$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: xY924e/I/IbDbmTIeqMvFLq/JqiirM3LLRIsOzSC+t0= Subject key identifier: 5F:42:39:EB:A8:29:9D:F8:8B:C6:4B:98:61:A7:E3:CD:F6:EC:D5:16 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: 84 Signing time: Sun 27 Apr 2025 05:28:51 +0000 Manifest this update: Sun 27 Apr 2025 05:28:51 +0000 Manifest next update: Sun 04 May 2025 05:28:51 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: bgMLKctNCVLvf2VCKAO8+enP2513Gl3auiFc4EKdf6w=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: Cl2PJo7826qehYKKSG2/VdHV6kV/QSQl5KdRQS87oS0=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: 7jEw+cOkWTAknu5PcBj2MNehVkDO0rbITl2EdNIaO7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Apr 27 05:28:51 2025 GMT Not After : May 4 05:28:51 2025 GMT Subject: CN=680dc093-b830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:50:33:ef:a5:77:22:09:94:6c:79:67:f5: cd:2b:2b:31:33:cd:86:14:d5:7f:b0:89:43:2b:8b: f9:d6:c7:0a:bc:78:d0:2c:d9:67:92:e2:cd:0a:1b: b2:06:6f:11:ff:08:f2:27:81:d8:12:31:a6:e0:4f: 47:e5:e4:02:0e:a0:e6:2a:c5:1c:9e:46:fe:33:51: aa:53:61:70:96:46:6f:44:57:25:46:69:02:61:cd: b2:a6:78:5d:43:fd:16:05:ce:db:7c:c5:a4:9b:c1: 9e:33:e6:2a:f5:b7:7b:1d:f5:ea:03:05:ec:d3:af: 94:fc:52:57:f8:b5:c1:f7:4d:f6:af:00:0d:98:88: dc:4f:33:99:40:67:39:9d:4a:f7:d4:69:8d:64:d4: a1:6e:72:c5:00:ea:de:15:79:16:34:a4:d7:44:91: cd:64:9e:9f:7e:7c:c0:44:67:d4:76:4e:2c:1a:4b: ae:0b:84:7f:8f:93:cc:b6:3a:74:95:73:e2:86:75: d9:f0:5f:de:6c:5e:b9:58:b7:65:a8:a6:21:76:6a: 34:0e:7b:68:7d:74:74:9a:d3:b9:b0:56:de:95:10: b6:05:9f:41:be:5c:23:fe:21:2f:ea:b2:f1:67:f6: 36:b3:64:b8:26:38:b8:2b:aa:e1:73:49:b4:57:b6: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:39:EB:A8:29:9D:F8:8B:C6:4B:98:61:A7:E3:CD:F6:EC:D5:16 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:42:49:a3:d9:50:db:09:6b:e6:82:2a:3b:6c:29:37:8a:75: 6a:80:85:e5:88:94:95:43:81:1f:b5:c5:61:10:c9:d5:95:cb: e7:38:21:e6:be:68:fd:91:75:24:dd:b5:4e:c8:4b:63:fe:ec: 6f:a7:09:1e:d3:4f:83:67:dd:b6:78:ca:9e:af:54:34:b8:67: 7e:6c:24:69:80:92:f9:7e:5a:c1:27:c7:f5:a2:29:5e:e5:08: 97:5b:0e:96:8d:db:ac:1a:5f:6c:38:b1:4a:f1:cb:8e:6a:a3: 54:9d:22:55:bf:fb:0c:75:2a:3e:a6:2a:d4:73:d7:4b:35:a5: df:a1:9a:a2:b0:83:c3:b7:41:93:37:e0:a5:b9:7c:dd:d3:55: df:41:1f:65:d3:b8:63:b0:fc:86:13:f2:c2:b9:b1:9c:46:74: 8e:95:17:13:ef:5b:96:28:c7:a9:72:7b:a9:9e:53:4b:4c:8e: 28:bd:ee:81:89:28:3b:c6:75:82:4e:d4:d3:38:09:1d:9f:6a: 57:b9:3c:0d:93:08:0c:ad:13:14:d3:03:53:21:a4:ae:21:c7: 4f:d9:c3:48:ee:8c:48:c2:c8:02:da:06:9b:1e:02:01:e8:29: 66:67:02:9c:4e:30:f3:f7:2e:65:46:36:79:e1:8d:c3:bc:ab: 1c:50:b9:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjUwNDI3MDUyODUxWhcNMjUwNTA0MDUyODUxWjAYMRYwFAYD VQQDEw02ODBkYzA5My1iODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KpQM++ldyIJlGx5Z/XNKysxM82GFNV/sIlDK4v51scKvHjQLNlnkuLNChuy Bm8R/wjyJ4HYEjGm4E9H5eQCDqDmKsUcnkb+M1GqU2FwlkZvRFclRmkCYc2ypnhd Q/0WBc7bfMWkm8GeM+Yq9bd7HfXqAwXs06+U/FJX+LXB9032rwANmIjcTzOZQGc5 nUr31GmNZNShbnLFAOreFXkWNKTXRJHNZJ6ffnzARGfUdk4sGkuuC4R/j5PMtjp0 lXPihnXZ8F/ebF65WLdlqKYhdmo0DntofXR0mtO5sFbelRC2BZ9Bvlwj/iEv6rLx Z/Y2s2S4Jji4K6rhc0m0V7aBpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9COeuo KZ34i8ZLmGGn48327NUWMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGQkmj2VDbCWvmgio7bCk3inVqgIXliJSVQ4EftcVhEMnVlcvnOCHm vmj9kXUk3bVOyEtj/uxvpwke00+DZ922eMqer1Q0uGd+bCRpgJL5flrBJ8f1oile 5QiXWw6WjdusGl9sOLFK8cuOaqNUnSJVv/sMdSo+pirUc9dLNaXfoZqisIPDt0GT N+CluXzd01XfQR9l07hjsPyGE/LCubGcRnSOlRcT71uWKMepcnupnlNLTI4ove6B iSg7xnWCTtTTOAkdn2pXuTwNkwgMrRMU0wNTIaSuIcdP2cNI7oxIwsgC2gabHgIB 6ClmZwKcTjDz9y5lRjZ54Y3DvKscULn7 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:57 2025 by rpki-client on console.sobornost.net