$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft File: YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json) Hash identifier: 8BLfTT9bqQNQj/q7hM2pPpsChlejOFtRX9w8IrpY8nU= Subject key identifier: 4B:63:C3:CE:4B:7A:C0:71:FC:8F:1B:C6:65:35:7B:BD:AF:AF:18:65 Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD Certificate issuer: /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft Manifest number: 87 Signing time: Sun 27 Apr 2025 05:23:55 +0000 Manifest this update: Sun 27 Apr 2025 05:23:54 +0000 Manifest next update: Sun 04 May 2025 05:23:54 +0000 Files and hashes: 1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: 4IbKMg+MQOvaaPpsxDdJyL0+o8rJhpu5eos6YNGKLxY=) 2: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: tP/YOIdnoY7zTO5p4ZVWJihHDwAVW3mBLrg6H6OaTlM=) 3: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: AbR4JwNeIxvK28YKeU+rC69Mel7G0dy68L3LDpPyx/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD Validity Not Before: Apr 27 05:23:54 2025 GMT Not After : May 4 05:23:54 2025 GMT Subject: CN=680dbf6a-3608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:71:19:be:62:ec:12:05:b2:4b:e1:7e:2d: 00:bc:9d:1d:b8:88:e7:0c:7b:5c:c4:1f:b0:09:01: 53:35:11:10:56:e9:86:da:b5:02:57:78:2e:8c:a4: 86:34:e1:38:e8:de:47:a4:cf:2f:39:88:34:d8:ca: 4c:b1:86:a1:bf:bf:a8:d0:85:71:67:7d:b8:ed:04: fd:61:b1:25:f9:b1:35:90:35:76:4b:03:51:c5:72: bc:ea:ac:17:fd:d5:0b:09:65:23:f0:08:2e:46:e5: 51:22:35:3c:ea:86:a1:93:e1:a0:9a:f8:25:56:a8: a6:d7:01:cb:6e:9d:d5:31:44:71:1c:3e:e9:f4:a6: d6:3e:54:be:c8:3e:3c:1f:c4:d5:73:55:24:eb:5f: fd:67:b1:8d:03:06:f3:c0:e8:46:8a:74:88:3e:5b: 76:38:12:3f:ec:35:7e:75:02:1c:88:97:35:5a:23: b5:1f:1e:b3:dc:eb:fe:23:d3:06:cd:a5:21:52:cd: 4a:57:35:3a:16:d7:ee:a2:06:c3:02:4e:12:12:d1: b3:43:aa:01:e6:e0:91:4d:99:6e:2c:c2:24:a7:fa: 39:c0:e9:bd:53:66:05:4c:70:8c:53:34:d2:78:30: a2:b9:f0:98:5a:3c:8b:7b:d4:33:66:a7:9b:30:f5: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:C3:CE:4B:7A:C0:71:FC:8F:1B:C6:65:35:7B:BD:AF:AF:18:65 X509v3 Authority Key Identifier: keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ee:4f:29:61:28:29:63:92:c9:f4:8e:0a:62:f4:bc:57:dc: d5:a4:fa:e9:c8:28:dc:bd:a4:82:2c:07:f6:38:0e:66:16:1d: 70:ba:3a:66:e2:54:6f:c5:49:19:11:96:b2:06:02:24:dc:4e: 68:04:a6:68:c7:16:b5:9f:2c:c1:b5:01:ce:fe:9a:96:78:71: 5f:16:a4:25:e1:3d:c9:14:14:8a:80:bc:c2:76:8b:66:fc:6d: ac:b4:83:b2:bc:40:09:59:cc:22:e4:06:d0:d8:90:76:5e:41: 93:96:39:8f:e2:ea:82:8b:69:97:43:58:1a:f6:e3:4b:19:ee: 44:f4:5d:fd:4d:0b:65:38:e9:ce:82:e9:7a:8d:5c:62:44:ee: d4:8f:0d:fe:4b:f5:87:98:ed:d2:94:e0:8b:1c:df:65:fb:67: aa:bd:1e:a1:30:c3:71:79:20:b7:0c:a1:e3:24:cb:98:ae:eb: f0:36:de:e3:19:1c:5f:0d:63:31:0f:22:2b:7f:4b:d7:49:10: c6:4d:d8:7e:6c:52:4d:3f:5c:66:5c:b9:5c:f4:42:bc:45:d2: 58:da:35:b2:e1:57:28:6e:8c:a2:89:70:a0:d1:bd:d9:0e:e1: 05:7b:d6:a8:b4:db:9e:7a:19:e8:c0:1d:55:9f:1e:8c:c9:2a: 83:62:dc:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUREMDgxMTAvBgNVBAUTKDYyQUMxQkI5NTgwQTcxMTk4MTlFN0I2QjZFQjJDMzUx NTM0Nzg3RkQwHhcNMjUwNDI3MDUyMzU0WhcNMjUwNTA0MDUyMzU0WjAYMRYwFAYD VQQDEw02ODBkYmY2YS0zNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl4FxGb5i7BIFskvhfi0AvJ0duIjnDHtcxB+wCQFTNREQVumG2rUCV3gujKSG NOE46N5HpM8vOYg02MpMsYahv7+o0IVxZ3247QT9YbEl+bE1kDV2SwNRxXK86qwX /dULCWUj8AguRuVRIjU86oahk+GgmvglVqim1wHLbp3VMURxHD7p9KbWPlS+yD48 H8TVc1Uk61/9Z7GNAwbzwOhGinSIPlt2OBI/7DV+dQIciJc1WiO1Hx6z3Ov+I9MG zaUhUs1KVzU6FtfuogbDAk4SEtGzQ6oB5uCRTZluLMIkp/o5wOm9U2YFTHCMUzTS eDCiufCYWjyLe9QzZqebMPXUYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtjw85L esBx/I8bxmU1e72vrxhlMB8GA1UdIwQYMBaAFGKsG7lYCnEZgZ57a26yw1FTR4f9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREQwOC85QTVGQkI2MjVC MTkxMUVGQkVEMEM0N0FDNEY5QUUwMi9ZcXdidVZnS2NSbUJubnRyYnJMRFVWTkho XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lxd2J1VmdLY1JtQm5udHJickxEVVZOSGhfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REQwOC85QTVGQkI2MjVCMTkxMUVGQkVEMEM0N0FDNEY5QUUwMi9ZcXdidVZnS2NS bUJubnRyYnJMRFVWTkhoXzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm7k8pYSgpY5LJ9I4KYvS8V9zVpPrpyCjcvaSCLAf2OA5mFh1wujpm 4lRvxUkZEZayBgIk3E5oBKZoxxa1nyzBtQHO/pqWeHFfFqQl4T3JFBSKgLzCdotm /G2stIOyvEAJWcwi5AbQ2JB2XkGTljmP4uqCi2mXQ1ga9uNLGe5E9F39TQtlOOnO gul6jVxiRO7Ujw3+S/WHmO3SlOCLHN9l+2eqvR6hMMNxeSC3DKHjJMuYruvwNt7j GRxfDWMxDyIrf0vXSRDGTdh+bFJNP1xmXLlc9EK8RdJY2jWy4VcoboyiiXCg0b3Z DuEFe9aotNueehnowB1Vnx6MySqDYtz6 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net