$ rpki-client -vvf rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft File: lYpO2dfWT6yHvRbsijZXHhovUIo.mft (raw, json) Hash identifier: yXSvB7OcqJhoJUFiXXyEBLlayBv3IMlVRm457gzeLkQ= Subject key identifier: D2:4E:63:2B:92:23:15:28:F3:39:20:77:87:A6:77:AA:BD:F3:CE:BF Authority key identifier: 95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A Certificate issuer: /CN=A9160EEF/serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft Manifest number: 0C88 Signing time: Mon 28 Apr 2025 18:30:23 +0000 Manifest this update: Mon 28 Apr 2025 18:30:22 +0000 Manifest next update: Mon 05 May 2025 18:30:22 +0000 Files and hashes: 1: lYpO2dfWT6yHvRbsijZXHhovUIo.crl (hash: 6fplVcP5MSQu+kdXmneV8cdETyMhIbNXGYysu+4yCJE=) 2: C3667DBAE6A711EFA8D1A077C4F9AE02.roa (hash: 5CkSO9tc+/UFRkRtU6tdYYVHHpR7HqK76CBHyDuJbdw=) 3: C2911C74E6A711EFA8D1A077C4F9AE02.roa (hash: 7uzXUSClxgsZqYNV6os8g6TMOvQ9tK2i5DS7Dqxq1Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160EEF, serialNumber=958A4ED9D7D64FAC87BD16EC8A36571E1A2F508A Validity Not Before: Apr 28 18:30:22 2025 GMT Not After : May 5 18:30:22 2025 GMT Subject: CN=680fc93f-3aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:8e:14:60:6f:c2:2d:b5:cf:46:45:40:a6: d9:28:48:79:3d:e7:df:8b:eb:8d:99:53:17:bf:0f: e0:b9:95:d5:f7:7c:18:dd:74:d8:b9:5b:65:ed:c9: ca:aa:8f:eb:98:67:f1:28:20:d3:36:64:4d:52:79: 86:9b:15:ca:13:27:d6:98:9f:0d:75:4b:02:80:7d: d2:9e:21:02:a7:37:28:04:30:35:54:02:10:b5:c3: 7c:4d:f9:91:de:6e:0a:f9:6b:30:81:35:dc:e6:53: 53:22:95:5a:1e:07:e2:1f:4b:c4:5d:89:fb:2d:ef: 7c:8f:3b:f3:f8:31:04:ba:53:f5:43:96:19:49:b4: 78:bf:06:69:d9:aa:63:39:22:69:2e:26:5c:68:1b: 48:57:87:d3:bd:6c:97:4f:5c:f2:27:4f:02:cd:96: e4:fa:b9:79:56:26:5d:ee:09:bd:60:41:25:3a:aa: 4e:9e:07:13:e2:23:be:b6:2c:dd:53:ec:8c:4e:10: 44:1b:0f:cc:c4:25:4b:a3:f1:1d:fc:ff:a9:3d:e3: c2:be:ac:7b:0f:e8:25:79:90:18:d9:04:dc:03:36: 05:2a:6d:b8:9d:22:99:8d:8d:97:f2:eb:c0:4d:7e: 33:50:45:e5:13:39:04:a2:4b:36:37:12:81:ab:af: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4E:63:2B:92:23:15:28:F3:39:20:77:87:A6:77:AA:BD:F3:CE:BF X509v3 Authority Key Identifier: keyid:95:8A:4E:D9:D7:D6:4F:AC:87:BD:16:EC:8A:36:57:1E:1A:2F:50:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYpO2dfWT6yHvRbsijZXHhovUIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160EEF/6C4CD690F88811E98FA00A7CC4F9AE02/lYpO2dfWT6yHvRbsijZXHhovUIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9b:65:a1:a6:07:cb:9c:38:89:05:9f:c1:bd:b2:1f:f4:99: 