$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json) Hash identifier: 1GhM2snSQrTwu7LDBcVGwFBRReGQV94oiLym9ChIiJ0= Subject key identifier: 59:AA:59:F8:BC:53:4D:5E:E5:74:F2:BA:42:27:B0:34:17:AB:0E:31 Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Certificate serial: 0A05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft Manifest number: 09FE Signing time: Mon 28 Apr 2025 20:15:56 +0000 Manifest this update: Mon 28 Apr 2025 20:15:55 +0000 Manifest next update: Mon 05 May 2025 20:15:55 +0000 Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: tEx62VPk8n3FDUi2GHsVJWjhaQOdYQS613RV+RO9dLc=) 2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: /BGVJbRRDfivu1c+fyECLgKysqOT6aaM0UL54g9lwQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2565 (0xa05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519 Validity Not Before: Apr 28 20:15:55 2025 GMT Not After : May 5 20:15:55 2025 GMT Subject: CN=680fe1fc-7bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:00:2a:00:8e:6b:ba:e1:81:c8:2c:f2:a8: e8:32:eb:b5:0d:91:8a:9d:08:21:b2:16:46:23:2f: 05:fb:60:6b:fa:f6:52:17:53:a7:15:17:52:d9:73: 11:e8:52:a3:b7:92:df:9d:99:d9:1f:29:13:08:b6: c9:3c:81:db:bb:7f:34:dc:fe:55:8f:b9:a8:c1:8e: f0:45:be:75:0d:8a:57:67:e0:18:b9:3d:66:2c:4f: 0e:43:40:07:df:68:39:6d:5e:58:2b:66:4b:60:20: ec:54:7f:51:8f:dc:65:41:30:de:bb:f6:25:1e:83: 79:d2:c5:1b:77:2d:bb:dd:cd:a7:3a:95:14:ac:a2: 4d:fd:ba:ba:07:2a:67:92:97:46:80:1f:42:d7:d8: 93:a9:6b:44:a0:9f:07:f9:00:1c:47:c0:18:1e:0e: be:1f:0a:24:ee:f1:49:06:98:c3:88:5c:ac:29:c6: ad:ff:eb:c4:75:43:86:aa:d0:6c:b9:80:07:fa:0a: 7d:88:a5:ee:14:6b:45:f6:c7:e1:c6:ce:0f:e3:47: 51:e9:25:35:80:eb:f7:70:f7:07:0f:96:11:2f:0a: bb:3c:7b:b9:b7:2c:d5:9c:e0:e5:1b:1c:38:62:5e: a8:90:59:cd:55:8b:7a:8d:53:15:a7:22:a5:56:9e: 2f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:59:F8:BC:53:4D:5E:E5:74:F2:BA:42:27:B0:34:17:AB:0E:31 X509v3 Authority Key Identifier: keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:0f:2d:a9:32:e7:ee:b2:a5:08:ba:a0:42:d9:a8:97:5e:5b: 2e:97:00:7d:41:0d:ca:4c:79:0e:05:3e:f9:d0:67:45:2d:f7: d2:65:b7:ec:2f:27:e6:a9:b5:22:a6:c9:91:c9:97:50:73:7d: dd:72:96:82:7d:0b:45:75:c8:69:f0:63:a2:02:4b:ef:86:f5: 3d:c7:fc:e6:77:ff:f5:e9:23:5c:82:0c:d3:3d:0d:4a:43:15: 48:41:7e:96:39:a9:16:80:68:a8:15:09:9b:84:d9:96:ef:55: 38:64:e0:d9:32:0a:8f:a6:5a:5e:29:79:81:3e:41:d8:3e:87: f5:65:3f:88:df:d5:52:8a:2e:72:3b:4c:fe:8c:3d:a6:47:49: 8e:0b:4a:78:ee:a9:d0:bb:8f:7b:48:67:97:a9:6a:c6:f6:81: da:a4:7f:72:b0:29:65:0b:b5:64:57:bd:df:cb:2b:42:2e:fc: a2:39:e8:59:58:82:6a:9f:31:98:32:66:cb:b3:0b:74:61:28: cd:d5:ef:df:f9:f7:ad:89:e0:49:97:69:ca:33:6d:3b:17:cf: cd:95:1c:8f:7b:d8:d2:33:5a:fa:5e:23:e5:66:3f:d8:9f:24: e5:5e:73:3e:de:fc:01:d1:ad:04:a2:b0:ed:c8:ad:9c:9c:e1: fb:e9:d9:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E3QTYxMTAvBgNVBAUTKDlGMkU1Nzg4RUY3OTU4NUJBQjc2MTk4NzdEMzk2MjdB QjJFNUQ1MTkwHhcNMjUwNDI4MjAxNTU1WhcNMjUwNTA1MjAxNTU1WjAYMRYwFAYD VQQDEw02ODBmZTFmYy03YmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4oQAKgCOa7rhgcgs8qjoMuu1DZGKnQghshZGIy8F+2Br+vZSF1OnFRdS2XMR 6FKjt5LfnZnZHykTCLbJPIHbu3803P5Vj7mowY7wRb51DYpXZ+AYuT1mLE8OQ0AH 32g5bV5YK2ZLYCDsVH9Rj9xlQTDeu/YlHoN50sUbdy273c2nOpUUrKJN/bq6Bypn kpdGgB9C19iTqWtEoJ8H+QAcR8AYHg6+Hwok7vFJBpjDiFysKcat/+vEdUOGqtBs uYAH+gp9iKXuFGtF9sfhxs4P40dR6SU1gOv3cPcHD5YRLwq7PHu5tyzVnODlGxw4 Yl6okFnNVYt6jVMVpyKlVp4vfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFmqWfi8 U01e5XTyukInsDQXqw4xMB8GA1UdIwQYMBaAFJ8uV4jveVhbq3YZh305Ynqy5dUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80NTdBOEU4Mjcz QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdGdXJkaG1IZlRsaWVyTGwx UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL255NVhpTzk1V0Z1cmRobUhmVGxpZXJMbDFSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QTdBNi80NTdBOEU4MjczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdG dXJkaG1IZlRsaWVyTGwxUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYDy2pMufusqUIuqBC2aiXXlsulwB9QQ3KTHkOBT750GdFLffSZbfs LyfmqbUipsmRyZdQc33dcpaCfQtFdchp8GOiAkvvhvU9x/zmd//16SNcggzTPQ1K QxVIQX6WOakWgGioFQmbhNmW71U4ZODZMgqPplpeKXmBPkHYPof1ZT+I39VSii5y O0z+jD2mR0mOC0p47qnQu497SGeXqWrG9oHapH9ysCllC7VkV73fyytCLvyiOehZ WIJqnzGYMmbLswt0YSjN1e/f+fetieBJl2nKM207F8/NlRyPe9jSM1r6XiPlZj/Y nyTlXnM+3vwB0a0EorDtyK2cnOH76dkf -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:02 2025 by rpki-client on console.sobornost.net