25:6f:40:58:1e:e7:89:66:05:d7:c7:f1:31:7d:e6:36:cc: d0:5b:36:b1:db:ce:c6:11:be:c9:86:4b:ee:17:0a:96:76:0c: ac:9a:09:c8:41:11:12:dc:40:1c:44:1f:ed:fa:7c:bd:f6:c6: c2:bf:98:70:b8:a8:8e:a2:37:6c:4b:4f:05:0f:99:3e:26:a0: 7b:34:0a:50:53:b2:77:a8:7a:5d:a4:67:5c:51:0e:f7:6e:af: 95:fa:13:22:41:97:da:53:cb:95:60:2c:d8:4d:91:c2:9d:6c: b0:de:52:f9:ca:f8:53:4d:f2:05:3c:29:36:c7:de:ec:ec:2e: 02:80:f2:2a:d5:3c:96:29:f3:06:d1:2f:80:7d:41:56:4e:3f: c7:4b:ce:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QUQ4MTExMC8GA1UEBRMoMkRFOEYyMTZEQ0QyQkVDNkQzOEZFQkYwMUUwNkQ4QTk5 MDI3MEVCRjAeFw0yNTA0MjcwNTQ3NTdaFw0yNTA1MDQwNTQ3NTdaMBgxFjAUBgNV BAMTDTY4MGRjNTBkLWRkMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH+gkwoNpVqYy4wzjLGdc2YeIcLtF2ZIyORcMOtKTC/Lqp5tW7bKEnwD2z5ojy JIkE2VfFPTKNe4nQQUajKmXIKsKvgcMRjel3TRsuxExhqOLdJWF+E4cABlbyeS7K NHX6IK2mQZSuz3zsXuvhc4cfn5TeYZk1iXkWLgkrM5nMor8blok5b8lKmtNB5DJZ llP7hamyrINpvpyOZcSVCv2WZyIeAlWbKll+C4HB9C886/Ajig4HYFb0IM72x8CK LsZ73loI+O5dPH2ioGHLxKhpaTpOxsiECCHIvOYrKWZa0MPkF/m899EjCi6xsekM xpDIrtJuZcR51cwnfgR7JVAzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq03nVr/7 hBnkbpMyR1M8Scf6NLMwHwYDVR0jBBgwFoAULejyFtzSvsbTj+vwHgbYqZAnDr8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRDgxLzg3RDM1MjBBODlF MTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNiVGotdndIZ2JZcVpBbkRy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTGVqeUZ0elN2c2JUai12d0hnYllxWkFuRHI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB RDgxLzg3RDM1MjBBODlFMTExRUY4OTIxNDA0REM0RjlBRTAyL0xlanlGdHpTdnNi VGotdndIZ2JZcVpBbkRyOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFTxhQt2rJpfsw1Fdnz3dsFWlduZWj4fdX+L3ijIvUHoekAsq4LHka/1 yOjycbO34SCKdXZMluLIfYEC6QuuXGZ544durrOY6cUj76b/yeBTZCzg3gPDraaC O5/CiFGyK21HGGJogr8ArbW1QkQlb0BYHueJZgXXx/ExfeY2zNBbNrHbzsYRvsmG S+4XCpZ2DKyaCchBERLcQBxEH+36fL32xsK/mHC4qI6iN2xLTwUPmT4moHs0ClBT sneoel2kZ1xRDvdur5X6EyJBl9pTy5VgLNhNkcKdbLDeUvnK+FNN8gU8KTbH3uzs LgKA8irVPJYp8wbRL4B9QVZOP8dLzos= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net