$ rpki-client -vvf rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft File: Y95vcfGNmpNam-HMuvW_7sCodvg.mft (raw, json) Hash identifier: HAZvQmDnLiAIUj1/Ci98KymuNRyjf0liyLsksUy1kR0= Subject key identifier: 12:D2:B4:70:3E:11:05:3E:7A:0E:91:45:D6:16:2C:53:2E:8F:5A:02 Authority key identifier: 63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 Certificate issuer: /CN=A912250C/serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft Manifest number: 0113 Signing time: Fri 25 Apr 2025 03:59:49 +0000 Manifest this update: Fri 25 Apr 2025 03:59:48 +0000 Manifest next update: Fri 02 May 2025 03:59:48 +0000 Files and hashes: 1: Y95vcfGNmpNam-HMuvW_7sCodvg.crl (hash: 1rb2s6WOSMb+fZrMzBpDFA6yQhf3cfwiim4akCUKibc=) 2: 7283E2F6C4CB11EEBEB1AE82C4F9AE02.roa (hash: DpGOi0sB2sMQxf4ZO7IGNHJMX8cIMnNNE4SuDpT2FAo=) 3: 845CB214C4CB11EEBCFEE782C4F9AE02.roa (hash: RSiHqX4rb/XiO/VoDBBhBwIwk/xvfX+c6El0AIzq620=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912250C, serialNumber=63DE6F71F18D9A935A9BE1CCBAF5BFEEC0A876F8 Validity Not Before: Apr 25 03:59:48 2025 GMT Not After : May 2 03:59:48 2025 GMT Subject: CN=680b08b4-08e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:16:f5:55:07:8b:08:7a:6c:4b:02:44:ec: 2b:5a:0c:4c:c5:b2:a7:b0:b2:11:ff:9c:1f:f5:95: 37:c2:00:57:4a:70:75:1d:a9:1a:57:73:45:46:65: a3:b2:80:61:c7:de:da:67:96:f9:29:17:a1:65:28: 72:17:7d:4d:6e:c6:81:49:0f:09:6d:d7:07:e5:3a: cb:b3:8e:07:52:7b:92:f9:fa:7a:e4:c3:4a:6d:b1: e2:50:9a:f5:9e:65:47:0a:c6:7f:49:20:56:33:a0: e3:e0:d2:80:b9:39:90:58:5e:f8:32:e2:25:6f:52: 81:5f:e0:91:f9:e0:4e:54:84:30:ed:17:64:fe:9a: 84:d2:dc:87:1a:8e:a5:c4:0d:38:44:03:4d:05:b7: 88:fe:51:98:ef:8c:34:32:64:4f:1f:3b:c5:8e:53: 12:45:1b:82:cb:5b:94:86:0e:bc:46:cf:5c:87:1a: ce:7f:82:a3:81:2f:d6:e6:99:0b:62:93:99:32:96: 26:5f:f9:e6:1a:a0:1d:3e:02:0d:e4:f6:d8:21:21: 6e:46:91:6b:8d:7b:0f:83:14:d1:1b:5d:28:b0:2e: 63:dc:68:16:51:d7:ef:c1:bd:42:7f:0b:f7:30:a1: 35:a5:ce:74:49:84:10:fa:81:e3:21:40:d7:ce:68: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D2:B4:70:3E:11:05:3E:7A:0E:91:45:D6:16:2C:53:2E:8F:5A:02 X509v3 Authority Key Identifier: keyid:63:DE:6F:71:F1:8D:9A:93:5A:9B:E1:CC:BA:F5:BF:EE:C0:A8:76:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y95vcfGNmpNam-HMuvW_7sCodvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912250C/83EECC4A837B11EE85C4F10FC4F9AE02/Y95vcfGNmpNam-HMuvW_7sCodvg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d0:9e:c3:7a:4f:37:b1:24:bc:53:fe:0d:38:21:69:59:4f: 