$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft File: lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft (raw, json) Hash identifier: g0sFGCgKT0yK9t7vh4xA8jwNjD5kIQDs7nAQUtUAMOU= Subject key identifier: 24:7C:15:45:35:F9:52:18:2E:FC:D0:0E:59:FA:C9:1D:8C:83:15:B1 Authority key identifier: 97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 Certificate issuer: /CN=A91A1C06/serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft Manifest number: 348B Signing time: Mon 28 Apr 2025 15:06:34 +0000 Manifest this update: Mon 28 Apr 2025 15:06:34 +0000 Manifest next update: Mon 05 May 2025 15:06:34 +0000 Files and hashes: 1: lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl (hash: hnBRxJzF2IJqUDW9IOdfC+uocLtBsgG/AO9ewSzIJ7c=) 2: C64C7958422411EA9CA5F423C4F9AE02.roa (hash: gJwOccgnH3xfVK9Ge3NY4ACv1N9EO/ya1L5O9ulfS9A=) 3: FB50A65027B311EFBA31BB40C4F9AE02.roa (hash: lCjcuN3RSUzDTTX5oZhMnE3axtzeaFw5cyewHimqMWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 15:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1C06, serialNumber=9737713004819B6B66FC56E6EC86BE4DC2E28E17 Validity Not Before: Apr 28 15:06:34 2025 GMT Not After : May 5 15:06:34 2025 GMT Subject: CN=680f997a-733f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a9:48:79:78:90:b7:ed:11:dc:0f:a5:3e:52: dd:3c:4e:18:b2:70:7c:26:f1:85:dc:9b:3a:78:ce: 0d:85:53:75:5d:23:6d:a3:ba:94:91:4c:b1:1a:3d: c9:d3:6f:b9:92:56:44:8b:ce:ce:47:df:b9:53:f4: 0b:3a:03:2e:2b:f5:36:fd:62:06:95:52:0f:5e:ca: 5c:8f:f7:a1:37:8d:31:48:be:2e:09:7e:77:5b:83: 00:88:7d:f6:d0:fd:61:45:52:39:c1:de:34:09:f7: 19:5c:a1:70:5f:60:78:d8:a9:d1:00:89:c4:42:6d: 5a:ce:cf:1e:14:b5:14:1c:4f:89:ae:0b:a4:ec:d8: 93:93:53:9f:21:a5:bd:90:bb:69:69:33:fb:ff:29: 8c:66:bd:d9:03:a0:96:89:be:e3:6d:44:db:e6:eb: d9:64:41:e1:93:62:e0:4c:99:73:52:53:e2:65:df: c0:09:22:5d:47:33:89:99:38:c2:ee:66:33:53:d0: 0e:46:78:b8:08:c5:ad:03:a5:8d:f4:cb:33:49:57: 59:28:c9:be:13:e7:38:47:77:62:9b:1e:5f:b5:bb: 28:88:cf:8e:e3:06:0c:14:0c:29:6b:71:a0:06:ed: 20:66:b0:f3:b5:d9:52:fc:ec:14:29:bd:f3:55:72: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:15:45:35:F9:52:18:2E:FC:D0:0E:59:FA:C9:1D:8C:83:15:B1 X509v3 Authority Key Identifier: keyid:97:37:71:30:04:81:9B:6B:66:FC:56:E6:EC:86:BE:4D:C2:E2:8E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C06/6DEAE21C1D9D11E28B1FA78C08B02CD2/lzdxMASBm2tm_Fbm7Ia-TcLijhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:0f:71:66:c0:5a:55:91:2e:3a:f6:f7:1b:a4:c1:36:eb:49: 