$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft File: lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft (raw, json) Hash identifier: iJA7FePOX5xldUa/K7ffpQhmnioUsEvwp4p4bFZEaqk= Subject key identifier: F6:5E:36:4C:8A:6B:9F:71:CD:A8:5B:28:BE:7A:74:22:75:DB:9C:54 Authority key identifier: 96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 Certificate issuer: /CN=A91B8CA6/serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft Manifest number: 0B53 Signing time: Mon 28 Apr 2025 19:28:59 +0000 Manifest this update: Mon 28 Apr 2025 19:28:58 +0000 Manifest next update: Mon 05 May 2025 19:28:58 +0000 Files and hashes: 1: lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl (hash: DpAdSdTKeuwaaoO0WHF11YseeFVrbCOkeGbdivVOX74=) 2: CF0AE642EBA711EA8980FC11C4F9AE02.roa (hash: 45GbY96Fyb/0AZFS4Z/18mSsic13HmUraXW0dDqk/Bc=) 3: 280D2770EBB011EA8AF6012DC4F9AE02.roa (hash: vl/LhboPbfhb4po2/R+21X77qlX9wqRDDqveokiyeao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CA6, serialNumber=96F817BD4070B5CC19A0B5393D55BE773980A810 Validity Not Before: Apr 28 19:28:58 2025 GMT Not After : May 5 19:28:58 2025 GMT Subject: CN=680fd6fa-c986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:40:3d:f8:90:1d:fd:20:b8:4c:d3:be:ae:63: 50:9f:02:c1:f0:6f:d0:bc:b7:e9:7d:2f:a9:5d:da: b6:b1:cb:01:72:0c:9c:a7:e8:66:76:b9:8f:69:a1: 35:9e:50:21:3a:d1:23:d5:6d:3e:4f:d3:8b:3e:86: 05:8e:48:50:4f:fd:62:8e:61:bf:81:01:8c:7b:89: dc:20:65:20:35:f6:00:2f:de:d5:38:5e:87:10:be: c5:c6:6a:e3:50:6d:09:48:65:09:fd:4d:ef:ed:8f: 8e:c0:f4:e6:a3:2e:c5:7a:57:05:47:b9:9a:88:5d: 21:99:a1:62:02:e2:1d:37:d2:53:a7:e5:92:9f:1a: 16:87:fa:50:c4:84:aa:9d:a1:b5:4b:b2:87:6b:49: 6d:74:c1:4b:db:6d:39:21:2f:75:2b:a7:27:79:83: 3a:98:55:64:d7:a9:ad:a5:4a:f2:4c:27:f8:7a:de: be:b1:f8:a7:6c:11:41:28:a1:f6:46:31:b2:67:94: 2f:f6:4f:ca:8a:c6:e9:38:d7:62:31:a2:f8:b1:70: 25:3e:c6:dd:7b:2c:bf:bd:c7:9b:1a:f4:95:9f:8f: d1:4c:d0:b6:4a:be:cf:fe:df:72:d3:cc:d8:a9:ad: 82:58:74:68:0d:84:16:00:af:6f:9e:72:70:f6:90: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5E:36:4C:8A:6B:9F:71:CD:A8:5B:28:BE:7A:74:22:75:DB:9C:54 X509v3 Authority Key Identifier: keyid:96:F8:17:BD:40:70:B5:CC:19:A0:B5:39:3D:55:BE:77:39:80:A8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvgXvUBwtcwZoLU5PVW-dzmAqBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CA6/9BD64056320611EAA2F6B332C4F9AE02/lvgXvUBwtcwZoLU5PVW-dzmAqBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e5:54:f8:03:af:e0:a3:f5:8d:ec:ff:1d:33:2c:be:5d:5e: 