$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: zc/o+ykfyq8ntHAY99DcIURe30tbzehQIGreiSlIMBg= Subject key identifier: EC:6A:11:C1:08:DB:08:FB:1A:B3:DE:60:90:DE:5D:D8:79:DD:4A:31 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 030D Signing time: Mon 28 Apr 2025 08:38:24 +0000 Manifest this update: Mon 28 Apr 2025 08:38:23 +0000 Manifest next update: Mon 05 May 2025 08:38:23 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: suU/4e9+aNAoqbNq+y1tSH/Wur8+T7xvjN/HPDsUc4o=) 2: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: uLoocJ1ylZk3Az2/LGZ1XfgBgdwVH2sX978FuwcTqcE=) 3: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: Oo/z3Tl848fDTqTqN7CA+y187n0AUvuUe1PsbRy+loY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 07:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Apr 28 08:38:23 2025 GMT Not After : May 5 08:38:23 2025 GMT Subject: CN=680f3e80-8e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:37:4d:f0:1a:76:e3:5a:ef:c7:61:1f:d0:1f: 3b:ea:9e:1d:ab:cd:95:fc:7c:62:40:08:ac:2f:75: 35:28:ff:43:3a:a7:1e:71:12:cb:d6:77:c0:c2:9a: 77:92:5f:6a:af:b1:fe:2a:27:1c:29:7f:e8:92:b0: 0b:79:40:77:6f:d6:49:6f:db:d3:bb:e0:01:bf:b9: 33:72:79:e9:83:d1:ac:a7:d5:3b:43:94:a9:87:1c: 4b:41:13:04:0d:ac:73:40:e1:3f:6f:8c:34:2c:b2: 4b:c8:97:ec:cb:dc:fe:fa:38:a5:2f:1c:91:c0:25: 52:db:55:45:b9:8e:b2:b7:8c:7d:71:25:83:24:52: c2:f9:25:e9:75:e8:3b:cf:74:5c:01:42:f4:54:91: 26:a0:79:a3:65:db:cb:a3:c6:ed:68:4b:57:9a:1d: 91:44:9f:8a:b0:3e:f8:1f:b1:e5:ec:28:78:76:74: 0d:50:ad:05:ae:01:46:33:35:40:67:e0:38:d7:cf: 68:41:01:b4:af:d8:bf:1a:8a:a6:45:74:cc:c3:21: 68:d5:29:2a:8c:1c:5d:b0:d6:b5:91:51:b8:0d:f7: ac:18:0c:9b:9a:71:68:2d:51:b5:80:53:5e:15:a5: 72:06:3c:e3:bb:f6:86:cf:66:2e:cc:e0:49:a8:d5: 2b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6A:11:C1:08:DB:08:FB:1A:B3:DE:60:90:DE:5D:D8:79:DD:4A:31 X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:80:8f:cd:e3:18:12:6a:07:7a:e1:70:87:12:eb:c6:79:12: a8:e9:19:3a:88:f6:2d:fb:a1:01:22:0b:62:6f:71:bb:76:10: 16:e2:d2:33:bc:0e:26:b7:6f:88:7b:b7:ad:4d:df:f4:fb:9f: 87:d4:f4:18:cb:70:f2:11:db:ec:72:09:85:13:ec:ef:44:76: 31:9a:d9:17:b0:dd:cc:75:5d:4d:d5:eb:06:e1:5f:10:a0:7f: 4e:df:5f:50:0b:21:f6:03:9d:d1:ab:3b:f3:c8:72:66:9b:a3: 11:1f:85:0c:42:68:b4:e8:9c:bf:f0:33:24:ff:0e:f5:4a:6c: 39:9f:13:e7:9b:e9:9d:f7:54:eb:cf:f2:51:e6:86:cc:b1:73: 36:65:08:ca:f8:c8:88:35:85:42:e9:b8:1f:51:2f:4c:a3:9d: 73:af:a0:a3:42:1a:a6:36:7f:12:3b:a6:10:18:6f:59:fa:fa: 49:d8:0a:03:e4:28:de:0d:65:ea:8c:00:a3:d7:fd:cf:d1:8b: f3:9c:53:61:91:a8:53:d3:8f:da:29:bf:cb:b4:ce:84:eb:a6: d5:45:6c:47:78:56:ec:cd:01:ee:70:b1:1b:20:22:a9:77:ed: 34:d7:c7:17:d4:d3:e7:b0:06:80:ec:17:1f:de:a7:f6:98:49: 9c:87:3c:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjUwNDI4MDgzODIzWhcNMjUwNTA1MDgzODIzWjAYMRYwFAYD VQQDEw02ODBmM2U4MC04ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zdN8Bp241rvx2Ef0B876p4dq82V/HxiQAisL3U1KP9DOqcecRLL1nfAwpp3 kl9qr7H+KiccKX/okrALeUB3b9ZJb9vTu+ABv7kzcnnpg9Gsp9U7Q5SphxxLQRME DaxzQOE/b4w0LLJLyJfsy9z++jilLxyRwCVS21VFuY6yt4x9cSWDJFLC+SXpdeg7 z3RcAUL0VJEmoHmjZdvLo8btaEtXmh2RRJ+KsD74H7Hl7Ch4dnQNUK0FrgFGMzVA Z+A4189oQQG0r9i/GoqmRXTMwyFo1SkqjBxdsNa1kVG4DfesGAybmnFoLVG1gFNe FaVyBjzju/aGz2YuzOBJqNUrLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxqEcEI 2wj7GrPeYJDeXdh53UoxMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbgI/N4xgSagd64XCHEuvGeRKo6Rk6iPYt+6EBIgtib3G7dhAW4tIz vA4mt2+Ie7etTd/0+5+H1PQYy3DyEdvscgmFE+zvRHYxmtkXsN3MdV1N1esG4V8Q oH9O319QCyH2A53RqzvzyHJmm6MRH4UMQmi06Jy/8DMk/w71Smw5nxPnm+md91Tr z/JR5obMsXM2ZQjK+MiINYVC6bgfUS9Mo51zr6CjQhqmNn8SO6YQGG9Z+vpJ2AoD 5CjeDWXqjACj1/3P0YvznFNhkahT04/aKb/LtM6E66bVRWxHeFbszQHucLEbICKp d+0018cX1NPnsAaA7Bcf3qf2mEmchzx1 -----END CERTIFICATE-----Generated at Mon Apr 28 10:54:26 2025 by rpki-client on console.sobornost.net