$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: f5fRhYhjRUKXU2Slo7FAL4pvAoCc/0tHaXhw2X/YoQU= Subject key identifier: 6E:BD:BA:27:8E:C4:11:E3:B6:BB:3B:C7:4A:23:06:04:5D:B7:48:0F Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 019C Signing time: Sun 27 Apr 2025 02:26:24 +0000 Manifest this update: Sun 27 Apr 2025 02:26:23 +0000 Manifest next update: Sun 04 May 2025 02:26:23 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: Qd6CbnKOfTo7D+y918z7M0Ll3Li8Q8yhmYq0qoEE5dI=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Apr 27 02:26:23 2025 GMT Not After : May 4 02:26:23 2025 GMT Subject: CN=680d95cf-519a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:a4:09:25:34:bc:4e:ec:e9:e1:f0:cb:03: c1:8a:11:7c:d9:76:9c:83:fd:96:1e:ff:8b:4c:e6: 41:97:0a:0e:de:10:06:56:2c:73:fe:1b:af:3f:f2: 99:b6:e7:6d:36:db:00:ae:67:e8:64:3b:4a:06:be: ad:ee:6d:06:85:b2:21:c1:b7:c3:6b:47:0b:c1:93: d2:29:dd:8b:57:98:23:46:bf:3c:37:d7:d8:03:8a: 81:18:1b:a6:34:07:58:9c:01:85:55:62:34:2e:a9: 5e:b0:34:b6:bc:5f:3a:e3:c5:7f:92:49:0b:a9:d1: b8:3f:f4:91:2f:22:39:6d:90:d5:c6:86:3f:fb:04: 99:45:46:60:42:ce:3f:e7:c5:28:ad:02:02:db:18: 3f:0a:50:bb:cc:ed:89:8a:dc:f8:68:9b:c6:ae:81: f1:38:d5:70:9f:b6:f4:80:d8:cb:1b:45:29:15:01: 8a:69:ef:81:19:07:c7:05:68:5a:89:6e:81:35:0d: 3d:e6:58:23:e2:61:59:df:cd:60:62:61:3c:0f:67: 61:22:f7:34:e2:42:dc:3d:aa:d9:36:88:10:b4:0a: 0d:54:b9:f8:c7:9e:be:22:1f:a9:51:bd:51:b2:37: cf:70:80:bb:cb:e8:20:05:9e:1a:e3:0c:ae:21:41: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BD:BA:27:8E:C4:11:E3:B6:BB:3B:C7:4A:23:06:04:5D:B7:48:0F X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a7:7f:f8:10:34:78:50:56:ac:aa:85:94:bd:c7:bd:c3:96: 1d:d8:15:1b:e4:b8:5e:1b:cd:18:23:08:cb:8d:c5:4e:d0:36: fd:e9:cd:04:d4:5c:c8:87:5e:11:2e:fe:ba:fa:a4:83:09:0a: 79:6b:56:c1:58:8c:7f:f9:a7:9f:9a:ff:ed:c4:e6:7d:c7:79: eb:1e:38:04:3c:71:eb:09:2d:42:f5:5d:77:40:9e:cd:bd:c9: 3d:91:0d:b3:49:3a:f2:8b:c2:d6:75:37:79:32:75:01:2a:3d: b1:d0:13:bf:a5:9b:54:36:d6:e3:fa:6b:4c:f6:c9:4c:9a:81: 4f:56:5a:9d:d4:9d:3b:b4:e6:3d:64:00:06:ca:6c:4a:fe:02: 82:8e:d0:17:86:eb:22:ab:46:77:7d:b4:cd:05:22:53:c6:db: 12:2b:78:00:55:8d:79:77:cf:d8:87:04:ff:1a:40:c4:76:d5: 9e:e6:74:1c:c2:4a:c1:97:11:89:8a:aa:3f:cf:23:08:1a:d8: 70:ca:95:a2:64:2c:e8:8b:a6:51:7a:57:5a:2f:15:f3:54:cf: 6d:10:87:bb:2b:4f:56:74:39:eb:9c:90:00:ae:d6:65:7d:f8: 14:83:fa:b5:bc:4a:80:c7:7f:cd:6e:e0:98:f0:e7:58:4c:85: f4:83:cf:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjUwNDI3MDIyNjIzWhcNMjUwNTA0MDIyNjIzWjAYMRYwFAYD VQQDEw02ODBkOTVjZi01MTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHSkCSU0vE7s6eHwywPBihF82Xacg/2WHv+LTOZBlwoO3hAGVixz/huvP/KZ tudtNtsArmfoZDtKBr6t7m0GhbIhwbfDa0cLwZPSKd2LV5gjRr88N9fYA4qBGBum NAdYnAGFVWI0LqlesDS2vF8648V/kkkLqdG4P/SRLyI5bZDVxoY/+wSZRUZgQs4/ 58UorQIC2xg/ClC7zO2Jitz4aJvGroHxONVwn7b0gNjLG0UpFQGKae+BGQfHBWha iW6BNQ095lgj4mFZ381gYmE8D2dhIvc04kLcParZNogQtAoNVLn4x56+Ih+pUb1R sjfPcIC7y+ggBZ4a4wyuIUECWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG69uieO xBHjtrs7x0ojBgRdt0gPMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBup3/4EDR4UFasqoWUvce9w5Yd2BUb5LheG80YIwjLjcVO0Db96c0E 1FzIh14RLv66+qSDCQp5a1bBWIx/+aefmv/txOZ9x3nrHjgEPHHrCS1C9V13QJ7N vck9kQ2zSTryi8LWdTd5MnUBKj2x0BO/pZtUNtbj+mtM9slMmoFPVlqd1J07tOY9 ZAAGymxK/gKCjtAXhusiq0Z3fbTNBSJTxtsSK3gAVY15d8/YhwT/GkDEdtWe5nQc wkrBlxGJiqo/zyMIGthwypWiZCzoi6ZReldaLxXzVM9tEIe7K09WdDnrnJAArtZl ffgUg/q1vEqAx3/NbuCY8OdYTIX0g8/R -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net