$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft File: ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json) Hash identifier: 0gSiU5oklONg6UmV966YBDadhFJ/CJlM8wsVzh/r8Cg= Subject key identifier: 13:68:C0:01:4D:1F:3A:1F:41:29:78:86:CF:D4:D1:54:00:C5:5D:E7 Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft Manifest number: 0268 Signing time: Sun 27 Apr 2025 01:28:40 +0000 Manifest this update: Sun 27 Apr 2025 01:28:40 +0000 Manifest next update: Sun 04 May 2025 01:28:40 +0000 Files and hashes: 1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: UpVrnwFyxwlO54OzG352aDR9UwsY/dWmKtkh58SWOs8=) 2: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: 0dIG8fQMRzlILpkTDJVo/XSoC64SAKbRto45S4Eicvs=) 3: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ZQQKFp5iiDEIGLxVFz3G6lECRRriefFnadRp8yKcQoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4 Validity Not Before: Apr 27 01:28:40 2025 GMT Not After : May 4 01:28:40 2025 GMT Subject: CN=680d8848-ebd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:ff:dc:a9:ef:b2:a6:9b:7f:b4:3e:b9:60: fa:ad:1e:d4:13:e4:82:c4:6b:6d:d2:ad:d6:91:ab: 1c:20:8b:36:a5:ce:b7:3f:e8:8d:d7:88:25:68:78: 4f:49:c1:e7:7b:81:2c:42:e9:4a:27:a9:63:3f:74: ab:c5:0d:77:93:f5:d6:c2:00:30:aa:4c:cf:d3:41: ab:37:80:ff:30:11:05:f3:97:d3:d6:7b:5e:5c:54: a8:d2:d4:af:20:24:7c:41:ce:da:42:f5:94:4d:05: 4b:4f:06:dd:ed:94:9d:44:0c:a4:80:d4:56:be:1e: 99:8c:af:72:6c:8f:97:88:9a:25:25:f7:e8:78:b6: 18:87:98:7d:d6:43:8a:e0:08:e2:3d:62:bd:e8:7e: 2d:bc:2f:53:ca:f2:a2:38:d1:2d:50:b7:67:fe:7c: 7a:8d:fa:03:73:e4:35:81:87:27:79:f2:c6:af:ec: 3a:18:89:a8:4f:d5:0e:6b:57:e5:85:e1:6c:23:4b: 29:e0:4b:50:ee:17:2a:4c:eb:42:a5:d7:9d:bc:21: e6:2f:d5:76:b9:18:3b:15:51:70:74:94:56:af:dc: b4:47:39:29:42:37:fe:8a:e4:5d:d0:56:e7:60:d4: 9f:43:d2:f4:28:43:c7:6e:4a:52:74:73:66:14:85: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:68:C0:01:4D:1F:3A:1F:41:29:78:86:CF:D4:D1:54:00:C5:5D:E7 X509v3 Authority Key Identifier: keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:50:55:0d:48:00:7f:83:60:70:66:cb:98:4e:8a:31:d9:f1: 6e:6b:4c:a0:cd:a8:df:d2:6e:7b:02:83:73:2c:41:fa:41:d7: 52:98:df:a1:e3:91:48:a7:b0:cd:34:53:5a:c1:03:de:1f:28: aa:a8:7a:31:1d:24:ec:88:e5:94:e5:cd:d9:76:fe:56:c6:ee: 56:5a:02:9f:47:20:f5:7d:0a:d2:b0:d0:c5:a9:89:6b:ec:7f: b1:88:56:76:d2:07:91:43:65:df:5e:70:11:39:fe:e8:66:aa: 57:ec:28:c6:23:b1:a9:c8:bb:38:6e:af:90:6b:19:f7:b0:d2: 6b:7a:c7:45:0d:3a:f1:a0:54:a0:44:8b:54:9a:a7:13:6a:23: f0:df:63:b0:83:55:bb:36:9a:60:43:c9:7b:82:79:e5:98:67: 40:25:f8:6b:9e:8c:19:57:b2:20:1f:43:42:93:db:c7:da:cc: 39:be:09:73:da:de:3c:7b:b9:69:39:b8:26:c6:e8:b7:77:d7: 68:6c:e0:f5:b8:58:c0:39:fe:fa:e3:67:39:59:5f:12:a2:9d: 30:3a:3b:e1:21:9d:15:37:35:2e:24:75:10:59:36:b3:9f:00: 78:26:74:52:1d:f8:40:cd:77:d4:f3:bd:20:89:d8:72:81:a1: 62:b7:c8:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwRDIxMTAvBgNVBAUTKENBOTBENEQyMTI1RjAzMzZCNTM5OEVFMDk5NzcyOTZG MkU0MDkyQjQwHhcNMjUwNDI3MDEyODQwWhcNMjUwNTA0MDEyODQwWjAYMRYwFAYD VQQDEw02ODBkODg0OC1lYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ7/3Knvsqabf7Q+uWD6rR7UE+SCxGtt0q3WkascIIs2pc63P+iN14glaHhP ScHne4EsQulKJ6ljP3SrxQ13k/XWwgAwqkzP00GrN4D/MBEF85fT1nteXFSo0tSv ICR8Qc7aQvWUTQVLTwbd7ZSdRAykgNRWvh6ZjK9ybI+XiJolJffoeLYYh5h91kOK 4AjiPWK96H4tvC9TyvKiONEtULdn/nx6jfoDc+Q1gYcnefLGr+w6GImoT9UOa1fl heFsI0sp4EtQ7hcqTOtCpdedvCHmL9V2uRg7FVFwdJRWr9y0RzkpQjf+iuRd0Fbn YNSfQ9L0KEPHbkpSdHNmFIXH4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNowAFN HzofQSl4hs/U0VQAxV3nMB8GA1UdIwQYMBaAFMqQ1NISXwM2tTmO4Jl3KW8uQJK0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBEMi9FQkMxQUMyQzE4 NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6YTFPWTdnbVhjcGJ5NUFr clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWtyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi95cERVMGhKZkF6 YTFPWTdnbVhjcGJ5NUFrclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANUFUNSAB/g2BwZsuYToox2fFua0ygzajf0m57AoNzLEH6QddSmN+h 45FIp7DNNFNawQPeHyiqqHoxHSTsiOWU5c3Zdv5Wxu5WWgKfRyD1fQrSsNDFqYlr 7H+xiFZ20geRQ2XfXnAROf7oZqpX7CjGI7GpyLs4bq+Qaxn3sNJresdFDTrxoFSg RItUmqcTaiPw32Owg1W7NppgQ8l7gnnlmGdAJfhrnowZV7IgH0NCk9vH2sw5vglz 2t48e7lpObgmxui3d9dobOD1uFjAOf7642c5WV8Sop0wOjvhIZ0VNzUuJHUQWTaz nwB4JnRSHfhAzXfU870gidhygaFit8go -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:48 2025 by rpki-client on console.sobornost.net