$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft File: L0SuugpVRAZYiXBbwu8c2uEVgyU.mft (raw, json) Hash identifier: sDLN48Jld+YqlGUZGJ/Z5EizoXK9oYAEgwoBfuonYUw= Subject key identifier: C5:EA:3C:ED:BC:3F:1A:53:2C:42:1D:90:7D:96:5A:77:18:9E:57:50 Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Certificate serial: 34AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft Manifest number: 3497 Signing time: Mon 28 Apr 2025 14:52:54 +0000 Manifest this update: Mon 28 Apr 2025 14:52:54 +0000 Manifest next update: Mon 05 May 2025 14:52:54 +0000 Files and hashes: 1: L0SuugpVRAZYiXBbwu8c2uEVgyU.crl (hash: oWs1XTqxIyHBTSu22Yn4r0vQwBs2X3HSXD8k2BMqCmc=) 2: 90A91764A0C711EF99B35119C4F9AE02.roa (hash: IFfgeNWOmW48wT5wG379TZhXBQiEXiYFADpsIgQ6k3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13485 (0x34ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325 Validity Not Before: Apr 28 14:52:54 2025 GMT Not After : May 5 14:52:54 2025 GMT Subject: CN=680f9646-7b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0d:03:62:99:70:9c:74:93:f3:f1:e8:97:32: 8b:96:bc:f2:50:ac:22:6d:f5:64:4d:a4:6a:94:fa: dc:f6:eb:7d:9d:dd:3f:43:0b:c7:76:89:17:c5:42: 32:8b:53:e0:d9:fd:95:84:97:f7:41:67:f2:30:ca: ed:c2:68:04:6e:03:16:94:0c:d1:df:06:1b:35:77: e1:4e:28:f9:6f:55:88:fb:1e:61:87:71:cc:1a:00: 53:f8:be:7f:c4:2b:03:e1:62:52:9f:51:cd:d5:bb: ee:53:82:a7:40:50:6c:02:53:00:70:ee:4b:66:27: 49:57:19:97:e0:21:d6:fa:e3:79:9b:9b:0e:99:7e: 02:11:88:f7:8c:e1:f7:23:0b:8b:8b:99:47:ce:2c: 3f:0b:8e:04:16:0e:2e:9b:f6:08:77:44:f1:6e:59: 69:1e:e5:96:6d:ad:4f:5f:c7:aa:18:8f:ae:14:c6: 42:c9:d1:7c:2f:a0:cb:0b:92:60:76:76:d7:a7:18: 54:39:0f:ea:aa:68:01:1a:2e:e9:0e:a6:c9:64:29: 3d:48:75:b4:2c:22:f9:6a:e5:a3:e3:60:bc:bf:06: 30:82:b4:98:28:fe:c7:ba:e3:ea:ff:f0:af:bf:ee: 0b:a1:6f:d7:0a:1a:21:60:ab:69:8f:fe:65:7c:93: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EA:3C:ED:BC:3F:1A:53:2C:42:1D:90:7D:96:5A:77:18:9E:57:50 X509v3 Authority Key Identifier: keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a2:9d:19:65:cb:9b:10:c4:40:e8:35:70:1f:de:b1:c9:50: 79:0d:4f:b4:cb:fc:54:11:7b:5c:e3:aa:6b:ce:91:a1:f4:c7: 36:53:7a:61:1e:36:4c:a9:47:00:fd:1a:19:ee:09:cb:5a:69: 0a:ba:cc:16:e4:fe:7f:51:80:d5:55:11:f2:d2:13:5b:b7:66: fd:f0:d8:c1:6b:39:a9:8a:80:e9:02:bd:87:d9:ee:a9:4e:e6: a5:ad:bd:cd:34:97:14:9e:55:8a:a9:14:75:ba:51:0d:26:77: 10:e3:d3:63:e3:01:6c:dc:b1:ad:84:19:ca:62:94:7e:b2:15: 09:7f:82:47:3a:e6:3c:48:4e:7a:6d:89:70:1d:64:c8:65:d1: 9a:7c:4b:4e:17:47:15:5f:40:d0:ac:06:48:1c:eb:24:bf:4e: 52:55:a3:dd:be:36:e6:3a:a1:e3:ba:1a:c0:8f:d0:57:73:e5: be:9c:d2:50:f3:6f:4a:15:6c:b2:ca:b7:b9:ba:d6:f1:3d:80: 8e:60:a3:02:e0:16:00:35:17:de:8b:6b:44:c5:fd:70:31:7a: e3:ae:f0:09:2a:54:02:c6:7e:3b:9c:62:b3:0c:b8:f4:19:ce: f9:b2:3e:3e:fe:b1:23:95:d8:27:76:17:fd:e9:37:d5:13:51: 84:83:c4:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MDAxMTAvBgNVBAUTKDJGNDRBRUJBMEE1NTQ0MDY1ODg5NzA1QkMyRUYxQ0RB RTExNTgzMjUwHhcNMjUwNDI4MTQ1MjU0WhcNMjUwNTA1MTQ1MjU0WjAYMRYwFAYD VQQDEw02ODBmOTY0Ni03YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1A0DYplwnHST8/HolzKLlrzyUKwibfVkTaRqlPrc9ut9nd0/QwvHdokXxUIy i1Pg2f2VhJf3QWfyMMrtwmgEbgMWlAzR3wYbNXfhTij5b1WI+x5hh3HMGgBT+L5/ xCsD4WJSn1HN1bvuU4KnQFBsAlMAcO5LZidJVxmX4CHW+uN5m5sOmX4CEYj3jOH3 IwuLi5lHziw/C44EFg4um/YId0TxbllpHuWWba1PX8eqGI+uFMZCydF8L6DLC5Jg dnbXpxhUOQ/qqmgBGi7pDqbJZCk9SHW0LCL5auWj42C8vwYwgrSYKP7HuuPq//Cv v+4LoW/XChohYKtpj/5lfJPMEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXqPO28 PxpTLEIdkH2WWncYnldQMB8GA1UdIwQYMBaAFC9ErroKVUQGWIlwW8LvHNrhFYMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYwMC9BMzZBNjI2RTFE OTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJBWllpWEJid3U4YzJ1RVZn eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wwU3V1Z3BWUkFaWWlYQmJ3dThjMnVFVmd5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYwMC9BMzZBNjI2RTFEOTMxMUUyODYxNzVERjcwOEIwMkNEMi9MMFN1dWdwVlJB WllpWEJid3U4YzJ1RVZneVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6op0ZZcubEMRA6DVwH96xyVB5DU+0y/xUEXtc46przpGh9Mc2U3ph HjZMqUcA/RoZ7gnLWmkKuswW5P5/UYDVVRHy0hNbt2b98NjBazmpioDpAr2H2e6p Tualrb3NNJcUnlWKqRR1ulENJncQ49Nj4wFs3LGthBnKYpR+shUJf4JHOuY8SE56 bYlwHWTIZdGafEtOF0cVX0DQrAZIHOskv05SVaPdvjbmOqHjuhrAj9BXc+W+nNJQ 829KFWyyyre5utbxPYCOYKMC4BYANRfei2tExf1wMXrjrvAJKlQCxn47nGKzDLj0 Gc75sj4+/rEjldgndhf96TfVE1GEg8Qo -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:46 2025 by rpki-client on console.sobornost.net