$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json) Hash identifier: K3pr2VfNB52vECdQlZdIhzPCSFEKo/GhXdRMxvwfsAY= Subject key identifier: 98:2D:42:4E:58:6D:9E:E4:81:31:62:7B:F3:F5:8C:88:98:FC:AF:E6 Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft Manifest number: 016E Signing time: Sun 27 Apr 2025 02:56:34 +0000 Manifest this update: Sun 27 Apr 2025 02:56:33 +0000 Manifest next update: Sun 04 May 2025 02:56:33 +0000 Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: d92ZGixjuh29Zg3Z+TbgNikEJk7AG0K9evIOTi7cIeo=) 2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: o91C1jFze1aQemqWDwZsi+b9/Rmy3VyieJUeIkyvzoc=) 3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: /JrzSFgR8sIchQqbAkxuKHvug5BLuVR/st4b3ZlxES8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A Validity Not Before: Apr 27 02:56:33 2025 GMT Not After : May 4 02:56:33 2025 GMT Subject: CN=680d9ce1-0314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:83:61:25:7d:0d:cc:22:86:b6:b9:c1:e4: a6:51:63:d0:e6:5e:f4:46:cd:c2:84:57:59:03:d6: 05:1a:ab:fb:79:cf:04:2f:4e:09:57:4b:0c:d8:eb: 40:bd:e1:0a:b9:f0:71:55:03:62:c8:90:97:39:9a: d3:5e:4e:f8:d1:08:76:d6:95:bc:04:a9:cd:e0:d8: 0b:10:ab:35:1b:22:9b:2c:2e:d1:d2:90:e2:09:1c: 98:19:c7:25:ce:3c:cb:a9:c6:8f:a8:96:69:6e:fd: e4:cd:64:ce:1a:e1:e9:64:37:8b:81:0b:d0:81:87: ff:96:4d:c3:ed:8d:5a:b8:9f:05:15:96:d4:0a:3c: 14:9b:3c:5c:e8:79:57:a3:79:bb:17:60:70:33:2d: 88:06:22:c7:1b:c4:eb:a4:40:49:70:03:8b:bc:f8: 5d:04:a9:1d:0b:41:87:40:dc:6a:91:bb:b9:ba:8d: 29:88:a8:66:da:ec:11:9e:7a:67:f0:13:a0:37:73: 76:d1:8e:6a:7c:90:ce:08:0f:f2:74:03:8b:6f:d4: 74:c1:f8:d3:e8:db:06:c7:bc:23:6e:cb:e1:97:2f: 18:34:d6:47:e0:37:b1:9d:e3:43:41:e7:e3:dc:d9: 17:e7:50:86:cb:e1:a7:2d:d7:05:c5:9d:5f:92:fc: 1d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2D:42:4E:58:6D:9E:E4:81:31:62:7B:F3:F5:8C:88:98:FC:AF:E6 X509v3 Authority Key Identifier: keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a4:aa:41:4a:32:fd:4b:b9:ee:37:8c:6c:a1:5e:84:fe:71: f7:c3:31:3b:88:74:5f:16:b9:0c:f2:e3:ad:ab:e4:e4:7b:96: 7a:e2:d5:08:d5:2b:2d:65:a6:ea:96:56:f4:aa:39:43:79:a0: ea:5b:13:6f:02:fa:d7:bf:d8:f7:c3:e4:cd:94:43:d4:42:f0: 42:eb:ec:4f:96:dc:52:98:39:89:1e:44:84:0e:c5:58:2a:11: d1:41:bf:d6:92:0e:eb:d6:c9:61:c3:6b:f3:3e:15:3c:47:48: 55:97:99:a4:40:3a:db:be:be:6b:01:d5:c4:56:87:a7:f3:37: e0:e9:17:3f:bf:1e:fb:66:30:1d:68:37:a5:c6:fb:58:c9:c0: 0d:36:a5:27:e8:d7:64:7c:d8:13:bd:48:5f:ab:08:98:35:38: 6a:8c:7d:57:78:89:fd:f4:c4:4f:54:ed:ab:68:47:86:52:15: d5:f9:ee:a9:6d:74:db:30:32:a9:8b:b2:90:a1:31:ab:21:05: d0:dd:3e:0d:e2:4b:5d:7a:54:60:2e:2c:7b:56:e1:cf:a2:6f: 99:42:f7:88:a0:ed:6f:f8:24:fc:bb:44:24:cf:b0:99:51:3a: 51:42:f4:ae:e7:91:09:a9:9f:54:02:db:e2:2f:10:7b:63:ce: 8a:8e:8e:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy M0U0NTAwM0EwHhcNMjUwNDI3MDI1NjMzWhcNMjUwNTA0MDI1NjMzWjAYMRYwFAYD VQQDEw02ODBkOWNlMS0wMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqqDYSV9Dcwihra5weSmUWPQ5l70Rs3ChFdZA9YFGqv7ec8EL04JV0sM2OtA veEKufBxVQNiyJCXOZrTXk740Qh21pW8BKnN4NgLEKs1GyKbLC7R0pDiCRyYGccl zjzLqcaPqJZpbv3kzWTOGuHpZDeLgQvQgYf/lk3D7Y1auJ8FFZbUCjwUmzxc6HlX o3m7F2BwMy2IBiLHG8TrpEBJcAOLvPhdBKkdC0GHQNxqkbu5uo0piKhm2uwRnnpn 8BOgN3N20Y5qfJDOCA/ydAOLb9R0wfjT6NsGx7wjbsvhly8YNNZH4DexneNDQefj 3NkX51CGy+GnLdcFxZ1fkvwd4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgtQk5Y bZ7kgTFie/P1jIiY/K/mMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2 Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFpKpBSjL9S7nuN4xsoV6E/nH3wzE7iHRfFrkM8uOtq+Tke5Z64tUI 1SstZabqllb0qjlDeaDqWxNvAvrXv9j3w+TNlEPUQvBC6+xPltxSmDmJHkSEDsVY KhHRQb/Wkg7r1slhw2vzPhU8R0hVl5mkQDrbvr5rAdXEVoen8zfg6Rc/vx77ZjAd aDelxvtYycANNqUn6NdkfNgTvUhfqwiYNThqjH1XeIn99MRPVO2raEeGUhXV+e6p bXTbMDKpi7KQoTGrIQXQ3T4N4ktdelRgLix7VuHPom+ZQveIoO1v+CT8u0Qkz7CZ UTpRQvSu55EJqZ9UAtviLxB7Y86Kjo7e -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:15 2025 by rpki-client on console.sobornost.net