$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: JhaFhQ5wlIQrdq/eg+Kh5qWvamqxMuL4a0t3ynyZhG0= Subject key identifier: 49:C2:CE:C0:65:2B:EE:0E:3B:25:03:05:6D:77:BD:48:85:78:E0:FB Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 0524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 04E9 Signing time: Sat 26 Apr 2025 23:31:47 +0000 Manifest this update: Sat 26 Apr 2025 23:31:46 +0000 Manifest next update: Sat 03 May 2025 23:31:46 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: rH8cZr3e9o9EDpBZx2EwXKyGem20QmzqtrQ3TUFqPe4=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: c5X0bRS1v3BmM8+viPXYxx/gJz2nVR8k5o+BxqMhvNI=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 2jfJLAfv4sSmTjn+t4R2DbosLO6LZGV4JERzq1/IuT0=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: 5XS7gAJ1w57LGdHifEwdGpT41QuHVgx3tURmBIG/Ph0=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: ZVXIXb68LMeIyoHASYy5oVFyflHWdmoVD7FAYMUQOp4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: WiSL38A4AfTZxujdbevnM0BHhlMtOQknr2QyeEfpbeg=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: ANarnw7th2betqTUJ1dSr/6kmM20Z4BPNu0RmkGVouY=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: H6lUECWs/LnmCnEJB/ye5BlXZoehdKlxdmR5+P/1VOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Apr 26 23:31:46 2025 GMT Not After : May 3 23:31:46 2025 GMT Subject: CN=680d6ce2-2775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e5:df:4c:c0:ac:63:a6:73:51:c2:20:64:7f: ec:33:92:94:96:b4:b6:b4:7b:86:aa:e8:a7:5a:d3: f0:9c:a1:9b:b0:11:b4:dd:23:65:18:e7:8d:2c:b5: 83:32:48:f8:d2:0b:74:70:6b:fd:b9:8b:e9:b7:5c: 10:ef:14:e1:46:71:cc:20:c2:18:c4:8b:d6:69:3d: 35:e6:d8:71:a5:30:fe:c2:1d:f5:83:3e:82:86:4c: e5:75:f9:05:cf:4d:84:5d:56:7e:95:eb:84:fe:48: 44:c3:3b:14:6e:2d:63:18:e7:d0:83:19:4f:04:9e: 6b:26:c7:2d:35:f0:26:b4:af:21:12:7b:94:d8:2f: d6:b3:74:eb:3c:a6:f4:ba:1f:bd:2c:19:1b:2b:fe: 41:ce:c2:79:2e:3e:df:8a:a9:c5:cc:9c:be:32:15: 0f:80:a3:b9:96:06:91:1f:74:68:77:95:f3:7e:ca: 90:ff:23:0b:3e:a9:c7:fc:53:d0:c6:f5:39:b8:02: 84:86:89:eb:45:a0:e0:92:e1:20:b0:cf:ad:6a:10: 80:08:15:9b:00:75:26:36:2c:b6:f7:d7:e3:80:7a: cc:d3:16:2c:56:78:a4:3c:d4:0c:c4:41:1d:94:50: c3:84:c6:d0:a5:02:08:3f:e3:eb:11:8a:9e:31:1d: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C2:CE:C0:65:2B:EE:0E:3B:25:03:05:6D:77:BD:48:85:78:E0:FB X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:f8:3b:83:6f:fe:0e:66:41:9e:70:8d:ce:83:c7:3f:bf:64: 60:48:65:ba:6a:53:c4:7e:9d:dd:70:74:5a:3c:be:7e:17:7f: 8c:4b:fc:d0:e3:a3:15:d3:c4:2b:bc:6b:a0:a9:eb:f2:71:62: d6:44:d2:68:32:91:22:70:d9:5f:a5:89:ee:e4:68:8e:7b:b1: 25:84:0a:a8:6a:1b:a5:b2:96:ac:27:a3:96:a1:ab:7f:65:51: dc:7d:8b:a8:50:bc:f5:38:6a:dc:44:87:e7:90:8c:13:86:d2: 4b:c9:05:9b:e0:8f:e6:7b:6f:0e:f8:15:dc:ef:d7:6b:3f:87: 31:0b:f6:29:3b:6c:3f:a9:8d:31:5a:83:27:c2:ca:7c:75:fc: c8:01:30:a7:19:8b:c0:35:c3:54:ce:d3:e5:df:de:5e:d8:6b: 32:5e:bc:53:e1:d1:47:2e:b6:28:18:da:86:15:ff:b0:7d:c8: 08:25:d8:ae:cd:4e:83:2a:c2:3c:89:4a:6b:61:11:f9:d5:0e: 32:b2:05:30:b7:1e:d5:4a:18:a9:03:9d:73:14:5e:ee:b2:f1: 88:42:1a:79:db:5b:99:c6:a9:93:2f:eb:56:74:f9:c1:98:c6: 7f:20:7c:64:89:73:4b:18:bf:4d:c0:88:9d:67:e7:ec:99:db: 55:d7:d0:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUwNDI2MjMzMTQ2WhcNMjUwNTAzMjMzMTQ2WjAYMRYwFAYD VQQDEw02ODBkNmNlMi0yNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uXfTMCsY6ZzUcIgZH/sM5KUlrS2tHuGquinWtPwnKGbsBG03SNlGOeNLLWD Mkj40gt0cGv9uYvpt1wQ7xThRnHMIMIYxIvWaT015thxpTD+wh31gz6ChkzldfkF z02EXVZ+leuE/khEwzsUbi1jGOfQgxlPBJ5rJsctNfAmtK8hEnuU2C/Ws3TrPKb0 uh+9LBkbK/5BzsJ5Lj7fiqnFzJy+MhUPgKO5lgaRH3Rod5XzfsqQ/yMLPqnH/FPQ xvU5uAKEhonrRaDgkuEgsM+tahCACBWbAHUmNiy299fjgHrM0xYsVnikPNQMxEEd lFDDhMbQpQIIP+PrEYqeMR26zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnCzsBl K+4OOyUDBW13vUiFeOD7MB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0+DuDb/4OZkGecI3Og8c/v2RgSGW6alPEfp3dcHRaPL5+F3+MS/zQ 46MV08QrvGugqevycWLWRNJoMpEicNlfpYnu5GiOe7ElhAqoahulspasJ6OWoat/ ZVHcfYuoULz1OGrcRIfnkIwThtJLyQWb4I/me28O+BXc79drP4cxC/YpO2w/qY0x WoMnwsp8dfzIATCnGYvANcNUztPl395e2GsyXrxT4dFHLrYoGNqGFf+wfcgIJdiu zU6DKsI8iUprYRH51Q4ysgUwtx7VShipA51zFF7usvGIQhp521uZxqmTL+tWdPnB mMZ/IHxkiXNLGL9NwIidZ+fsmdtV19A+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net