$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json) Hash identifier: IP76gnZQYphIUqnop9StWBbHbDwwPCLfj4gJgHitkbM= Subject key identifier: EC:2F:30:98:7F:C5:54:62:C5:06:75:F2:61:35:1B:B0:3E:FE:B5:66 Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft Manifest number: C9 Signing time: Sun 27 Apr 2025 05:00:00 +0000 Manifest this update: Sun 27 Apr 2025 05:00:00 +0000 Manifest next update: Sun 04 May 2025 05:00:00 +0000 Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: d0i2Uzh3fr1mYFydS7pj2xFrJ9nk7KD5fg5rcwzHX2w=) 2: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: UPmCGARDDskezK4JcktOFu0RSSCwY7yg4+DuQZjC7iA=) 3: 90C05DD633A111EF862DBF10C4F9AE02.roa (hash: xnGbCBgPXY4F/fgFAEYRN9dsh6A0F9wHpHXallGErko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Apr 27 05:00:00 2025 GMT Not After : May 4 05:00:00 2025 GMT Subject: CN=680db9d0-d974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:b1:2a:bc:10:98:ae:ec:af:20:1e:bd:28: 42:f4:7e:7a:9e:c1:a7:01:23:ea:30:9a:b1:22:23: bf:42:7a:77:09:af:80:37:7b:78:de:3d:7e:d2:d5: 91:c7:50:92:ce:75:d0:d3:ae:6c:bf:8a:28:98:f8: c4:8a:56:40:17:a7:43:0a:97:d5:68:a4:c4:1d:d7: 2c:24:35:64:46:b4:04:ca:09:dd:bc:ba:cc:66:c5: 2b:00:bd:5c:d9:40:48:ad:2c:81:a5:92:55:77:97: e2:de:63:ff:24:a6:10:34:4f:3f:b1:c2:49:a9:8c: 00:0b:ac:53:d4:d2:8d:a3:a0:e5:1e:7c:c8:46:74: cf:43:45:fc:36:13:bb:49:f1:8d:5c:36:52:68:42: f9:9f:d2:e8:4c:9f:41:1d:1b:75:2e:c8:15:92:b6: 2f:b1:bc:c3:98:f4:86:68:26:18:8c:99:89:d0:4d: 02:db:07:51:44:6a:84:a6:b8:97:af:cc:fa:4f:a5: 38:cb:d9:03:55:58:c4:80:eb:fa:1a:e4:63:fe:51: 16:15:11:29:a6:9d:9f:dc:8c:72:9f:ea:9f:04:bb: 95:71:3b:9a:08:fa:0f:84:c6:49:27:58:8a:18:cb: 1e:44:c5:14:2e:1f:49:7b:40:3f:e5:95:23:fc:54: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:30:98:7F:C5:54:62:C5:06:75:F2:61:35:1B:B0:3E:FE:B5:66 X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:92:b2:31:6a:e9:7b:8d:35:64:2f:82:fc:19:d0:ec:28:e6: b0:c3:1f:46:8b:66:e9:f1:ac:86:c0:fe:e9:59:ae:1e:60:a9: 9b:07:71:65:95:85:84:c6:85:8f:c2:de:72:49:32:54:c2:16: 0d:dd:b6:fa:5d:fe:e9:57:51:22:0b:e4:d9:a1:a9:4f:24:b2: 41:73:e6:47:f2:7c:e2:14:20:25:54:10:12:7f:14:6c:7c:f0: 79:04:d3:21:da:97:49:68:9c:e8:f2:d3:36:b0:9e:8c:22:37: 5f:80:00:90:37:4c:ba:94:8b:59:eb:b0:88:ae:2c:05:79:67: e6:ba:ff:b4:3a:b1:ce:d5:35:1f:88:04:0c:60:67:51:25:f1: 1a:56:64:b4:14:d5:3f:e8:38:e0:40:a2:dc:bc:84:a0:5f:8a: ac:d4:8d:70:c2:66:66:ad:c2:e8:0f:0a:be:c6:75:5c:54:21: 32:a3:50:63:8b:2c:4d:fa:ba:be:0c:14:1c:6b:5c:25:2c:91: 30:a0:43:f1:b0:cd:a3:4d:97:01:92:c1:f0:74:5f:20:f6:6e: 0a:68:4d:f0:2e:ff:d4:63:34:c8:8e:8f:d9:2f:87:90:7f:a7: f2:31:50:2d:cf:61:f4:36:44:68:e9:b2:14:c0:6c:17:54:2e: 99:6b:a5:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUwNDI3MDUwMDAwWhcNMjUwNTA0MDUwMDAwWjAYMRYwFAYD VQQDEw02ODBkYjlkMC1kOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmGxKrwQmK7sryAevShC9H56nsGnASPqMJqxIiO/Qnp3Ca+AN3t43j1+0tWR x1CSznXQ065sv4oomPjEilZAF6dDCpfVaKTEHdcsJDVkRrQEygndvLrMZsUrAL1c 2UBIrSyBpZJVd5fi3mP/JKYQNE8/scJJqYwAC6xT1NKNo6DlHnzIRnTPQ0X8NhO7 SfGNXDZSaEL5n9LoTJ9BHRt1LsgVkrYvsbzDmPSGaCYYjJmJ0E0C2wdRRGqEpriX r8z6T6U4y9kDVVjEgOv6GuRj/lEWFREppp2f3Ixyn+qfBLuVcTuaCPoPhMZJJ1iK GMseRMUULh9Je0A/5ZUj/FRILwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwvMJh/ xVRixQZ18mE1G7A+/rVmMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdn Y2ZWcFZ1WGQxWVRIWTQtbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9krIxaul7jTVkL4L8GdDsKOawwx9Gi2bp8ayGwP7pWa4eYKmbB3Fl lYWExoWPwt5ySTJUwhYN3bb6Xf7pV1EiC+TZoalPJLJBc+ZH8nziFCAlVBASfxRs fPB5BNMh2pdJaJzo8tM2sJ6MIjdfgACQN0y6lItZ67CIriwFeWfmuv+0OrHO1TUf iAQMYGdRJfEaVmS0FNU/6DjgQKLcvISgX4qs1I1wwmZmrcLoDwq+xnVcVCEyo1Bj iyxN+rq+DBQca1wlLJEwoEPxsM2jTZcBksHwdF8g9m4KaE3wLv/UYzTIjo/ZL4eQ f6fyMVAtz2H0NkRo6bIUwGwXVC6Za6Vk -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net