$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft File: l1LdGhX17GHZdpHLXszr7L06YTc.mft (raw, json) Hash identifier: +z80LcuaE+yDTFVZecYhEW7nIllMHqX3XZJPZ6rH5Nk= Subject key identifier: B3:FD:AD:EE:2C:E1:A4:02:AB:84:6F:EF:40:E5:45:0E:15:B3:7F:79 Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 Certificate issuer: /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Certificate serial: 077A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft Manifest number: 0770 Signing time: Sat 26 Apr 2025 21:14:10 +0000 Manifest this update: Sat 26 Apr 2025 21:14:10 +0000 Manifest next update: Sat 03 May 2025 21:14:10 +0000 Files and hashes: 1: l1LdGhX17GHZdpHLXszr7L06YTc.crl (hash: Sq5TnlW/4P2v10mVn1WxtVfQADXUWPzw+5Rnch7ecLc=) 2: 4E1F212A15C711EB8720DC71C4F9AE02.roa (hash: mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1914 (0x77a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126259, serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137 Validity Not Before: Apr 26 21:14:10 2025 GMT Not After : May 3 21:14:10 2025 GMT Subject: CN=680d4ca2-43eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:a5:88:2d:10:7f:6a:9e:5e:0d:82:08:d3: 67:8c:03:9d:7d:89:c6:6b:f5:68:1d:88:68:e4:57: 5f:13:0f:5c:82:85:88:6c:39:dc:e7:81:c8:ed:05: 85:48:52:f9:3d:d4:a5:56:a0:fe:3a:a3:f5:45:60: 98:a1:31:bf:ff:67:d4:a5:d0:10:43:b2:f6:73:6e: 67:42:c8:ae:12:2f:04:7c:56:26:3c:30:43:ad:14: 31:98:55:cb:33:ea:f8:ed:c8:07:a9:3e:78:31:27: 3d:6b:f6:2f:44:b6:ec:3a:89:1e:95:ef:1a:bf:a3: 94:52:01:91:53:36:7a:6a:85:dc:4b:f6:dc:61:46: 18:a4:44:a7:60:a6:ed:d2:00:f8:ed:0d:c2:ac:d4: 0e:27:de:c3:28:03:ff:3d:f9:b4:2d:64:e7:8e:7c: d0:2f:e6:93:8f:33:7e:47:97:49:ee:b9:d4:ed:61: b0:13:75:83:ac:78:e6:d8:b3:07:c0:93:2d:c1:ae: 4e:6d:bc:05:79:67:26:78:47:94:42:43:b0:49:d7: 68:01:92:7d:e2:72:01:b9:0e:1f:60:e3:ab:74:0c: 4f:76:bc:9b:e4:99:4f:e8:5a:c1:a7:66:d3:3f:df: 7c:6b:f5:62:f4:14:53:33:1c:c0:30:86:85:4c:8b: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FD:AD:EE:2C:E1:A4:02:AB:84:6F:EF:40:E5:45:0E:15:B3:7F:79 X509v3 Authority Key Identifier: keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bd:3e:9e:8a:cd:07:64:77:0f:26:94:a0:47:b2:cd:f1:4c: 4f:d8:6a:15:74:65:91:8c:5d:89:04:fb:6c:8e:07:57:9d:79: b6:2e:de:6c:51:ba:e3:65:0f:af:82:d3:92:6f:82:01:0a:73: c3:c8:54:51:3b:9f:38:95:53:a7:5c:9d:67:4a:19:50:38:c9: db:96:75:6c:84:0a:8d:5f:9e:3b:45:ac:f7:32:ab:ae:68:0d: f1:59:48:41:75:30:13:17:0e:b0:d3:3e:97:15:49:b6:48:9d: 05:5c:a7:6d:d9:b1:bd:ff:83:dd:6d:60:cc:1c:32:f3:a5:13: fa:74:6b:e0:20:51:be:fd:54:59:86:e1:d1:0b:3e:69:9e:e6: a7:ed:da:ef:13:ae:3e:da:e9:5d:18:dd:b5:7a:84:4c:fb:60: 33:92:be:42:72:0e:81:cc:95:e6:4b:c8:6c:1a:7e:43:a5:6f: 90:73:90:73:31:85:02:a0:8e:cc:1d:23:da:aa:63:a5:5c:42: 61:82:d9:89:3e:90:d7:da:c7:96:09:26:6e:be:4b:ec:09:50: c9:50:f4:58:ec:87:88:c7:50:1a:81:6d:f1:39:c8:d9:01:24: ea:1d:13:85:f9:3b:b5:50:71:1f:d4:a1:f9:12:f4:87:20:84: 5d:5d:f1:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyNTkxMTAvBgNVBAUTKDk3NTJERDFBMTVGNUVDNjFEOTc2OTFDQjVFQ0NFQkVD QkQzQTYxMzcwHhcNMjUwNDI2MjExNDEwWhcNMjUwNTAzMjExNDEwWjAYMRYwFAYD VQQDEw02ODBkNGNhMi00M2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsyliC0Qf2qeXg2CCNNnjAOdfYnGa/VoHYho5FdfEw9cgoWIbDnc54HI7QWF SFL5PdSlVqD+OqP1RWCYoTG//2fUpdAQQ7L2c25nQsiuEi8EfFYmPDBDrRQxmFXL M+r47cgHqT54MSc9a/YvRLbsOokele8av6OUUgGRUzZ6aoXcS/bcYUYYpESnYKbt 0gD47Q3CrNQOJ97DKAP/Pfm0LWTnjnzQL+aTjzN+R5dJ7rnU7WGwE3WDrHjm2LMH wJMtwa5ObbwFeWcmeEeUQkOwSddoAZJ94nIBuQ4fYOOrdAxPdryb5JlP6FrBp2bT P998a/Vi9BRTMxzAMIaFTIv0VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP9re4s 4aQCq4Rv70DlRQ4Vs395MB8GA1UdIwQYMBaAFJdS3RoV9exh2XaRy17M6+y9OmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI1OS82OTEyOEM0QTE1 QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdHSFpkcEhMWHN6cjdMMDZZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxTGRHaFgxN0dIWmRwSExYc3pyN0wwNllUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjI1OS82OTEyOEM0QTE1QzQxMUVCQTMyNkRENjlDNEY5QUUwMi9sMUxkR2hYMTdH SFpkcEhMWHN6cjdMMDZZVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsvT6eis0HZHcPJpSgR7LN8UxP2GoVdGWRjF2JBPtsjgdXnXm2Lt5s UbrjZQ+vgtOSb4IBCnPDyFRRO584lVOnXJ1nShlQOMnblnVshAqNX547Raz3Mquu aA3xWUhBdTATFw6w0z6XFUm2SJ0FXKdt2bG9/4PdbWDMHDLzpRP6dGvgIFG+/VRZ huHRCz5pnuan7drvE64+2uldGN21eoRM+2Azkr5Ccg6BzJXmS8hsGn5DpW+Qc5Bz MYUCoI7MHSPaqmOlXEJhgtmJPpDX2seWCSZuvkvsCVDJUPRY7IeIx1AagW3xOcjZ ASTqHROF+Tu1UHEf1KH5EvSHIIRdXfHg -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:55 2025 by rpki-client on console.sobornost.net