$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft File: UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json) Hash identifier: 4YqXnYvVysi1/j5+jIs3VrLFZUIINruKHWu/c5/KSS4= Subject key identifier: 9D:E9:B8:02:25:91:78:84:E7:56:52:50:64:61:92:F0:B4:54:C1:D1 Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft Manifest number: 3428 Signing time: Mon 28 Apr 2025 15:27:16 +0000 Manifest this update: Mon 28 Apr 2025 15:27:15 +0000 Manifest next update: Mon 05 May 2025 15:27:15 +0000 Files and hashes: 1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: IEMd7D2e3qlsQOexyiRQv3ztFpD05OP4q7c78HoNY3Y=) 2: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: ICLuCqdPid1RG8G/uczcAZrYY/Vhg9vDB0Y4ZuWrsgg=) 3: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: esENVVA6EiNHoh8zYMrrGIlsPVgfxlInP1Q1Dqp1TX0=) 4: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: vlPdQwiOxGdbOdhmlbrhpezVJ256bDBMeryFLzti+9k=) 5: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: t0X2DtahA6cVGvL8LAxWIioK5JV3S/HBQuQOiXYnF58=) 6: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: osXWx1pbxHv+AmHj+bmzgWhkOOzEZkepu7gweinGAO4=) 7: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: pxP+7JsX1QXgZ6389EUW7Rq0A265BP9eId8bGB02ABI=) 8: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: hzE638zELYjKoWqOncVd2PWwcT0doUZBbmbjdlD3Egk=) 9: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: 3Qq37sSxACv5Ldn7kCrtNWP8w5ga3g9Ur/m7mESYzt4=) 10: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: 5OfOPHDKno3z0OXXcGhOFxPs0axjwDkS/h/HmudH3qQ=) 11: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: OqgL79PVwss/L9YJSqF29Xvq2wNOU6UYyi3JyoLgqms=) 12: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: V1fSCsWS5cdJM7voSc5ZTQaks8azUpLSc/ONX61tIJU=) 13: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kXSKiPTBMMpV/v8BhM7mqRhZb0qkCrS5RGh8ixYaHOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09 Validity Not Before: Apr 28 15:27:15 2025 GMT Not After : May 5 15:27:15 2025 GMT Subject: CN=680f9e54-1b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:ba:4a:80:a4:09:18:b6:ea:ac:4d:b7:2d: 1d:c8:1a:1f:d5:5a:ae:c9:74:d2:7a:f7:9d:4a:fc: 65:c7:60:12:c2:f2:28:e4:ab:5d:c8:9c:bf:f1:39: 3a:b3:8c:be:0a:c9:5e:f6:72:01:35:c2:69:c0:1e: 64:1a:c6:be:9e:49:98:69:1e:2c:90:ad:af:ed:0c: 76:71:3c:1f:8d:81:9d:f5:a6:7c:e4:d9:84:74:f0: 21:16:90:fd:ef:6d:d7:62:2f:34:e9:5a:0b:7b:1a: c7:7b:0a:d9:b4:a0:39:b9:4f:57:c0:f6:77:c4:5a: 96:43:96:58:57:7a:e0:57:2e:ec:ea:49:4b:d8:0e: 3f:53:d6:c0:32:fe:84:b3:a0:b4:8b:7b:0d:69:ea: 9a:3f:c0:b3:c1:4f:76:a0:a7:0d:7d:73:7d:ed:17: 