$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft File: yil3R0MKG-s0C8o51iIv0mQZt9s.mft (raw, json) Hash identifier: xF6vUCdxzau4NEHlsx6GbpzAfCZgtVotS+G1rlhW+dk= Subject key identifier: 17:61:D7:D5:EA:58:76:71:BE:66:52:00:D6:B7:2C:7E:4E:2E:05:DC Authority key identifier: CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB Certificate issuer: /CN=A91417B0/serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft Manifest number: 36 Signing time: Sun 27 Apr 2025 06:27:52 +0000 Manifest this update: Sun 27 Apr 2025 06:27:51 +0000 Manifest next update: Sun 04 May 2025 06:27:51 +0000 Files and hashes: 1: yil3R0MKG-s0C8o51iIv0mQZt9s.crl (hash: VpsBe6OPnLNWKPAGlUGBIK9GIL82QCjQ39clkTBOgx0=) 2: 5909D86203DB11F0B7D5DD29C4F9AE02.roa (hash: vXg2V9oSq+UecV6UR/hi4Z0CckYReJT3wpjl4H/MqsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=CA297747430A1BEB340BCA39D6222FD26419B7DB Validity Not Before: Apr 27 06:27:51 2025 GMT Not After : May 4 06:27:51 2025 GMT Subject: CN=680dce68-3419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:81:cb:34:7f:73:18:55:6c:40:e2:86:07: c5:f4:c3:69:29:70:24:bb:86:fd:29:18:11:a1:4c: 75:9f:83:30:f8:be:a2:7f:09:b5:43:3d:df:0c:d4: 6f:1a:d8:54:84:81:9e:3a:bb:9b:fd:d1:89:a3:a2: 0e:1c:e6:a3:da:5b:87:6d:45:8d:9c:fc:03:41:ed: 00:72:42:6c:b1:df:21:74:a7:2b:09:4c:ae:4e:90: 5c:13:6f:8e:f7:bc:0b:50:23:20:d8:2e:bf:67:80: b3:bc:d8:a4:a8:c2:2b:4c:0e:ca:46:cb:46:ae:50: c3:ca:aa:b0:cd:ae:9c:5f:c6:40:34:ca:7e:4d:18: 5b:c4:b0:2e:7f:8e:b4:9e:f0:5c:46:33:3c:a7:ff: 59:6f:63:a9:48:7f:4e:4d:cc:2c:10:48:a9:a7:6f: 78:d3:4c:f2:df:87:d9:9a:3c:48:fd:5e:96:8d:3e: 9c:08:a6:34:ac:c0:57:b2:02:8d:9e:f5:aa:ea:5c: 23:d0:e6:3e:55:15:6c:93:40:bf:81:b8:e0:72:da: b1:b0:0c:f5:b8:66:a6:13:64:1f:d4:3b:bb:4d:3d: 28:7b:50:02:81:a6:99:33:88:6b:68:c0:88:ef:ec: e0:01:d4:3b:dc:c9:3f:ee:11:bb:13:17:33:20:a7: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:61:D7:D5:EA:58:76:71:BE:66:52:00:D6:B7:2C:7E:4E:2E:05:DC X509v3 Authority Key Identifier: keyid:CA:29:77:47:43:0A:1B:EB:34:0B:CA:39:D6:22:2F:D2:64:19:B7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yil3R0MKG-s0C8o51iIv0mQZt9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/E1AC8210D88311EF954A3D70C4F9AE02/yil3R0MKG-s0C8o51iIv0mQZt9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6e:b7:76:2d:a0:53:ce:9d:d8:0d:2a:b0:ae:7a:63:ca:af: