$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft File: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json) Hash identifier: phT+gt8eKfbhCadgD3AyVghRHy67DhCHIVZzyjbMcrY= Subject key identifier: 71:79:35:65:39:43:0E:44:65:89:C8:C1:40:AC:BF:B0:DC:47:9A:31 Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E Certificate issuer: /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft Manifest number: 87 Signing time: Sun 27 Apr 2025 05:23:34 +0000 Manifest this update: Sun 27 Apr 2025 05:23:34 +0000 Manifest next update: Sun 04 May 2025 05:23:34 +0000 Files and hashes: 1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: S92xQYJxASrvlMQoZuDr0/qcRDdKZrhouiB3r4K5W5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E Validity Not Before: Apr 27 05:23:34 2025 GMT Not After : May 4 05:23:34 2025 GMT Subject: CN=680dbf56-a55d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:29:97:65:8e:c5:98:89:59:7d:b4:9a:aa: 85:10:08:d7:55:03:a8:a3:f8:2b:cb:bd:60:75:91: 56:0b:ec:64:99:ca:e3:c0:64:ac:3e:c9:b1:56:cf: 2b:fb:aa:00:94:6b:69:22:ff:cb:64:10:4f:a6:e0: 70:fb:81:35:05:79:a0:55:0d:a3:d2:95:05:d1:f3: da:cc:9e:f6:df:bb:01:db:fd:47:bd:b1:ac:cf:1e: c3:b5:7e:17:15:57:b9:4a:02:59:2d:ba:e5:cf:62: 30:f9:2f:2d:ea:fe:70:d2:6d:1f:13:93:3a:0a:89: f7:69:c7:36:6b:6f:ef:74:05:c4:47:7e:22:84:29: 0d:0a:22:f5:55:72:87:1c:a3:c4:92:6c:1d:a8:ae: da:3e:5a:f3:2b:2d:82:3c:a6:0b:7e:f4:6f:38:a1: f8:09:e3:2a:00:1d:90:2f:8b:c0:fa:e5:e0:02:bc: 7b:28:b9:7f:11:fb:be:59:58:39:86:6d:a7:a1:49: a2:10:35:3b:76:94:54:8e:1f:dd:df:37:0e:22:f2: d0:d3:4b:5d:53:9d:17:59:b9:96:d6:03:ba:22:8c: 98:e1:2a:31:3d:f5:bf:ab:96:3a:74:df:b7:7a:b4: 7d:b5:6e:f5:77:4e:92:42:a5:f1:16:8c:6b:e6:6f: 2f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:79:35:65:39:43:0E:44:65:89:C8:C1:40:AC:BF:B0:DC:47:9A:31 X509v3 Authority Key Identifier: keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:8c:7c:38:7d:39:7f:2d:4d:72:6d:5f:40:e3:9e:3e:25:05: e6:ae:46:08:49:54:96:b8:92:0a:48:36:2a:63:a2:cb:e6:41: 94:fd:03:4d:df:4b:30:27:e6:4f:6b:f8:1e:4d:01:7c:db:42: 12:55:bd:02:f9:b0:43:f5:b2:95:aa:bf:90:36:4b:d4:9f:0c: 91:d8:c4:41:0e:6d:f9:be:11:e5:9c:c3:8e:0e:04:7d:5a:37: ed:15:aa:d9:eb:eb:c9:5b:38:c5:af:48:50:fb:62:48:a5:e5: 79:b8:1c:d1:ff:79:15:d1:0a:fd:d3:2a:91:9d:b5:d1:dd:6e: 51:41:eb:c3:73:8e:40:b8:0c:2b:a4:df:2e:7f:06:00:4f:43: b2:d5:69:16:07:b9:58:c8:5f:e7:da:31:25:51:9a:63:ff:95: 53:a7:70:01:8c:3d:f9:a9:50:af:e4:3a:66:3a:b8:40:2d:59: fe:d2:f7:23:f4:c2:ef:68:a7:ea:80:05:8f:b0:fe:05:79:49: c4:b8:be:e4:6d:bd:d7:fb:92:25:c4:d3:b6:f2:63:27:4e:07: fd:1b:59:78:f3:e8:95:ad:09:bc:89:aa:7b:a2:a2:e8:0f:ac: f6:48:d7:c0:e5:23:07:f1:ea:3d:25:51:5e:31:1d:dd:38:cd: 44:b5:d6:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKEUwQjYwOEFGNTM0MTRCNkY1OTdEMThDQUU3QTIxNDQ4 M0U4QTY1OUUwHhcNMjUwNDI3MDUyMzM0WhcNMjUwNTA0MDUyMzM0WjAYMRYwFAYD VQQDEw02ODBkYmY1Ni1hNTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsj4pl2WOxZiJWX20mqqFEAjXVQOoo/gry71gdZFWC+xkmcrjwGSsPsmxVs8r +6oAlGtpIv/LZBBPpuBw+4E1BXmgVQ2j0pUF0fPazJ7237sB2/1HvbGszx7DtX4X FVe5SgJZLbrlz2Iw+S8t6v5w0m0fE5M6Con3acc2a2/vdAXER34ihCkNCiL1VXKH HKPEkmwdqK7aPlrzKy2CPKYLfvRvOKH4CeMqAB2QL4vA+uXgArx7KLl/Efu+WVg5 hm2noUmiEDU7dpRUjh/d3zcOIvLQ00tdU50XWbmW1gO6IoyY4SoxPfW/q5Y6dN+3 erR9tW71d06SQqXxFoxr5m8v4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF5NWU5 Qw5EZYnIwUCsv7DcR5oxMB8GA1UdIwQYMBaAFOC2CK9TQUtvWX0YyueiFEg+imWe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84NkQ3Qjg2MjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMyOVpmUmpLNTZJVVNENkta WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRMWUlyMU5CUzI5WmZSaks1NklVU0Q2S1paNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84NkQ3Qjg2MjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi80TFlJcjFOQlMy OVpmUmpLNTZJVVNENktaWjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBjHw4fTl/LU1ybV9A454+JQXmrkYISVSWuJIKSDYqY6LL5kGU/QNN 30swJ+ZPa/geTQF820ISVb0C+bBD9bKVqr+QNkvUnwyR2MRBDm35vhHlnMOODgR9 WjftFarZ6+vJWzjFr0hQ+2JIpeV5uBzR/3kV0Qr90yqRnbXR3W5RQevDc45AuAwr pN8ufwYAT0Oy1WkWB7lYyF/n2jElUZpj/5VTp3ABjD35qVCv5DpmOrhALVn+0vcj 9MLvaKfqgAWPsP4FeUnEuL7kbb3X+5IlxNO28mMnTgf9G1l48+iVrQm8iap7oqLo D6z2SNfA5SMH8eo9JVFeMR3dOM1EtdaF -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net