17:0e:30:83:10:1f:93:38:7b:00:e7:72:eb:c8:4c:95:b7:bb: df:d7:0f:17:75:50:c6:c9:f3:1f:cf:1e:07:c6:e1:fa:d0:0f: df:03:c9:5f:8b:e7:39:c1:74:d9:8a:3f:09:4a:df:f6:98:18: d9:e9:a0:50:e2:66:ac:62:8e:30:c8:df:2c:0c:94:8d:60:90: 8e:d9:ab:00:39:a6:b3:73:20:bb:23:31:c6:9e:eb:d2:42:b0: 2b:15:3c:f2:a7:13:eb:52:d4:ab:f5:c6:06:b9:ad:79:f4:56: 1a:b1:70:f0:7b:f1:a1:76:6c:4e:0f:32:ca:11:8c:6d:08:db: fe:ca:b4:f6:38:16:bc:c9:83:39:79:d7:1a:4c:79:d1:0e:b0: b4:ef:ac:d7:a6:4a:7c:07:d1:9b:35:29:96:50:50:fc:dc:96: 09:87:ab:71:d1:38:a4:d1:ec:b9:71:18:28:dd:a4:4d:5a:f7: 40:cd:09:0d:9d:57:3b:6d:b2:81:85:84:47:4d:52:e4:6e:cd: dd:f4:db:df:4b:92:06:b4:ca:16:b0:72:9a:bf:91:a6:8d:ce: 3b:79:33:50:2b:50:2a:0e:6b:bf:be:6d:72:ef:85:3a:34:7d: 53:0a:b1:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBFRUYxMTAvBgNVBAUTKDk1OEE0RUQ5RDdENjRGQUM4N0JEMTZFQzhBMzY1NzFF MUEyRjUwOEEwHhcNMjUwNDI4MTgzMDIyWhcNMjUwNTA1MTgzMDIyWjAYMRYwFAYD VQQDEw02ODBmYzkzZi0zYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+uOFGBvwi21z0ZFQKbZKEh5Peffi+uNmVMXvw/guZXV93wY3XTYuVtl7cnK qo/rmGfxKCDTNmRNUnmGmxXKEyfWmJ8NdUsCgH3SniECpzcoBDA1VAIQtcN8TfmR 3m4K+WswgTXc5lNTIpVaHgfiH0vEXYn7Le98jzvz+DEEulP1Q5YZSbR4vwZp2apj OSJpLiZcaBtIV4fTvWyXT1zyJ08CzZbk+rl5ViZd7gm9YEElOqpOngcT4iO+tizd U+yMThBEGw/MxCVLo/Ed/P+pPePCvqx7D+gleZAY2QTcAzYFKm24nSKZjY2X8uvA TX4zUEXlEzkEoks2NxKBq69kOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJOYyuS IxUo8zkgd4emd6q9886/MB8GA1UdIwQYMBaAFJWKTtnX1k+sh70W7Io2Vx4aL1CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEVFRi82QzRDRDY5MEY4 ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2eUh2UmJzaWpaWEhob3ZV SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xZcE8yZGZXVDZ5SHZSYnNpalpYSGhvdlVJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEVFRi82QzRDRDY5MEY4ODgxMUU5OEZBMDBBN0NDNEY5QUUwMi9sWXBPMmRmV1Q2 eUh2UmJzaWpaWEhob3ZVSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFm2WhpgfLnDiJBZ/BvbIf9JkXDjCDEB+TOHsA53LryEyVt7vf1w8X dVDGyfMfzx4HxuH60A/fA8lfi+c5wXTZij8JSt/2mBjZ6aBQ4masYo4wyN8sDJSN YJCO2asAOaazcyC7IzHGnuvSQrArFTzypxPrUtSr9cYGua159FYasXDwe/GhdmxO DzLKEYxtCNv+yrT2OBa8yYM5edcaTHnRDrC076zXpkp8B9GbNSmWUFD83JYJh6tx 0Tik0ey5cRgo3aRNWvdAzQkNnVc7bbKBhYRHTVLkbs3d9NvfS5IGtMoWsHKav5Gm jc47eTNQK1AqDmu/vm1y74U6NH1TCrH7 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:38 2025 by rpki-client on console.sobornost.net