$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft File: lufMd6OOPhgL91JrodlTIYBONeY.mft (raw, json) Hash identifier: QCppVg+tkQ+1ar2ovVAv/2rsEiCBotK9kW4CCX4n2cU= Subject key identifier: 56:A5:E0:83:E8:10:53:74:06:AE:6E:76:56:31:2C:CE:FC:AE:DF:EE Authority key identifier: 96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 Certificate issuer: /CN=A916C4FA/serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft Manifest number: 04DD Signing time: Sun 27 Apr 2025 00:42:49 +0000 Manifest this update: Sun 27 Apr 2025 00:42:49 +0000 Manifest next update: Sun 04 May 2025 00:42:49 +0000 Files and hashes: 1: lufMd6OOPhgL91JrodlTIYBONeY.crl (hash: u4SG/w2It5G/eH3Tb54nDS3EV13ccxnOI1DR3zUNgpQ=) 2: C310EE5AACD311ED84BAA06EC4F9AE02.roa (hash: NPYNnjaBYs2qmRUfu8/y0KOBedXU4EghxnWja8r1cbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4FA, serialNumber=96E7CC77A38E3E180BF7526BA1D95321804E35E6 Validity Not Before: Apr 27 00:42:49 2025 GMT Not After : May 4 00:42:49 2025 GMT Subject: CN=680d7d89-c3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:23:a1:3e:7f:2f:38:d7:17:b9:1d:55:4b: df:bf:63:54:6f:16:dd:bd:a7:ca:94:93:94:18:9f: 93:3a:a3:96:99:0a:00:ad:35:ed:0a:d3:20:5d:da: 7e:f8:a6:50:ed:3f:9d:fc:37:32:ad:a6:8e:fb:fb: 51:ee:f1:94:0d:e5:da:a7:31:a7:b9:5e:4b:be:23: a6:be:7f:98:1c:7c:b0:e4:48:8b:60:e8:f6:70:51: 77:96:76:b4:41:2a:dd:01:ac:31:9f:f0:f5:37:a6: c6:fc:d2:66:f2:63:96:0d:4b:be:2f:fc:82:e6:7c: d0:18:e0:a9:c8:a1:5e:62:3a:26:b7:ad:2e:9b:32: d8:bd:77:c7:77:ad:d0:14:6a:35:85:65:07:81:21: cc:55:55:7f:3b:ef:7c:01:ed:be:b0:b7:59:59:93: dc:94:9e:c7:5c:5f:3b:08:ad:da:c8:dd:da:57:bc: ae:43:07:bd:9d:72:cd:6c:32:c7:7b:51:7f:6e:a7: 18:af:30:f2:86:94:8a:2d:28:37:7a:ad:95:d3:2f: 64:26:78:62:b2:ba:5b:87:e8:b4:6f:30:81:9c:11: 57:a9:68:6e:26:cb:0f:70:82:06:57:5c:47:17:03: 92:ee:3b:88:44:b1:6e:44:a2:43:fb:08:7a:cc:25: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A5:E0:83:E8:10:53:74:06:AE:6E:76:56:31:2C:CE:FC:AE:DF:EE X509v3 Authority Key Identifier: keyid:96:E7:CC:77:A3:8E:3E:18:0B:F7:52:6B:A1:D9:53:21:80:4E:35:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lufMd6OOPhgL91JrodlTIYBONeY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4FA/B89BCBF4BA6A11EC82AC0787C4F9AE02/lufMd6OOPhgL91JrodlTIYBONeY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ff:ec:5a:d6:d2:f9:50:c2:1d:9d:00:8e:9f:38:d2:28:02: