$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft File: YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json) Hash identifier: n2Kz+ZOnJhwJqPY61d/RZ0autiCszPgDx013WNtsgEE= Subject key identifier: 97:70:DA:B8:82:17:E0:8D:97:5C:B5:F3:CA:82:98:30:04:85:70:0D Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E Certificate issuer: /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft Manifest number: 56 Signing time: Fri 25 Apr 2025 06:10:09 +0000 Manifest this update: Fri 25 Apr 2025 06:10:08 +0000 Manifest next update: Fri 02 May 2025 06:10:08 +0000 Files and hashes: 1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: 9aUbhkx9OUwiysHlSf27FufL//+uTjZCl7aRlnU9ICA=) 2: 181772049FD811EF8680B438C4F9AE02.roa (hash: kL8m2A2/eVPCA0J/9/iLQOKzk2RiAB33QgbmFjlKwTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Validity Not Before: Apr 25 06:10:08 2025 GMT Not After : May 2 06:10:08 2025 GMT Subject: CN=680b2741-c4f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2b:10:78:6c:d3:ac:ab:6e:34:78:4f:e0:43: 76:18:ef:a4:96:c6:f3:20:1b:94:8c:8a:89:e2:7a: a1:7f:4c:f6:09:35:6e:b5:cf:68:b5:02:b8:15:78: fe:c5:90:dd:32:8b:59:4d:f1:43:c3:32:d5:1d:de: da:68:8a:75:e4:c8:2e:9d:12:3e:9b:f4:2d:c4:44: dd:fa:84:55:e1:59:c9:96:8b:71:7e:b8:37:cd:c2: e6:aa:4c:4c:27:1b:4b:cf:b8:95:88:a7:21:9e:e9: 8b:47:e5:09:0d:24:cc:03:6b:a0:fa:a0:c1:5f:ce: 1a:19:2b:e4:28:d2:ef:d2:f4:a6:77:60:96:bf:fe: 3a:41:1a:25:53:01:68:a4:3a:c2:c0:e9:04:73:c1: 46:e3:25:d1:30:5d:09:bd:c8:8f:fd:42:c8:73:82: a0:5a:ee:e6:92:29:c4:79:48:76:b5:20:d8:c1:e9: e1:c4:6f:ce:86:81:6a:2d:bc:6d:0c:fa:85:9d:28: 3e:22:8b:ad:51:00:99:05:64:29:9e:e5:df:d8:fc: bd:90:e7:86:ce:75:1e:38:1a:e3:39:e2:00:32:b1: 99:d5:54:dd:74:ea:a9:da:ea:f9:ae:73:d6:9d:78: 49:b9:17:4f:43:81:ca:36:1d:31:f0:84:73:1c:41: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:70:DA:B8:82:17:E0:8D:97:5C:B5:F3:CA:82:98:30:04:85:70:0D X509v3 Authority Key Identifier: keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:89:5c:e2:a9:29:84:43:21:d6:ff:f8:dc:54:15:02:80:a8: c3:3e:44:e3:31:d0:6f:aa:5f:38:96:a5:c9:df:cf:ac:42:84: 7e:88:78:83:0d:f5:4b:00:6b:4b:ea:b7:8d:61:d3:6d:bf:dd: a1:f0:7b:b7:a0:e7:5d:c7:3a:be:c2:e1:32:b7:e6:57:9b:15: 4c:81:8d:5e:6c:8f:ac:44:e1:5e:01:ba:a1:1f:cc:e4:2c:d8: 35:11:3a:5d:f4:2c:b8:f9:16:27:72:d1:53:8c:3a:7d:f0:3a: 29:8c:c1:ea:71:5c:d9:fb:ee:1f:df:f3:42:32:71:13:f8:5f: 6e:e1:69:8a:9a:92:a0:9f:9a:1b:45:db:09:3d:a6:0b:15:fe: a4:dc:41:03:e0:87:1d:d3:5e:7b:46:7b:e1:7c:7c:83:8b:7c: 3e:6e:ff:61:af:6b:03:3e:c7:d9:2f:0c:f0:86:31:44:3f:f4: 84:41:dc:7d:c0:99:6d:7d:00:aa:62:ff:29:e4:99:b1:6c:9f: 44:99:aa:d1:2d:0c:80:25:51:e9:9d:28:37:7b:16:c8:e2:50: ba:61:9f:13:21:cd:72:d4:5a:b9:52:50:07:d3:a5:f8:da:b7: 57:d6:90:31:39:11:9d:06:c8:7f:79:df:0d:f2:40:db:2b:02: 37:4b:3d:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEQzRTExMC8GA1UEBRMoNjA2RUIyOTU4MjU0QUM5OEI2MzM2RUFBNDFBQzgwQjJE Q0IxOUM2RTAeFw0yNTA0MjUwNjEwMDhaFw0yNTA1MDIwNjEwMDhaMBgxFjAUBgNV BAMTDTY4MGIyNzQxLWM0ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1KxB4bNOsq240eE/gQ3YY76SWxvMgG5SMionieqF/TPYJNW61z2i1ArgVeP7F kN0yi1lN8UPDMtUd3tpoinXkyC6dEj6b9C3ERN36hFXhWcmWi3F+uDfNwuaqTEwn G0vPuJWIpyGe6YtH5QkNJMwDa6D6oMFfzhoZK+Qo0u/S9KZ3YJa//jpBGiVTAWik OsLA6QRzwUbjJdEwXQm9yI/9QshzgqBa7uaSKcR5SHa1INjB6eHEb86GgWotvG0M +oWdKD4ii61RAJkFZCme5d/Y/L2Q54bOdR44GuM54gAysZnVVN106qna6vmuc9ad eEm5F09Dgco2HTHwhHMcQeVNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl3DauIIX 4I2XXLXzyoKYMASFcA0wHwYDVR0jBBgwFoAUYG6ylYJUrJi2M26qQayAstyxnG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRDNFL0I1REZDOEMwOUZE NzExRUY5RTM4QTgzN0M0RjlBRTAyL1lHNnlsWUpVckppMk0yNnFRYXlBc3R5eG5H NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWUc2eWxZSlVySmkyTTI2cVFheUFzdHl4bkc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RDNFL0I1REZDOEMwOUZENzExRUY5RTM4QTgzN0M0RjlBRTAyL1lHNnlsWUpVckpp Mk0yNnFRYXlBc3R5eG5HNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAOJXOKpKYRDIdb/+NxUFQKAqMM+ROMx0G+qXziWpcnfz6xChH6IeIMN 9UsAa0vqt41h022/3aHwe7eg513HOr7C4TK35lebFUyBjV5sj6xE4V4BuqEfzOQs 2DUROl30LLj5Fidy0VOMOn3wOimMwepxXNn77h/f80IycRP4X27haYqakqCfmhtF 2wk9pgsV/qTcQQPghx3TXntGe+F8fIOLfD5u/2GvawM+x9kvDPCGMUQ/9IRB3H3A mW19AKpi/ynkmbFsn0SZqtEtDIAlUemdKDd7FsjiULphnxMhzXLUWrlSUAfTpfja t1fWkDE5EZ0GyH953w3yQNsrAjdLPVk= -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:58 2025 by rpki-client on console.sobornost.net