$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft File: L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft (raw, json) Hash identifier: bV9EyFgLERqniDl22U0cCz9RYpoTK7KMQwZ1jd4xkJ0= Subject key identifier: C3:3E:CE:FC:86:B1:58:B6:F8:E7:39:00:D7:89:9D:DD:A5:5E:9E:8B Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 02C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft Manifest number: 029C Signing time: Sun 27 Apr 2025 01:15:12 +0000 Manifest this update: Sun 27 Apr 2025 01:15:11 +0000 Manifest next update: Sun 04 May 2025 01:15:11 +0000 Files and hashes: 1: L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl (hash: 1M9gCzp1fZGBzD1VcYnWcGneAsNQNlkMLPVMqx7dxCY=) 2: 1D2D34A03D9E11EF8CA60559C4F9AE02.roa (hash: 2zwYEBCQAix7IVqX6zRPULKSP5oWRoZedIrh1GfxCNM=) 3: 7DB6FBF61E8711F0BF32D50BC4F9AE02.roa (hash: D4Hg/JdRTfX/l8c7oXgoLhl4NGoM7URqBmQ0qnzy3No=) 4: 2E5B28FC1E9611F098931D57C4F9AE02.roa (hash: EXZKaPGUwtsDkK02FHOfFve03nhQLXnXoDpLr6aZfVk=) 5: A0C8CD303D0111EFA1017A43C4F9AE02.roa (hash: l3AfbEPnH9MQnB8FkBhw58WDjjjux6rk9kPJrYOiY6g=) 6: 9E760A10B83B11EFB3BA160AC4F9AE02.roa (hash: 1Ufk/68tIdjOrkM759g1p4Z8VL+Nk2BFCd20q79FjkA=) 7: 2DED9FB21E9611F098931D57C4F9AE02.roa (hash: 7d7gP27b9zch7ZSnAleqYPL3fKv267/ReH6uWVU9VP8=) 8: 73E1CE72FCA411EE88B23A71C4F9AE02.roa (hash: 1228kG65FpzFsgF5OYDLN0KZ5wJbY2X2RckkI0NfZ9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 704 (0x2c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999, serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Apr 27 01:15:11 2025 GMT Not After : May 4 01:15:11 2025 GMT Subject: CN=680d851f-2f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:42:98:8e:7b:31:02:38:84:06:c0:f6:63: 5a:4f:10:73:c2:49:d3:81:10:c0:c0:f7:fe:9c:72: a4:d0:90:f2:81:95:75:bf:f6:b0:57:96:fa:c2:b2: cb:00:c5:04:f7:68:47:15:5e:f1:ef:5e:7c:83:dc: f2:f4:02:e8:ac:50:d8:14:94:3c:51:a3:bf:43:1d: c7:ed:b0:37:12:8e:ec:fb:9c:56:89:41:7e:5c:b6: 3d:c9:de:ee:28:99:2b:3b:e9:8f:7c:fd:7e:a4:5d: 18:8c:4e:20:b2:be:aa:05:27:96:ab:d0:32:12:59: 2c:7d:67:bc:90:51:bc:6a:ed:f3:cb:a0:35:2c:49: d5:0f:3f:b1:e7:db:c8:5b:39:29:86:6e:c7:d2:c7: 2b:a8:3f:3e:b2:4f:4f:8e:cb:a8:70:ee:4c:cb:29: cb:4c:8b:8c:19:c5:de:4b:28:50:74:ed:66:8b:62: 21:47:04:0e:60:36:68:4f:27:2a:67:40:6f:b9:b1: af:d7:26:b1:88:66:62:c7:e3:c2:ad:f7:b4:19:27: