$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json) Hash identifier: QtAA6pLYPHvjlJzAov+mJQcT5Vnvtqtp3skzn+CvJH4= Subject key identifier: 23:7F:BA:FD:B3:B8:89:CF:D1:55:0B:9E:B6:35:B3:37:5A:CE:6A:DF Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft Manifest number: 0C35 Signing time: Sat 26 Apr 2025 18:17:15 +0000 Manifest this update: Sat 26 Apr 2025 18:17:14 +0000 Manifest next update: Sat 03 May 2025 18:17:14 +0000 Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: xg0BbWC8RLLA0YbDcW1YH4LYWE4JJ3HAqp9qC9loR/E=) 2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: JpCVaZ9JZD1Afq3DjPUJqYLTP1v40h6qnEBodBPkfj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: Apr 26 18:17:14 2025 GMT Not After : May 3 18:17:14 2025 GMT Subject: CN=680d232b-2aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:3b:f8:88:2b:46:56:ae:b2:62:d5:de:19: 49:ff:df:86:8d:85:0c:75:98:c6:6b:7e:df:dd:e5: fb:35:8e:cc:0b:0e:61:4d:72:d0:09:58:58:e7:c0: 77:db:46:93:3b:10:d7:76:85:95:73:13:c0:65:9a: 7e:68:d9:a1:a2:c2:f0:92:02:6a:ee:36:d7:c6:66: b8:d4:20:9a:68:b6:d6:63:70:37:59:5e:4d:c1:73: 08:b3:8d:cf:5d:08:91:c7:fb:7e:76:77:d5:61:3a: a9:d5:aa:aa:06:4d:75:4b:67:f9:5e:4d:01:36:54: a6:90:3a:5d:c5:cb:38:4e:e7:00:bc:bb:b6:04:d9: d2:8b:27:0f:76:7d:ed:77:c8:da:bd:1a:1e:8e:ea: 76:75:93:65:d4:05:5f:b0:e7:30:a0:ef:aa:83:2f: 78:fd:1c:bb:f1:e5:c3:84:b4:87:3e:0b:14:4a:af: 05:4a:f3:b6:38:bd:70:04:33:67:0a:f5:a3:08:07: 09:90:05:ac:26:7c:b4:c5:c0:2b:e0:06:be:1c:34: f5:ba:52:6f:b0:20:49:41:55:bb:85:24:f7:ff:ff: 39:19:ee:cf:82:0d:53:1f:91:fe:f9:fd:00:64:89: fc:dc:da:de:06:8b:a7:10:6c:16:b2:4c:76:ee:c8: 34:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7F:BA:FD:B3:B8:89:CF:D1:55:0B:9E:B6:35:B3:37:5A:CE:6A:DF X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:43:fc:9a:e2:c8:39:a9:e9:ab:ef:13:4f:8c:1c:d7:22:c7: 7b:8c:42:6e:2c:db:49:24:0b:1b:14:2c:c9:a2:1b:06:61:02: 66:37:7b:4a:19:3c:60:e5:79:cc:2f:23:01:cc:e7:d8:d7:a0: e3:7f:7e:dc:34:18:90:a1:71:5e:a0:ac:06:97:1a:94:90:ce: d6:6c:1c:b4:88:8e:14:c7:4a:b3:fe:93:22:03:09:b5:df:42: 97:86:f0:8f:4e:43:2e:85:03:d9:f2:60:52:c5:74:f5:f2:00: 74:55:24:22:fa:9c:de:0f:8e:e8:8d:d0:dd:1a:61:1c:b4:8c: 00:2e:b2:42:c8:df:a6:e4:fc:69:ca:7a:68:a0:8e:01:7e:f4: a4:20:d6:6e:0a:1e:7b:66:52:09:0c:2c:9a:fe:52:71:8d:6e: e6:7c:02:ae:4a:db:bb:0e:87:d6:6e:eb:f1:f2:44:31:dd:1a: f3:3e:72:01:48:05:77:e8:fa:64:88:5d:26:fd:cb:fc:4d:76: 20:b3:4d:6a:ae:f1:e9:e2:b3:c5:cf:ca:83:37:f5:24:1f:8c: ae:b3:7a:47:75:11:ba:d8:03:d4:57:2a:28:61:f3:fa:85:bf: 64:32:cc:7b:e2:5e:f6:96:5a:c4:40:61:4a:42:b6:c6:6a:69: 01:93:ee:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjUwNDI2MTgxNzE0WhcNMjUwNTAzMTgxNzE0WjAYMRYwFAYD VQQDEw02ODBkMjMyYi0yYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jM7+IgrRlausmLV3hlJ/9+GjYUMdZjGa37f3eX7NY7MCw5hTXLQCVhY58B3 20aTOxDXdoWVcxPAZZp+aNmhosLwkgJq7jbXxma41CCaaLbWY3A3WV5NwXMIs43P XQiRx/t+dnfVYTqp1aqqBk11S2f5Xk0BNlSmkDpdxcs4TucAvLu2BNnSiycPdn3t d8javRoejup2dZNl1AVfsOcwoO+qgy94/Ry78eXDhLSHPgsUSq8FSvO2OL1wBDNn CvWjCAcJkAWsJny0xcAr4Aa+HDT1ulJvsCBJQVW7hST3//85Ge7Pgg1TH5H++f0A ZIn83NreBounEGwWskx27sg02QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN/uv2z uInP0VULnrY1szdazmrfMB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArQ/ya4sg5qemr7xNPjBzXIsd7jEJuLNtJJAsbFCzJohsGYQJmN3tK GTxg5XnMLyMBzOfY16Djf37cNBiQoXFeoKwGlxqUkM7WbBy0iI4Ux0qz/pMiAwm1 30KXhvCPTkMuhQPZ8mBSxXT18gB0VSQi+pzeD47ojdDdGmEctIwALrJCyN+m5Pxp ynpooI4BfvSkINZuCh57ZlIJDCya/lJxjW7mfAKuStu7DofWbuvx8kQx3RrzPnIB SAV36PpkiF0m/cv8TXYgs01qrvHp4rPFz8qDN/UkH4yus3pHdRG62APUVyooYfP6 hb9kMsx74l72llrEQGFKQrbGamkBk+7o -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:52 2025 by rpki-client on console.sobornost.net