$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: uXWJ4LbunV0G2V3gYy4FQ9GBQbg+HDAcOwEuWe70be4= Subject key identifier: FD:52:FD:41:0C:50:82:5A:99:FD:C2:D8:16:7C:E0:5E:68:AA:CF:06 Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 015A Signing time: Sun 27 Apr 2025 03:20:43 +0000 Manifest this update: Sun 27 Apr 2025 03:20:42 +0000 Manifest next update: Sun 04 May 2025 03:20:42 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: 2PNML5PStaBY3untzgMHOqpoJDJmdBr8lWG5d+2S3kM=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: n+UG6V5XV7UFganlBH1N62nTVgBD1jdXRIOHq8v8JMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Apr 27 03:20:42 2025 GMT Not After : May 4 03:20:42 2025 GMT Subject: CN=680da28a-1f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:2a:ef:da:e7:c3:15:86:85:61:e2:5d:f0:f7: 0d:40:6d:d4:60:ca:84:47:9d:05:b3:d4:47:58:87: 62:25:1d:39:d8:b5:1a:5e:06:bf:08:18:99:2c:08: d4:44:f3:65:2e:ae:02:ca:6c:f5:90:72:9c:e8:2f: cb:b5:66:ae:61:c5:bd:2e:d5:a5:7a:ea:57:54:22: 99:4b:af:b8:17:79:1c:02:94:d3:e0:27:73:75:d3: da:9b:e2:e1:a0:41:32:67:83:83:40:e7:75:da:fc: f5:19:46:a6:b4:a1:d1:23:41:d1:f6:bb:85:39:bf: 49:41:19:b5:cb:01:e0:2f:e6:ff:3d:0b:32:c8:ab: d8:29:fa:d8:27:6a:6a:5b:a5:a2:35:42:04:a6:df: 39:9c:42:9a:a7:eb:bc:73:85:6d:c3:c0:9a:c8:c1: 06:87:84:3a:5e:a6:69:72:8f:5d:f1:99:e2:62:2a: 51:53:3b:f3:f0:1d:17:d5:6f:50:49:d1:6e:ca:10: 34:6c:53:7f:a5:6f:2a:98:ef:27:0a:c2:ad:72:d7: 4f:3b:a5:ff:5a:3b:fe:05:6f:8a:7b:49:11:10:73: f0:8c:3b:22:27:22:a7:49:31:ac:ea:03:61:8d:58: 5c:1a:ce:bf:95:3e:03:30:51:c0:1b:7d:52:e1:91: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:52:FD:41:0C:50:82:5A:99:FD:C2:D8:16:7C:E0:5E:68:AA:CF:06 X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:b0:de:1c:5d:54:53:46:d9:68:55:18:49:3c:b2:ee:4b:b5: 29:f7:9e:62:65:c8:1d:84:b4:1b:55:26:68:c7:a3:09:cc:aa: bd:30:58:02:e6:37:8b:eb:ab:0f:73:58:b8:9f:ca:8f:11:da: 2f:0d:fd:6f:36:58:04:ed:cc:8f:0f:e6:7e:c4:8c:ac:a7:53: 98:b6:68:38:5c:a2:eb:e0:18:0d:91:8c:d4:7c:44:d3:3f:ca: 99:ff:6f:60:05:27:09:52:ac:36:2f:df:8c:8a:ca:33:e9:d8: ad:d2:fa:db:a0:d9:57:0c:f7:b3:4c:f3:01:70:d0:08:0a:9d: 41:eb:02:f8:5e:3d:b8:ad:cf:4d:28:2f:c9:a3:0b:f1:98:ef: ea:b8:52:6b:6d:80:3d:09:03:8b:24:ae:bd:3d:d9:42:5a:0f: a3:2c:06:55:42:42:77:69:f2:82:63:c7:91:46:3d:e0:90:f2: 62:a6:41:29:8f:e9:42:04:5f:ac:a4:0e:a2:f7:cc:c7:08:d2: 84:3d:a7:1d:4c:9e:79:85:57:2b:eb:3f:b2:72:9f:05:41:1e: ff:ca:3e:b6:c3:e5:a9:f5:11:4f:33:ee:c1:73:8e:50:33:4f: 52:c8:04:1a:b4:a5:41:a7:8d:60:69:ab:92:a2:fe:8c:bb:eb: da:e5:00:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUwNDI3MDMyMDQyWhcNMjUwNTA0MDMyMDQyWjAYMRYwFAYD VQQDEw02ODBkYTI4YS0xZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8irv2ufDFYaFYeJd8PcNQG3UYMqER50Fs9RHWIdiJR052LUaXga/CBiZLAjU RPNlLq4Cymz1kHKc6C/LtWauYcW9LtWleupXVCKZS6+4F3kcApTT4CdzddPam+Lh oEEyZ4ODQOd12vz1GUamtKHRI0HR9ruFOb9JQRm1ywHgL+b/PQsyyKvYKfrYJ2pq W6WiNUIEpt85nEKap+u8c4Vtw8CayMEGh4Q6XqZpco9d8ZniYipRUzvz8B0X1W9Q SdFuyhA0bFN/pW8qmO8nCsKtctdPO6X/Wjv+BW+Ke0kREHPwjDsiJyKnSTGs6gNh jVhcGs6/lT4DMFHAG31S4ZFHvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1S/UEM UIJamf3C2BZ84F5oqs8GMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATsN4cXVRTRtloVRhJPLLuS7Up955iZcgdhLQbVSZox6MJzKq9MFgC 5jeL66sPc1i4n8qPEdovDf1vNlgE7cyPD+Z+xIysp1OYtmg4XKLr4BgNkYzUfETT P8qZ/29gBScJUqw2L9+Misoz6dit0vrboNlXDPezTPMBcNAICp1B6wL4Xj24rc9N KC/JowvxmO/quFJrbYA9CQOLJK69PdlCWg+jLAZVQkJ3afKCY8eRRj3gkPJipkEp j+lCBF+spA6i98zHCNKEPacdTJ55hVcr6z+ycp8FQR7/yj62w+Wp9RFPM+7Bc45Q M09SyAQatKVBp41gaauSov6Mu+va5QDQ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:39 2025 by rpki-client on console.sobornost.net