$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft File: lFOfgqNeshWO18Ni1boVQz5-0uE.mft (raw, json) Hash identifier: OTgIB81f5RrA2BKmI6Sd/5urihRHZgtXiXk+ZIfV08w= Subject key identifier: 1A:96:6A:E3:BA:76:85:89:C8:B6:13:AA:9B:78:A3:3D:D5:BC:02:06 Authority key identifier: 94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 Certificate issuer: /CN=A9179EAE/serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft Manifest number: 68 Signing time: Sun 27 Apr 2025 05:51:13 +0000 Manifest this update: Sun 27 Apr 2025 05:51:13 +0000 Manifest next update: Sun 04 May 2025 05:51:13 +0000 Files and hashes: 1: lFOfgqNeshWO18Ni1boVQz5-0uE.crl (hash: HKpj4a+U/BsAEy/KS3MAJarbmVDrKr/OYDZ+TaiSDt8=) 2: B3DA6A52A96511EFB3EB6721C4F9AE02.roa (hash: FFio9OtmebaEzCJyFXTCLhGivXqzWOQVgzKrbso6U2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=94539F82A35EB2158ED7C362D5BA15433E7ED2E1 Validity Not Before: Apr 27 05:51:13 2025 GMT Not After : May 4 05:51:13 2025 GMT Subject: CN=680dc5d1-cac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8f:a5:28:ae:5d:b9:eb:ef:da:38:fd:8a:aa: ce:7b:ec:fd:b4:fa:80:92:da:f0:9f:24:4a:6b:5c: 4d:37:2e:22:ea:2f:cb:d7:b3:0e:7e:72:e8:3c:39: 32:f6:33:9e:95:fb:4c:8c:83:ce:cd:cd:63:95:b3: fe:7d:85:e2:9c:45:29:f3:f6:36:d0:2c:96:6a:47: 06:7e:ae:be:bd:95:9f:a9:b5:4c:8d:66:71:48:b7: 5a:a6:62:58:ca:ca:68:28:fd:6f:0a:77:c2:27:26: a5:91:02:ec:52:fb:db:57:df:1f:ca:54:cb:cc:67: b2:73:48:c6:98:43:31:24:4d:d3:69:f2:2c:1b:78: 59:28:ab:ee:a7:86:f1:c9:78:bf:16:cc:6f:8c:e9: 6a:3f:c0:3e:f3:e1:95:18:5c:38:d9:5d:1e:c6:3f: be:d7:5a:9b:e8:86:3c:75:71:84:b3:09:e2:68:d8: b9:8d:e8:1f:84:8f:2b:12:be:fd:39:8e:da:6e:2d: 60:61:8a:4c:91:0a:41:d6:5a:77:d9:68:b8:db:0d: ae:06:60:0f:6a:36:7e:b5:6b:25:57:c0:7b:44:e0: 24:ce:04:8d:e6:d1:41:20:3f:df:89:30:ce:39:27: 68:f0:d3:2f:77:ba:db:06:51:e2:85:3b:a0:71:af: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:6A:E3:BA:76:85:89:C8:B6:13:AA:9B:78:A3:3D:D5:BC:02:06 X509v3 Authority Key Identifier: keyid:94:53:9F:82:A3:5E:B2:15:8E:D7:C3:62:D5:BA:15:43:3E:7E:D2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lFOfgqNeshWO18Ni1boVQz5-0uE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/A49CDDB88D0E11EFA8FE9371C4F9AE02/lFOfgqNeshWO18Ni1boVQz5-0uE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:85:62:75:cf:33:21:08:5c:22:28:6a:96:90:8d:18:76:48: 