$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft File: lJax_GBjZENyOYzqM4uCJCWRdcs.mft (raw, json) Hash identifier: CBRufkJ27n1Z1KCQ5xt/391mzoCrzekz6o0EOac/0Kw= Subject key identifier: 7B:08:28:E2:59:1B:11:7D:35:2A:46:EF:D3:2D:47:5C:87:0C:9F:B9 Authority key identifier: 94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB Certificate issuer: /CN=A91F3B5F/serialNumber=9496B1FC6063644372398CEA338B8224259175CB Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft Manifest number: 0D Signing time: Sun 27 Apr 2025 06:55:26 +0000 Manifest this update: Sun 27 Apr 2025 06:55:26 +0000 Manifest next update: Sun 04 May 2025 06:55:26 +0000 Files and hashes: 1: lJax_GBjZENyOYzqM4uCJCWRdcs.crl (hash: 61HbLQDstq/7dmR0nxyZ3JL1wJgb2uAP1MLZqesH3tw=) 2: 0BD593E6136D11F09F542C81C4F9AE02.roa (hash: B3AcpWyXKMA7OW20cqJ3DyGxcTH2gK1jrAHX+1xbxr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B5F, serialNumber=9496B1FC6063644372398CEA338B8224259175CB Validity Not Before: Apr 27 06:55:26 2025 GMT Not After : May 4 06:55:26 2025 GMT Subject: CN=680dd4de-9bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:aa:39:b7:99:3d:2d:e7:a8:4b:8f:87:0b:37: a2:9b:52:38:34:46:36:1a:32:c1:f6:5b:83:30:ab: be:b5:7a:8e:78:ed:18:02:e6:76:00:bb:26:7a:c3: e5:2f:b0:df:61:89:57:27:3f:4d:03:36:66:68:d2: 8b:98:ab:75:6d:94:83:f0:58:d8:96:dd:4d:dc:c6: e6:b6:de:c4:7d:dd:ff:3d:3a:d9:a9:ce:de:73:47: 90:68:c5:47:c0:06:77:d7:1d:18:04:d7:79:5b:30: 94:01:74:7f:90:e9:86:28:c9:ae:5d:c2:8b:d2:1e: 61:91:c0:d7:6e:e5:08:14:d7:84:fa:f0:e8:70:5c: 5a:0d:b6:01:1e:c4:c7:ff:8d:10:39:b9:02:1c:4b: e6:b0:c3:fc:a5:ab:cf:91:93:da:4e:13:ce:b8:a5: d1:2e:62:57:10:3f:ef:11:78:2c:16:f5:31:78:6a: f7:51:e6:ee:c1:dd:4b:a6:aa:de:1f:8b:a5:bd:f8: 3b:f7:10:f3:fe:66:09:20:4c:69:19:ad:bb:75:40: 93:14:3d:12:67:0c:b3:10:85:59:d8:ff:d2:26:cc: 33:57:15:f2:28:34:bc:0e:0f:37:f7:35:43:36:49: 1a:3c:56:84:90:a8:b0:c5:29:17:65:e8:bb:27:ab: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:08:28:E2:59:1B:11:7D:35:2A:46:EF:D3:2D:47:5C:87:0C:9F:B9 X509v3 Authority Key Identifier: keyid:94:96:B1:FC:60:63:64:43:72:39:8C:EA:33:8B:82:24:25:91:75:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJax_GBjZENyOYzqM4uCJCWRdcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/BA00C514136611F082E3C50DC4F9AE02/lJax_GBjZENyOYzqM4uCJCWRdcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:4c:b5:0d:8c:4c:c9:b7:31:b5:9c:d7:c9:53:3a:92:f1:20: