$ rpki-client -vvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft File: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json) Hash identifier: pbmPa6ZXH0W38qNnZLn2SXCp0WoTJi5TF+mt6Nh07sY= Subject key identifier: 44:D6:CA:A5:43:13:95:5A:0D:2A:F2:BE:66:0F:65:50:2F:88:EE:5F Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1 Certificate issuer: /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft Manifest number: 01CD Signing time: Sun 27 Apr 2025 01:52:57 +0000 Manifest this update: Sun 27 Apr 2025 01:52:56 +0000 Manifest next update: Sun 04 May 2025 01:52:56 +0000 Files and hashes: 1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: ztFnot068m8O1IASAHIQTnZJT0yaUHXZbsjNZjPriQg=) 2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: 0vJe1gSTz/9AM6rZDUcFgOuxx2MDx3AZXLchT0AzEH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1 Validity Not Before: Apr 27 01:52:56 2025 GMT Not After : May 4 01:52:56 2025 GMT Subject: CN=680d8df8-b705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:23:d6:b2:cf:b7:1c:a8:ac:63:19:07:89: 09:48:60:2e:c0:3e:31:9b:15:76:67:bb:ed:c5:c7: a1:43:e1:e3:59:ba:fb:4f:29:4c:f8:33:7b:1a:23: 89:47:32:f2:c8:b4:9d:5a:3a:71:38:51:f9:7e:17: 3e:e9:96:b5:ad:e0:4a:a1:9f:4a:8a:f5:36:e6:3d: ba:54:fe:9d:00:e4:1a:10:4b:bc:ae:e3:f9:55:c0: 28:cd:a2:fd:1d:d3:e6:c9:42:a2:eb:f9:d8:c2:be: 28:38:b6:dd:9c:01:6c:3d:06:28:03:e9:38:b8:03: eb:20:88:56:31:c5:1d:67:2b:1e:80:36:46:e3:e9: 16:7f:5b:cd:68:07:07:bd:9e:22:c6:a9:b2:31:6e: ea:e2:68:8a:eb:52:9d:b1:72:9a:4f:2c:c4:e4:0a: 9e:6c:83:31:cb:96:29:7e:0f:36:fe:e4:c0:b7:0d: 90:9a:00:65:93:aa:59:94:82:60:4b:fc:87:c8:f1: 2f:e8:6e:67:56:61:ae:d3:c0:56:d1:3c:b5:81:6a: b7:58:a7:da:44:fc:00:d1:28:85:74:ac:4a:92:a5: 4f:33:64:e5:2d:26:87:46:37:5f:53:ee:1e:7e:f7: 4a:6f:d0:e2:c3:f5:b5:64:64:be:83:f6:19:20:06: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D6:CA:A5:43:13:95:5A:0D:2A:F2:BE:66:0F:65:50:2F:88:EE:5F X509v3 Authority Key Identifier: keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2e:77:dd:60:cf:49:c6:71:29:5e:40:c0:0c:09:15:b2:ce: 0a:34:65:c6:b8:33:76:2e:0c:59:66:40:0f:65:4a:19:af:01: 8b:fe:7f:02:16:93:ca:b3:6b:04:47:60:32:7a:d6:5b:51:d3: f3:c9:84:a9:a1:28:a2:dc:f0:64:99:d3:f1:88:28:18:d9:04: fb:08:5a:19:77:fb:b8:a8:21:c6:a3:35:72:15:18:44:f0:65: 2f:f0:47:d2:10:58:8c:a9:97:82:38:9f:70:a4:17:51:7b:47: 75:bd:79:e6:d2:57:21:84:b2:fd:2e:42:0d:71:59:87:60:d1: 90:29:ff:4b:38:3f:45:08:d2:7c:bf:a8:8a:2b:1c:03:59:92: 2b:b8:90:08:ce:88:fc:63:c8:71:01:9c:0a:a4:9b:62:c8:5d: 6c:6b:40:65:8d:47:ef:9f:7c:c6:12:83:9b:0c:31:f8:59:7e: 57:21:b5:81:dc:59:0a:b6:75:60:00:b8:66:05:d3:3a:84:48: 20:67:61:38:e5:1a:64:34:07:0a:69:23:c4:fb:24:69:2a:7c: c9:b6:ce:07:d8:7f:82:57:f5:b3:6a:fb:2c:80:2a:12:c4:cb: 21:16:fc:07:4e:17:10:ed:d4:ff:74:60:57:c0:da:d6:a0:3e: a9:c9:1b:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxNEUxMTAvBgNVBAUTKENBMzgwMzY5OUFENUIwOTA2QzAwNzk3QTNBMUU5Q0Q5 NUI2NTkxQjEwHhcNMjUwNDI3MDE1MjU2WhcNMjUwNTA0MDE1MjU2WjAYMRYwFAYD VQQDEw02ODBkOGRmOC1iNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FYj1rLPtxyorGMZB4kJSGAuwD4xmxV2Z7vtxcehQ+HjWbr7TylM+DN7GiOJ RzLyyLSdWjpxOFH5fhc+6Za1reBKoZ9KivU25j26VP6dAOQaEEu8ruP5VcAozaL9 HdPmyUKi6/nYwr4oOLbdnAFsPQYoA+k4uAPrIIhWMcUdZysegDZG4+kWf1vNaAcH vZ4ixqmyMW7q4miK61KdsXKaTyzE5AqebIMxy5Ypfg82/uTAtw2QmgBlk6pZlIJg S/yHyPEv6G5nVmGu08BW0Ty1gWq3WKfaRPwA0SiFdKxKkqVPM2TlLSaHRjdfU+4e fvdKb9Diw/W1ZGS+g/YZIAaCHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETWyqVD E5VaDSryvmYPZVAviO5fMB8GA1UdIwQYMBaAFMo4A2ma1bCQbAB5ejoenNlbZZGx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE0RS84MEM5NUFBRTVG MjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNKQnNBSGw2T2g2YzJWdGxr YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lqZ0RhWnJWc0pCc0FIbDZPaDZjMlZ0bGtiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE0RS84MEM5NUFBRTVGMjcxMUVEQjFENUZBM0RDNEY5QUUwMi95amdEYVpyVnNK QnNBSGw2T2g2YzJWdGxrYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGLnfdYM9JxnEpXkDADAkVss4KNGXGuDN2LgxZZkAPZUoZrwGL/n8C FpPKs2sER2AyetZbUdPzyYSpoSii3PBkmdPxiCgY2QT7CFoZd/u4qCHGozVyFRhE 8GUv8EfSEFiMqZeCOJ9wpBdRe0d1vXnm0lchhLL9LkINcVmHYNGQKf9LOD9FCNJ8 v6iKKxwDWZIruJAIzoj8Y8hxAZwKpJtiyF1sa0BljUfvn3zGEoObDDH4WX5XIbWB 3FkKtnVgALhmBdM6hEggZ2E45RpkNAcKaSPE+yRpKnzJts4H2H+CV/WzavssgCoS xMshFvwHThcQ7dT/dGBXwNrWoD6pyRvT -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:31 2025 by rpki-client on console.sobornost.net