$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft File: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft (raw, json) Hash identifier: zTNX4UU0rQ5ZEI7YSs5Wm74Q+9AwtsXTofyIHuoMl0s= Subject key identifier: E6:78:D8:73:6E:89:4E:72:7C:07:D9:43:4D:8C:8D:49:25:0C:56:40 Authority key identifier: B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B Certificate issuer: /CN=A91FD64D/serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft Manifest number: 01AD Signing time: Sat 03 May 2025 02:43:53 +0000 Manifest this update: Sat 03 May 2025 02:43:53 +0000 Manifest next update: Sat 10 May 2025 02:43:53 +0000 Files and hashes: 1: tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl (hash: bWMT+vRUXC9ioO62To0shZcbK1QY/sWkflOVTPN4Whg=) 2: 34BB892E449C11EEB60E1441C4F9AE02.roa (hash: XQvlP4Z6PPDTvpFje+rE615QVj8K/dlNzggLZwnPCHY=) 3: 66D00EB2449C11EE86105C41C4F9AE02.roa (hash: sFUlSAs686BHpBPHFZ6jJXEM4AvroBrl/QL/VRc6YMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD64D, serialNumber=B4B18A253FB6293437116635DDDD199428B68D5B Validity Not Before: May 3 02:43:53 2025 GMT Not After : May 10 02:43:53 2025 GMT Subject: CN=681582e9-7a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:bf:01:37:91:ab:ad:f9:14:ae:cf:e8:66: dc:4c:08:6d:db:f2:dc:29:06:ab:2e:f4:3c:c9:f9: f4:e2:2e:fb:3d:ba:4f:dc:be:2c:89:ec:f1:08:97: 46:ab:90:9d:fa:b3:5a:97:9d:3f:a2:8e:db:95:06: 6c:08:92:d7:3c:51:da:b5:36:b7:82:b0:14:ff:e0: cd:53:cf:47:a3:98:28:c6:d5:0a:ce:83:8b:16:03: c9:f2:29:b7:08:31:97:d9:2e:6b:4f:8e:d6:03:67: d5:3e:f6:15:b2:45:cd:f3:84:17:a5:17:cf:36:67: d7:84:33:15:5d:ba:39:0d:d9:0e:e0:f7:bb:43:c5: 3b:04:e8:45:d3:a4:61:ac:92:d3:7b:f6:c4:00:3a: 5e:55:f3:60:0d:c3:16:8a:15:15:e4:b3:b3:bd:16: cf:86:f6:00:5b:f4:9d:67:72:fe:9d:43:63:69:e7: d0:45:24:9c:b1:19:14:0d:fd:7d:9e:9d:34:2b:54: 9b:82:1e:57:6e:cf:88:38:1f:b3:26:3c:cc:7c:01: c5:ee:f0:dd:f1:c5:b4:48:2b:fa:68:c0:7f:e8:88: 20:94:b5:b7:12:9d:26:1a:b9:48:54:d1:34:10:fe: 7c:aa:e4:39:ac:a4:dc:0e:57:9f:28:87:35:a5:95: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:78:D8:73:6E:89:4E:72:7C:07:D9:43:4D:8C:8D:49:25:0C:56:40 X509v3 Authority Key Identifier: keyid:B4:B1:8A:25:3F:B6:29:34:37:11:66:35:DD:DD:19:94:28:B6:8D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD64D/370786C8999411ED8567311FC4F9AE02/tLGKJT-2KTQ3EWY13d0ZlCi2jVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:cd:75:18:eb:07:c3:a1:c3:91:e4:0a:ed:62:9b:1f:c6: