$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft File: lddEZYkqyDm6JHn6BHVqXjBfJjw.mft (raw, json) Hash identifier: aBF9pYop/tP5Vr4TOeuKz48NwBKTUWEs6uYCzTs+kn8= Subject key identifier: C3:56:73:B5:B8:D6:C2:82:43:7F:50:4C:73:73:38:44:E6:3D:19:66 Authority key identifier: 95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C Certificate issuer: /CN=A91557F2/serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft Manifest number: 0144 Signing time: Thu 24 Apr 2025 21:50:26 +0000 Manifest this update: Thu 24 Apr 2025 21:50:25 +0000 Manifest next update: Thu 01 May 2025 21:50:25 +0000 Files and hashes: 1: lddEZYkqyDm6JHn6BHVqXjBfJjw.crl (hash: QGgfi6DkQNPNWtv4jOBqlR0MNoUp50/+EpuYawZsmM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=95D74465892AC839BA2479FA04756A5E305F263C Validity Not Before: Apr 24 21:50:25 2025 GMT Not After : May 1 21:50:25 2025 GMT Subject: CN=680ab221-4edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:b7:5c:19:e0:69:9c:52:4c:98:27:61:38: 19:08:60:40:b7:c6:40:d6:37:29:40:86:da:09:15: 53:dc:27:15:b1:0f:1f:c1:d0:09:ff:2c:7f:7f:96: b6:9d:52:42:4f:68:f4:f5:30:26:34:aa:45:03:42: 9c:43:85:6a:9d:2f:f2:25:aa:3e:ce:f2:70:df:20: 58:b2:a2:e9:63:ab:66:6e:aa:d2:64:61:2f:41:68: bb:cb:36:5c:02:26:c2:b4:05:60:06:b0:ce:b8:f3: 30:a6:52:f9:6d:81:1c:4f:ef:29:e6:b1:1e:4f:59: 62:1b:8e:08:35:24:b1:d6:24:d0:a3:69:aa:1d:9d: fb:a5:f2:47:7a:2c:07:d5:e1:71:1e:c5:18:79:47: 48:e1:ea:31:1a:a6:52:e6:72:48:50:95:98:5f:30: a2:96:a2:c1:d4:5e:b2:72:d8:fd:fd:2b:5e:93:16: b3:85:fa:27:d4:89:cb:ca:75:df:ff:6e:cb:f9:72: 48:ba:37:ff:68:71:3c:98:73:76:56:b6:e7:bc:28: 49:36:f9:2f:82:c9:a7:7f:21:73:3a:12:6c:dc:d5: 98:38:75:fc:09:e4:84:06:fa:24:1c:99:1e:ae:3d: 85:38:a6:cf:37:92:29:4e:c2:fd:82:33:67:58:a4: 74:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:56:73:B5:B8:D6:C2:82:43:7F:50:4C:73:73:38:44:E6:3D:19:66 X509v3 Authority Key Identifier: keyid:95:D7:44:65:89:2A:C8:39:BA:24:79:FA:04:75:6A:5E:30:5F:26:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lddEZYkqyDm6JHn6BHVqXjBfJjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/BF27FD4642E811EE9BBE646CC4F9AE02/lddEZYkqyDm6JHn6BHVqXjBfJjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4e:db:3f:34:b5:1a:63:77:2d:5a:2b:8d:4d:62:76:17:39: 64:ef:41:d7:4a:10:e2:91:73:db:8c:d7:bc:f4:10:f8:f7:e3: 5f:6e:a0:b7:0f:ed:fb:bd:a3:a3:66:d6:dd:6c:83:f7:63:97: 5f:68:55:58:d3:aa:c7:0f:fb:99:af:a6:be:84:38:c1:13:de: e2:14:ed:31:f9:e8:bc:88:37:b2:b7:d9:f9:d4:f5:29:34:7f: 29:cf:43:5f:62:f6:ad:29:d7:5a:96:45:c1:b1:fb:05:05:e9: bf:56:91:73:5a:ff:f4:b3:1f:32:22:2b:39:8f:c6:ff:d2:7b: 7b:cb:8f:3d:d3:53:53:57:1b:4c:ea:51:6f:78:ca:44:4e:03: 68:4d:c1:82:24:70:55:e2:94:ab:1e:ed:f7:4f:07:20:b3:9e: 8e:28:65:de:93:8f:f8:de:b5:b7:75:b4:11:72:34:81:b2:ea: f0:4e:c8:97:2c:96:73:31:a8:ad:09:81:f1:87:be:a4:22:c0: fc:c9:23:f6:1b:ae:67:36:34:fd:d6:25:19:fe:2b:bb:4a:90: b8:f7:2d:51:05:9b:43:da:c0:d8:6c:45:84:58:02:6c:a8:9d: 5f:cd:2f:c1:49:d6:15:a0:e1:95:7a:3f:0a:b9:3c:e4:5e:68: e9:ba:3a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKDk1RDc0NDY1ODkyQUM4MzlCQTI0NzlGQTA0NzU2QTVF MzA1RjI2M0MwHhcNMjUwNDI0MjE1MDI1WhcNMjUwNTAxMjE1MDI1WjAYMRYwFAYD VQQDEw02ODBhYjIyMS00ZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3e3XBngaZxSTJgnYTgZCGBAt8ZA1jcpQIbaCRVT3CcVsQ8fwdAJ/yx/f5a2 nVJCT2j09TAmNKpFA0KcQ4VqnS/yJao+zvJw3yBYsqLpY6tmbqrSZGEvQWi7yzZc AibCtAVgBrDOuPMwplL5bYEcT+8p5rEeT1liG44INSSx1iTQo2mqHZ37pfJHeiwH 1eFxHsUYeUdI4eoxGqZS5nJIUJWYXzCilqLB1F6yctj9/Stekxazhfon1InLynXf /27L+XJIujf/aHE8mHN2VrbnvChJNvkvgsmnfyFzOhJs3NWYOHX8CeSEBvokHJke rj2FOKbPN5IpTsL9gjNnWKR0TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNWc7W4 1sKCQ39QTHNzOETmPRlmMB8GA1UdIwQYMBaAFJXXRGWJKsg5uiR5+gR1al4wXyY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi9CRjI3RkQ0NjQy RTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlEbTZKSG42QkhWcVhqQmZK ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xkZEVaWWtxeURtNkpIbjZCSFZxWGpCZkpqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi9CRjI3RkQ0NjQyRTgxMUVFOUJCRTY0NkNDNEY5QUUwMi9sZGRFWllrcXlE bTZKSG42QkhWcVhqQmZKancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPTts/NLUaY3ctWiuNTWJ2Fzlk70HXShDikXPbjNe89BD49+NfbqC3 D+37vaOjZtbdbIP3Y5dfaFVY06rHD/uZr6a+hDjBE97iFO0x+ei8iDeyt9n51PUp NH8pz0NfYvatKddalkXBsfsFBem/VpFzWv/0sx8yIis5j8b/0nt7y48901NTVxtM 6lFveMpETgNoTcGCJHBV4pSrHu33Twcgs56OKGXek4/43rW3dbQRcjSBsurwTsiX LJZzMaitCYHxh76kIsD8ySP2G65nNjT91iUZ/iu7SpC49y1RBZtD2sDYbEWEWAJs qJ1fzS/BSdYVoOGVej8KuTzkXmjpujo1 -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:49 2025 by rpki-client on console.sobornost.net