$ rpki-client -vvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft File: 09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json) Hash identifier: uDtJX0uoPhj6n4JCb5W94iu5LnZJ2I+9Y9IHODS0kMM= Subject key identifier: 96:52:E8:24:EA:F5:16:64:6C:5E:2B:D1:B2:D6:AB:A3:74:F6:CF:C3 Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 Certificate issuer: /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft Manifest number: 0153 Signing time: Sun 27 Apr 2025 03:08:57 +0000 Manifest this update: Sun 27 Apr 2025 03:08:56 +0000 Manifest next update: Sun 04 May 2025 03:08:56 +0000 Files and hashes: 1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: R3bwoJKJKMWAIEY7x9TwV+QIpMGfQJ+ZNX9kde1YveY=) 2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: +bSIgtlzLpxye6Dc57u3Y5cAYurLZS353ZEqcNfs/mc=) 3: F9A783F2352C11EEAD7A4625C4F9AE02.roa (hash: F0IorjVoRNdR/rnfERSJA3kDGcWRN5xMt/uZPHyNwMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16 Validity Not Before: Apr 27 03:08:56 2025 GMT Not After : May 4 03:08:56 2025 GMT Subject: CN=680d9fc9-7932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:00:c9:52:44:e6:74:a2:94:65:1f:f2:49:88: 6d:54:b9:71:e6:13:a3:5e:b4:3a:57:70:7d:3c:d4: 27:5e:09:23:00:58:e2:c5:2a:4c:95:dd:a7:fd:c1: 9a:ea:8e:80:86:52:4c:a5:3a:4e:55:44:95:fd:66: f5:50:8f:e3:2b:f8:a6:e2:3d:5b:32:86:42:8d:a0: 2a:7e:96:e7:83:04:d5:24:62:1c:be:e7:3b:a5:82: cc:91:23:93:80:a2:08:82:89:33:ef:2c:bc:57:01: d7:43:59:c0:32:1a:c2:c4:86:a8:a5:6b:90:ba:ee: 3f:6e:93:c8:9e:90:c3:cd:3a:83:a0:21:db:6b:c9: 2f:a0:22:ff:1b:47:11:2a:ec:4a:da:c9:4e:b9:7c: e0:02:48:66:44:8c:18:a9:77:02:78:2e:7d:93:1e: 5d:b5:a7:7f:72:89:59:97:3a:5d:79:fc:a1:51:50: 20:b2:73:46:1a:da:93:6a:1c:8e:ba:35:f5:6e:05: 1c:f2:a0:65:2e:99:3b:d5:98:44:61:ab:9f:27:8b: 66:c8:c2:f0:dc:75:28:2a:98:9c:cc:cd:41:0e:ee: 37:89:56:87:99:82:cd:88:67:fa:0b:44:65:e0:25: 92:e2:9e:af:be:f9:5d:5a:ef:6a:81:09:5a:ec:e8: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:52:E8:24:EA:F5:16:64:6C:5E:2B:D1:B2:D6:AB:A3:74:F6:CF:C3 X509v3 Authority Key Identifier: keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:ba:b1:84:c5:0e:34:52:e5:1e:05:38:81:58:a8:5a:09:05: 7a:9f:a3:5d:2e:2f:c1:49:8b:35:41:0b:c6:7d:96:a4:81:bc: 59:01:a2:5d:d5:f0:8f:c5:fb:2f:14:a3:2d:34:ba:c2:19:85: 6f:4a:ca:e4:84:17:e6:bb:46:5b:cd:aa:a6:74:c3:b3:57:16: c8:32:d6:66:ba:00:60:97:2c:13:c0:4a:1c:fb:e5:02:ba:5d: 92:23:e6:91:03:0e:b7:90:7b:fc:e5:9a:a2:a8:d8:69:25:8a: 50:24:ed:08:d3:d2:26:ef:3d:67:2b:cf:d8:8f:f0:91:57:a4: cf:d5:a0:d7:5e:66:f9:61:21:5a:d2:ff:0e:cd:da:78:d8:67: d6:1b:f8:1e:d7:ee:dd:55:64:46:c2:e8:ec:68:dc:e3:91:bd: 0b:ba:a6:bc:db:57:9e:a0:38:a5:da:e5:06:33:32:c0:28:88: 01:cc:80:a1:92:a8:00:a9:d4:7b:e5:0d:60:35:19:65:94:75: af:00:ef:d8:6c:c5:57:88:f2:da:38:3e:20:25:ca:ef:63:51: 1a:a2:fc:60:40:d9:55:ea:0f:9e:f9:ba:88:1e:3c:f7:dc:e4: 63:78:3b:c5:ca:3e:d6:45:2e:f5:a0:11:32:55:69:a1:60:74: fa:76:10:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIwMTcxMTAvBgNVBAUTKEQzRDNEODYwRjg2OEM5M0VEMTBFMkVENUE5N0E4Nzk0 NTRDODRDMTYwHhcNMjUwNDI3MDMwODU2WhcNMjUwNTA0MDMwODU2WjAYMRYwFAYD VQQDEw02ODBkOWZjOS03OTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ADJUkTmdKKUZR/ySYhtVLlx5hOjXrQ6V3B9PNQnXgkjAFjixSpMld2n/cGa 6o6AhlJMpTpOVUSV/Wb1UI/jK/im4j1bMoZCjaAqfpbngwTVJGIcvuc7pYLMkSOT gKIIgokz7yy8VwHXQ1nAMhrCxIaopWuQuu4/bpPInpDDzTqDoCHba8kvoCL/G0cR KuxK2slOuXzgAkhmRIwYqXcCeC59kx5dtad/colZlzpdefyhUVAgsnNGGtqTahyO ujX1bgUc8qBlLpk71ZhEYaufJ4tmyMLw3HUoKpiczM1BDu43iVaHmYLNiGf6C0Rl 4CWS4p6vvvldWu9qgQla7Oi1eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZS6CTq 9RZkbF4r0bLWq6N09s/DMB8GA1UdIwQYMBaAFNPT2GD4aMk+0Q4u1al6h5RUyEwW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjAxNy9ERTc1RjIyMjJB MTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lUN1JEaTdWcVhxSGxGVElU QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5UFlZUGhveVQ3UkRpN1ZxWHFIbEZUSVRCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjAxNy9ERTc1RjIyMjJBMTMxMUVFOTVENThBNjZDNEY5QUUwMi8wOVBZWVBob3lU N1JEaTdWcVhxSGxGVElUQlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFurGExQ40UuUeBTiBWKhaCQV6n6NdLi/BSYs1QQvGfZakgbxZAaJd 1fCPxfsvFKMtNLrCGYVvSsrkhBfmu0ZbzaqmdMOzVxbIMtZmugBglywTwEoc++UC ul2SI+aRAw63kHv85ZqiqNhpJYpQJO0I09Im7z1nK8/Yj/CRV6TP1aDXXmb5YSFa 0v8Ozdp42GfWG/ge1+7dVWRGwujsaNzjkb0Luqa821eeoDil2uUGMzLAKIgBzICh kqgAqdR75Q1gNRlllHWvAO/YbMVXiPLaOD4gJcrvY1EaovxgQNlV6g+e+bqIHjz3 3ORjeDvFyj7WRS71oBEyVWmhYHT6dhCQ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net