$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json) Hash identifier: 1RaEcI6Z7p80na1WSuL0/f4KrbAIf3dkVOgyHq6gEAU= Subject key identifier: FB:CE:82:F6:27:81:34:08:7A:E8:C5:63:35:46:E9:83:9D:C1:A8:17 Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft Manifest number: 01C7 Signing time: Sun 27 Apr 2025 00:38:26 +0000 Manifest this update: Sun 27 Apr 2025 00:38:25 +0000 Manifest next update: Sun 04 May 2025 00:38:25 +0000 Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: dzgND6Vwq8r/JIlXchPVcgdANU0M8XGZiiRCQF1kHug=) 2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: GlAc5fAZweTglvbASziU5BwBtzuZgb2Uajdg0QEwpgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Validity Not Before: Apr 27 00:38:25 2025 GMT Not After : May 4 00:38:25 2025 GMT Subject: CN=680d7c81-3c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:78:4a:1e:cb:a7:d1:59:4c:04:0f:54:fc: 63:86:f4:e9:c3:7d:ef:fb:20:98:63:e8:b5:70:30: 5d:d0:b7:4a:0f:69:12:96:66:86:44:89:64:42:b4: 6f:c3:6f:8c:5b:2f:5b:88:1e:73:0c:a5:ca:7b:4a: 63:8d:58:c6:b9:5a:00:da:d6:a6:01:f0:0b:1f:9c: 35:75:e9:6c:4e:51:98:f2:b7:74:cc:59:8c:95:db: 64:19:ad:31:30:53:0e:e8:d7:ad:03:57:9c:7d:b7: 72:01:84:be:e7:d9:b9:c4:d4:07:09:cc:3c:2c:79: 48:a0:c2:1c:45:0e:bf:ff:d3:28:d0:69:b7:64:7e: c0:2b:67:8b:f6:4c:d5:67:37:04:9b:e8:82:52:81: af:d6:47:47:0b:c9:7a:ea:0c:41:3e:cb:97:df:01: 3f:ff:f0:f4:21:ac:32:55:24:98:72:65:7c:bb:ba: d9:32:e7:d7:c5:b6:7a:9e:b5:b9:91:7e:00:9f:e4: 81:16:e0:d0:74:c0:75:bf:18:ba:4e:33:41:64:88: 96:c2:c1:9a:a6:e7:73:2c:e1:d5:a1:46:7a:db:ac: de:66:d0:d5:47:58:71:c9:88:fb:70:20:3c:1d:e9: 12:1a:93:c1:e7:7e:00:16:a9:9b:ca:11:2c:63:9d: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CE:82:F6:27:81:34:08:7A:E8:C5:63:35:46:E9:83:9D:C1:A8:17 X509v3 Authority Key Identifier: keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ba:da:c2:7e:67:db:ea:5c:9f:c0:f6:45:37:b4:af:06:a4: fb:6a:89:3f:18:67:d1:f0:bb:9a:1e:29:68:0e:d6:d3:54:1f: a5:e3:f3:69:37:d5:74:ea:07:5d:3b:81:fb:24:54:06:3b:b9: 54:2f:20:7d:d3:ea:74:ab:26:b5:9e:1e:e6:42:ef:5a:07:cc: 3b:b3:af:c6:a8:60:ac:0c:b2:52:e4:92:dd:c3:88:27:35:b2: 87:2e:55:17:da:e0:7d:99:ea:c2:49:95:dc:ec:e8:e3:32:5b: d0:b0:ce:88:ab:45:51:31:b9:48:07:78:ef:0f:67:77:2d:99: 6a:07:4e:1c:a9:fb:e7:14:69:71:89:70:8c:37:4d:a5:46:ad: 7f:23:f6:55:9a:3a:b9:0c:68:67:02:78:e4:56:3b:d7:8a:cb: b9:af:e2:8c:59:55:3a:b8:88:f8:07:36:72:ad:eb:25:e9:d9: 12:ab:bf:4b:1e:47:f4:d7:ec:94:3e:28:4c:d1:cc:78:ac:60: 06:65:be:0c:9a:6f:59:e2:0b:75:dc:45:dc:85:24:d1:64:78: 1a:0e:1b:1b:df:e2:72:7a:ea:f9:75:72:b3:f9:85:fc:95:63: 6a:fd:0c:0f:4e:b8:f7:f7:87:8b:7f:25:28:93:0d:d8:68:35: 89:0f:69:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2 QzAyNEM0RjMwHhcNMjUwNDI3MDAzODI1WhcNMjUwNTA0MDAzODI1WjAYMRYwFAYD VQQDEw02ODBkN2M4MS0zYzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYZ4Sh7Lp9FZTAQPVPxjhvTpw33v+yCYY+i1cDBd0LdKD2kSlmaGRIlkQrRv w2+MWy9biB5zDKXKe0pjjVjGuVoA2tamAfALH5w1delsTlGY8rd0zFmMldtkGa0x MFMO6NetA1ecfbdyAYS+59m5xNQHCcw8LHlIoMIcRQ6//9Mo0Gm3ZH7AK2eL9kzV ZzcEm+iCUoGv1kdHC8l66gxBPsuX3wE///D0IawyVSSYcmV8u7rZMufXxbZ6nrW5 kX4An+SBFuDQdMB1vxi6TjNBZIiWwsGapudzLOHVoUZ626zeZtDVR1hxyYj7cCA8 HekSGpPB534AFqmbyhEsY50kWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvOgvYn gTQIeujFYzVG6YOdwagXMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoutrCfmfb6lyfwPZFN7SvBqT7aok/GGfR8LuaHiloDtbTVB+l4/Np N9V06gddO4H7JFQGO7lULyB90+p0qya1nh7mQu9aB8w7s6/GqGCsDLJS5JLdw4gn NbKHLlUX2uB9merCSZXc7OjjMlvQsM6Iq0VRMblIB3jvD2d3LZlqB04cqfvnFGlx iXCMN02lRq1/I/ZVmjq5DGhnAnjkVjvXisu5r+KMWVU6uIj4BzZyresl6dkSq79L Hkf01+yUPihM0cx4rGAGZb4Mmm9Z4gt13EXchSTRZHgaDhsb3+Jyeur5dXKz+YX8 lWNq/QwPTrj394eLfyUokw3YaDWJD2kA -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:42 2025 by rpki-client on console.sobornost.net