$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft File: LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft (raw, json) Hash identifier: +0nGyEeRIZSZq4qxTQwJnGwkbqdAGIkVv31bTg6DDoU= Subject key identifier: 73:B6:2D:6B:65:3D:83:6A:AF:B0:FE:3E:0A:B1:49:B2:7A:25:E6:E5 Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Certificate serial: 133B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft Manifest number: 12E4 Signing time: Mon 28 Apr 2025 17:19:10 +0000 Manifest this update: Mon 28 Apr 2025 17:19:10 +0000 Manifest next update: Mon 05 May 2025 17:19:10 +0000 Files and hashes: 1: LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl (hash: P6d0BUa5Wv8RM3W2kLtgLxNnOyC9VCWGtyfCOcBC04A=) 2: 7302617AC78E11E8BC20B719C4F9AE02.roa (hash: sjn+Ca3CIoVaW6VbJ0cVQY8YczhjL0b0Si8hIFo/7wg=) 3: ED7D926622C511EE8579CC72C4F9AE02.roa (hash: ijr6UDNyvj4aysISbjMaLFQ8kk4sQ7342WXhcB82+Yo=) 4: 4AC75BA8FFE311EBB4FA4965C4F9AE02.roa (hash: jOyHfCeGHLkQkWPLP0TxF4XakIxFwaSt07hLgc5fNhY=) 5: 0396C48E5E7011EDAD328E21C4F9AE02.roa (hash: vKpj3gtlk/oArus3QVt8qMIl2rVV8ZR8fTIi0bGHkes=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4923 (0x133b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C Validity Not Before: Apr 28 17:19:10 2025 GMT Not After : May 5 17:19:10 2025 GMT Subject: CN=680fb88e-22a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:8d:50:f8:ab:65:26:0b:69:ae:79:2b:68: 6e:3e:68:54:c3:08:3a:6e:87:6e:2c:31:8e:1a:7e: 6b:1e:45:e3:ae:8c:c1:38:e9:6a:1e:81:9d:31:4a: 41:6a:72:74:fe:41:72:1a:59:a3:96:f8:78:47:77: f0:49:d7:f0:bd:34:82:13:f4:57:c1:3e:55:0d:a6: 06:a6:cc:22:f8:f4:4c:4f:6b:6f:51:96:bc:04:fc: 68:fa:7d:e7:dd:43:91:eb:e9:f0:5f:2b:ac:15:03: a9:46:d1:16:c6:7a:73:0a:cb:00:33:03:36:a4:96: 1d:82:c4:0a:e4:2d:02:24:d7:f7:4e:3f:98:42:7b: 9e:03:b4:0a:6f:fb:d8:22:b0:ae:6a:2b:0a:1e:51: 8f:89:29:bd:4a:cf:3e:85:36:de:71:58:b8:f7:c5: 72:99:42:64:63:b2:de:e8:17:2e:d4:6c:5b:29:1d: ee:5e:66:d3:5a:46:83:9b:10:74:67:1b:c4:7b:d2: 1e:16:05:34:73:b2:50:5d:51:47:28:dd:0b:25:24: 56:5d:88:16:29:6c:8c:d9:f8:29:f5:3f:0e:2c:c3: db:44:07:ac:0a:05:be:55:cb:3c:8f:fc:11:1b:17: 95:3a:30:74:42:4a:3e:87:56:c1:91:92:5f:78:c3: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B6:2D:6B:65:3D:83:6A:AF:B0:FE:3E:0A:B1:49:B2:7A:25:E6:E5 X509v3 Authority Key Identifier: keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:3a:e8:e9:0f:d1:a0:2c:dc:57:97:6e:86:05:b9:0d:32:3d: 