b5:a7:4a:ac:10:cc:61:15:a3:c6:3a:dd:91:ac:ab:5a:f1:51: 55:bf:08:ee:30:6e:22:a6:8c:f5:29:93:ca:5a:67:dd:bb:37: 37:c7:9b:48:65:f4:a2:1d:2d:af:d9:03:ba:9e:01:ca:a4:9b: 4a:79:b3:8a:bb:cf:e0:54:1b:7f:e7:4c:cd:8d:4d:d1:eb:67: 86:46:18:b6:2c:7c:76:49:01:a5:ef:41:84:86:2b:4e:12:63: c0:60:f0:9b:ae:8a:29:3b:61:f2:37:95:0f:aa:5f:ca:a7:4e: b9:3b:e1:25:d9:1b:4a:a4:98:74:64:00:9e:f7:6e:53:f5:ea: 58:b9:b5:ac:b6:bb:01:9c:55:b5:e1:ce:d4:ae:28:94:8e:f2: 99:cc:66:b9:bf:f3:4d:e7:b7:f8:3e:60:db:a1:ba:a6:a6:fc: 3f:21:6b:63:1b:a9:ac:28:01:96:53:1e:e5:b8:ac:39:74:59: 06:bc:f7:c0:a3:0e:c1:20:77:6d:63:e4:86:db:72:19:34:2d: 4d:0d:b8:de:c9:fd:37:47:1e:33:af:16:d3:d9:a2:4f:c2:29: 82:a5:ec:0b:94:31:a9:91:6b:4d:b9:23:86:1d:e2:de:3f:aa: 40:80:92:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTdCMDExMC8GA1UEBRMoQ0EyOTc3NDc0MzBBMUJFQjM0MEJDQTM5RDYyMjJGRDI2 NDE5QjdEQjAeFw0yNTA0MjcwNjI3NTFaFw0yNTA1MDQwNjI3NTFaMBgxFjAUBgNV BAMTDTY4MGRjZTY4LTM0MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAYYHLNH9zGFVsQOKGB8X0w2kpcCS7hv0pGBGhTHWfgzD4vqJ/CbVDPd8M1G8a 2FSEgZ46u5v90Ymjog4c5qPaW4dtRY2c/ANB7QByQmyx3yF0pysJTK5OkFwTb473 vAtQIyDYLr9ngLO82KSowitMDspGy0auUMPKqrDNrpxfxkA0yn5NGFvEsC5/jrSe 8FxGMzyn/1lvY6lIf05NzCwQSKmnb3jTTPLfh9maPEj9XpaNPpwIpjSswFeyAo2e 9arqXCPQ5j5VFWyTQL+BuOBy2rGwDPW4ZqYTZB/UO7tNPSh7UAKBppkziGtowIjv 7OAB1DvcyT/uEbsTFzMgpxLpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF2HX1epY dnG+ZlIA1rcsfk4uBdwwHwYDVR0jBBgwFoAUyil3R0MKG+s0C8o51iIv0mQZt9sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxN0IwL0UxQUM4MjEwRDg4 MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1zMEM4bzUxaUl2MG1RWnQ5 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIveWlsM1IwTUtHLXMwQzhvNTFpSXYwbVFadDlzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx N0IwL0UxQUM4MjEwRDg4MzExRUY5NTRBM0Q3MEM0RjlBRTAyL3lpbDNSME1LRy1z MEM4bzUxaUl2MG1RWnQ5cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtut3YtoFPOndgNKrCuemPKr7WnSqwQzGEVo8Y63ZGsq1rxUVW/CO4w biKmjPUpk8paZ927NzfHm0hl9KIdLa/ZA7qeAcqkm0p5s4q7z+BUG3/nTM2NTdHr Z4ZGGLYsfHZJAaXvQYSGK04SY8Bg8Juuiik7YfI3lQ+qX8qnTrk74SXZG0qkmHRk AJ73blP16li5tay2uwGcVbXhztSuKJSO8pnMZrm/803nt/g+YNuhuqam/D8ha2Mb qawoAZZTHuW4rDl0WQa898CjDsEgd21j5Ibbchk0LU0NuN7J/TdHHjOvFtPZok/C KYKl7AuUMamRa025I4Yd4t4/qkCAkoU= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net