$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft File: L3f37TT2am_GcID7m2G7JnkvhaE.mft (raw, json) Hash identifier: 6isr4zMOx35GT6Rw0YYnRhJ0Xo6vOLBZfYIpbMl0jKo= Subject key identifier: 47:F1:68:E0:4D:90:01:D2:52:13:32:8C:2F:72:4C:0C:A2:83:78:98 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft Manifest number: 0479 Signing time: Sat 26 Apr 2025 23:43:40 +0000 Manifest this update: Sat 26 Apr 2025 23:43:40 +0000 Manifest next update: Sat 03 May 2025 23:43:40 +0000 Files and hashes: 1: L3f37TT2am_GcID7m2G7JnkvhaE.crl (hash: +oUl+UebN/WXu3tikaR3E3xRx/wMJ1NOnwzivBS3pkE=) 2: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (hash: cJIs31sqlgOhonhzClBxUM9SmxEaq46WFcZovXHGcPw=) 3: CE319EDE3D2A11EC8ECCEB1FC4F9AE02.roa (hash: Mum2g6Ft9eC1OvjjJ0nqhQo1XRrbGEG1M1RHx+Vnh0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Apr 26 23:43:40 2025 GMT Not After : May 3 23:43:40 2025 GMT Subject: CN=680d6fac-9fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:91:7f:a7:07:9b:76:32:f0:50:a9:73:5a:9f: 2f:db:e4:35:eb:54:71:88:4a:f5:55:71:b8:77:85: 0b:b7:54:13:cd:7c:62:b5:4d:3b:5f:ff:2d:28:15: 56:b8:1a:30:93:dc:ef:55:8f:34:0e:69:9f:2e:2a: ab:b8:14:90:f1:80:52:18:10:2d:4c:2b:cc:ae:e2: 28:fc:cc:48:11:0e:5a:b3:92:3e:91:96:3a:3a:5d: 46:b1:15:a7:96:ac:7f:c3:23:55:97:3d:81:31:d7: f1:50:ed:33:ef:7e:12:7f:27:c7:2d:9b:ee:45:b9: 64:9a:c8:e0:09:a3:e9:e9:f8:13:d3:82:7f:91:ca: 84:dc:6c:fd:b8:96:87:bd:06:ae:97:45:e6:00:f7: b8:20:7f:60:bc:f6:2a:4a:ba:3c:23:b1:fc:08:75: 0f:51:5a:27:a4:08:1a:c1:32:ba:ab:51:27:be:39: 51:00:2f:16:b9:43:6b:ee:90:2f:ce:1f:60:32:9f: cf:d8:fd:94:0b:64:89:95:9a:1f:29:75:b6:cd:db: 45:79:82:0f:57:02:66:84:6d:f1:79:ff:64:4a:cc: f6:82:bb:02:0b:9d:ab:d3:77:3c:dd:76:45:75:17: 2b:8b:4b:0a:e3:c2:81:32:86:da:a5:3c:8b:bd:16: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F1:68:E0:4D:90:01:D2:52:13:32:8C:2F:72:4C:0C:A2:83:78:98 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ab:ae:a1:20:af:8c:d4:16:10:f2:7a:65:dd:b3:b3:24:49: 14:d7:48:7c:3b:bc:1b:ba:d1:5d:74:d3:27:a4:2c:ba:74:0c: 3e:76:47:a8:10:8c:51:77:ff:2e:c6:f1:ac:73:90:14:0f:83: 86:ea:b3:73:e0:a6:54:a3:43:9f:92:8a:13:71:7c:ab:83:7b: 30:dd:50:a2:34:5c:1e:8e:b8:cc:58:ff:da:fe:d6:9a:a0:eb: 67:35:84:c2:c8:69:b4:d5:43:c0:9f:d8:3b:c0:b2:7b:a3:31: 47:0d:f2:50:e3:89:37:d1:4f:e6:db:97:a1:b4:62:fc:03:41: 62:b1:0a:fb:e9:50:00:b0:f6:32:7e:40:ce:0d:c5:19:63:41: ef:72:0d:a7:a1:bc:48:be:f5:a2:15:e1:5b:64:3a:43:1f:0a: 95:55:40:e9:2a:5c:cd:56:96:50:46:4f:b8:61:2a:3f:72:4d: 0a:9a:8c:bc:66:f2:cd:67:37:af:db:8e:25:22:d6:fa:0f:9b: 4e:53:7e:f8:9a:91:92:46:92:e7:84:89:bb:c6:31:2f:31:e9: f6:bb:ee:42:19:71:4a:68:64:25:83:c3:b0:99:ef:f9:08:86: 3a:53:dd:8f:1f:6e:33:c6:30:bf:ec:3e:f3:e7:6b:e6:45:6b: c4:7c:d8:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUwNDI2MjM0MzQwWhcNMjUwNTAzMjM0MzQwWjAYMRYwFAYD VQQDEw02ODBkNmZhYy05ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5F/pwebdjLwUKlzWp8v2+Q161RxiEr1VXG4d4ULt1QTzXxitU07X/8tKBVW uBowk9zvVY80DmmfLiqruBSQ8YBSGBAtTCvMruIo/MxIEQ5as5I+kZY6Ol1GsRWn lqx/wyNVlz2BMdfxUO0z734SfyfHLZvuRblkmsjgCaPp6fgT04J/kcqE3Gz9uJaH vQaul0XmAPe4IH9gvPYqSro8I7H8CHUPUVonpAgawTK6q1EnvjlRAC8WuUNr7pAv zh9gMp/P2P2UC2SJlZofKXW2zdtFeYIPVwJmhG3xef9kSsz2grsCC52r03c83XZF dRcri0sK48KBMobapTyLvRbQZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfxaOBN kAHSUhMyjC9yTAyig3iYMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM5MC80MkUxRkQyQTNEMjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFt X0djSUQ3bTJHN0pua3ZoYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNq66hIK+M1BYQ8npl3bOzJEkU10h8O7wbutFddNMnpCy6dAw+dkeo EIxRd/8uxvGsc5AUD4OG6rNz4KZUo0OfkooTcXyrg3sw3VCiNFwejrjMWP/a/taa oOtnNYTCyGm01UPAn9g7wLJ7ozFHDfJQ44k30U/m25ehtGL8A0FisQr76VAAsPYy fkDODcUZY0Hvcg2nobxIvvWiFeFbZDpDHwqVVUDpKlzNVpZQRk+4YSo/ck0Kmoy8 ZvLNZzev244lItb6D5tOU374mpGSRpLnhIm7xjEvMen2u+5CGXFKaGQlg8Owme/5 CIY6U92PH24zxjC/7D7z52vmRWvEfNj+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:02 2025 by rpki-client on console.sobornost.net