$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: Hx76SkHTTJwyFHXSfiNeoxp6XuG9jDuoCY1R6AOh30g= Subject key identifier: 07:8B:B7:35:91:FE:AC:CE:1A:0D:7C:9C:F8:DA:9C:03:3B:8A:48:C9 Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 02A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 029D Signing time: Sun 27 Apr 2025 01:10:38 +0000 Manifest this update: Sun 27 Apr 2025 01:10:37 +0000 Manifest next update: Sun 04 May 2025 01:10:37 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: eohw0Ja73kURGwvTW1Ex2acZ1wSL5S8ZnjSVX+ki4Hc=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: ysruRwci+2YdWcWGjjenGU03TfndDBIRkaEgaw2RJEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 676 (0x2a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Apr 27 01:10:37 2025 GMT Not After : May 4 01:10:37 2025 GMT Subject: CN=680d840e-bdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:33:3e:fb:e1:41:45:43:b0:0e:4b:33:32:9a: 07:25:fa:f5:1c:ed:e0:c6:92:32:7a:8b:cf:91:c1: 62:5c:6f:ff:32:a0:22:dc:b0:d8:76:04:d1:99:cc: 4c:49:f4:91:21:b2:cc:95:c8:4b:7c:76:0a:4d:9f: d9:94:38:77:71:99:59:53:8a:fc:b5:28:c1:0d:a4: f2:07:74:b7:1f:b3:7a:14:02:05:2d:ed:9f:dd:68: 28:25:ca:10:be:6b:40:62:1a:ba:bb:87:fa:61:50: 4f:ba:19:f2:b4:0b:8c:21:01:18:ca:61:f7:f9:2b: e7:f8:c5:06:38:6a:56:f5:48:42:fd:71:48:cd:82: 87:f4:ae:c1:bf:f4:da:30:24:9a:5c:a8:1a:a9:8d: 41:13:78:50:fc:5e:b2:80:93:ad:b5:96:0a:b1:ec: 9a:a7:64:65:19:cd:d6:82:b0:6e:9c:58:11:8f:df: f4:69:16:1f:39:9d:24:25:c4:f4:88:09:ca:f1:61: d9:5c:71:4e:55:5d:4c:8b:18:a7:78:37:8c:e2:bd: b4:c4:82:64:a5:ad:99:e7:5d:27:85:8b:d7:e0:dd: f3:1f:37:c0:71:83:d9:39:0a:e1:ac:bf:09:ff:c3: e9:5f:31:03:81:af:10:82:78:25:02:63:25:4f:b5: 3a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8B:B7:35:91:FE:AC:CE:1A:0D:7C:9C:F8:DA:9C:03:3B:8A:48:C9 X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:8e:d3:35:4f:28:c6:1f:0d:5c:3e:7f:e9:73:98:5e:6c:df: 89:bd:c0:8f:34:c3:7e:79:97:9b:92:86:51:b1:8d:4f:f3:38: 75:20:79:dd:5e:d2:21:f2:01:ef:b7:c7:d9:21:b9:8f:8d:23: 7b:03:89:04:1e:8c:c8:fa:29:51:96:e4:c8:14:76:6f:e8:9a: 41:01:48:ee:6b:b2:80:2d:e2:13:79:1c:68:16:4f:b7:94:45: 0b:9a:a6:ea:cf:02:68:d4:b7:0c:aa:86:11:59:20:44:3f:bb: 7d:2c:0b:7e:90:99:fb:32:3e:04:b6:14:b6:68:b9:ef:2f:61: 9e:25:36:b4:43:62:a3:47:c0:b4:eb:37:db:e1:26:8c:e0:75: 85:26:c7:94:e5:49:ef:dc:30:8b:fd:05:bd:3b:94:ef:f8:60: bd:44:6b:a2:42:03:f4:d2:2e:46:8e:42:51:8d:11:74:5d:89: 4b:7d:0f:41:82:3f:47:b6:27:71:be:32:2c:83:84:7f:61:bc: 48:fa:6a:4b:44:0e:35:4a:a9:ca:9a:65:14:ad:2d:ea:9b:17: 59:09:f7:ad:13:46:71:20:be:4b:05:9f:bb:b0:49:ef:ab:39: 9d:4a:9e:6b:cf:69:26:de:15:f7:d3:34:74:ee:3a:57:e6:32: 7b:53:af:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwNDI3MDExMDM3WhcNMjUwNTA0MDExMDM3WjAYMRYwFAYD VQQDEw02ODBkODQwZS1iZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7jM+++FBRUOwDkszMpoHJfr1HO3gxpIyeovPkcFiXG//MqAi3LDYdgTRmcxM SfSRIbLMlchLfHYKTZ/ZlDh3cZlZU4r8tSjBDaTyB3S3H7N6FAIFLe2f3WgoJcoQ vmtAYhq6u4f6YVBPuhnytAuMIQEYymH3+Svn+MUGOGpW9UhC/XFIzYKH9K7Bv/Ta MCSaXKgaqY1BE3hQ/F6ygJOttZYKseyap2RlGc3WgrBunFgRj9/0aRYfOZ0kJcT0 iAnK8WHZXHFOVV1MixineDeM4r20xIJkpa2Z510nhYvX4N3zHzfAcYPZOQrhrL8J /8PpXzEDga8QgnglAmMlT7U6rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeLtzWR /qzOGg18nPjanAM7ikjJMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyjtM1TyjGHw1cPn/pc5hebN+JvcCPNMN+eZebkoZRsY1P8zh1IHnd XtIh8gHvt8fZIbmPjSN7A4kEHozI+ilRluTIFHZv6JpBAUjua7KALeITeRxoFk+3 lEULmqbqzwJo1LcMqoYRWSBEP7t9LAt+kJn7Mj4EthS2aLnvL2GeJTa0Q2KjR8C0 6zfb4SaM4HWFJseU5Unv3DCL/QW9O5Tv+GC9RGuiQgP00i5GjkJRjRF0XYlLfQ9B gj9HtidxvjIsg4R/YbxI+mpLRA41SqnKmmUUrS3qmxdZCfetE0ZxIL5LBZ+7sEnv qzmdSp5rz2km3hX30zR07jpX5jJ7U6/6 -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:01 2025 by rpki-client on console.sobornost.net