$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft File: _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json) Hash identifier: AMyLY1oJcscDrUDojftVCpPnIijK8rivhcdb/VV+iXQ= Subject key identifier: C3:ED:34:7D:15:03:C8:DB:B2:0B:CB:E5:2C:58:4E:43:68:23:9A:8D Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft Manifest number: 6D Signing time: Fri 25 Apr 2025 05:52:38 +0000 Manifest this update: Fri 25 Apr 2025 05:52:38 +0000 Manifest next update: Fri 02 May 2025 05:52:38 +0000 Files and hashes: 1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: BL1gWL5U58QQn36QU/rz+0KCSh79zhQM25WBEql/wKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562 Validity Not Before: Apr 25 05:52:38 2025 GMT Not After : May 2 05:52:38 2025 GMT Subject: CN=680b2326-3012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:01:01:a6:1f:77:f6:4b:03:de:98:b3:2e:16: dc:0c:b2:11:2b:80:8d:b9:38:c1:6c:bf:52:e0:58: 68:19:e9:65:40:59:b9:3b:7d:ed:1c:0c:23:55:58: 1a:1e:41:5c:99:b1:5d:17:37:ba:4a:9e:12:a5:48: 15:de:34:41:56:9b:92:3f:88:a5:e3:4f:c2:7e:47: d6:c8:5d:4a:dc:85:8b:e6:aa:8f:4b:b4:4b:e2:9e: ea:3d:38:a9:51:88:e0:52:31:83:78:d2:90:38:fb: 9f:87:12:23:e8:44:2c:9a:73:1e:3d:19:b4:97:74: 2e:3d:32:ca:93:17:11:ae:bf:64:2f:77:8e:f0:47: 33:38:2c:b9:81:45:a4:19:08:8d:57:4a:09:42:7f: be:a2:7a:4f:7d:32:4d:a6:0f:1f:ec:f5:36:d8:c7: be:a7:75:82:13:5a:3a:b0:c6:43:bb:2f:27:3a:c7: 52:3d:07:58:c0:85:4e:66:53:26:33:8c:30:20:95: ce:a1:b7:dc:20:55:7d:a7:eb:b5:e0:bd:3c:c0:82: 9f:be:d1:7a:30:81:80:00:d8:55:34:bb:5d:e7:93: 39:9d:1a:6f:c8:8a:e4:21:2d:4f:9f:3a:b3:b8:b6: 9c:0a:c1:73:11:ae:c8:d2:7e:05:1c:b9:89:6b:df: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:ED:34:7D:15:03:C8:DB:B2:0B:CB:E5:2C:58:4E:43:68:23:9A:8D X509v3 Authority Key Identifier: keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f2:20:77:df:25:31:4b:82:64:6e:3a:b4:d4:d2:02:e5:a1: ed:59:e3:d7:49:75:e9:6e:d9:49:11:1d:0c:2b:cc:b5:2d:2b: 2a:81:c5:61:bf:e7:f9:be:8f:a7:d7:ac:f7:a7:66:68:2e:96: 2a:00:77:48:e3:0a:1f:3b:7e:46:66:5a:29:4f:ac:28:56:50: 60:90:8e:99:56:76:8a:a3:b7:07:83:70:e1:c5:43:09:30:42: f4:d2:f1:30:28:7d:4f:95:bd:63:e2:d1:05:7d:44:7c:ad:65: dd:71:40:5b:94:cb:1a:28:6e:f6:b6:14:f8:5a:e0:b5:48:73: 96:8c:9d:94:2f:07:81:f3:e2:d7:eb:4d:79:ce:ef:a5:1c:ed: a0:96:18:b5:d3:3b:30:e2:eb:ed:37:ae:05:e6:d1:da:1d:44: 46:48:70:95:9d:b3:d4:01:5e:de:fa:6c:e1:ab:ea:4f:0a:a5: 21:2d:c0:b2:b4:80:b0:ac:97:71:3a:34:a7:80:24:f2:1d:f6: aa:6c:2c:f2:6d:ac:5d:8c:4d:d5:2e:7a:f4:5e:56:d0:3c:51: f5:f0:52:87:04:86:c8:e7:58:a5:65:6a:ce:63:72:77:f7:3a: 6e:df:31:f1:9d:ec:76:65:a4:1d:39:57:51:83:b9:37:04:f0: ed:c7:24:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MDdCQjExMC8GA1UEBRMoRkQ4MDEyQkZFOTkxMjlFRjlDOEJCN0E0NjAzMjE0NDJG NkQyNjU2MjAeFw0yNTA0MjUwNTUyMzhaFw0yNTA1MDIwNTUyMzhaMBgxFjAUBgNV BAMTDTY4MGIyMzI2LTMwMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdAQGmH3f2SwPemLMuFtwMshErgI25OMFsv1LgWGgZ6WVAWbk7fe0cDCNVWBoe QVyZsV0XN7pKnhKlSBXeNEFWm5I/iKXjT8J+R9bIXUrchYvmqo9LtEvinuo9OKlR iOBSMYN40pA4+5+HEiPoRCyacx49GbSXdC49MsqTFxGuv2Qvd47wRzM4LLmBRaQZ CI1XSglCf76iek99Mk2mDx/s9TbYx76ndYITWjqwxkO7Lyc6x1I9B1jAhU5mUyYz jDAglc6ht9wgVX2n67XgvTzAgp++0XowgYAA2FU0u13nkzmdGm/IiuQhLU+fOrO4 tpwKwXMRrsjSfgUcuYlr3xaNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUw+00fRUD yNuyC8vlLFhOQ2gjmo0wHwYDVR0jBBgwFoAU/YASv+mRKe+ci7ekYDIUQvbSZWIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwN0JCLzAxRDIzOUE0N0NC MzExRUY5NkM5RjI1MEM0RjlBRTAyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pX SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1lBU3YtbVJLZS1jaTdla1lESVVRdmJTWldJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw N0JCLzAxRDIzOUE0N0NCMzExRUY5NkM5RjI1MEM0RjlBRTAyL19ZQVN2LW1SS2Ut Y2k3ZWtZRElVUXZiU1pXSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJnyIHffJTFLgmRuOrTU0gLloe1Z49dJdelu2UkRHQwrzLUtKyqBxWG/ 5/m+j6fXrPenZmgulioAd0jjCh87fkZmWilPrChWUGCQjplWdoqjtweDcOHFQwkw QvTS8TAofU+VvWPi0QV9RHytZd1xQFuUyxoobva2FPha4LVIc5aMnZQvB4Hz4tfr TXnO76Uc7aCWGLXTOzDi6+03rgXm0dodREZIcJWds9QBXt76bOGr6k8KpSEtwLK0 gLCsl3E6NKeAJPId9qpsLPJtrF2MTdUuevReVtA8UfXwUocEhsjnWKVlas5jcnf3 Om7fMfGd7HZlpB05V1GDuTcE8O3HJDo= -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:02 2025 by rpki-client on console.sobornost.net