$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft File: L9JLb9eYBEVzVDhmYs4w3aOyALU.mft (raw, json) Hash identifier: 8ZqfIKGOehWxmQlyEOxEnL/UCbwMatSPiT/gZ69Wmxw= Subject key identifier: DC:C8:19:6C:8A:BD:17:54:69:82:5B:60:FF:EF:B9:E9:EE:75:7D:E5 Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft Manifest number: D3 Signing time: Fri 25 Apr 2025 04:38:45 +0000 Manifest this update: Fri 25 Apr 2025 04:38:44 +0000 Manifest next update: Fri 02 May 2025 04:38:44 +0000 Files and hashes: 1: L9JLb9eYBEVzVDhmYs4w3aOyALU.crl (hash: OFNLalfgxBr+u6Ty3B0HaogceqNhQyGb8GJ1E6VaWR8=) 2: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (hash: xVEJPm+31bLznblOWhCpwIQYSTvCz1YQ0x0L0sMQxuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5 Validity Not Before: Apr 25 04:38:44 2025 GMT Not After : May 2 04:38:44 2025 GMT Subject: CN=680b11d4-7174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:c5:d3:fd:dd:48:e5:cc:fc:83:a8:2b:f7: 0e:0e:1c:a8:a8:cb:6b:61:bb:b1:bc:77:d8:a4:1a: ab:d3:11:23:15:64:84:60:08:cb:df:05:cc:76:6f: 79:7e:11:39:d6:da:e8:15:9c:a2:53:12:ae:7f:a1: da:d4:08:a0:76:01:5e:3f:2b:c3:84:4c:10:91:b8: 95:61:f9:da:14:52:49:06:67:e4:5a:c8:d3:fb:2f: ef:f1:ae:ea:10:71:10:86:2c:4f:e8:76:95:c4:e2: 55:5f:64:2f:5e:de:61:0b:d0:dd:6e:d9:7b:4b:10: 63:1e:24:d9:cd:08:a5:57:0c:b1:50:2b:2e:33:ff: d1:61:03:32:3a:53:c3:0e:16:05:fd:05:b1:aa:a5: bd:55:e1:78:c1:95:ac:a5:2d:cd:3c:f2:6c:a7:0f: fe:68:51:07:b3:0f:92:a0:c8:5c:c6:0b:10:e5:8a: 72:b3:bc:07:70:fb:c8:b6:5b:31:9d:a5:03:91:9b: 0b:9c:ff:67:ab:b0:12:d8:0b:04:5f:66:a4:ff:e6: 4d:5b:73:46:24:06:47:f6:81:b6:5e:3a:89:3d:b2: 44:f5:66:2e:de:57:ce:6b:81:fb:f0:1f:66:35:76: 46:39:9f:cd:88:36:63:bd:89:00:02:02:0c:74:dd: 8b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C8:19:6C:8A:BD:17:54:69:82:5B:60:FF:EF:B9:E9:EE:75:7D:E5 X509v3 Authority Key Identifier: keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0a:10:fd:1b:6d:8f:3c:42:1a:58:18:5b:58:91:ac:3e:33: e1:56:4a:05:3f:dc:d9:8f:1d:7e:b1:3e:30:13:0f:15:2b:30: 09:24:94:a7:be:2c:f1:10:ca:c9:dd:61:e9:a7:d6:80:15:25: 00:9e:14:95:b1:ac:c5:eb:33:7d:52:1b:62:2b:25:58:b6:b2: 29:2e:f1:e6:37:88:d4:a7:24:c2:bc:53:d1:0e:6d:78:0c:c4: bb:6c:10:2b:b0:8c:3f:9f:b0:52:26:6e:83:51:0c:68:a7:82: 9d:09:c2:9a:7c:c2:d0:42:69:0b:e8:a1:73:cc:39:4d:fb:ed: 66:b5:f5:4d:65:0d:8b:7b:1a:a4:57:fa:ca:b7:e8:2a:0e:57: ae:0c:2d:a1:7a:a5:d7:95:6a:0a:78:ed:c7:4b:e6:f2:8c:a7: e4:8b:7b:bb:4e:45:92:c0:56:c7:5b:75:f2:73:ad:c2:9a:b9: 28:f1:aa:0a:36:39:81:49:80:52:14:7b:06:ed:28:ca:5e:49: 7c:02:88:de:69:74:48:49:49:72:93:fb:fe:b6:71:7c:f7:3a: 5d:f6:fc:9e:8e:72:e1:32:38:0a:9c:56:1e:88:a9:d8:5a:65: 66:61:31:49:69:20:d7:4f:15:f8:19:7c:25:39:5d:43:27:9a: 31:ee:1b:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDJGRDI0QjZGRDc5ODA0NDU3MzU0Mzg2NjYyQ0UzMERE QTNCMjAwQjUwHhcNMjUwNDI1MDQzODQ0WhcNMjUwNTAyMDQzODQ0WjAYMRYwFAYD VQQDEw02ODBiMTFkNC03MTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26nF0/3dSOXM/IOoK/cODhyoqMtrYbuxvHfYpBqr0xEjFWSEYAjL3wXMdm95 fhE51troFZyiUxKuf6Ha1AigdgFePyvDhEwQkbiVYfnaFFJJBmfkWsjT+y/v8a7q EHEQhixP6HaVxOJVX2QvXt5hC9Ddbtl7SxBjHiTZzQilVwyxUCsuM//RYQMyOlPD DhYF/QWxqqW9VeF4wZWspS3NPPJspw/+aFEHsw+SoMhcxgsQ5Ypys7wHcPvItlsx naUDkZsLnP9nq7AS2AsEX2ak/+ZNW3NGJAZH9oG2XjqJPbJE9WYu3lfOa4H78B9m NXZGOZ/NiDZjvYkAAgIMdN2L+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzIGWyK vRdUaYJbYP/vuenudX3lMB8GA1UdIwQYMBaAFC/SS2/XmARFc1Q4ZmLOMN2jsgC1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zNEI1QjUxNERB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJFVnpWRGhtWXM0dzNhT3lB TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0w5SkxiOWVZQkVWelZEaG1ZczR3M2FPeUFMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zNEI1QjUxNERBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9MOUpMYjllWUJF VnpWRGhtWXM0dzNhT3lBTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDChD9G22PPEIaWBhbWJGsPjPhVkoFP9zZjx1+sT4wEw8VKzAJJJSn vizxEMrJ3WHpp9aAFSUAnhSVsazF6zN9UhtiKyVYtrIpLvHmN4jUpyTCvFPRDm14 DMS7bBArsIw/n7BSJm6DUQxop4KdCcKafMLQQmkL6KFzzDlN++1mtfVNZQ2Lexqk V/rKt+gqDleuDC2heqXXlWoKeO3HS+byjKfki3u7TkWSwFbHW3Xyc63Cmrko8aoK NjmBSYBSFHsG7SjKXkl8AojeaXRISUlyk/v+tnF89zpd9vyejnLhMjgKnFYeiKnY WmVmYTFJaSDXTxX4GXwlOV1DJ5ox7htY -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:53 2025 by rpki-client on console.sobornost.net