86:9f:71:11:c9:df:b8:22:29:40:e4:16:66:ee:fa:30:8d:64: 61:f1:c0:9c:c4:fd:62:cd:ae:15:20:a7:00:d4:b0:e1:3a:2f: 51:43:45:89:a2:c5:a3:fd:2c:12:4a:13:c7:a2:f1:cf:c4:e4: 14:0b:91:82:7b:05:7e:9f:35:cd:07:61:ee:3c:c4:75:14:16: b4:fe:29:b5:eb:ea:ec:96:32:e4:5a:f1:09:23:77:e0:29:be: 75:64:2c:63:f5:3e:b4:10:21:d6:5a:98:78:41:57:aa:62:c7: ca:2c:da:1d:08:a3:5a:de:68:0e:ff:1e:c5:d3:30:a8:29:75: 34:b3:6c:08:ff:99:09:0a:7e:5f:d7:fe:f8:48:f8:4c:fb:3e: df:fb:79:01:c4:e4:b9:27:a0:7c:cc:3e:95:66:ca:e8:af:93: 45:e7:9d:9e:d4:bf:37:4c:ac:e6:3c:a6:7b:9b:f5:f7:8a:d6: ea:74:67:be:ff:91:b5:de:33:8e:c9:9d:7b:a4:c0:e6:13:5c: ef:a2:38:04:6c:eb:43:ef:28:36:9e:b0:6e:af:91:ad:a1:7a: 2a:0a:a2:fc:dd:81:7e:99:b4:88:df:be:ae:9a:7d:ea:ed:63: b1:92:6c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDMDYxMTAvBgNVBAUTKDk3Mzc3MTMwMDQ4MTlCNkI2NkZDNTZFNkVDODZCRTRE QzJFMjhFMTcwHhcNMjUwNDI4MTUwNjM0WhcNMjUwNTA1MTUwNjM0WjAYMRYwFAYD VQQDEw02ODBmOTk3YS03MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3alIeXiQt+0R3A+lPlLdPE4YsnB8JvGF3Js6eM4NhVN1XSNto7qUkUyxGj3J 02+5klZEi87OR9+5U/QLOgMuK/U2/WIGlVIPXspcj/ehN40xSL4uCX53W4MAiH32 0P1hRVI5wd40CfcZXKFwX2B42KnRAInEQm1azs8eFLUUHE+Jrguk7NiTk1OfIaW9 kLtpaTP7/ymMZr3ZA6CWib7jbUTb5uvZZEHhk2LgTJlzUlPiZd/ACSJdRzOJmTjC 7mYzU9AORni4CMWtA6WN9MszSVdZKMm+E+c4R3dimx5ftbsoiM+O4wYMFAwpa3Gg Bu0gZrDztdlS/OwUKb3zVXLSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR8FUU1 +VIYLvzQDln6yR2MgxWxMB8GA1UdIwQYMBaAFJc3cTAEgZtrZvxW5uyGvk3C4o4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUMwNi82REVBRTIxQzFE OUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0ydG1fRmJtN0lhLVRjTGlq aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x6ZHhNQVNCbTJ0bV9GYm03SWEtVGNMaWpoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUMwNi82REVBRTIxQzFEOUQxMUUyOEIxRkE3OEMwOEIwMkNEMi9semR4TUFTQm0y dG1fRmJtN0lhLVRjTGlqaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5D3FmwFpVkS469vcbpME260mGn3ERyd+4IilA5BZm7vowjWRh8cCc xP1iza4VIKcA1LDhOi9RQ0WJosWj/SwSShPHovHPxOQUC5GCewV+nzXNB2HuPMR1 FBa0/im16+rsljLkWvEJI3fgKb51ZCxj9T60ECHWWph4QVeqYsfKLNodCKNa3mgO /x7F0zCoKXU0s2wI/5kJCn5f1/74SPhM+z7f+3kBxOS5J6B8zD6VZsror5NF552e 1L83TKzmPKZ7m/X3itbqdGe+/5G13jOOyZ17pMDmE1zvojgEbOtD7yg2nrBur5Gt oXoqCqL83YF+mbSI376umn3q7WOxkmwl -----END CERTIFICATE-----Generated at Mon Apr 28 17:45:59 2025 by rpki-client on console.sobornost.net