$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json) Hash identifier: X9BzACGoq3youNzQbZLdFuc8lJjJPrMmXeXBxeaum3k= Subject key identifier: 71:40:AE:66:82:D0:89:7D:BB:D7:CD:2B:CB:A0:A7:85:3D:76:43:63 Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft Manifest number: 0293 Signing time: Sun 27 Apr 2025 01:12:00 +0000 Manifest this update: Sun 27 Apr 2025 01:11:59 +0000 Manifest next update: Sun 04 May 2025 01:11:59 +0000 Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: f1Di9u/zgh6KhCu4lszrEV6whvfoHwZ0HWCjakLm+jg=) 2: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: tal6R2lkJBoeIIUyi6mdxCD2dqzkhyqrKbW//gzTT04=) 3: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: Qlo4+mbKJCym2bywU9/+B9nSR/lgPkj3tiR7WBd3VEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Validity Not Before: Apr 27 01:11:59 2025 GMT Not After : May 4 01:11:59 2025 GMT Subject: CN=680d8460-4747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:75:56:30:5b:40:91:2f:e1:90:5d:11:b0: 46:e5:b7:34:33:81:a8:1c:d2:f9:62:d3:7d:da:d5: f4:76:e7:c5:12:00:5f:47:4a:fb:a6:03:f7:33:24: a1:87:31:a2:dc:7b:a1:ff:e2:8a:10:8c:79:c6:65: fc:90:ae:9e:f7:72:2a:bf:77:05:c9:3c:f0:b9:9c: c0:65:36:cc:e9:c6:1f:49:72:43:5e:8f:02:60:c6: 3b:17:b9:2a:c3:f2:a2:1e:5d:d1:b1:d8:fc:99:cc: d3:3e:01:1b:ac:43:14:31:b6:41:30:27:ee:ff:fa: a6:59:8e:08:49:76:fe:3b:9a:ed:7c:40:82:c9:ef: ec:4a:92:3e:ec:32:0a:6e:37:77:90:9e:10:56:e6: 9d:28:83:f7:20:02:57:44:6a:42:3b:e6:a5:63:8f: 13:f8:8d:6f:ef:6a:25:a7:a3:44:12:e6:c8:2c:64: 7e:a6:35:65:58:4f:2f:22:6d:78:13:94:ee:c7:03: 04:dc:08:d2:be:67:fb:27:36:88:3a:79:2f:2a:7d: 60:fb:f3:52:38:2d:48:50:a9:93:39:aa:64:92:1f: 72:e2:c0:35:fb:7f:d8:1d:6f:38:c9:89:06:62:84: 5d:84:53:81:63:05:a9:3b:a2:42:10:ab:3a:9d:ad: ef:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:AE:66:82:D0:89:7D:BB:D7:CD:2B:CB:A0:A7:85:3D:76:43:63 X509v3 Authority Key Identifier: keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:b3:bc:f4:2b:4f:3d:8e:c4:f1:6a:69:ee:5f:c2:e9:7a: 05:81:26:c1:e3:08:4a:ea:e6:a8:12:e0:be:19:b5:f0:78:16: ce:b0:9e:76:05:56:75:d0:bd:3e:8a:28:cc:7a:84:db:01:61: a7:c4:37:1a:fa:9c:86:48:52:d3:ed:0f:63:71:53:e1:2a:12: 9c:c7:29:88:76:e5:5e:1c:ec:9e:b7:c2:69:35:be:ea:41:33: e0:6b:2d:cd:d8:88:65:9d:fb:0f:ef:c8:4b:84:c7:7e:10:a6: 79:18:00:e5:9e:24:11:36:cf:0e:c8:13:ab:0b:1b:53:50:77: 6f:53:95:a5:fb:c2:05:97:f4:40:72:8d:ab:51:a1:7a:b9:fe: 0a:89:06:90:eb:7b:81:10:84:bb:52:cd:a8:e1:9e:8a:33:44: 13:df:67:73:e9:8e:9c:a9:49:a3:71:18:ac:2c:5f:0a:6f:8e: bb:a6:e9:8e:79:77:51:99:ac:0b:6d:1d:df:97:1a:f4:1b:5b: 2e:81:57:3a:8a:00:70:9f:29:25:a4:79:23:49:50:98:63:8c: 59:3e:51:48:ea:32:c0:b8:61:8e:de:6b:da:f0:ba:0f:26:22: b7:c4:81:97:1a:cf:0e:24:17:a4:d7:44:48:e3:98:c2:2f:a9: 4d:b8:4f:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0 M0U4QUYxMUIwHhcNMjUwNDI3MDExMTU5WhcNMjUwNTA0MDExMTU5WjAYMRYwFAYD VQQDEw02ODBkODQ2MC00NzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBR1VjBbQJEv4ZBdEbBG5bc0M4GoHNL5YtN92tX0dufFEgBfR0r7pgP3MySh hzGi3Huh/+KKEIx5xmX8kK6e93Iqv3cFyTzwuZzAZTbM6cYfSXJDXo8CYMY7F7kq w/KiHl3Rsdj8mczTPgEbrEMUMbZBMCfu//qmWY4ISXb+O5rtfECCye/sSpI+7DIK bjd3kJ4QVuadKIP3IAJXRGpCO+alY48T+I1v72olp6NEEubILGR+pjVlWE8vIm14 E5TuxwME3AjSvmf7JzaIOnkvKn1g+/NSOC1IUKmTOapkkh9y4sA1+3/YHW84yYkG YoRdhFOBYwWpO6JCEKs6na3vBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFArmaC 0Il9u9fNK8ugp4U9dkNjMB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4 UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS U3BMTnZzWmlnaFpENks4UnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCU7O89CtPPY7E8Wpp7l/C6XoFgSbB4whK6uaoEuC+GbXweBbOsJ52 BVZ10L0+iijMeoTbAWGnxDca+pyGSFLT7Q9jcVPhKhKcxymIduVeHOyet8JpNb7q QTPgay3N2IhlnfsP78hLhMd+EKZ5GADlniQRNs8OyBOrCxtTUHdvU5Wl+8IFl/RA co2rUaF6uf4KiQaQ63uBEIS7Us2o4Z6KM0QT32dz6Y6cqUmjcRisLF8Kb467pumO eXdRmawLbR3flxr0G1sugVc6igBwnyklpHkjSVCYY4xZPlFI6jLAuGGO3mva8LoP JiK3xIGXGs8OJBek10RI45jCL6lNuE8V -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:11 2025 by rpki-client on console.sobornost.net