d8:cb:e3:a1:24:17:d7:fa:f4:e3:ae:f2:9e:16:1c:3b:20:ea: aa:6b:ad:de:65:1a:b1:77:99:52:62:77:f8:e9:87:58:79:45: cf:41:78:21:a0:6b:3a:93:fe:bb:18:13:ed:3e:f3:7c:49:f3: 26:15:1e:a5:5d:cb:98:7f:7b:3f:2c:cb:03:72:22:2e:72:84: a9:96:88:84:97:5e:1f:e4:42:3a:d6:0a:c2:63:a8:bd:cd:35: c9:81:7d:f1:e6:48:85:0e:ae:16:cf:cc:03:a2:bf:43:83:0c: 0f:b2:f7:95:13:34:6a:11:1d:c9:e2:13:45:52:ad:3a:a2:41: ce:f3:c0:53:38:8c:6d:29:d8:ed:a7:85:c1:60:9d:60:15:14: d4:a4:85:ae:81:a1:f8:2f:97:cb:59:0a:75:1b:59:17:f3:df: 38:c8:f8:94:83:84:b8:1e:8b:3d:9a:1f:da:14:23:69:e7:22: 0d:4f:2a:8b:62:45:1f:d2:a4:65:53:c8:24:ae:b6:35:ee:d1: 55:8c:a7:44:76:a9:37:f0:6e:27:19:46:5a:cd:75:23:76:31: 2c:45:1b:ce:02:f5:c5:0f:ba:c7:7b:cd:bf:e3:7a:f5:b2:cd: 66:15:d3:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2NEQxMTAvBgNVBAUTKEI0QjE4QTI1M0ZCNjI5MzQzNzExNjYzNUREREQxOTk0 MjhCNjhENUIwHhcNMjUwNTAzMDI0MzUzWhcNMjUwNTEwMDI0MzUzWjAYMRYwFAYD VQQDEw02ODE1ODJlOS03YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7q/ATeRq635FK7P6GbcTAht2/LcKQarLvQ8yfn04i77PbpP3L4siezxCJdG q5Cd+rNal50/oo7blQZsCJLXPFHatTa3grAU/+DNU89Ho5goxtUKzoOLFgPJ8im3 CDGX2S5rT47WA2fVPvYVskXN84QXpRfPNmfXhDMVXbo5DdkO4Pe7Q8U7BOhF06Rh rJLTe/bEADpeVfNgDcMWihUV5LOzvRbPhvYAW/SdZ3L+nUNjaefQRSScsRkUDf19 np00K1Sbgh5Xbs+IOB+zJjzMfAHF7vDd8cW0SCv6aMB/6IgglLW3Ep0mGrlIVNE0 EP58quQ5rKTcDlefKIc1pZX/TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZ42HNu iU5yfAfZQ02MjUklDFZAMB8GA1UdIwQYMBaAFLSxiiU/tik0NxFmNd3dGZQoto1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDY0RC8zNzA3ODZDODk5 OTQxMUVEODU2NzMxMUZDNEY5QUUwMi90TEdLSlQtMktUUTNFV1kxM2QwWmxDaTJq VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RMR0tKVC0yS1RRM0VXWTEzZDBabENpMmpWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDY0RC8zNzA3ODZDODk5OTQxMUVEODU2NzMxMUZDNEY5QUUwMi90TEdLSlQtMktU UTNFV1kxM2QwWmxDaTJqVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCabc11GOsHw6HDkeQK7WKbH8bYy+OhJBfX+vTjrvKeFhw7IOqqa63e ZRqxd5lSYnf46YdYeUXPQXghoGs6k/67GBPtPvN8SfMmFR6lXcuYf3s/LMsDciIu coSploiEl14f5EI61grCY6i9zTXJgX3x5kiFDq4Wz8wDor9DgwwPsveVEzRqER3J 4hNFUq06okHO88BTOIxtKdjtp4XBYJ1gFRTUpIWugaH4L5fLWQp1G1kX8984yPiU g4S4Hos9mh/aFCNp5yINTyqLYkUf0qRlU8gkrrY17tFVjKdEdqk38G4nGUZazXUj djEsRRvOAvXFD7rHe82/43r1ss1mFdNo -----END CERTIFICATE-----Generated at Sat May 3 06:12:50 2025 by rpki-client on console.sobornost.net