$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft File: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft (raw, json) Hash identifier: opHAvuOu5FBn+9xUz9SUuFX+0ddYxSBqFL5iVPJVaKI= Subject key identifier: 4A:77:9C:0C:81:3A:C1:5A:1F:6F:4C:63:5B:77:AF:02:73:F3:A5:A8 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft Manifest number: 01C1 Signing time: Sun 27 Apr 2025 02:08:15 +0000 Manifest this update: Sun 27 Apr 2025 02:08:14 +0000 Manifest next update: Sun 04 May 2025 02:08:14 +0000 Files and hashes: 1: Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl (hash: 6769HrXSSIUYIbcJoXWGN2ovkcVaH2pMONQsA5U31Qo=) 2: C3E640EE917811ED904ACF83C4F9AE02.roa (hash: U1JZUMbZcbonZCdC7TOrqHH67lPPcra0baMZ+HxHTq0=) 3: E260EBC4914011EDABD5F778C4F9AE02.roa (hash: ieGx5NwyYQJ4P+cWYrdmLdfua1T4xQkG1QlYm44YGuI=) 4: E1D3A69C914011EDABD5F778C4F9AE02.roa (hash: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70=) 5: 7606086E914611ED8DE00A16C4F9AE02.roa (hash: hpbgzGpeyu8RgvOZ/gDqbosdneW/3yUsLvzIbPJJbgI=) 6: E07C4E34914011EDABD5F778C4F9AE02.roa (hash: yq9F1kGLoVyjrkyUECiqJ2bBsjfNg/O48zntGXKXjfA=) 7: E137AAE4914011EDABD5F778C4F9AE02.roa (hash: 7GFXCtaT3I6JbgFcVp9k1/EsFIeLns+26mNrxLbyEic=) 8: C3481400917811ED904ACF83C4F9AE02.roa (hash: AsDGm3VcGz1RYmwwFN/U13xvQEyWavpIqYrnGKd5AJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Validity Not Before: Apr 27 02:08:14 2025 GMT Not After : May 4 02:08:14 2025 GMT Subject: CN=680d918e-2bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:c7:93:00:37:bf:5b:b7:a2:bc:13:89:50: 4f:7f:19:af:76:d1:34:57:fe:d4:08:84:a7:6c:ed: 49:37:09:0b:94:19:0f:22:d9:20:16:f9:22:42:10: dd:74:66:3b:8d:de:02:dc:68:11:af:c4:df:62:7a: a6:16:d8:d7:31:ce:2d:8e:4a:53:a1:6f:21:07:54: 3d:df:43:29:f0:fb:e3:5d:87:55:b0:75:d6:dd:0d: 2d:ad:19:77:43:54:88:fc:82:c3:f8:a5:b2:4d:64: 39:dd:9e:a1:97:db:3f:8d:47:74:d3:b5:2e:47:c0: df:19:69:37:df:38:a2:5c:bd:fd:cf:07:24:f8:67: 22:e4:cc:dc:1a:09:92:34:76:7d:1b:eb:44:62:0f: e1:4d:d7:ab:b7:53:89:73:c0:3e:ce:81:6d:ee:a7: 0e:23:5c:c8:16:38:31:2f:b7:25:d1:0a:47:da:3d: 3b:18:45:fc:3e:b8:7f:a0:0b:7d:4b:a3:6f:3d:80: 72:d3:5e:40:10:ea:9a:48:ab:02:d2:40:40:54:14: c5:05:3a:69:43:08:f1:d7:23:d9:be:f0:32:db:ea: 93:51:92:54:d9:9d:3c:31:b9:b0:8c:98:66:df:8d: 63:d6:29:4a:16:14:a2:6d:ab:13:4c:e9:d6:c7:c2: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:77:9C:0C:81:3A:C1:5A:1F:6F:4C:63:5B:77:AF:02:73:F3:A5:A8 X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a2:70:11:02:f6:4b:15:98:b2:95:d2:91:8f:29:fd:08:cb: 0d:19:d6:02:94:27:d2:c3:da:33:14:2e:4a:fd:72:d5:c3:a3: 6a:9c:25:ea:c9:c2:6e:3b:08:a9:4f:9d:42:98:bb:ad:4c:9f: 4c:2f:c5:86:08:4d:e7:e5:a3:50:82:df:29:ad:25:cb:47:85: e9:65:7d:a4:2d:57:54:00:4c:86:24:b2:78:2c:e0:9f:f5:35: 37:e1:ae:9a:7c:e9:d6:74:f8:8c:48:b1:a2:7e:da:9f:32:0b: 21:a4:fa:60:0f:8e:0d:4b:19:0a:35:93:49:02:d1:f0:29:42: 9e:98:c8:06:37:03:db:34:05:93:c0:81:25:49:16:00:8d:c9: 04:ad:a8:e5:81:2e:4f:55:c6:7c:76:19:d8:50:df:cd:5c:14: 1a:b7:7d:37:24:91:f0:f1:09:69:f7:99:b1:0d:6f:4f:85:5b: 98:a7:aa:16:78:f0:25:49:65:b1:46:27:79:ea:c5:a2:c0:8c: a7:7b:da:ef:d7:6b:ef:69:88:4f:e6:c0:1f:bf:9a:34:a4:8c: 47:24:cd:4c:92:8b:fe:90:38:96:8d:46:7e:25:ff:aa:d4:12: 76:79:c6:f9:93:9f:04:27:12:a9:78:a3:78:06:03:f1:12:50: 57:71:7e:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjUwNDI3MDIwODE0WhcNMjUwNTA0MDIwODE0WjAYMRYwFAYD VQQDEw02ODBkOTE4ZS0yYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0rHkwA3v1u3orwTiVBPfxmvdtE0V/7UCISnbO1JNwkLlBkPItkgFvkiQhDd dGY7jd4C3GgRr8TfYnqmFtjXMc4tjkpToW8hB1Q930Mp8PvjXYdVsHXW3Q0trRl3 Q1SI/ILD+KWyTWQ53Z6hl9s/jUd007UuR8DfGWk33ziiXL39zwck+Gci5MzcGgmS NHZ9G+tEYg/hTdert1OJc8A+zoFt7qcOI1zIFjgxL7cl0QpH2j07GEX8Prh/oAt9 S6NvPYBy015AEOqaSKsC0kBAVBTFBTppQwjx1yPZvvAy2+qTUZJU2Z08MbmwjJhm 341j1ilKFhSibasTTOnWx8KviwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp3nAyB OsFaH29MY1t3rwJz86WoMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTlCNi83OTE4Q0IwQzdGRjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhx Q1l5Vmk1Wk1NdHl4aTRBMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyonARAvZLFZiyldKRjyn9CMsNGdYClCfSw9ozFC5K/XLVw6NqnCXq ycJuOwipT51CmLutTJ9ML8WGCE3n5aNQgt8prSXLR4XpZX2kLVdUAEyGJLJ4LOCf 9TU34a6afOnWdPiMSLGiftqfMgshpPpgD44NSxkKNZNJAtHwKUKemMgGNwPbNAWT wIElSRYAjckErajlgS5PVcZ8dhnYUN/NXBQat303JJHw8Qlp95mxDW9PhVuYp6oW ePAlSWWxRid56sWiwIyne9rv12vvaYhP5sAfv5o0pIxHJM1Mkov+kDiWjUZ+Jf+q 1BJ2ecb5k58EJxKpeKN4BgPxElBXcX56 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net