fa:e3:2a:ee:1c:31:ea:b9:ec:03:1f:f0:74:96:c2: 54:7b:ab:f4:d4:0f:d4:1f:25:8b:ab:14:47:52:30: 87:1d:c4:de:4d:fb:a1:fa:e4:5f:b2:a4:b9:df:51: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3E:CE:FC:86:B1:58:B6:F8:E7:39:00:D7:89:9D:DD:A5:5E:9E:8B X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:e5:ed:e4:75:c2:ac:f2:77:c4:8d:cf:cc:85:1c:eb:2d:66: e9:ce:3a:54:3b:bc:1e:66:46:88:73:48:40:05:43:bb:4e:0c: 1e:2a:60:3f:35:65:91:15:a1:e6:69:f9:c7:51:fb:29:36:66: d0:55:aa:2e:59:e6:1f:50:51:00:94:4b:6d:3a:ed:7f:c4:ab: c8:b9:dd:23:8c:c9:5f:93:60:67:68:e2:e8:21:83:70:7c:ea: 99:d0:c2:05:46:d2:d6:2b:9e:80:19:90:c5:16:16:58:fc:48: 33:bb:56:ac:88:cf:ec:c2:cd:78:d0:6d:ec:4a:a6:85:26:22: 2c:3d:a0:33:2c:bf:80:25:b2:07:e3:a5:6f:64:45:b4:fe:dc: 85:87:49:5c:54:86:31:51:2f:be:dc:9a:d3:83:38:12:d9:fd: a9:4d:d9:13:1a:9d:7d:53:50:6d:1e:d3:c4:6d:c2:8e:ae:de: 38:1c:d6:19:bd:9c:32:5a:42:38:af:27:c5:f8:45:15:23:68: 77:a7:c1:47:fb:dd:7c:c8:76:14:cb:f8:4e:38:dc:7f:96:0a: f2:be:0a:7d:1d:94:02:df:f4:04:d4:d4:86:85:ec:64:22:65: df:e7:94:82:ae:ec:dd:27:1a:d1:32:57:2f:27:bd:a4:86:d1: 1a:9c:47:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjUwNDI3MDExNTExWhcNMjUwNTA0MDExNTExWjAYMRYwFAYD VQQDEw02ODBkODUxZi0yZjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jFCmI57MQI4hAbA9mNaTxBzwknTgRDAwPf+nHKk0JDygZV1v/awV5b6wrLL AMUE92hHFV7x7158g9zy9ALorFDYFJQ8UaO/Qx3H7bA3Eo7s+5xWiUF+XLY9yd7u KJkrO+mPfP1+pF0YjE4gsr6qBSeWq9AyElksfWe8kFG8au3zy6A1LEnVDz+x59vI Wzkphm7H0scrqD8+sk9PjsuocO5MyynLTIuMGcXeSyhQdO1mi2IhRwQOYDZoTycq Z0BvubGv1yaxiGZix+PCrfe0GSf64yruHDHquewDH/B0lsJUe6v01A/UHyWLqxRH UjCHHcTeTfuh+uRfsqS531ENBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMM+zvyG sVi2+Oc5ANeJnd2lXp6LMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk5OS9CMUMxQjBEQTAzMUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdk OVdQajlfNF82SFFvMVNvTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC35e3kdcKs8nfEjc/MhRzrLWbpzjpUO7weZkaIc0hABUO7TgweKmA/ NWWRFaHmafnHUfspNmbQVaouWeYfUFEAlEttOu1/xKvIud0jjMlfk2BnaOLoIYNw fOqZ0MIFRtLWK56AGZDFFhZY/Egzu1asiM/sws140G3sSqaFJiIsPaAzLL+AJbIH 46VvZEW0/tyFh0lcVIYxUS++3JrTgzgS2f2pTdkTGp19U1BtHtPEbcKOrt44HNYZ vZwyWkI4ryfF+EUVI2h3p8FH+918yHYUy/hOONx/lgryvgp9HZQC3/QE1NSGhexk ImXf55SCruzdJxrRMlcvJ72khtEanEem -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:03 2025 by rpki-client on console.sobornost.net