$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: qlC3VhXPxCmI2H7z9CwFVpebtbdKwov4eoSU6iMirO8= Subject key identifier: 1C:FF:13:DF:8A:AD:36:80:6C:C6:1C:D0:73:3F:94:0F:45:FE:79:FF Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 01C3 Signing time: Fri 25 Apr 2025 02:11:13 +0000 Manifest this update: Fri 25 Apr 2025 02:11:12 +0000 Manifest next update: Fri 02 May 2025 02:11:12 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: +S1j60FeZi7kOuo3xJHQchLoanMzxPSjjqADLdPrPNw=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Apr 25 02:11:12 2025 GMT Not After : May 2 02:11:12 2025 GMT Subject: CN=680aef41-15af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:18:49:a2:be:4c:e9:1c:87:70:fe:b2:a7: b8:be:28:fd:f1:8b:6d:49:7c:b1:46:36:e3:9c:5a: d0:27:58:0f:77:00:53:a6:11:0b:11:c5:2a:77:6f: a3:f9:b3:87:b0:2a:ec:a5:f3:8a:f4:00:1f:99:38: 9c:da:1e:35:94:98:42:93:0c:62:01:50:59:97:39: 59:16:9b:a1:fe:8e:b4:4c:56:a4:82:59:d2:f8:34: ec:0a:57:57:2b:92:58:5f:b7:5e:d9:6b:b2:79:59: 6b:4e:8a:5c:a7:3f:1f:63:a4:93:18:50:89:44:79: ae:f4:77:ec:39:17:db:3c:00:57:10:54:75:8c:11: 75:b5:50:0f:e8:52:25:c9:8f:29:97:cc:57:f8:dc: 05:0b:5b:c7:83:cb:81:19:00:1e:34:6d:22:f3:21: 12:9c:cf:e3:91:34:04:03:8a:5d:c7:ef:12:e3:6c: be:8c:4e:05:63:60:d7:ea:8e:0f:87:7a:e5:02:19: e8:60:55:ed:0a:f0:70:af:9e:d2:4e:82:95:e3:88: 3a:0f:d5:18:07:ac:83:9b:1e:d0:a2:0d:f1:46:3a: 79:cc:9f:a9:eb:f0:6a:0b:72:e7:55:6b:af:ad:98: d9:68:f5:af:db:ae:58:ba:0a:43:03:69:b8:3d:8e: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FF:13:DF:8A:AD:36:80:6C:C6:1C:D0:73:3F:94:0F:45:FE:79:FF X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:86:0f:e3:43:65:98:5f:1f:73:0a:c8:10:0e:56:47:9a:39: f0:35:17:10:e6:50:42:f3:e4:c3:14:1b:66:4d:92:f6:3d:09: a9:dd:f1:08:70:f8:01:04:8a:e8:b5:67:41:ab:d7:f6:44:a4: 66:07:f5:86:9f:e1:20:09:bc:45:57:13:86:33:84:02:08:8f: 3f:29:1e:19:98:90:4e:c4:d5:fb:f5:11:96:c5:a5:d5:21:e9: a1:a1:fa:4c:9c:eb:1c:b1:ce:07:a8:26:28:46:ce:d9:7b:b9: 2c:40:e5:1b:6c:13:dd:ce:5b:fe:12:09:b1:8e:07:a2:1e:9a: 68:49:3d:c9:c8:b7:77:1e:ef:d9:61:0e:5f:84:79:66:fc:58: ee:a7:37:b1:6c:e3:8f:57:7d:02:b9:9f:89:56:da:71:c6:91: fe:4b:6f:f2:75:56:a4:4b:9a:0a:68:e3:68:cf:30:85:78:1f: ec:a1:97:68:d9:ac:79:6c:99:eb:dc:f5:ff:f6:a8:fd:b2:ca: b8:bf:cf:5e:ba:ad:99:36:dd:d1:9b:89:cb:cb:4a:86:59:1b: 64:1c:c5:ad:0b:b4:07:8c:72:0a:6a:02:97:7e:7b:b9:f2:e9: fa:54:c2:69:33:87:ae:57:5e:81:39:5d:42:a0:4a:37:bb:bc: 7b:17:f9:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUwNDI1MDIxMTEyWhcNMjUwNTAyMDIxMTEyWjAYMRYwFAYD VQQDEw02ODBhZWY0MS0xNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LMYSaK+TOkch3D+sqe4vij98YttSXyxRjbjnFrQJ1gPdwBTphELEcUqd2+j +bOHsCrspfOK9AAfmTic2h41lJhCkwxiAVBZlzlZFpuh/o60TFakglnS+DTsCldX K5JYX7de2WuyeVlrTopcpz8fY6STGFCJRHmu9HfsORfbPABXEFR1jBF1tVAP6FIl yY8pl8xX+NwFC1vHg8uBGQAeNG0i8yESnM/jkTQEA4pdx+8S42y+jE4FY2DX6o4P h3rlAhnoYFXtCvBwr57SToKV44g6D9UYB6yDmx7Qog3xRjp5zJ+p6/BqC3LnVWuv rZjZaPWv265YugpDA2m4PY6w7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBz/E9+K rTaAbMYc0HM/lA9F/nn/MB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrhg/jQ2WYXx9zCsgQDlZHmjnwNRcQ5lBC8+TDFBtmTZL2PQmp3fEI cPgBBIrotWdBq9f2RKRmB/WGn+EgCbxFVxOGM4QCCI8/KR4ZmJBOxNX79RGWxaXV IemhofpMnOscsc4HqCYoRs7Ze7ksQOUbbBPdzlv+EgmxjgeiHppoST3JyLd3Hu/Z YQ5fhHlm/FjupzexbOOPV30CuZ+JVtpxxpH+S2/ydVakS5oKaONozzCFeB/soZdo 2ax5bJnr3PX/9qj9ssq4v89euq2ZNt3Rm4nLy0qGWRtkHMWtC7QHjHIKagKXfnu5 8un6VMJpM4euV16BOV1CoEo3u7x7F/l5 -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:59 2025 by rpki-client on console.sobornost.net