$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: m1ga6OuIvzElb1lz1TmO4ChmlGgVPbbwpOwCwqlG+Vw= Subject key identifier: D6:FA:1C:EF:17:8A:AE:0C:F2:EE:89:67:68:63:DF:E4:42:60:4E:EF Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 1252 Signing time: Mon 28 Apr 2025 20:31:17 +0000 Manifest this update: Mon 28 Apr 2025 20:31:17 +0000 Manifest next update: Mon 05 May 2025 20:31:17 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: eDoEQVuxU6vxx0d3cSppSMxnBBAfwah2ZEuA65X2TIA=) 2: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: NR90n3hD0iN+wJNiZGZM+dVTFYNLmapWU9u6Yuwslvs=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: zfbAmczU0TvDg++Ahlw3nwgh74bmLp4RT834l0v2hLY=) 4: 2944DC90B57E11EFB31B630FC4F9AE02.roa (hash: LIT5TNu9i//v3laD/Jx0lP/RjQSe9WAE0qoyMHUVSVc=) 5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: svSsv7iDDsESPj4djUfhOIqdOSSzOy7GY2n53ZHUYRM=) 6: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: yTR181mMOhFtz0/zNI7qM2KlctQHTJXyuSeldVEFcuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Apr 28 20:31:17 2025 GMT Not After : May 5 20:31:17 2025 GMT Subject: CN=680fe595-e21e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:eb:99:b7:c0:a8:ba:89:ec:51:27:a4:ed:0c: 45:67:97:b3:71:8c:98:03:77:bb:a6:38:9e:5e:a0: 4b:d1:b3:be:fb:3b:a7:66:c4:d7:30:da:ac:c9:a0: 1b:38:c0:13:3f:fc:6d:8b:1d:25:e6:e3:7e:ad:42: d4:b8:1c:9d:0b:95:45:28:fa:37:f2:1f:ee:5e:4e: c9:92:5f:5a:b0:d1:98:e2:60:d8:44:3e:d2:62:4e: da:26:b9:01:53:a0:56:d5:d8:1d:f9:6c:eb:4e:34: 71:3b:e8:40:ee:61:1b:bd:aa:19:65:74:83:5f:52: 9d:b6:aa:3a:e1:5b:cb:39:19:90:e3:9c:49:0e:7f: f2:f4:1d:d3:86:9c:79:1a:83:38:46:f7:a6:7f:d4: 01:66:76:2e:b9:18:e9:ae:5e:48:7e:e8:9f:ad:e1: 8c:a3:cb:ae:53:74:8a:a9:7a:bf:ad:b1:9d:cb:e4: ef:63:71:a3:cd:4f:a1:d4:60:6b:5a:19:39:d6:54: b9:60:6f:d4:d9:43:d5:f4:72:8f:89:74:28:73:cf: 2c:ca:15:79:2c:fc:6f:74:6e:82:a0:92:c2:44:f0: 1b:ee:24:e7:9b:b3:42:c2:1c:f7:26:66:29:19:ce: 52:59:9d:84:08:30:1b:82:3c:59:ae:f6:26:d4:8f: d4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FA:1C:EF:17:8A:AE:0C:F2:EE:89:67:68:63:DF:E4:42:60:4E:EF X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:46:04:9e:02:05:5e:08:14:b7:42:6c:2a:3e:d4:03:30:d0: 6e:6b:a2:f8:05:61:9f:de:2e:a0:ed:14:5a:b8:3d:ec:97:a8: 30:71:f0:e6:4d:3c:15:d4:c0:e0:c6:6d:46:4e:d0:fa:1f:72: ba:09:c8:e9:2f:d8:d2:01:be:86:51:5c:66:e8:30:3f:a4:41: d7:97:5d:72:18:73:a7:d4:56:57:ed:3d:af:5d:69:61:63:db: 2a:bd:b9:56:99:c9:38:fb:a0:4d:0d:55:bd:4f:87:e9:96:82: b3:b3:54:a6:26:32:c4:e1:9c:35:2a:55:29:f7:53:a8:b6:90: 1c:53:6c:b7:bf:39:58:30:2f:85:bd:d6:b1:57:b1:bc:4d:44: 15:8e:21:f9:f2:f3:a9:1a:17:e7:bf:e3:a3:ca:9e:0e:4a:d4: 03:85:b7:3e:bb:56:10:f1:fd:b3:19:33:e9:58:6a:58:0d:a6: fa:4e:aa:d5:e1:b4:a8:fd:af:12:76:e5:db:a5:b0:9a:19:42: a3:38:79:47:d6:2c:d2:74:4a:be:90:13:87:4f:2b:05:0e:34: 1d:22:78:d6:90:91:6c:65:87:46:7c:66:b6:fd:0b:62:b2:e9: 42:19:c2:34:69:7b:dc:4a:9b:c2:71:7c:4c:6b:b5:d3:47:c5: 13:98:f3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNDI4MjAzMTE3WhcNMjUwNTA1MjAzMTE3WjAYMRYwFAYD VQQDEw02ODBmZTU5NS1lMjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5euZt8CouonsUSek7QxFZ5ezcYyYA3e7pjieXqBL0bO++zunZsTXMNqsyaAb OMATP/xtix0l5uN+rULUuBydC5VFKPo38h/uXk7Jkl9asNGY4mDYRD7SYk7aJrkB U6BW1dgd+WzrTjRxO+hA7mEbvaoZZXSDX1Kdtqo64VvLORmQ45xJDn/y9B3Thpx5 GoM4Rvemf9QBZnYuuRjprl5IfuifreGMo8uuU3SKqXq/rbGdy+TvY3GjzU+h1GBr Whk51lS5YG/U2UPV9HKPiXQoc88syhV5LPxvdG6CoJLCRPAb7iTnm7NCwhz3JmYp Gc5SWZ2ECDAbgjxZrvYm1I/UfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNb6HO8X iq4M8u6JZ2hj3+RCYE7vMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKRgSeAgVeCBS3QmwqPtQDMNBua6L4BWGf3i6g7RRauD3sl6gwcfDm TTwV1MDgxm1GTtD6H3K6CcjpL9jSAb6GUVxm6DA/pEHXl11yGHOn1FZX7T2vXWlh Y9sqvblWmck4+6BNDVW9T4fploKzs1SmJjLE4Zw1KlUp91OotpAcU2y3vzlYMC+F vdaxV7G8TUQVjiH58vOpGhfnv+Ojyp4OStQDhbc+u1YQ8f2zGTPpWGpYDab6TqrV 4bSo/a8SduXbpbCaGUKjOHlH1izSdEq+kBOHTysFDjQdInjWkJFsZYdGfGa2/Qti sulCGcI0aXvcSpvCcXxMa7XTR8UTmPP7 -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:53 2025 by rpki-client on console.sobornost.net