$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: q5IxQUTaydSJ2mUd+RScD/EFxLTvV2SaMfiki8WQlt8= Subject key identifier: B0:5F:CC:4D:C6:57:36:B2:2A:22:FE:EB:A9:2D:F0:4F:DC:02:AB:C3 Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 014F Signing time: Sun 27 Apr 2025 03:10:13 +0000 Manifest this update: Sun 27 Apr 2025 03:10:12 +0000 Manifest next update: Sun 04 May 2025 03:10:12 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: Joqxi6cORHg3HwbdsVGVAJuOSD5dQXXFLYKpi5PSHEI=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Apr 27 03:10:12 2025 GMT Not After : May 4 03:10:12 2025 GMT Subject: CN=680da015-5472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:ca:a5:25:39:59:9b:b1:9f:9f:4d:e6:07: e9:f8:83:ea:22:27:b8:39:23:b1:93:55:f6:48:7e: 83:f1:e2:66:d1:2c:ed:6c:17:49:d9:14:e4:64:f2: da:30:13:26:18:46:02:31:d1:94:23:a3:6f:86:a0: 7b:04:88:b5:3e:65:68:79:60:5d:b1:c5:1f:ca:cd: e8:6b:2c:e0:82:74:62:d6:a5:10:83:13:ac:fb:0d: 01:6b:d1:35:e3:0c:c7:bb:bf:5d:48:52:93:9f:ca: c1:50:2c:c4:b5:5b:e5:62:b6:3a:19:85:a0:de:95: aa:e5:97:39:0e:ab:75:a1:51:d7:22:90:96:f6:6f: f4:34:68:ce:ba:ad:04:b2:ad:4e:2d:19:ef:1c:71: c5:07:06:e2:f5:c0:c6:96:67:02:a5:9e:d8:db:14: 93:90:d0:24:ab:2e:c5:25:a2:07:66:34:d3:f5:5f: 73:96:61:79:d8:22:94:db:a5:03:c2:07:5a:1e:a4: ba:37:25:07:7c:56:b6:06:50:1a:3b:97:32:29:c9: 23:96:86:f2:30:64:5a:35:43:2c:7d:9a:f0:31:86: 1d:ee:23:99:48:3c:13:09:78:06:cb:ca:e6:2c:99: 44:36:f0:e4:e6:bd:33:f7:45:2e:d4:00:64:e9:1c: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5F:CC:4D:C6:57:36:B2:2A:22:FE:EB:A9:2D:F0:4F:DC:02:AB:C3 X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c9:c7:e4:77:e7:e2:65:bd:6f:c1:ad:51:a1:4c:a0:ec:3e: 86:8d:b3:01:2d:90:cf:01:f5:99:9a:a6:a6:7c:26:07:6c:5f: 18:db:df:85:a4:77:28:1d:01:60:32:1c:be:85:23:3c:c3:05: c4:8c:fa:b7:01:10:db:b3:56:45:54:58:53:83:da:20:24:dc: 69:d1:9d:6b:b6:83:c9:72:f8:52:dd:6a:7f:27:42:c8:93:7e: 29:0c:b4:e9:b0:93:7a:7f:69:57:66:45:cb:e0:aa:49:9c:1b: 3b:67:78:1b:3d:19:9d:ba:3c:97:c9:a2:1a:e2:83:97:e4:eb: 58:ce:12:25:b0:84:0e:6b:91:9b:83:02:ac:66:8d:1f:8f:0d: 76:bd:42:b9:3e:ac:36:af:42:de:a1:66:59:0e:cb:30:12:47: 2c:93:b6:90:7b:d5:d5:b1:e5:a2:4f:b3:51:c5:01:2d:cc:52: 34:cd:fb:9e:6c:77:b3:a2:cf:03:f9:cd:c1:4b:36:11:9a:5b: 08:c6:28:f2:9f:9e:c1:fc:e4:d4:54:6a:c7:41:b3:da:59:8c: a0:69:da:aa:70:b8:12:4e:92:a3:82:e6:8d:15:97:06:65:77: be:8d:80:0f:0b:ee:74:10:bb:4a:bc:4a:ec:1e:26:bb:bf:a4: 46:aa:6e:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwNDI3MDMxMDEyWhcNMjUwNTA0MDMxMDEyWjAYMRYwFAYD VQQDEw02ODBkYTAxNS01NDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyIXKpSU5WZuxn59N5gfp+IPqIie4OSOxk1X2SH6D8eJm0SztbBdJ2RTkZPLa MBMmGEYCMdGUI6NvhqB7BIi1PmVoeWBdscUfys3oayzggnRi1qUQgxOs+w0Ba9E1 4wzHu79dSFKTn8rBUCzEtVvlYrY6GYWg3pWq5Zc5Dqt1oVHXIpCW9m/0NGjOuq0E sq1OLRnvHHHFBwbi9cDGlmcCpZ7Y2xSTkNAkqy7FJaIHZjTT9V9zlmF52CKU26UD wgdaHqS6NyUHfFa2BlAaO5cyKckjlobyMGRaNUMsfZrwMYYd7iOZSDwTCXgGy8rm LJlENvDk5r0z90Uu1ABk6Rxd/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBfzE3G VzayKiL+66kt8E/cAqvDMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8ycfkd+fiZb1vwa1RoUyg7D6GjbMBLZDPAfWZmqamfCYHbF8Y29+F pHcoHQFgMhy+hSM8wwXEjPq3ARDbs1ZFVFhTg9ogJNxp0Z1rtoPJcvhS3Wp/J0LI k34pDLTpsJN6f2lXZkXL4KpJnBs7Z3gbPRmdujyXyaIa4oOX5OtYzhIlsIQOa5Gb gwKsZo0fjw12vUK5Pqw2r0LeoWZZDsswEkcsk7aQe9XVseWiT7NRxQEtzFI0zfue bHezos8D+c3BSzYRmlsIxijyn57B/OTUVGrHQbPaWYygadqqcLgSTpKjguaNFZcG ZXe+jYAPC+50ELtKvErsHia7v6RGqm5x -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:19 2025 by rpki-client on console.sobornost.net