1f:6e:91:a6:d5:89:44:8e:27:a4:8a:3c:27:f5:de:04:f5:98: 12:25:d5:e0:02:0c:a8:34:da:ea:31:95:52:45:aa:40:01:e8: 5c:d1:54:66:dc:07:26:a4:9d:e2:b0:d1:09:7a:35:3e:2b:31: 52:59:d7:52:22:91:40:6d:72:e2:31:c7:98:85:76:e1:19:c9: 45:12:01:43:eb:e3:72:c1:6d:09:c8:fb:aa:be:93:9b:20:af: 95:33:19:6e:d4:49:ff:69:5f:b6:02:b7:72:f9:f5:ce:eb:6f: d1:6e:c8:3d:73:72:75:4e:37:42:cf:87:f4:90:d6:f3:97:ff: 8b:c9:fc:46:07:99:90:5f:c7:62:41:55:11:d9:3a:ea:4a:9a: 97:0d:75:03:f0:0d:9a:9a:b7:4f:27:82:d6:7d:70:99:94:2f: a2:a8:25:49:cb:5a:a2:72:1a:46:25:a2:09:9e:c9:63:1d:0a: d1:a6:c5:ea:78:39:d4:66:4f:a2:26:ca:02:c6:1c:89:44:f1: 9a:51:79:64:37:d5:69:10:f4:f4:a9:a4:98:de:4d:ca:fb:1e: b9:2a:47:f6:f3:92:93:c1:1f:1c:8d:92:2b:0e:63:fc:b2:d6: b8:5c:c9:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUVBRTExMC8GA1UEBRMoOTQ1MzlGODJBMzVFQjIxNThFRDdDMzYyRDVCQTE1NDMz RTdFRDJFMTAeFw0yNTA0MjcwNTUxMTNaFw0yNTA1MDQwNTUxMTNaMBgxFjAUBgNV BAMTDTY4MGRjNWQxLWNhYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFj6Uorl256+/aOP2Kqs577P20+oCS2vCfJEprXE03LiLqL8vXsw5+cug8OTL2 M56V+0yMg87NzWOVs/59heKcRSnz9jbQLJZqRwZ+rr69lZ+ptUyNZnFIt1qmYljK ymgo/W8Kd8InJqWRAuxS+9tX3x/KVMvMZ7JzSMaYQzEkTdNp8iwbeFkoq+6nhvHJ eL8WzG+M6Wo/wD7z4ZUYXDjZXR7GP77XWpvohjx1cYSzCeJo2LmN6B+EjysSvv05 jtpuLWBhikyRCkHWWnfZaLjbDa4GYA9qNn61ayVXwHtE4CTOBI3m0UEgP9+JMM45 J2jw0y93utsGUeKFO6Bxr9tdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGpZq47p2 hYnIthOqm3ijPdW8AgYwHwYDVR0jBBgwFoAUlFOfgqNeshWO18Ni1boVQz5+0uEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RUFFL0E0OUNEREI4OEQw RTExRUZBOEZFOTM3MUM0RjlBRTAyL2xGT2ZncU5lc2hXTzE4TmkxYm9WUXo1LTB1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbEZPZmdxTmVzaFdPMThOaTFib1ZRejUtMHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5 RUFFL0E0OUNEREI4OEQwRTExRUZBOEZFOTM3MUM0RjlBRTAyL2xGT2ZncU5lc2hX TzE4TmkxYm9WUXo1LTB1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCFYnXPMyEIXCIoapaQjRh2SB9ukabViUSOJ6SKPCf13gT1mBIl1eAC DKg02uoxlVJFqkAB6FzRVGbcByakneKw0Ql6NT4rMVJZ11IikUBtcuIxx5iFduEZ yUUSAUPr43LBbQnI+6q+k5sgr5UzGW7USf9pX7YCt3L59c7rb9FuyD1zcnVON0LP h/SQ1vOX/4vJ/EYHmZBfx2JBVRHZOupKmpcNdQPwDZqat08ngtZ9cJmUL6KoJUnL WqJyGkYlogmeyWMdCtGmxep4OdRmT6ImygLGHIlE8ZpReWQ31WkQ9PSppJjeTcr7 HrkqR/bzkpPBHxyNkisOY/yy1rhcyR0= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net