$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft File: lML0ajLRB3XhZJuiUPaX_0esBj0.mft (raw, json) Hash identifier: mWmrGCEAv1oF4uWzgLsVXwW9pfWpqoCSrNpwuAPW2w8= Subject key identifier: 88:1A:0F:D4:9C:F3:31:0F:64:45:D8:65:58:78:71:BB:B2:D3:85:2E Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D Certificate issuer: /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft Manifest number: 01BF Signing time: Sun 27 Apr 2025 02:10:08 +0000 Manifest this update: Sun 27 Apr 2025 02:10:07 +0000 Manifest next update: Sun 04 May 2025 02:10:07 +0000 Files and hashes: 1: lML0ajLRB3XhZJuiUPaX_0esBj0.crl (hash: zfXEJ2ZtgBjSp9m4D6/WShmxmCLYQ/UaQZlgre1Nzr8=) 2: 778B9FACE86411EEA020E37AC4F9AE02.roa (hash: sFaQ2/BL/qL12qBhQN+3Nfl2luiS5IBqsoZ9GwMFuM8=) 3: 2E03458EA14211EDA566785DC4F9AE02.roa (hash: AE4DzloRLES1eyiSVKRPczEde5NI5otitKzMMhyhGoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121071, serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D Validity Not Before: Apr 27 02:10:07 2025 GMT Not After : May 4 02:10:07 2025 GMT Subject: CN=680d9200-7672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:93:b3:80:41:58:5b:66:f2:ae:7d:2d:ed: 75:ec:49:cb:ab:97:17:cc:d4:3b:7b:51:10:b0:ae: 40:78:62:42:96:a6:5a:dc:ec:97:17:70:3d:75:3d: ec:ef:1d:11:48:9a:06:74:79:d5:64:ba:a4:b5:6a: 41:fa:e3:33:f5:24:4b:76:df:90:dd:69:f8:48:65: 0c:fd:53:15:02:19:dc:ee:03:53:ff:57:8c:ac:e1: 5c:ad:92:92:a3:ee:52:5d:3d:db:76:51:3d:96:f3: cc:38:ad:1c:77:e2:f1:dc:fd:52:2c:b2:37:cd:8c: 41:48:b2:63:95:8f:67:24:14:94:f9:a8:b8:9a:b2: 0b:dc:02:ae:72:5d:ee:d7:be:6f:de:3e:46:b7:9b: 75:9b:ae:37:ff:eb:d4:17:4f:9d:9f:73:17:6d:6d: d1:bd:fd:60:3b:17:1a:88:cf:f3:3f:4b:7a:ee:b5: ad:31:28:18:31:18:8c:20:66:be:80:d8:44:4d:76: d6:91:41:dd:4f:93:84:7c:54:cf:df:45:88:f0:25: 01:ac:f0:0f:2c:d5:33:49:fa:85:f2:5f:25:4d:01: 88:b9:9f:f9:31:15:78:5b:63:ba:32:3c:4b:18:2d: c5:cd:f9:26:2f:df:0d:69:71:87:f1:93:ef:27:cf: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1A:0F:D4:9C:F3:31:0F:64:45:D8:65:58:78:71:BB:B2:D3:85:2E X509v3 Authority Key Identifier: keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:95:b5:f3:2e:37:1a:2e:40:1c:2c:b7:23:85:e2:34:4d: 91:83:8b:b7:55:56:5d:37:6b:da:13:41:31:73:3b:1b:67:77: e5:bd:ec:5f:eb:f3:8d:79:3a:b0:fe:c4:75:30:b1:af:3c:0c: 8f:92:3a:8a:dc:ad:fb:24:44:eb:62:b5:0e:66:02:99:a3:d2: 25:66:a4:09:8a:22:01:e6:72:ef:73:66:48:bf:b1:e8:49:e7: d8:bd:92:12:b2:83:ba:80:aa:b3:da:56:bd:46:4a:ef:11:de: 35:d7:49:9f:e0:ca:68:0a:b0:e0:31:d8:71:ed:b4:31:c0:71: 93:87:52:b8:8c:06:00:8f:c3:9c:8a:fd:ea:d4:e8:5b:bb:53: 00:c0:35:8e:08:6d:c9:bf:39:2e:53:65:e9:fc:e1:fd:e2:b5: 5d:3d:74:a5:4f:2b:2d:60:3c:40:0f:68:e9:de:f1:31:2f:de: e2:fd:25:ee:d4:08:57:87:35:63:a9:89:f2:77:00:53:f8:7b: 38:6d:82:21:b8:fd:46:b4:cc:08:bf:bc:9e:fa:a2:06:18:78: 09:a4:a0:be:02:11:1e:cb:ec:86:41:d4:4b:f4:50:72:d4:c1: e9:da:24:6a:69:3d:0f:aa:e0:0e:1e:f5:66:9c:42:db:be:d7: 14:ca:bd:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEwNzExMTAvBgNVBAUTKDk0QzJGNDZBMzJEMTA3NzVFMTY0OUJBMjUwRjY5N0ZG NDdBQzA2M0QwHhcNMjUwNDI3MDIxMDA3WhcNMjUwNTA0MDIxMDA3WjAYMRYwFAYD VQQDEw02ODBkOTIwMC03NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFqTs4BBWFtm8q59Le117EnLq5cXzNQ7e1EQsK5AeGJClqZa3OyXF3A9dT3s 7x0RSJoGdHnVZLqktWpB+uMz9SRLdt+Q3Wn4SGUM/VMVAhnc7gNT/1eMrOFcrZKS o+5SXT3bdlE9lvPMOK0cd+Lx3P1SLLI3zYxBSLJjlY9nJBSU+ai4mrIL3AKucl3u 175v3j5Gt5t1m643/+vUF0+dn3MXbW3Rvf1gOxcaiM/zP0t67rWtMSgYMRiMIGa+ gNhETXbWkUHdT5OEfFTP30WI8CUBrPAPLNUzSfqF8l8lTQGIuZ/5MRV4W2O6MjxL GC3FzfkmL98NaXGH8ZPvJ881QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgaD9Sc 8zEPZEXYZVh4cbuy04UuMB8GA1UdIwQYMBaAFJTC9Goy0Qd14WSbolD2l/9HrAY9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTA3MS8yRjBGN0E0ODg2 QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIzWGhaSnVpVVBhWF8wZXNC ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNTDBhakxSQjNYaFpKdWlVUGFYXzBlc0JqMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTA3MS8yRjBGN0E0ODg2QjYxMUVEQUEzQjJCMzNDNEY5QUUwMi9sTUwwYWpMUkIz WGhaSnVpVVBhWF8wZXNCajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGDZW18y43Gi5AHCy3I4XiNE2Rg4u3VVZdN2vaE0ExczsbZ3flvexf 6/ONeTqw/sR1MLGvPAyPkjqK3K37JETrYrUOZgKZo9IlZqQJiiIB5nLvc2ZIv7Ho SefYvZISsoO6gKqz2la9RkrvEd4110mf4MpoCrDgMdhx7bQxwHGTh1K4jAYAj8Oc iv3q1Ohbu1MAwDWOCG3JvzkuU2Xp/OH94rVdPXSlTystYDxAD2jp3vExL97i/SXu 1AhXhzVjqYnydwBT+Hs4bYIhuP1GtMwIv7ye+qIGGHgJpKC+AhEey+yGQdRL9FBy 1MHp2iRqaT0PquAOHvVmnELbvtcUyr3p -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net