1d:1a:35:de:c9:5b:de:ab:33:98:18:ef:12:58:ee:74:fc:a7: 0e:cb:d7:a4:08:de:85:34:e0:7e:6e:e3:80:f7:32:f7:21:17: 90:e4:84:46:a2:72:b5:3c:c6:e7:df:e3:e4:a7:59:b0:93:1b: 01:eb:db:74:bc:73:47:65:ad:9c:36:06:e5:22:e3:21:45:df: ef:f8:69:62:25:8a:a8:e8:d5:d9:72:77:14:37:12:a2:3a:43: 58:5b:fe:69:a3:1a:13:ca:c7:c6:3a:93:7f:70:8c:72:e1:91: b8:11:5d:d3:e5:27:af:52:89:df:eb:48:6b:05:5e:00:27:0f: e2:96:71:1f:cb:8f:c8:18:c4:a4:f2:5e:7b:bf:55:06:3e:a1: 88:e8:3b:d5:e3:3e:5d:76:b6:8f:02:c6:fc:0d:60:09:22:5a: dd:b8:a0:4d:c1:58:05:cf:5c:d4:5d:96:67:a3:04:d1:00:dc: a1:54:1d:fd:79:a0:f9:46:32:f2:70:c5:cf:45:e5:ae:22:70: 6a:10:94:71:cc:37:aa:56:7e:17:87:cc:ca:ee:43:a0:0c:69: 87:8b:fc:72:54:8b:e3:31:12:1d:e8:39:82:53:60:04:4d:1a: 5b:13:9d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDQTYxMTAvBgNVBAUTKDk2RjgxN0JENDA3MEI1Q0MxOUEwQjUzOTNENTVCRTc3 Mzk4MEE4MTAwHhcNMjUwNDI4MTkyODU4WhcNMjUwNTA1MTkyODU4WjAYMRYwFAYD VQQDEw02ODBmZDZmYS1jOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUA9+JAd/SC4TNO+rmNQnwLB8G/QvLfpfS+pXdq2scsBcgycp+hmdrmPaaE1 nlAhOtEj1W0+T9OLPoYFjkhQT/1ijmG/gQGMe4ncIGUgNfYAL97VOF6HEL7Fxmrj UG0JSGUJ/U3v7Y+OwPTmoy7FelcFR7maiF0hmaFiAuIdN9JTp+WSnxoWh/pQxISq naG1S7KHa0ltdMFL2205IS91K6cneYM6mFVk16mtpUryTCf4et6+sfinbBFBKKH2 RjGyZ5Qv9k/KisbpONdiMaL4sXAlPsbdeyy/vcebGvSVn4/RTNC2Sr7P/t9y08zY qa2CWHRoDYQWAK9vnnJw9pA91QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZeNkyK a59xzahbKL56dCJ125xUMB8GA1UdIwQYMBaAFJb4F71AcLXMGaC1OT1Vvnc5gKgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOENBNi85QkQ2NDA1NjMy MDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rjd1pvTFU1UFZXLWR6bUFx QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2Z1h2VUJ3dGN3Wm9MVTVQVlctZHptQXFCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OENBNi85QkQ2NDA1NjMyMDYxMUVBQTJGNkIzMzJDNEY5QUUwMi9sdmdYdlVCd3Rj d1pvTFU1UFZXLWR6bUFxQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA45VT4A6/go/WN7P8dMyy+XV4dGjXeyVveqzOYGO8SWO50/KcOy9ek CN6FNOB+buOA9zL3IReQ5IRGonK1PMbn3+Pkp1mwkxsB69t0vHNHZa2cNgblIuMh Rd/v+GliJYqo6NXZcncUNxKiOkNYW/5poxoTysfGOpN/cIxy4ZG4EV3T5SevUonf 60hrBV4AJw/ilnEfy4/IGMSk8l57v1UGPqGI6DvV4z5ddraPAsb8DWAJIlrduKBN wVgFz1zUXZZnowTRANyhVB39eaD5RjLycMXPReWuInBqEJRxzDeqVn4Xh8zK7kOg DGmHi/xyVIvjMRId6DmCU2AETRpbE52T -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:51 2025 by rpki-client on console.sobornost.net