$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json) Hash identifier: JgMGTIo0EgbDn2nqtZxdFhBI844mHXrv9wcec78rTgk= Subject key identifier: 5D:D9:B8:B2:AB:6A:50:E5:E9:5B:DF:14:68:79:90:D7:1D:33:95:25 Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 1466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft Manifest number: 1464 Signing time: Mon 28 Apr 2025 17:07:35 +0000 Manifest this update: Mon 28 Apr 2025 17:07:35 +0000 Manifest next update: Mon 05 May 2025 17:07:35 +0000 Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: EJoDownn6kEFunKosyaAF7Ble0XVAZFRg8HBeTpFjkU=) 2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5222 (0x1466) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: Apr 28 17:07:35 2025 GMT Not After : May 5 17:07:35 2025 GMT Subject: CN=680fb5d7-ffe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:52:af:49:d3:a2:fa:52:da:d1:2e:45:8f: ab:a8:16:5f:81:09:f1:cd:fe:89:c7:e2:02:8b:6b: 97:90:37:54:77:58:5d:dc:c3:6d:e2:88:c2:ff:d7: e4:a3:aa:80:e7:9a:7f:6c:ea:73:4e:01:28:02:23: 41:1b:60:14:54:4f:45:79:a1:2c:74:f1:2b:04:e6: d6:8f:cb:86:a2:af:96:d9:02:1f:15:f8:8d:77:74: ea:38:1e:e7:a3:f9:4c:22:32:49:09:8c:2a:29:09: e2:7a:94:64:41:39:31:7e:79:a1:14:a7:ea:80:30: 2d:93:10:a7:6d:35:a8:24:7a:a1:73:0a:96:93:ec: ff:58:8d:8a:6a:05:2b:20:fa:a1:96:0a:2a:22:85: 96:59:02:ad:ea:e6:47:ff:59:85:4d:50:73:64:2b: 2d:3a:96:bd:c2:db:6d:d6:3c:d9:53:2e:b7:37:c7: d7:6b:d5:70:4f:f7:1c:b1:cc:a8:31:a8:07:fa:c6: 41:47:e0:f6:c3:fa:69:6d:44:fe:1c:45:cb:ca:c8: 52:e8:fb:d8:1f:98:0d:11:a7:eb:ec:c9:d6:42:a5: e5:44:0b:a8:24:25:0b:ea:44:8a:38:73:a7:71:20: ad:e9:a2:72:9c:b7:72:59:f9:45:8b:7f:e9:b6:3d: 50:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D9:B8:B2:AB:6A:50:E5:E9:5B:DF:14:68:79:90:D7:1D:33:95:25 X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:0d:a4:7e:cc:8c:37:d6:05:17:a0:37:c7:08:d6:70:43:cc: 76:25:96:db:00:63:82:d7:04:01:e6:42:7f:b4:55:df:52:1e: b6:9d:8c:bc:33:e2:17:61:45:6f:6b:47:36:1b:f4:e7:6e:55: 80:2d:37:67:75:a1:e6:5c:11:ae:57:79:64:69:84:d0:b7:3f: c0:b4:0e:1a:7b:8c:18:4e:92:0b:07:dc:cb:67:fb:6b:cc:4a: c8:88:68:8b:e6:36:e9:85:2e:79:7b:38:9f:6f:ca:b9:17:0f: 9c:c1:d8:37:20:fb:51:a7:76:ef:74:50:5c:74:64:92:13:91: 03:87:e3:fb:49:f0:4b:5c:c0:87:3a:f6:d2:99:b8:47:49:9d: 77:fc:96:df:7f:c2:19:ef:07:cd:1c:30:63:b7:ac:c5:9d:b7: aa:39:06:58:5d:d2:01:a0:79:b0:2a:cb:ab:04:ff:39:89:ad: bb:0f:f7:69:c0:27:c6:90:ed:8f:3d:c8:0f:5f:0a:d1:d0:c3: 4d:c9:ef:a6:3a:b2:3d:a0:ff:d5:b4:6b:14:45:eb:c7:9a:43: 2b:b8:e5:8d:ca:c9:95:3e:69:f6:b8:91:a3:47:c9:fb:b2:33: da:25:dd:56:c5:b7:7e:e7:58:43:be:90:64:89:71:35:54:0c: 2e:71:5e:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjUwNDI4MTcwNzM1WhcNMjUwNTA1MTcwNzM1WjAYMRYwFAYD VQQDEw02ODBmYjVkNy1mZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnNSr0nTovpS2tEuRY+rqBZfgQnxzf6Jx+ICi2uXkDdUd1hd3MNt4ojC/9fk o6qA55p/bOpzTgEoAiNBG2AUVE9FeaEsdPErBObWj8uGoq+W2QIfFfiNd3TqOB7n o/lMIjJJCYwqKQniepRkQTkxfnmhFKfqgDAtkxCnbTWoJHqhcwqWk+z/WI2KagUr IPqhlgoqIoWWWQKt6uZH/1mFTVBzZCstOpa9wttt1jzZUy63N8fXa9VwT/ccscyo MagH+sZBR+D2w/ppbUT+HEXLyshS6PvYH5gNEafr7MnWQqXlRAuoJCUL6kSKOHOn cSCt6aJynLdyWflFi3/ptj1QswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3ZuLKr alDl6VvfFGh5kNcdM5UlMB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8wMjMyODM0ODY3Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlX d2psdU1MUnd5TFhoMzdGd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgDaR+zIw31gUXoDfHCNZwQ8x2JZbbAGOC1wQB5kJ/tFXfUh62nYy8 M+IXYUVva0c2G/TnblWALTdndaHmXBGuV3lkaYTQtz/AtA4ae4wYTpILB9zLZ/tr zErIiGiL5jbphS55ezifb8q5Fw+cwdg3IPtRp3bvdFBcdGSSE5EDh+P7SfBLXMCH OvbSmbhHSZ13/Jbff8IZ7wfNHDBjt6zFnbeqOQZYXdIBoHmwKsurBP85ia27D/dp wCfGkO2PPcgPXwrR0MNNye+mOrI9oP/VtGsURevHmkMruOWNysmVPmn2uJGjR8n7 sjPaJd1Wxbd+51hDvpBkiXE1VAwucV7p -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:28 2025 by rpki-client on console.sobornost.net