$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json) Hash identifier: 0RH8avJSjXy0cVRI6fQyLvKXv9r2vwq2GNVewblZAow= Subject key identifier: 0C:71:A0:F1:33:91:B2:44:08:14:6D:0F:B8:14:69:00:5D:58:F2:8B Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft Manifest number: 3D Signing time: Sun 27 Apr 2025 06:24:00 +0000 Manifest this update: Sun 27 Apr 2025 06:23:59 +0000 Manifest next update: Sun 04 May 2025 06:23:59 +0000 Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: L/43oI0UEDpRPvJkcLxjdn+Y5eHcOW5j6uv6bpx5HuY=) 2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: sDxPGPWuMnoYPL5SXwZzSX89Yi7Im2b2Bj3YLGK0a00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0 Validity Not Before: Apr 27 06:23:59 2025 GMT Not After : May 4 06:23:59 2025 GMT Subject: CN=680dcd80-a281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:54:3b:01:bd:0b:bb:fa:af:70:88:aa:ef: f7:5a:50:59:f8:cb:32:92:67:a3:15:5a:2e:c2:8d: 14:63:c5:dd:8c:c5:49:1f:04:82:0d:2c:e7:84:86: cb:10:71:e0:90:97:70:58:0d:a1:5a:99:cc:38:e0: ee:47:47:8c:97:45:0c:08:86:aa:83:52:57:f4:70: b8:28:da:5a:c7:c0:0d:c7:00:0d:ac:98:6f:32:3e: 00:e0:5c:c6:88:59:b7:d2:d6:bb:5d:5a:10:5d:fa: fb:e2:c6:11:68:69:54:22:8f:bb:eb:34:7a:d7:62: 20:a3:68:5c:5c:db:a0:25:fc:c4:06:b3:c5:c9:e7: 96:e1:4e:d1:88:2a:0a:7d:53:c6:40:cd:3f:fd:46: cc:73:89:a1:bc:b4:27:16:61:2a:10:76:46:29:85: da:44:12:42:84:28:4a:32:ed:05:69:1b:7a:4c:65: 57:3e:08:e1:38:7d:a8:87:c6:dd:52:0b:12:18:8e: ce:58:ca:e9:a1:1f:18:51:c1:0d:43:89:67:6b:e2: ba:8e:9b:92:83:72:f2:98:2a:40:03:21:78:ec:3c: d2:3a:dc:12:e7:e8:66:87:45:d1:ec:ef:05:cf:f4: a6:24:7b:52:0d:97:f9:88:f6:9b:e1:c6:3b:87:5d: 69:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:71:A0:F1:33:91:B2:44:08:14:6D:0F:B8:14:69:00:5D:58:F2:8B X509v3 Authority Key Identifier: keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:be:2c:dd:73:77:d9:a7:c1:b8:da:b1:47:5c:1e:7b:22:6b: c5:a6:d3:f3:db:03:17:20:77:7c:ac:92:b3:10:d7:47:7a:e2: 9f:7d:0f:a1:37:a2:17:db:9d:a5:ad:f9:79:4b:50:cb:22:2b: fe:c3:85:1b:de:d1:4a:29:a1:b6:11:91:50:87:63:68:f2:0c: be:87:73:da:2e:85:fb:e5:43:ce:8b:06:eb:97:6c:4f:a0:1f: 08:3d:3d:8d:ca:dd:4c:cb:df:eb:08:3a:9d:23:0b:12:0e:3f: a6:bc:2c:0f:e9:ae:04:a7:96:50:ec:14:47:76:a5:d8:b4:05: 0d:cb:0c:74:72:fe:dc:0a:6c:a1:87:62:8b:15:80:ca:6e:f6: a9:e5:91:80:8e:7c:12:9f:9f:31:ee:9b:90:2a:47:cb:b3:4a: ae:4e:46:23:ae:39:fe:a9:32:a4:3e:44:60:6e:ee:e7:50:b4: f4:76:30:39:44:39:2b:47:73:5f:9b:ef:41:c2:f0:3d:94:31: 20:b6:57:36:3a:1f:8e:14:84:10:b2:1e:37:92:c0:7e:b9:e9: 32:07:5c:50:3a:3f:fa:49:3c:de:61:39:0d:9c:fc:d2:1c:2b: e9:3d:be:45:9b:83:93:a1:8f:8c:6d:27:a7:7e:39:79:68:e4: 60:3a:c3:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NEFCODExMC8GA1UEBRMoMzE4OEY5QjlGNUU5MEFGQjBEQjBERTY1NjVGMDJDOTBC RUVBNDhEMDAeFw0yNTA0MjcwNjIzNTlaFw0yNTA1MDQwNjIzNTlaMBgxFjAUBgNV BAMTDTY4MGRjZDgwLWEyODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrtVQ7Ab0Lu/qvcIiq7/daUFn4yzKSZ6MVWi7CjRRjxd2MxUkfBIINLOeEhssQ ceCQl3BYDaFamcw44O5HR4yXRQwIhqqDUlf0cLgo2lrHwA3HAA2smG8yPgDgXMaI WbfS1rtdWhBd+vvixhFoaVQij7vrNHrXYiCjaFxc26Al/MQGs8XJ55bhTtGIKgp9 U8ZAzT/9RsxziaG8tCcWYSoQdkYphdpEEkKEKEoy7QVpG3pMZVc+COE4faiHxt1S CxIYjs5YyumhHxhRwQ1DiWdr4rqOm5KDcvKYKkADIXjsPNI63BLn6GaHRdHs7wXP 9KYke1INl/mI9pvhxjuHXWldAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDHGg8TOR skQIFG0PuBRpAF1Y8oswHwYDVR0jBBgwFoAUMYj5ufXpCvsNsN5lZfAskL7qSNAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0QUI4LzNCMEE5QzY0RDFC MDExRUY4QzIwREQzMkM0RjlBRTAyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNO QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVlqNXVmWHBDdnNOc041bFpmQXNrTDdxU05BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 QUI4LzNCMEE5QzY0RDFCMDExRUY4QzIwREQzMkM0RjlBRTAyL01ZajV1ZlhwQ3Zz TnNONWxaZkFza0w3cVNOQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGy+LN1zd9mnwbjasUdcHnsia8Wm0/PbAxcgd3yskrMQ10d64p99D6E3 ohfbnaWt+XlLUMsiK/7DhRve0UopobYRkVCHY2jyDL6Hc9ouhfvlQ86LBuuXbE+g Hwg9PY3K3UzL3+sIOp0jCxIOP6a8LA/prgSnllDsFEd2pdi0BQ3LDHRy/twKbKGH YosVgMpu9qnlkYCOfBKfnzHum5AqR8uzSq5ORiOuOf6pMqQ+RGBu7udQtPR2MDlE OStHc1+b70HC8D2UMSC2VzY6H44UhBCyHjeSwH656TIHXFA6P/pJPN5hOQ2c/NIc K+k9vkWbg5Ohj4xtJ6d+OXlo5GA6w5k= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net