34:f4:0c:fd:1b:3a:32:c9:e1:f1:d7:10:3f:6b:3f: bb:85:f8:1a:ba:28:af:79:65:6e:7c:ce:80:08:42: 5b:c5:5f:04:e0:10:9a:75:2a:33:1b:43:62:c8:97: cf:16:16:47:2a:bc:fa:98:e6:5e:5e:0c:93:cd:9b: dc:cb:9c:d8:73:05:fc:12:61:ce:00:3e:28:d1:0a: 85:5e:cd:f7:55:8d:6e:0b:a3:49:aa:1c:fa:9f:46: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E9:B8:02:25:91:78:84:E7:56:52:50:64:61:92:F0:B4:54:C1:D1 X509v3 Authority Key Identifier: keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:87:6c:ee:68:db:79:99:32:65:e8:01:ab:96:a2:fd:5d:5f: 2b:b3:01:9b:bd:44:dc:53:a9:2a:7c:f7:82:66:5c:cb:57:50: d4:db:8c:46:b5:5b:d4:c2:43:54:96:5e:df:17:c4:c0:ea:c9: cf:81:5a:da:3b:65:c6:8b:b1:a0:da:fb:5f:77:bc:6f:c1:03: 4c:34:d0:da:3e:19:c7:9f:2a:c7:71:8d:79:d8:3d:4a:6a:70: 21:9d:e8:05:3d:d7:45:a2:fe:de:29:c8:75:01:de:1f:c7:64: 64:15:e3:b0:3a:e4:cd:52:75:d4:53:d9:84:d4:41:da:8d:f6: 0e:7a:98:c2:cb:95:ff:a9:62:3c:90:5f:0e:83:e6:dc:ca:f1: b1:fd:bc:00:13:8c:1a:d8:80:ac:0d:f7:66:e4:b9:a9:f2:cc: 39:62:dc:9b:c1:40:0a:40:ba:d4:a8:f3:f0:ac:d1:84:c3:d4: 8b:72:80:0c:b2:eb:66:f6:50:75:4b:cc:84:aa:24:a8:7f:17: ed:8a:ed:b1:23:27:19:06:24:ae:14:11:7b:ce:1a:f0:57:67: 2c:58:55:8f:93:f8:13:db:95:cf:fb:7b:38:63:95:c7:23:7d: 13:05:08:48:62:a5:e3:5c:08:10:cc:7f:0e:0d:0c:a5:63:94: d4:4a:6a:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3 QTQ3QTVGMDkwHhcNMjUwNDI4MTUyNzE1WhcNMjUwNTA1MTUyNzE1WjAYMRYwFAYD VQQDEw02ODBmOWU1NC0xYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsH66SoCkCRi26qxNty0dyBof1VquyXTSevedSvxlx2ASwvIo5KtdyJy/8Tk6 s4y+Csle9nIBNcJpwB5kGsa+nkmYaR4skK2v7Qx2cTwfjYGd9aZ85NmEdPAhFpD9 723XYi806VoLexrHewrZtKA5uU9XwPZ3xFqWQ5ZYV3rgVy7s6klL2A4/U9bAMv6E s6C0i3sNaeqaP8CzwU92oKcNfXN97Rc09Az9GzoyyeHx1xA/az+7hfgauiiveWVu fM6ACEJbxV8E4BCadSozG0NiyJfPFhZHKrz6mOZeXgyTzZvcy5zYcwX8EmHOAD4o 0QqFXs33VY1uC6NJqhz6n0ZMdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3puAIl kXiE51ZSUGRhkvC0VMHRMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1 MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkM3QS80QzUyOEY3ODQ1MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3 M2MxUndEbjRQM3Q2UjZYd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPh2zuaNt5mTJl6AGrlqL9XV8rswGbvUTcU6kqfPeCZlzLV1DU24xG tVvUwkNUll7fF8TA6snPgVraO2XGi7Gg2vtfd7xvwQNMNNDaPhnHnyrHcY152D1K anAhnegFPddFov7eKch1Ad4fx2RkFeOwOuTNUnXUU9mE1EHajfYOepjCy5X/qWI8 kF8Og+bcyvGx/bwAE4wa2ICsDfdm5Lmp8sw5YtybwUAKQLrUqPPwrNGEw9SLcoAM sutm9lB1S8yEqiSofxftiu2xIycZBiSuFBF7zhrwV2csWFWPk/gT25XP+3s4Y5XH I30TBQhIYqXjXAgQzH8ODQylY5TUSmoB -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:51 2025 by rpki-client on console.sobornost.net