53:b1:65:2c:9e:15:60:15:f0:78:7a:85:20:96:a3:ce:94:33: a3:4e:af:04:07:58:ea:82:41:21:71:b8:75:f2:59:9e:1a:5d: 9d:e5:db:f2:ea:02:d9:5e:ef:fa:9a:ec:12:06:f6:43:2a:b0: 0b:00:06:ab:39:1f:0e:16:9f:7b:38:2e:e3:53:be:10:09:3c: f8:7f:90:eb:04:f0:5c:c4:0f:99:06:50:8f:26:2f:dd:1d:9f: a3:da:2c:47:27:37:c0:68:a4:da:8f:07:d9:4f:5b:c5:f1:a2: 90:0c:e7:b3:eb:94:22:53:15:8e:e1:fc:ff:12:5a:7d:4c:cc: 7a:d8:b4:c5:3f:78:fa:e7:4c:47:16:1c:d8:f7:1b:74:ef:93: aa:fe:ab:f2:80:25:ae:2a:b3:c9:05:eb:fe:72:f6:fb:eb:74: 50:a6:53:50:8a:9a:34:5b:8e:0a:66:89:51:51:49:1e:6a:5d: 68:47:d7:e0:62:2b:68:cb:ed:36:17:a2:11:83:56:a7:3e:6d: 13:a9:8b:f5:19:37:52:df:21:2f:17:94:4d:09:ba:08:8a:25: 00:de:d1:50:29:9c:5c:bd:38:14:9c:db:49:5e:50:48:6c:05: 84:60:75:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI1MEMxMTAvBgNVBAUTKDYzREU2RjcxRjE4RDlBOTM1QTlCRTFDQ0JBRjVCRkVF QzBBODc2RjgwHhcNMjUwNDI1MDM1OTQ4WhcNMjUwNTAyMDM1OTQ4WjAYMRYwFAYD VQQDEw02ODBiMDhiNC0wOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTcW9VUHiwh6bEsCROwrWgxMxbKnsLIR/5wf9ZU3wgBXSnB1HakaV3NFRmWj soBhx97aZ5b5KRehZShyF31NbsaBSQ8JbdcH5TrLs44HUnuS+fp65MNKbbHiUJr1 nmVHCsZ/SSBWM6Dj4NKAuTmQWF74MuIlb1KBX+CR+eBOVIQw7Rdk/pqE0tyHGo6l xA04RANNBbeI/lGY74w0MmRPHzvFjlMSRRuCy1uUhg68Rs9chxrOf4KjgS/W5pkL YpOZMpYmX/nmGqAdPgIN5PbYISFuRpFrjXsPgxTRG10osC5j3GgWUdfvwb1Cfwv3 MKE1pc50SYQQ+oHjIUDXzmiJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLStHA+ EQU+eg6RRdYWLFMuj1oCMB8GA1UdIwQYMBaAFGPeb3HxjZqTWpvhzLr1v+7AqHb4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjUwQy84M0VFQ0M0QTgz N0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1wTmFtLUhNdXZXXzdzQ29k dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k5NXZjZkdObXBOYW0tSE11dldfN3NDb2R2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjUwQy84M0VFQ0M0QTgzN0IxMUVFODVDNEYxMEZDNEY5QUUwMi9ZOTV2Y2ZHTm1w TmFtLUhNdXZXXzdzQ29kdmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR0J7Dek83sSS8U/4NOCFpWU9TsWUsnhVgFfB4eoUglqPOlDOjTq8E B1jqgkEhcbh18lmeGl2d5dvy6gLZXu/6muwSBvZDKrALAAarOR8OFp97OC7jU74Q CTz4f5DrBPBcxA+ZBlCPJi/dHZ+j2ixHJzfAaKTajwfZT1vF8aKQDOez65QiUxWO 4fz/Elp9TMx62LTFP3j650xHFhzY9xt075Oq/qvygCWuKrPJBev+cvb763RQplNQ ipo0W44KZolRUUkeal1oR9fgYitoy+02F6IRg1anPm0TqYv1GTdS3yEvF5RNCboI iiUA3tFQKZxcvTgUnNtJXlBIbAWEYHVp -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:37 2025 by rpki-client on console.sobornost.net