$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json) Hash identifier: 1WmrupNM/NnMqUCrFzLwNXswjmKGNJ85YZTRK20eg8Q= Subject key identifier: 8B:E4:02:53:59:D7:60:85:E5:17:EE:25:9E:CE:F2:D1:6C:D5:0C:4B Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 0547 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft Manifest number: 0530 Signing time: Sat 26 Apr 2025 23:13:39 +0000 Manifest this update: Sat 26 Apr 2025 23:13:39 +0000 Manifest next update: Sat 03 May 2025 23:13:39 +0000 Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: io9BnoWD2BWveKvrwJoRoHxGhlqM4t1IuKWU+eVtd8I=) 2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: IVU27JRYWuBmIt6QcWFMqPFM6vDpf9nhIJBTc75GYY0=) 3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: iDEEL9U9FxQCZ93LBYj286NgN76ygoYjLl0M4z8SPpI=) 4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: U7esX+0iuEFV+x7WiXgxLOpS83nYnKPDWOfbwdSRies=) 5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: OD4QLqvF0E7NjniUYIqO9yXt+jiElu9IZS+rh6A1NUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1351 (0x547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Apr 26 23:13:39 2025 GMT Not After : May 3 23:13:39 2025 GMT Subject: CN=680d68a3-7fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ac:e7:37:ed:37:8f:fd:1c:a7:7e:c2:e1:fa: 9c:2b:f6:ce:df:45:b9:1a:12:18:8e:8b:a0:2a:da: 8d:79:e0:b3:b3:e4:b5:ff:0f:66:b0:0b:4a:60:14: da:0f:60:75:67:2b:37:73:22:d7:67:cb:09:d9:90: 68:bf:af:30:13:72:1b:c5:de:c6:4f:92:24:df:96: 88:9c:fb:b9:0a:35:f7:dc:d9:5d:6f:66:b9:81:9b: 32:18:84:ef:15:06:71:4c:ad:0f:99:01:b7:cc:95: cc:f8:a0:0c:17:2f:e2:a3:c6:50:68:44:0c:0a:03: 35:7e:1c:a4:49:e1:ce:bd:ad:e5:8a:c1:84:cd:13: 19:82:c7:23:eb:73:e9:b5:0f:23:2e:0c:95:5c:35: 80:1c:4a:d6:b3:22:9c:6c:a9:47:00:33:ad:b4:96: 89:41:7f:10:92:1b:fe:2a:4a:00:a7:32:2e:90:6f: f0:db:81:ff:4b:15:64:2c:7c:f1:01:6c:ca:bc:bf: 34:5c:36:38:06:ce:70:e6:28:2b:94:ec:f8:72:76: 47:82:48:4b:0e:6a:bf:b0:8b:7e:9b:0b:e3:70:df: 14:65:c5:a0:ad:bc:ae:93:88:92:74:fa:af:29:f7: 70:b6:97:b2:46:e7:92:b9:bd:ab:a2:34:5b:24:64: ab:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E4:02:53:59:D7:60:85:E5:17:EE:25:9E:CE:F2:D1:6C:D5:0C:4B X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5c:e3:66:93:02:8d:e4:b7:78:f8:a8:cf:c2:99:8d:e3:da: 19:95:12:84:c2:50:28:d1:fb:93:09:01:9d:9e:6a:24:e6:ae: 90:d2:1c:1e:b2:ba:c1:f6:73:32:22:93:67:5a:53:2f:3b:09: 34:bd:2d:e2:ae:05:1a:eb:cf:25:7a:0a:58:cc:be:d0:04:5b: b5:1e:51:02:5c:4e:d7:75:6a:82:86:ab:78:79:78:e4:90:1a: 42:13:24:66:74:4e:cf:5e:6e:7c:0d:38:b5:cf:e5:45:29:cd: ca:52:47:95:ed:bb:a4:38:d7:56:6e:b7:78:95:49:05:15:aa: cb:0f:20:fb:ba:da:a3:1f:a0:5a:29:a7:ae:b1:17:16:65:f1: ee:e0:bc:c9:76:2c:24:6a:00:a1:b7:9a:04:f1:81:8f:f6:a7: 41:c3:e7:a0:c4:05:66:20:28:dd:9e:1c:0c:d5:ff:fb:44:ff: 34:80:e6:ae:3e:29:4a:d6:f2:be:0a:16:7a:0c:39:22:a5:e5: 4b:cf:c0:0f:18:99:16:ed:0b:63:ea:90:28:86:5b:30:39:24: b9:18:43:f1:e0:7a:b6:1d:70:15:7a:2d:cb:88:d7:02:82:68: ee:c4:1f:ed:d7:6f:0b:d0:45:79:2c:6f:4a:fb:d4:5e:b8:69: 25:ca:20:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjUwNDI2MjMxMzM5WhcNMjUwNTAzMjMxMzM5WjAYMRYwFAYD VQQDEw02ODBkNjhhMy03ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qznN+03j/0cp37C4fqcK/bO30W5GhIYjougKtqNeeCzs+S1/w9msAtKYBTa D2B1Zys3cyLXZ8sJ2ZBov68wE3Ibxd7GT5Ik35aInPu5CjX33Nldb2a5gZsyGITv FQZxTK0PmQG3zJXM+KAMFy/io8ZQaEQMCgM1fhykSeHOva3lisGEzRMZgscj63Pp tQ8jLgyVXDWAHErWsyKcbKlHADOttJaJQX8Qkhv+KkoApzIukG/w24H/SxVkLHzx AWzKvL80XDY4Bs5w5igrlOz4cnZHgkhLDmq/sIt+mwvjcN8UZcWgrbyuk4iSdPqv KfdwtpeyRueSub2rojRbJGSrqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvkAlNZ 12CF5RfuJZ7O8tFs1QxLMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx Z0hkckhRNG5YU19TMXBmclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1XONmkwKN5Ld4+KjPwpmN49oZlRKEwlAo0fuTCQGdnmok5q6Q0hwe srrB9nMyIpNnWlMvOwk0vS3irgUa688legpYzL7QBFu1HlECXE7XdWqChqt4eXjk kBpCEyRmdE7PXm58DTi1z+VFKc3KUkeV7bukONdWbrd4lUkFFarLDyD7utqjH6Ba KaeusRcWZfHu4LzJdiwkagCht5oE8YGP9qdBw+egxAVmICjdnhwM1f/7RP80gOau PilK1vK+ChZ6DDkipeVLz8APGJkW7Qtj6pAohlswOSS5GEPx4Hq2HXAVei3LiNcC gmjuxB/t128L0EV5LG9K+9ReuGklyiDe -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:45 2025 by rpki-client on console.sobornost.net