$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: wp13WzW8mQ4gFSWoOthztT94sf2AY89dTNzK4YePP1c= Subject key identifier: 12:B9:83:66:62:CB:6B:B9:D8:09:DB:A7:63:4A:25:16:E2:8D:50:9A Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 14D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 14CC Signing time: Mon 28 Apr 2025 17:04:11 +0000 Manifest this update: Mon 28 Apr 2025 17:04:11 +0000 Manifest next update: Mon 05 May 2025 17:04:11 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: gQjoHvgk+8UcB3BXe5J124vK4e7Hy4gPVstL2cssJ94=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: XC7zxbxHdlAL0s8scJjof6sYByPifHkXs75rsYmLs/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5332 (0x14d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Apr 28 17:04:11 2025 GMT Not After : May 5 17:04:11 2025 GMT Subject: CN=680fb50b-be72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:b2:0e:e1:48:39:d1:bf:98:d2:2e:e6:6e: a4:60:24:ac:e8:1f:43:b0:dc:4b:04:46:d3:c0:7d: e0:fe:bd:fd:97:28:b7:81:fc:16:7a:ea:46:52:12: 57:40:28:81:31:3b:a2:69:d7:1e:7c:b1:3c:85:b9: a8:d2:c5:6a:9d:54:d4:3d:b6:5f:b6:e8:17:79:c0: 31:f0:22:bc:29:bb:9b:3e:64:8c:7d:22:1f:4b:33: 52:7d:a5:88:89:7d:d5:bb:bb:01:65:e9:18:d0:b6: 27:f5:65:21:a4:03:d5:97:05:61:5a:58:56:29:bc: b8:c7:9b:fa:4d:a9:4c:fc:47:7c:fc:e4:70:1d:b8: a8:81:68:e0:84:a3:5a:5e:9e:d2:9d:2f:23:df:9d: 5c:90:32:10:04:ff:c8:24:f1:4f:c0:c7:fb:c4:5f: 05:85:61:22:2b:4a:f5:f0:bd:69:9f:da:3f:91:47: d8:f9:58:d0:f1:ba:78:b9:fe:b4:61:58:a8:b6:b1: c2:b7:0e:34:88:0c:02:36:17:53:ce:fb:ed:ac:ba: 08:7c:f0:1a:30:ed:25:4f:34:c9:de:2e:c4:22:37: ff:f5:1f:e7:41:2e:a1:42:87:b6:db:54:9e:d8:b6: 70:92:7a:35:f3:9b:d7:8a:74:ae:fb:3c:bb:19:40: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:83:66:62:CB:6B:B9:D8:09:DB:A7:63:4A:25:16:E2:8D:50:9A X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c2:13:fe:03:f7:de:7c:a8:11:6b:8f:c0:23:39:af:13:ca: 50:da:3a:a0:10:1e:ea:79:bf:a4:6a:b2:28:c3:64:60:63:38: 7d:76:55:fe:3a:bb:63:98:91:5c:d0:9c:18:0e:ab:5a:f7:e1: 87:50:84:a7:36:ed:a1:2f:9e:f7:0e:b9:77:46:31:2f:cf:0f: 8f:ea:48:52:44:90:4d:d9:4f:20:43:86:96:a6:1d:6a:66:93: 69:18:b3:0b:8d:ff:6f:5d:d2:83:b0:72:79:d0:2f:95:a3:99: bb:55:1d:21:b2:b4:60:e4:c6:4e:72:63:c9:54:7f:15:0e:a3: 3d:ed:a1:0a:73:b2:99:6d:10:be:5c:3e:df:be:1b:d6:f1:e6: 74:3d:6b:03:42:21:72:75:c9:b0:a5:d8:c3:9a:4a:3c:22:76: 91:3b:fc:f6:c3:ba:0c:87:94:7b:ab:8c:63:d1:6e:d0:49:01: 46:71:52:a6:63:7b:30:b4:83:99:53:01:12:6a:eb:92:4b:ab: 28:5f:60:da:c0:c1:64:f5:d1:84:2e:ec:48:76:e9:30:17:47: b5:43:8b:40:d2:82:21:87:bf:2f:a4:fa:c1:ef:6f:ab:37:66: 96:0d:c8:32:8d:e7:47:f3:33:ae:f2:f1:a9:a7:e4:6b:3b:56: 59:66:71:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjUwNDI4MTcwNDExWhcNMjUwNTA1MTcwNDExWjAYMRYwFAYD VQQDEw02ODBmYjUwYi1iZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJiyDuFIOdG/mNIu5m6kYCSs6B9DsNxLBEbTwH3g/r39lyi3gfwWeupGUhJX QCiBMTuiadcefLE8hbmo0sVqnVTUPbZftugXecAx8CK8KbubPmSMfSIfSzNSfaWI iX3Vu7sBZekY0LYn9WUhpAPVlwVhWlhWKby4x5v6TalM/Ed8/ORwHbiogWjghKNa Xp7SnS8j351ckDIQBP/IJPFPwMf7xF8FhWEiK0r18L1pn9o/kUfY+VjQ8bp4uf60 YViotrHCtw40iAwCNhdTzvvtrLoIfPAaMO0lTzTJ3i7EIjf/9R/nQS6hQoe221Se 2LZwkno185vXinSu+zy7GUC3ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBK5g2Zi y2u52Anbp2NKJRbijVCaMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwhP+A/fefKgRa4/AIzmvE8pQ2jqgEB7qeb+karIow2RgYzh9dlX+ OrtjmJFc0JwYDqta9+GHUISnNu2hL573Drl3RjEvzw+P6khSRJBN2U8gQ4aWph1q ZpNpGLMLjf9vXdKDsHJ50C+Vo5m7VR0hsrRg5MZOcmPJVH8VDqM97aEKc7KZbRC+ XD7fvhvW8eZ0PWsDQiFydcmwpdjDmko8InaRO/z2w7oMh5R7q4xj0W7QSQFGcVKm Y3swtIOZUwESauuSS6soX2DawMFk9dGELuxIdukwF0e1Q4tA0oIhh78vpPrB72+r N2aWDcgyjedH8zOu8vGpp+RrO1ZZZnF9 -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:01 2025 by rpki-client on console.sobornost.net