$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: 4qfx0aeBlBhntw6NGJ4isrGfRvgIuvqt+t05YGmhOVI= Subject key identifier: B6:98:E1:47:B4:A7:10:CD:1C:AF:60:D2:4F:BC:19:5D:83:97:16:18 Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0223 Signing time: Sun 27 Apr 2025 01:34:58 +0000 Manifest this update: Sun 27 Apr 2025 01:34:58 +0000 Manifest next update: Sun 04 May 2025 01:34:58 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: ovU0MR/cMir8C72otvIAsxXQvg+V82bF2UqxnSofmBQ=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Apr 27 01:34:58 2025 GMT Not After : May 4 01:34:58 2025 GMT Subject: CN=680d89c2-bdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:e7:2e:94:54:92:ec:64:8d:2a:5d:e1:c1: 0b:55:3f:f7:69:7c:ff:a2:41:5e:40:e7:6e:da:a0: 0c:4c:7f:1a:86:b5:eb:87:fd:fd:d8:ad:ef:58:86: 88:3a:01:f0:6c:db:d6:a0:84:0f:07:42:69:81:16: 1f:f9:79:63:3c:92:b9:8a:c1:0c:29:e0:ee:b6:46: ef:94:99:a6:6e:01:2b:56:f7:da:97:35:2e:d0:5a: f5:11:b1:99:52:aa:7f:49:ef:9b:2a:f4:bf:0b:63: 4d:b3:75:0c:c0:23:f9:02:32:a7:2e:de:44:63:f5: d6:47:0d:2a:d2:d5:b5:d4:f9:09:51:fd:3b:23:ff: 0c:e1:28:22:da:c3:60:e0:e0:3b:e8:4d:36:1d:ee: 75:36:6a:5d:b9:95:a7:72:60:b2:9f:02:f8:0b:d6: 8d:27:77:62:85:42:c6:eb:87:a1:1d:2d:fa:63:0a: 09:cf:94:fb:ba:b6:62:78:0f:e5:80:43:9c:9c:8a: fc:89:22:4a:5f:99:5d:81:45:bc:e9:fd:27:2a:33: 02:e0:30:ed:01:93:99:11:fd:9f:e0:74:14:9f:0f: 8a:2d:9b:ce:4a:71:15:f0:9a:8c:00:05:1c:f7:8c: f6:dd:1e:68:22:e0:e5:01:83:2e:36:35:ac:0c:f2: e9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:98:E1:47:B4:A7:10:CD:1C:AF:60:D2:4F:BC:19:5D:83:97:16:18 X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1b:dc:36:f3:9e:91:48:cf:bb:3a:b3:99:4b:d5:36:9e:8e: 71:d2:7f:2e:65:31:7d:c2:78:2b:5c:22:ec:ee:ab:6e:84:bc: 83:3e:b0:ac:ec:bb:c9:90:a6:3c:6b:48:d0:cb:88:6b:6c:7c: ec:ee:5f:a7:66:b9:29:b3:13:62:8c:59:9b:f9:47:d3:a8:cb: 7e:32:ea:d9:73:38:c2:c6:93:f2:a1:38:9b:55:3e:8a:b7:ef: 2c:32:ea:93:2d:b6:96:04:36:f0:0a:c0:98:5a:fe:cf:3c:68: 8b:2a:71:ed:a2:87:38:0b:19:85:f6:da:da:80:58:89:14:20: 3c:4b:fc:86:25:fd:46:6f:b9:6d:f3:93:0f:16:16:b6:ea:d7: ae:84:53:39:30:70:1c:1c:c5:cd:7a:64:91:2a:fd:6e:99:54: ac:7d:c1:a6:79:8d:43:b4:19:04:65:a4:02:0e:67:94:c2:92: c1:f2:34:c3:ec:9d:16:34:49:49:44:4e:ae:29:6b:65:1b:84: 55:44:36:e7:79:d4:82:1b:ea:7b:77:4d:12:6a:85:ad:ab:29: 18:86:b6:16:c6:da:e6:c5:d6:6a:b9:f3:68:91:b5:e0:34:2f: b8:6e:b8:47:40:d1:e2:2c:8c:f7:64:b1:a9:8e:32:e1:5f:2f: 66:33:e9:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwNDI3MDEzNDU4WhcNMjUwNTA0MDEzNDU4WjAYMRYwFAYD VQQDEw02ODBkODljMi1iZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MjnLpRUkuxkjSpd4cELVT/3aXz/okFeQOdu2qAMTH8ahrXrh/392K3vWIaI OgHwbNvWoIQPB0JpgRYf+XljPJK5isEMKeDutkbvlJmmbgErVvfalzUu0Fr1EbGZ Uqp/Se+bKvS/C2NNs3UMwCP5AjKnLt5EY/XWRw0q0tW11PkJUf07I/8M4Sgi2sNg 4OA76E02He51NmpduZWncmCynwL4C9aNJ3dihULG64ehHS36YwoJz5T7urZieA/l gEOcnIr8iSJKX5ldgUW86f0nKjMC4DDtAZOZEf2f4HQUnw+KLZvOSnEV8JqMAAUc 94z23R5oIuDlAYMuNjWsDPLpuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaY4Ue0 pxDNHK9g0k+8GV2DlxYYMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDG9w2856RSM+7OrOZS9U2no5x0n8uZTF9wngrXCLs7qtuhLyDPrCs 7LvJkKY8a0jQy4hrbHzs7l+nZrkpsxNijFmb+UfTqMt+MurZczjCxpPyoTibVT6K t+8sMuqTLbaWBDbwCsCYWv7PPGiLKnHtooc4CxmF9tragFiJFCA8S/yGJf1Gb7lt 85MPFha26teuhFM5MHAcHMXNemSRKv1umVSsfcGmeY1DtBkEZaQCDmeUwpLB8jTD 7J0WNElJRE6uKWtlG4RVRDbnedSCG+p7d00SaoWtqykYhrYWxtrmxdZqufNokbXg NC+4brhHQNHiLIz3ZLGpjjLhXy9mM+nE -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:54 2025 by rpki-client on console.sobornost.net