$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft File: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft (raw, json) Hash identifier: qewi+MopGlZuBreaudZgIZZG+ZHR5sFpqntCWcjgtv4= Subject key identifier: F5:3E:0E:95:2F:57:3E:EC:17:DA:01:1D:71:26:F0:32:EE:70:28:6F Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D Certificate issuer: /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft Manifest number: 5E Signing time: Sun 27 Apr 2025 06:28:49 +0000 Manifest this update: Sun 27 Apr 2025 06:28:48 +0000 Manifest next update: Sun 04 May 2025 06:28:48 +0000 Files and hashes: 1: LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl (hash: KAH2efyjW4MzGIsfmfE2ajD8EuGlG+9cPrIrvzglHEo=) 2: E42D85E2F1CA11EFB62D3031C4F9AE02.roa (hash: dGRW5QcfAaiPHf4JiM+cDPozOhYf8XOzClTTBWh7otw=) 3: C1A4AC1620E211F092240470C4F9AE02.roa (hash: Y6T/CEcFChOzPhN5TpsTb/Xa+S8f2JLpMRsXGxYgWOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D Validity Not Before: Apr 27 06:28:48 2025 GMT Not After : May 4 06:28:48 2025 GMT Subject: CN=680dcea1-c100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:91:3b:ab:75:d0:72:28:a0:71:2b:46:8b: cb:44:78:e6:04:23:3e:0d:67:8b:2c:ba:25:93:86: 6e:ee:9c:e1:91:bc:ce:ee:e0:35:80:06:22:a5:0f: b5:ee:3a:80:ff:a5:e4:f2:16:dd:75:9e:f2:6b:f6: d8:3d:b6:69:1a:8f:43:6a:f8:61:93:de:3e:ce:7c: 46:86:1f:75:6a:c2:f4:b4:3f:dd:f3:e9:ea:77:67: 5e:54:a6:a2:be:26:ea:a8:02:6f:51:2e:2b:5d:1f: 0f:94:4d:70:43:5b:e4:25:ab:51:6d:9e:ff:fa:7a: 48:ce:8b:c0:a8:8e:d5:93:42:d2:e8:b0:37:a8:c9: 89:90:7f:2f:d2:0a:96:d7:04:01:14:c5:93:0a:12: ef:fa:4d:ab:d4:1e:cc:d7:cd:19:af:d4:cb:55:4b: 63:48:67:14:a3:9f:39:44:c8:3b:85:0d:57:dd:9b: 07:fe:ac:a5:4f:b3:f8:31:ed:35:90:a2:5a:f5:9d: c2:b9:b5:ae:c7:81:e8:d6:c6:35:a3:72:5a:c1:e1: 7d:89:d0:27:a2:7a:a2:c4:9e:99:d6:ec:18:c8:26: de:56:9c:87:a6:13:1a:02:23:4f:62:be:10:fa:38: e0:96:0b:0c:ba:ac:e1:d3:66:a1:d5:ef:b9:68:a9: 92:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3E:0E:95:2F:57:3E:EC:17:DA:01:1D:71:26:F0:32:EE:70:28:6F X509v3 Authority Key Identifier: keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dd:d1:a8:47:c0:f5:9a:4f:c3:04:e6:24:4b:ef:bd:84:e5: 65:11:df:36:5d:3f:97:39:6f:da:f0:f3:0a:03:aa:09:9a:fb: d8:53:1a:3b:6f:7b:b0:3d:fa:eb:e5:40:a8:ba:ff:82:1d:88: 4a:fb:63:a9:2e:01:7b:04:76:3d:43:78:d2:4d:6a:31:f4:55: 09:43:e4:00:71:35:87:ff:01:33:82:06:9a:8c:17:65:28:94: 5e:8e:af:1d:49:48:a6:60:2c:ac:ba:4f:17:df:8e:3a:d6:9f: 2a:66:3c:9b:29:0f:2f:65:65:49:c9:3b:ed:6c:72:41:bc:7f: 24:33:44:0b:37:b0:08:b2:2e:d4:73:ac:ce:c6:68:6f:bf:b4: d6:76:95:cc:83:7a:25:b5:2a:64:22:c1:47:7e:67:5c:94:db: 17:ea:5c:56:6a:66:c2:94:b4:0b:ba:c5:20:79:f3:96:90:f4: 31:69:84:f1:54:e3:28:b0:17:6b:c0:85:9d:f9:b2:5c:fa:be: db:e1:de:a3:4d:1b:e4:39:2b:33:ec:49:71:93:c2:ff:1c:24: da:91:12:a0:b3:3d:81:c1:dc:0a:10:69:03:d7:4f:b9:4d:ee: 1c:2c:1e:be:1c:00:21:de:90:a1:1f:05:7c:f1:67:87:55:02: dd:96:43:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTY0ODExMC8GA1UEBRMoMkMxQzA3RDE1MTI3MTk2OUUxM0UxQ0ZEMTYxQjFGNjA3 NzBFMjkwRDAeFw0yNTA0MjcwNjI4NDhaFw0yNTA1MDQwNjI4NDhaMBgxFjAUBgNV BAMTDTY4MGRjZWExLWMxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2n5E7q3XQciigcStGi8tEeOYEIz4NZ4ssuiWThm7unOGRvM7u4DWABiKlD7Xu OoD/peTyFt11nvJr9tg9tmkaj0Nq+GGT3j7OfEaGH3VqwvS0P93z6ep3Z15UpqK+ JuqoAm9RLitdHw+UTXBDW+Qlq1Ftnv/6ekjOi8CojtWTQtLosDeoyYmQfy/SCpbX BAEUxZMKEu/6TavUHszXzRmv1MtVS2NIZxSjnzlEyDuFDVfdmwf+rKVPs/gx7TWQ olr1ncK5ta7HgejWxjWjclrB4X2J0CeieqLEnpnW7BjIJt5WnIemExoCI09ivhD6 OOCWCwy6rOHTZqHV77loqZKzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9T4OlS9X PuwX2gEdcSbwMu5wKG8wHwYDVR0jBBgwFoAULBwH0VEnGWnhPhz9FhsfYHcOKQ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1NjQ4LzIxOEYyNjhBREM5 RTExRUY4QjYyREQ1RkM0RjlBRTAyL0xCd0gwVkVuR1duaFBoejlGaHNmWUhjT0tR MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTEJ3SDBWRW5HV25oUGh6OUZoc2ZZSGNPS1EwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 NjQ4LzIxOEYyNjhBREM5RTExRUY4QjYyREQ1RkM0RjlBRTAyL0xCd0gwVkVuR1du aFBoejlGaHNmWUhjT0tRMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzd0ahHwPWaT8ME5iRL772E5WUR3zZdP5c5b9rw8woDqgma+9hTGjtv e7A9+uvlQKi6/4IdiEr7Y6kuAXsEdj1DeNJNajH0VQlD5ABxNYf/ATOCBpqMF2Uo lF6Orx1JSKZgLKy6TxffjjrWnypmPJspDy9lZUnJO+1sckG8fyQzRAs3sAiyLtRz rM7GaG+/tNZ2lcyDeiW1KmQiwUd+Z1yU2xfqXFZqZsKUtAu6xSB585aQ9DFphPFU 4yiwF2vAhZ35slz6vtvh3qNNG+Q5KzPsSXGTwv8cJNqREqCzPYHB3AoQaQPXT7lN 7hwsHr4cACHekKEfBXzxZ4dVAt2WQ5A= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net