$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft File: YCgZkDDJlCoUSqFr-zB450H27CM.mft (raw, json) Hash identifier: EZ/HEjK6KJUwV0uuONseGdOz030f6Qi6L8FSOlyCqu8= Subject key identifier: 27:5D:83:C4:DD:99:DC:92:E2:56:E8:F3:2B:37:6A:07:ED:3D:50:C0 Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft Manifest number: 09E5 Signing time: Sat 26 Apr 2025 19:40:40 +0000 Manifest this update: Sat 26 Apr 2025 19:40:39 +0000 Manifest next update: Sat 03 May 2025 19:40:39 +0000 Files and hashes: 1: YCgZkDDJlCoUSqFr-zB450H27CM.crl (hash: uF5R45U+ruggfxd8cOQRGro+smt+JrAqfjb0hcMWb2Q=) 2: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (hash: yiUTn34nFtRxV5JAhkPGjI3Dqg4FJfadYSzxX54DxmU=) 3: 5C1CF19EA9C011EABAAB4624C4F9AE02.roa (hash: z0HhZvByumG+3blwc24Ax6Cba3C3ly99sGI80bagaU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Validity Not Before: Apr 26 19:40:39 2025 GMT Not After : May 3 19:40:39 2025 GMT Subject: CN=680d36b7-bf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:aa:26:db:59:1d:fe:4d:42:54:46:90:5d:9f: fd:11:ba:5a:1b:4c:a5:36:0c:79:db:c1:42:c6:6b: 51:49:69:f9:21:37:63:6f:0e:41:12:ce:db:e1:2b: 30:23:d8:8a:3a:fd:dc:25:01:c8:79:44:05:e1:f9: 46:47:2d:dd:3a:98:58:c9:10:e8:f4:d3:2b:17:d8: 36:f6:25:a7:93:1e:f6:91:07:13:9c:14:8f:5f:1e: 3c:9c:f2:fb:c9:01:30:e7:07:f7:24:6c:86:38:16: 6f:05:af:f9:38:4d:20:4f:03:70:fe:58:8b:46:c0: b7:20:d0:c4:0b:ce:bd:fc:c2:fb:73:53:a7:3d:6b: d3:db:55:6c:d7:95:e2:03:bb:fb:69:0d:70:94:1f: 7d:d9:c6:f6:4b:3a:95:ce:32:8b:71:42:bf:c0:f5: 9f:10:cc:4d:17:d5:a1:b9:a8:01:be:22:61:99:b8: 98:f9:83:4a:40:80:78:9a:e0:36:a0:ed:da:0c:a5: 4f:47:59:71:b6:88:1d:09:f1:81:94:cb:a4:46:b7: 5b:e5:97:59:cb:ce:08:5d:f6:6e:0e:4f:ee:19:73: b0:22:72:d4:9b:78:98:91:3b:b5:3f:ec:8e:ab:6f: 2c:23:74:69:33:e4:5d:8a:78:02:19:b2:9c:fc:4c: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:5D:83:C4:DD:99:DC:92:E2:56:E8:F3:2B:37:6A:07:ED:3D:50:C0 X509v3 Authority Key Identifier: keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:35:4f:27:5f:e2:9e:54:e5:59:d8:f0:13:43:3e:f6:df:94: 94:04:04:18:52:c8:92:84:ab:2c:c1:28:81:35:83:2e:31:b0: 91:fa:a1:09:20:68:f2:8d:81:65:14:c5:6b:8b:c0:79:e1:07: 64:0a:b5:07:f5:9d:f4:73:21:c5:f8:9d:bf:d6:b7:61:1b:7f: a3:9b:34:2f:d3:12:d9:02:d6:c7:e7:d7:3e:e3:d9:6a:4c:32: 77:e1:e1:99:7d:03:20:42:be:b6:ba:fc:9d:37:e9:63:f1:af: 03:79:dd:b9:b0:dd:c1:75:02:55:07:c8:f3:0a:29:6b:d0:c7: 83:12:21:46:56:f2:70:88:13:a7:3d:61:4d:48:a8:d2:61:0b: 88:9f:d7:df:fc:7e:8d:44:84:61:e8:b8:88:b9:79:71:85:96: ab:53:75:90:c2:d3:f4:f7:2c:f5:02:95:e5:44:11:fb:17:38: 33:7a:e7:71:b6:e7:18:38:54:cf:5e:57:3e:db:f5:c5:4e:dc: f1:17:6f:7a:ff:77:39:85:13:93:8c:3b:5b:28:62:f9:fb:13: 5f:3f:1e:92:83:68:6e:8d:a9:4f:52:12:7e:4a:aa:1b:bd:33: 5e:e0:f2:9e:ea:a8:bc:5b:bf:37:3c:84:19:e4:51:58:7f:a0: 5f:b5:d0:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVENEYxMTAvBgNVBAUTKDYwMjgxOTkwMzBDOTk0MkExNDRBQTE2QkZCMzA3OEU3 NDFGNkVDMjMwHhcNMjUwNDI2MTk0MDM5WhcNMjUwNTAzMTk0MDM5WjAYMRYwFAYD VQQDEw02ODBkMzZiNy1iZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Kom21kd/k1CVEaQXZ/9EbpaG0ylNgx528FCxmtRSWn5ITdjbw5BEs7b4Ssw I9iKOv3cJQHIeUQF4flGRy3dOphYyRDo9NMrF9g29iWnkx72kQcTnBSPXx48nPL7 yQEw5wf3JGyGOBZvBa/5OE0gTwNw/liLRsC3INDEC869/ML7c1OnPWvT21Vs15Xi A7v7aQ1wlB992cb2SzqVzjKLcUK/wPWfEMxNF9WhuagBviJhmbiY+YNKQIB4muA2 oO3aDKVPR1lxtogdCfGBlMukRrdb5ZdZy84IXfZuDk/uGXOwInLUm3iYkTu1P+yO q28sI3RpM+RdingCGbKc/ExOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCddg8Td mdyS4lbo8ys3agftPVDAMB8GA1UdIwQYMBaAFGAoGZAwyZQqFEqha/sweOdB9uwj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ0Ri81ODVGNEQwRTc4 NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxDb1VTcUZyLXpCNDUwSDI3 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDZ1prRERKbENvVVNxRnItekI0NTBIMjdDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ0Ri81ODVGNEQwRTc4NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxD b1VTcUZyLXpCNDUwSDI3Q00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuNU8nX+KeVOVZ2PATQz7235SUBAQYUsiShKsswSiBNYMuMbCR+qEJ IGjyjYFlFMVri8B54QdkCrUH9Z30cyHF+J2/1rdhG3+jmzQv0xLZAtbH59c+49lq TDJ34eGZfQMgQr62uvydN+lj8a8Ded25sN3BdQJVB8jzCilr0MeDEiFGVvJwiBOn PWFNSKjSYQuIn9ff/H6NRIRh6LiIuXlxhZarU3WQwtP09yz1ApXlRBH7Fzgzeudx tucYOFTPXlc+2/XFTtzxF296/3c5hROTjDtbKGL5+xNfPx6Sg2hujalPUhJ+Sqob vTNe4PKe6qi8W783PIQZ5FFYf6BftdCB -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net