dd:79:f3:a8:a8:ee:6b:7e:7f:33:9f:58:4d:d2:b3:d8:0b:61: 71:86:df:11:48:ac:64:95:ad:9c:bd:9d:fb:2d:52:a3:a4:ba: e0:3f:d5:ce:9b:6f:f0:09:69:a3:da:db:53:7a:2e:d1:59:66: ec:ae:79:2c:15:03:75:77:94:a0:08:0b:20:0f:de:62:87:37: 85:24:94:30:d4:a0:a7:d3:a0:11:9b:9c:ee:b2:14:59:cd:e4: fa:a5:fe:84:03:02:8d:63:9b:06:3b:98:a3:7d:c1:93:5e:b1: e1:91:25:01:ef:b9:0d:b8:35:74:47:3a:4b:a5:a0:0d:e7:e9: d8:24:f4:e2:05:b7:45:ef:2a:60:e5:8b:42:8c:00:d8:16:ea: 99:de:55:a8:ea:57:e9:34:da:7d:f3:37:c9:92:11:df:bc:d6: ec:d4:e1:94:da:27:4b:29:ff:23:b7:d6:49:33:e8:e2:e5:7a: b7:15:31:7f:49:07:13:20:44:bd:37:e6:ff:79:42:ab:70:e8: 7d:d3:58:6c:0e:68:7f:db:47:e3:bd:82:05:0b:d6:9e:5e:51: 95:17:05:6d:70:ab:18:eb:89:be:ac:7c:04:74:8d:0d:af:a6: a9:e9:d0:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0RkExMTAvBgNVBAUTKDk2RTdDQzc3QTM4RTNFMTgwQkY3NTI2QkExRDk1MzIx ODA0RTM1RTYwHhcNMjUwNDI3MDA0MjQ5WhcNMjUwNTA0MDA0MjQ5WjAYMRYwFAYD VQQDEw02ODBkN2Q4OS1jM2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHkjoT5/LzjXF7kdVUvfv2NUbxbdvafKlJOUGJ+TOqOWmQoArTXtCtMgXdp+ +KZQ7T+d/DcyraaO+/tR7vGUDeXapzGnuV5LviOmvn+YHHyw5EiLYOj2cFF3lna0 QSrdAawxn/D1N6bG/NJm8mOWDUu+L/yC5nzQGOCpyKFeYjomt60umzLYvXfHd63Q FGo1hWUHgSHMVVV/O+98Ae2+sLdZWZPclJ7HXF87CK3ayN3aV7yuQwe9nXLNbDLH e1F/bqcYrzDyhpSKLSg3eq2V0y9kJnhisrpbh+i0bzCBnBFXqWhuJssPcIIGV1xH FwOS7juIRLFuRKJD+wh6zCWmlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFal4IPo EFN0Bq5udlYxLM78rt/uMB8GA1UdIwQYMBaAFJbnzHejjj4YC/dSa6HZUyGATjXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRGQS9CODlCQ0JGNEJB NkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1BoZ0w5MUpyb2RsVElZQk9O ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x1Zk1kNk9PUGhnTDkxSnJvZGxUSVlCT05lWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRGQS9CODlCQ0JGNEJBNkExMUVDODJBQzA3ODdDNEY5QUUwMi9sdWZNZDZPT1Bo Z0w5MUpyb2RsVElZQk9OZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1/+xa1tL5UMIdnQCOnzjSKALdefOoqO5rfn8zn1hN0rPYC2Fxht8R SKxkla2cvZ37LVKjpLrgP9XOm2/wCWmj2ttTei7RWWbsrnksFQN1d5SgCAsgD95i hzeFJJQw1KCn06ARm5zushRZzeT6pf6EAwKNY5sGO5ijfcGTXrHhkSUB77kNuDV0 RzpLpaAN5+nYJPTiBbdF7ypg5YtCjADYFuqZ3lWo6lfpNNp98zfJkhHfvNbs1OGU 2idLKf8jt9ZJM+ji5Xq3FTF/SQcTIES9N+b/eUKrcOh901hsDmh/20fjvYIFC9ae XlGVFwVtcKsY64m+rHwEdI0Nr6ap6dCr -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:02 2025 by rpki-client on console.sobornost.net