$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft File: LNEILrR3cdIdqQBYLz7IfGndXMw.mft (raw, json) Hash identifier: 3IVzzktacIoQyCYH8aVAv9sqxf2vGOThh/BX0LWs6k8= Subject key identifier: F9:23:BA:0C:55:FC:05:E4:FE:40:48:81:B8:C5:41:13:F3:50:92:EE Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft Manifest number: 84 Signing time: Sun 27 Apr 2025 05:24:02 +0000 Manifest this update: Sun 27 Apr 2025 05:24:01 +0000 Manifest next update: Sun 04 May 2025 05:24:01 +0000 Files and hashes: 1: LNEILrR3cdIdqQBYLz7IfGndXMw.crl (hash: CcSbBEBSj7cviQYS5b5IxfR6OYRqQ9IPXD7HFolgVOM=) 2: AAFB89C25B8E11EF8774691FC4F9AE02.roa (hash: NJQC0pcrHh/JBVTRfv/b6T3EEDKwTW5kx/DQtkXyO1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Validity Not Before: Apr 27 05:24:01 2025 GMT Not After : May 4 05:24:01 2025 GMT Subject: CN=680dbf72-3968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6c:00:6f:13:22:7d:9a:99:1d:f8:c0:d7:89: 3d:28:92:99:eb:9c:3f:d0:61:17:27:f9:80:01:3a: e2:e2:25:27:9e:e8:19:ae:f4:0c:63:d2:f4:1d:3b: 73:10:2d:36:54:25:4d:7e:02:6c:44:1e:41:e5:1e: 46:44:4e:47:eb:1d:09:6a:fe:79:58:d9:d3:6b:8d: c4:34:fe:27:70:10:75:7d:93:62:00:c8:03:2c:94: b7:4e:bd:df:fd:1f:6f:03:50:05:09:b9:6f:6a:87: db:5f:c6:e3:64:45:c1:ce:56:33:41:1f:30:9e:44: 88:86:ab:d7:5c:84:87:33:31:3e:7c:35:ec:67:5f: d8:04:6d:ed:26:19:52:01:28:b1:bd:18:b5:37:f5: 71:6c:f3:41:b9:3b:12:f6:eb:de:fb:38:05:7a:26: 33:4a:86:45:77:c8:fc:bb:1e:f2:9d:e7:e4:cb:4a: cf:33:b8:02:73:8a:8d:f1:48:35:2c:43:49:37:55: 66:e2:ad:87:3f:1c:38:29:81:71:bc:f1:50:39:c6: ee:d9:e4:8f:54:dd:af:aa:4b:2d:c9:cb:7c:73:00: 00:15:ba:3c:dd:fd:cd:f8:05:bf:bb:aa:8d:63:68: b8:51:93:b4:77:36:d4:b7:6c:ef:ba:15:7b:db:58: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:23:BA:0C:55:FC:05:E4:FE:40:48:81:B8:C5:41:13:F3:50:92:EE X509v3 Authority Key Identifier: keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:5a:b8:11:53:02:6f:40:f4:2d:50:97:6b:fa:e7:ba:b4:a7: 96:41:53:60:45:b2:39:e5:b7:a2:b2:be:75:7a:a8:d4:a2:a0: fc:58:03:0c:5e:9a:b0:fd:a6:96:00:e2:e9:54:1b:ae:fa:9a: 7b:13:3f:ff:07:0a:07:69:e3:4a:45:b6:71:93:4d:88:cf:49: 1b:c9:54:87:85:01:43:75:43:55:d0:aa:ea:ad:0f:2c:a6:6d: 32:3e:6e:8d:12:e1:c0:c1:37:35:3c:87:64:64:1c:4d:8e:f8: 1c:2d:06:e5:da:f0:05:dc:b7:8e:60:40:e1:fa:c5:33:91:8a: 2d:e9:c5:73:6f:e3:f5:5b:d3:58:36:48:e7:f6:e2:3a:93:05: 94:e3:e6:97:c7:cb:9d:5b:a0:0c:35:47:51:8b:7b:b3:f4:92: 54:4a:36:b7:a6:10:bc:46:60:57:d3:56:f8:62:2b:43:49:5a: f0:c5:17:31:1e:a8:9f:d3:e2:02:bd:22:87:75:8e:b9:e5:c0: e6:9f:9f:a5:b8:41:b8:35:2f:1e:9a:33:d8:ad:be:0c:4c:6e: e4:2e:ba:8f:f5:a5:14:ca:32:1e:ad:e9:3f:70:ce:9d:31:b6: 2a:ef:42:0c:cd:96:0a:71:92:c8:d3:30:39:1c:fb:3e:4e:d8: ae:46:ac:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0RjcxMTAvBgNVBAUTKDJDRDEwODJFQjQ3NzcxRDIxREE5MDA1ODJGM0VDODdD NjlERDVDQ0MwHhcNMjUwNDI3MDUyNDAxWhcNMjUwNTA0MDUyNDAxWjAYMRYwFAYD VQQDEw02ODBkYmY3Mi0zOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWwAbxMifZqZHfjA14k9KJKZ65w/0GEXJ/mAATri4iUnnugZrvQMY9L0HTtz EC02VCVNfgJsRB5B5R5GRE5H6x0Jav55WNnTa43ENP4ncBB1fZNiAMgDLJS3Tr3f /R9vA1AFCblvaofbX8bjZEXBzlYzQR8wnkSIhqvXXISHMzE+fDXsZ1/YBG3tJhlS ASixvRi1N/VxbPNBuTsS9uve+zgFeiYzSoZFd8j8ux7ynefky0rPM7gCc4qN8Ug1 LENJN1Vm4q2HPxw4KYFxvPFQOcbu2eSPVN2vqkstyct8cwAAFbo83f3N+AW/u6qN Y2i4UZO0dzbUt2zvuhV721j6YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkjugxV /AXk/kBIgbjFQRPzUJLuMB8GA1UdIwQYMBaAFCzRCC60d3HSHakAWC8+yHxp3VzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODRGNy83OUNBRkIyNjVC OEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2NkSWRxUUJZTHo3SWZHbmRY TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODRGNy83OUNBRkIyNjVCOEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2Nk SWRxUUJZTHo3SWZHbmRYTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYWrgRUwJvQPQtUJdr+ue6tKeWQVNgRbI55beisr51eqjUoqD8WAMM Xpqw/aaWAOLpVBuu+pp7Ez//BwoHaeNKRbZxk02Iz0kbyVSHhQFDdUNV0KrqrQ8s pm0yPm6NEuHAwTc1PIdkZBxNjvgcLQbl2vAF3LeOYEDh+sUzkYot6cVzb+P1W9NY Nkjn9uI6kwWU4+aXx8udW6AMNUdRi3uz9JJUSja3phC8RmBX01b4YitDSVrwxRcx Hqif0+ICvSKHdY655cDmn5+luEG4NS8emjPYrb4MTG7kLrqP9aUUyjIerek/cM6d MbYq70IMzZYKcZLI0zA5HPs+TtiuRqyR -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net