e7:0f:2a:e3:c8:0b:ec:8d:74:db:c8:75:d4:9c:0e:99:69:fe: ea:bb:5b:3d:04:37:1a:ff:21:02:10:d5:95:f4:00:4d:93:ec: ff:9a:96:b6:b1:77:e0:cd:16:91:67:f0:02:21:b9:d8:7f:88: be:78:39:18:2b:69:0d:67:19:30:0e:1a:cc:f8:5e:07:bb:96: e2:e0:64:53:fc:67:24:93:d7:84:f7:4b:e2:ba:67:86:61:b6: 7d:e9:da:f0:0b:fe:91:90:5d:02:aa:bb:6d:ea:7b:93:ff:6d: ce:e3:c4:7f:63:e7:7c:44:4d:58:89:3f:ce:50:69:63:92:b2: 15:15:0c:eb:01:c1:ed:56:e2:14:ee:36:d1:d0:6b:56:e2:bb: 6d:b6:7f:68:de:ed:a9:2f:11:db:23:0e:b0:6c:66:6b:cc:82: a5:8b:e8:ad:b2:78:47:78:da:15:37:ca:a6:49:2a:c9:54:4e: 45:49:98:91:24:fb:6d:82:85:1e:0d:14:44:0b:27:17:6b:c4: ee:13:4f:03:a2:94:4f:d9:40:4f:78:eb:a4:5a:be:f7:48:a9: c4:0f:48:c3:ed:12:6d:b8:75:ff:03:2b:c1:7b:7a:bc:54:b9: 4f:2b:cf:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0I1RjExMC8GA1UEBRMoOTQ5NkIxRkM2MDYzNjQ0MzcyMzk4Q0VBMzM4QjgyMjQy NTkxNzVDQjAeFw0yNTA0MjcwNjU1MjZaFw0yNTA1MDQwNjU1MjZaMBgxFjAUBgNV BAMTDTY4MGRkNGRlLTliYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+qjm3mT0t56hLj4cLN6KbUjg0RjYaMsH2W4Mwq761eo547RgC5nYAuyZ6w+Uv sN9hiVcnP00DNmZo0ouYq3VtlIPwWNiW3U3cxua23sR93f89Otmpzt5zR5BoxUfA BnfXHRgE13lbMJQBdH+Q6YYoya5dwovSHmGRwNdu5QgU14T68OhwXFoNtgEexMf/ jRA5uQIcS+aww/ylq8+Rk9pOE864pdEuYlcQP+8ReCwW9TF4avdR5u7B3Uumqt4f i6W9+Dv3EPP+ZgkgTGkZrbt1QJMUPRJnDLMQhVnY/9ImzDNXFfIoNLwODzf3NUM2 SRo8VoSQqLDFKRdl6Lsnq9z1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUewgo4lkb EX01Kkbv0y1HXIcMn7kwHwYDVR0jBBgwFoAUlJax/GBjZENyOYzqM4uCJCWRdcsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQjVGL0JBMDBDNTE0MTM2 NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVOeU9ZenFNNHVDSkNXUmRj cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEpheF9HQmpaRU55T1l6cU00dUNKQ1dSZGNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz QjVGL0JBMDBDNTE0MTM2NjExRjA4MkUzQzUwREM0RjlBRTAyL2xKYXhfR0JqWkVO eU9ZenFNNHVDSkNXUmRjcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAElMtQ2MTMm3MbWc18lTOpLxIOcPKuPIC+yNdNvIddScDplp/uq7Wz0E Nxr/IQIQ1ZX0AE2T7P+alraxd+DNFpFn8AIhudh/iL54ORgraQ1nGTAOGsz4Xge7 luLgZFP8ZyST14T3S+K6Z4Zhtn3p2vAL/pGQXQKqu23qe5P/bc7jxH9j53xETViJ P85QaWOSshUVDOsBwe1W4hTuNtHQa1biu222f2je7akvEdsjDrBsZmvMgqWL6K2y eEd42hU3yqZJKslUTkVJmJEk+22ChR4NFEQLJxdrxO4TTwOilE/ZQE9466RavvdI qcQPSMPtEm24df8DK8F7erxUuU8rz5g= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net