$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft File: YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json) Hash identifier: xV+t1egv3jwk2XWkR23WNH2utWfOxd0llsP6JKz14es= Subject key identifier: 81:56:7E:69:FC:35:6B:FC:2A:78:22:6D:FC:2B:CA:04:CE:F2:AB:E7 Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Certificate serial: 04AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft Manifest number: 049B Signing time: Sat 26 Apr 2025 23:40:38 +0000 Manifest this update: Sat 26 Apr 2025 23:40:37 +0000 Manifest next update: Sat 03 May 2025 23:40:37 +0000 Files and hashes: 1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: zuDg7fW8o82yyyLmXzjEABPjeYhLRGsnPoTXUMqN4/M=) 2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: xNVbMWOJTNr+TWQdJDNkDpjKnJa72sxLxfgu1hE4Y3w=) 3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: yMa9anpM1Fx5awM2ELLejmDtWuOQ4e92GvLkjwBL1Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1198 (0x4ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736 Validity Not Before: Apr 26 23:40:37 2025 GMT Not After : May 3 23:40:37 2025 GMT Subject: CN=680d6ef6-21c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:80:48:9a:c0:e5:92:e4:0b:5f:89:49:49: 26:0b:e7:e4:70:a1:f9:ab:3a:a2:fb:a3:c7:f4:92: f0:41:18:39:97:3c:56:91:74:52:cb:5b:e0:d0:bd: 7d:6f:9b:34:2b:c7:62:54:5d:45:c2:7c:f5:7f:f0: 5d:81:9a:34:05:12:60:fc:33:c1:d6:50:e4:ae:54: b8:bb:7b:b9:bc:41:33:98:75:d9:0a:42:df:27:4f: e3:dd:18:ea:9f:e2:bb:cd:f9:f2:09:95:e0:ce:87: 24:db:2d:e8:bd:b3:fd:7c:aa:99:be:66:b8:cb:35: 2f:e7:45:99:38:b3:57:be:17:2e:28:22:7c:b1:fb: 9e:07:c1:97:7c:bd:e1:bb:5c:b0:b6:b9:db:df:cd: 51:70:53:bc:47:fe:13:59:b9:34:1d:f0:d5:54:20: 77:d3:f3:97:79:c0:ae:6e:c1:14:54:13:e2:1b:2e: 5b:94:cf:55:f2:9b:46:8b:3b:2b:69:8c:dc:fb:6d: 41:d2:c9:5e:32:b6:ce:d9:75:21:9b:0e:71:75:a9: 0f:c1:1f:7d:2f:df:75:65:27:64:a0:3e:57:2c:cf: 17:d2:05:7c:45:65:dd:4d:54:8a:91:9d:72:e7:11: d4:9d:20:e5:c7:7d:a4:76:e2:bd:e1:09:18:cc:b2: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:56:7E:69:FC:35:6B:FC:2A:78:22:6D:FC:2B:CA:04:CE:F2:AB:E7 X509v3 Authority Key Identifier: keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3a:fc:f0:35:5f:42:6c:ff:17:fc:60:7b:69:1c:0c:cc:be: 0a:44:22:bb:12:0c:44:63:dc:84:f2:b2:83:47:a0:38:0c:c0: 55:f3:5e:d5:fe:55:14:18:71:6f:00:d2:5e:6e:a3:44:5c:12: a8:9d:91:c4:1c:4d:01:c2:c9:2e:c4:84:ed:70:d3:66:e2:59: 0f:54:5e:81:2f:37:79:55:c6:74:f1:01:6c:ac:fd:49:bd:f3: 1c:21:d9:bf:19:c5:63:d1:b2:79:3f:33:85:5b:48:8d:5b:7d: e0:94:61:55:13:a2:55:45:2a:72:9f:47:9d:b8:5e:05:bc:bf: 36:2e:9c:a0:2b:fd:cb:81:30:63:14:b7:97:ad:df:e8:5c:fe: 75:23:db:71:ad:34:5f:d3:71:08:f6:89:fa:53:b7:21:17:87: b7:20:eb:a9:a3:33:14:29:c4:2b:c8:dd:f1:dd:ae:8f:c9:2e: b2:3c:4c:5d:ce:05:e1:9a:1a:76:fc:1d:0c:e3:28:e1:b7:3e: 37:fb:58:ee:70:59:3d:57:be:ee:73:17:26:38:d8:25:32:09: 78:e9:89:25:ca:9a:18:ae:30:30:e5:63:d9:9a:08:ce:40:75: 25:b0:aa:a7:f5:71:d7:11:15:12:2d:85:34:4b:3d:42:6f:8c: 52:4b:0c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGQUIxMTAvBgNVBAUTKDYwMjhFNzA2NTIwNkE5RTQ1RkZENEIyNEE1N0VFOEMz MzQwQzU3MzYwHhcNMjUwNDI2MjM0MDM3WhcNMjUwNTAzMjM0MDM3WjAYMRYwFAYD VQQDEw02ODBkNmVmNi0yMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTCASJrA5ZLkC1+JSUkmC+fkcKH5qzqi+6PH9JLwQRg5lzxWkXRSy1vg0L19 b5s0K8diVF1Fwnz1f/BdgZo0BRJg/DPB1lDkrlS4u3u5vEEzmHXZCkLfJ0/j3Rjq n+K7zfnyCZXgzock2y3ovbP9fKqZvma4yzUv50WZOLNXvhcuKCJ8sfueB8GXfL3h u1ywtrnb381RcFO8R/4TWbk0HfDVVCB30/OXecCubsEUVBPiGy5blM9V8ptGizsr aYzc+21B0sleMrbO2XUhmw5xdakPwR99L991ZSdkoD5XLM8X0gV8RWXdTVSKkZ1y 5xHUnSDlx32kduK94QkYzLLNYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFWfmn8 NWv8KngibfwrygTO8qvnMB8GA1UdIwQYMBaAFGAo5wZSBqnkX/1LJKV+6MM0DFc2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUZBQi85Q0QxODRCMjM3 MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3FlUmZfVXNrcFg3b3d6UU1W elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDam5CbElHcWVSZl9Vc2twWDdvd3pRTVZ6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUZBQi85Q0QxODRCMjM3MzAxMUVDOTNCNTlCMUJDNEY5QUUwMi9ZQ2puQmxJR3Fl UmZfVXNrcFg3b3d6UU1WelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBROvzwNV9CbP8X/GB7aRwMzL4KRCK7EgxEY9yE8rKDR6A4DMBV817V /lUUGHFvANJebqNEXBKonZHEHE0BwskuxITtcNNm4lkPVF6BLzd5VcZ08QFsrP1J vfMcIdm/GcVj0bJ5PzOFW0iNW33glGFVE6JVRSpyn0eduF4FvL82LpygK/3LgTBj FLeXrd/oXP51I9txrTRf03EI9on6U7chF4e3IOupozMUKcQryN3x3a6PyS6yPExd zgXhmhp2/B0M4yjhtz43+1jucFk9V77ucxcmONglMgl46YklypoYrjAw5WPZmgjO QHUlsKqn9XHXERUSLYU0Sz1Cb4xSSwy9 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:41 2025 by rpki-client on console.sobornost.net