$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft File: yvg06LwFd8t93bA-7UaRLns0ccw.mft (raw, json) Hash identifier: m3Gn3HwQjWnY8iAwWqJKY01St+R1h3aZV96gmOilqyU= Subject key identifier: 35:57:DB:5C:71:A1:F8:21:EA:ED:57:A1:9D:81:3B:A2:29:10:EA:F6 Authority key identifier: CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC Certificate issuer: /CN=A9158D5B/serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft Manifest number: 92 Signing time: Sun 27 Apr 2025 05:16:20 +0000 Manifest this update: Sun 27 Apr 2025 05:16:19 +0000 Manifest next update: Sun 04 May 2025 05:16:19 +0000 Files and hashes: 1: yvg06LwFd8t93bA-7UaRLns0ccw.crl (hash: 9yU1py+JQy8RO7c9Tjt57Jn4UdfbF8uyD3sydci6ZpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CAF834E8BC0577CB7DDDB03EED46912E7B3471CC Validity Not Before: Apr 27 05:16:19 2025 GMT Not After : May 4 05:16:19 2025 GMT Subject: CN=680dbda4-c48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:dd:59:b0:71:3a:2b:3d:a2:ff:43:15:65: f6:44:18:3c:a7:84:d6:54:c4:7c:ae:5a:6d:9e:5b: e3:92:ae:a8:1c:ff:0d:a8:84:25:54:e3:2c:77:8e: 5f:6d:77:d5:4e:eb:86:d5:d1:bb:bf:9c:60:f0:8f: d0:82:50:39:06:da:51:1b:24:7e:e8:94:bc:c6:bf: 81:06:d9:6e:37:25:4c:99:eb:22:c8:16:a6:4a:47: 46:f0:cb:85:d5:91:fb:ac:46:a9:a2:b6:fc:6f:98: 3f:28:b9:55:6c:ed:5b:73:a2:09:80:38:c6:c9:de: fe:9b:98:2b:b1:32:89:35:7c:b9:27:05:26:74:6e: eb:58:cf:2a:08:d5:ea:49:96:40:1f:5b:08:b2:1e: 5a:e6:09:9f:15:f5:dd:75:19:a3:0c:52:21:c7:20: 11:7b:7f:98:a9:45:3f:8b:a8:89:89:df:b6:7d:13: b8:c2:16:12:76:25:f9:92:a4:88:a5:87:5d:67:62: b0:8c:dd:77:e9:d1:5f:6b:32:5b:38:9b:33:9e:cb: a1:ba:14:dc:7c:32:77:3c:a3:7d:77:79:52:13:de: c6:ff:45:f3:dc:b9:e1:e5:67:72:c4:ae:da:a7:bf: 98:c5:7e:77:e0:4c:18:3a:f8:2d:6d:77:4c:40:18: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:DB:5C:71:A1:F8:21:EA:ED:57:A1:9D:81:3B:A2:29:10:EA:F6 X509v3 Authority Key Identifier: keyid:CA:F8:34:E8:BC:05:77:CB:7D:DD:B0:3E:ED:46:91:2E:7B:34:71:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvg06LwFd8t93bA-7UaRLns0ccw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/84B2FBD445B711EFA6DFD032C4F9AE02/yvg06LwFd8t93bA-7UaRLns0ccw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:7e:31:7c:6f:d6:1d:e7:45:5a:29:b2:bb:84:62:27:90:c7: b6:7c:be:12:15:e2:b5:98:d5:fe:6c:66:8c:85:74:31:53:a3: ee:59:5b:85:09:c4:e5:b3:1b:f1:b6:88:48:93:bc:1b:ad:74: 5b:03:3a:0a:43:9f:7b:4d:89:4d:ea:79:50:a4:91:c1:ba:e7: 3b:c0:ac:8c:80:33:10:9f:e9:92:7e:2a:d9:0d:49:07:bf:eb: e8:2a:ad:37:04:0b:ab:9d:22:fd:85:63:ee:82:f8:76:3b:1b: c5:37:88:74:4d:b4:75:ff:fd:e5:b5:12:37:5f:dc:5b:a2:57: e2:96:51:94:6a:c3:77:1d:43:54:17:c1:3b:f2:e5:80:bc:e6: ca:a5:93:02:d1:a7:ef:a8:c4:dd:90:77:c3:2b:f2:f3:70:7a: e4:f6:24:50:80:51:fe:58:a1:00:2c:c4:a7:ff:29:23:79:8a: a8:84:3a:44:e5:2d:64:68:62:44:c0:22:90:2d:f2:88:0a:60: f8:9c:3e:03:fb:15:d0:e1:95:48:a0:93:77:8b:7f:88:33:00: 77:4a:73:0c:0a:c3:72:b6:22:e8:47:9e:2c:ee:cf:82:1d:2e: 95:e1:e3:60:af:1a:f8:80:78:c4:76:fc:9c:cd:60:70:59:16: 2c:23:45:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENBRjgzNEU4QkMwNTc3Q0I3REREQjAzRUVENDY5MTJF N0IzNDcxQ0MwHhcNMjUwNDI3MDUxNjE5WhcNMjUwNTA0MDUxNjE5WjAYMRYwFAYD VQQDEw02ODBkYmRhNC1jNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEvdWbBxOis9ov9DFWX2RBg8p4TWVMR8rlptnlvjkq6oHP8NqIQlVOMsd45f bXfVTuuG1dG7v5xg8I/QglA5BtpRGyR+6JS8xr+BBtluNyVMmesiyBamSkdG8MuF 1ZH7rEaporb8b5g/KLlVbO1bc6IJgDjGyd7+m5grsTKJNXy5JwUmdG7rWM8qCNXq SZZAH1sIsh5a5gmfFfXddRmjDFIhxyARe3+YqUU/i6iJid+2fRO4whYSdiX5kqSI pYddZ2KwjN136dFfazJbOJsznsuhuhTcfDJ3PKN9d3lSE97G/0Xz3Lnh5WdyxK7a p7+YxX534EwYOvgtbXdMQBgRFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVX21xx ofgh6u1XoZ2BO6IpEOr2MB8GA1UdIwQYMBaAFMr4NOi8BXfLfd2wPu1GkS57NHHM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi84NEIyRkJENDQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi95dmcwNkx3RmQ4dDkzYkEtN1VhUkxuczBj Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l2ZzA2THdGZDh0OTNiQS03VWFSTG5zMGNjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi84NEIyRkJENDQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi95dmcwNkx3RmQ4 dDkzYkEtN1VhUkxuczBjY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQfjF8b9Yd50VaKbK7hGInkMe2fL4SFeK1mNX+bGaMhXQxU6PuWVuF CcTlsxvxtohIk7wbrXRbAzoKQ597TYlN6nlQpJHBuuc7wKyMgDMQn+mSfirZDUkH v+voKq03BAurnSL9hWPugvh2OxvFN4h0TbR1//3ltRI3X9xbolfillGUasN3HUNU F8E78uWAvObKpZMC0afvqMTdkHfDK/LzcHrk9iRQgFH+WKEALMSn/ykjeYqohDpE 5S1kaGJEwCKQLfKICmD4nD4D+xXQ4ZVIoJN3i3+IMwB3SnMMCsNytiLoR54s7s+C HS6V4eNgrxr4gHjEdvyczWBwWRYsI0WW -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net