2d:37:e4:e0:f1:94:27:7d:59:a7:a0:e6:26:a0:0f:7e:ae:2e: bb:6a:f7:ed:d1:41:8f:5a:02:f4:75:a4:f3:c3:d5:fe:7e:61: 89:e7:e9:ac:11:f3:5a:b4:84:d1:94:00:e3:60:16:9f:af:24: 59:e8:1a:4e:80:d1:85:13:eb:c2:43:f5:99:5f:e7:4b:7c:bb: 78:c4:e4:7a:fc:60:67:70:e3:f1:8b:08:91:43:2b:56:1e:8b: ab:1c:43:89:5e:c4:93:7f:46:79:9a:04:1e:f8:99:13:25:ec: 2c:ff:91:e8:f3:9f:10:ce:dc:f7:2b:20:42:bb:23:86:39:b7: d1:50:9d:33:bb:2b:f8:71:63:70:fb:70:56:84:2b:68:ef:3a: b1:2c:87:3a:3b:e3:5e:3b:f4:70:ae:32:09:7c:dd:53:99:41: ed:21:41:bc:ad:24:31:64:3b:9d:e0:9c:d2:f3:ea:76:38:d9: f4:08:8b:e2:f3:df:da:60:94:21:26:71:19:49:3c:e0:9f:5f: ce:d1:cc:19:9a:0d:f6:53:5f:c2:72:69:2b:86:f8:06:d8:53: 70:5d:71:d2:6c:37:f7:55:d9:59:32:47:50:e8:60:87:82:01: 09:cf:87:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKDJEQTI1MUMxMUFDNjg4MTRGNTI3RjIyRTU1REU5QUM4 QzU3RkQ2NkMwHhcNMjUwNDI4MTcxOTEwWhcNMjUwNTA1MTcxOTEwWjAYMRYwFAYD VQQDEw02ODBmYjg4ZS0yMmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSSNUPirZSYLaa55K2huPmhUwwg6boduLDGOGn5rHkXjrozBOOlqHoGdMUpB anJ0/kFyGlmjlvh4R3fwSdfwvTSCE/RXwT5VDaYGpswi+PRMT2tvUZa8BPxo+n3n 3UOR6+nwXyusFQOpRtEWxnpzCssAMwM2pJYdgsQK5C0CJNf3Tj+YQnueA7QKb/vY IrCuaisKHlGPiSm9Ss8+hTbecVi498VymUJkY7Le6Bcu1GxbKR3uXmbTWkaDmxB0 ZxvEe9IeFgU0c7JQXVFHKN0LJSRWXYgWKWyM2fgp9T8OLMPbRAesCgW+Vcs8j/wR GxeVOjB0Qko+h1bBkZJfeMPcwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHO2LWtl PYNqr7D+PgqxSbJ6JeblMB8GA1UdIwQYMBaAFC2iUcEaxogU9SfyLlXemsjFf9Zs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BQUI4MDJFOEM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lCVDFKX0l1VmQ2YXlNVl8x bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhSlJ3UnJHaUJUMUpfSXVWZDZheU1WXzFtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTQzNi9BQUI4MDJFOEM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9MYUpSd1JyR2lC VDFKX0l1VmQ2YXlNVl8xbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGOujpD9GgLNxXl26GBbkNMj0tN+Tg8ZQnfVmnoOYmoA9+ri67avft 0UGPWgL0daTzw9X+fmGJ5+msEfNatITRlADjYBafryRZ6BpOgNGFE+vCQ/WZX+dL fLt4xOR6/GBncOPxiwiRQytWHourHEOJXsSTf0Z5mgQe+JkTJews/5Ho858Qztz3 KyBCuyOGObfRUJ0zuyv4cWNw+3BWhCto7zqxLIc6O+NeO/RwrjIJfN1TmUHtIUG8 rSQxZDud4JzS8+p2ONn0CIvi89/aYJQhJnEZSTzgn1/O0cwZmg32U1/CcmkrhvgG 2FNwXXHSbDf3VdlZMkdQ6GCHggEJz4eG -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:48 2025 by rpki-client on console.sobornost.net