$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft File: YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json) Hash identifier: n+DkUe7CZGbEfP2cI0rM4Lanb9x0yzjJ+RrN9MMZByo= Subject key identifier: 37:F5:A9:DA:96:A4:8D:05:79:D2:11:CB:EF:8D:86:F9:01:3C:BC:F5 Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft Manifest number: 01C6 Signing time: Sun 27 Apr 2025 02:05:25 +0000 Manifest this update: Sun 27 Apr 2025 02:05:24 +0000 Manifest next update: Sun 04 May 2025 02:05:24 +0000 Files and hashes: 1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: OZRpToA1gBnrO/2Na6nNlMleUW15yStHyMBkw8prV4Y=) 2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: EGxldo7AGw1cFMotW1VKii2ay/EqR5jKmsG9yMQNqRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Apr 27 02:05:24 2025 GMT Not After : May 4 02:05:24 2025 GMT Subject: CN=680d90e5-5b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8a:bd:87:3f:78:43:2f:79:ae:18:f7:6b:90: fd:e9:a6:71:cd:c9:24:cf:5d:b4:ca:08:93:e1:a1: bd:ec:19:d0:02:12:ad:8d:cd:c4:ab:3b:c8:37:15: c9:14:3c:10:17:26:45:1d:6f:20:81:64:4a:f7:f1: f1:cf:5a:50:aa:4a:10:54:11:4c:fd:21:03:92:27: 93:49:1c:15:e1:bd:f4:69:24:eb:d6:96:16:31:e5: 63:91:5e:50:9e:9b:3c:1c:0f:0d:9f:c8:c6:c9:eb: e9:4b:69:5e:5f:1a:86:71:c2:de:8e:f4:18:b1:be: 37:6b:70:31:96:2e:18:8a:52:70:b3:7b:30:28:e5: 7b:a2:d4:09:1c:53:02:4d:c7:22:13:17:50:75:4d: fe:58:19:c0:95:65:bb:2e:d6:06:da:bb:2c:4f:a2: ea:88:35:5f:f3:6f:17:5a:0d:b3:f4:b6:ab:2b:6a: ba:f1:6c:25:d8:47:4a:04:22:5d:b8:0c:68:c9:e3: 20:86:92:04:22:34:f1:6d:6c:2d:96:f1:70:03:8d: 9d:5d:df:de:47:09:49:53:c5:be:8f:f2:1d:b4:94: fe:ab:b6:6e:e4:23:79:7a:4b:d8:e8:07:fa:42:8e: e8:0a:2f:a8:c8:9c:99:e5:85:de:7c:82:0f:f0:36: 94:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F5:A9:DA:96:A4:8D:05:79:D2:11:CB:EF:8D:86:F9:01:3C:BC:F5 X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:91:23:2f:93:92:4e:97:f8:c8:43:c8:5f:5c:c7:e9:de:9f: 57:1a:e2:60:69:43:b8:53:f9:b0:dc:d4:5a:bd:f3:9d:9d:37: 82:a7:f4:60:9c:3a:e2:25:a8:1e:a2:57:86:44:cc:08:1c:0e: 9e:a5:17:04:c8:db:1c:11:09:bd:ea:4c:4a:9b:cd:4c:00:20: c3:99:72:34:be:30:3b:82:f8:7a:3e:11:37:e3:07:40:5a:e1: 4d:e1:39:3f:63:35:18:53:24:4e:a3:0c:de:50:8f:fe:b3:2c: 52:8f:93:39:bf:98:fe:69:de:61:53:61:6b:1b:f4:63:08:32: 6b:c2:6e:fd:bc:a1:7e:17:53:3b:2e:6e:64:5d:47:f9:70:08: f6:6f:88:72:ee:3b:7e:d4:d1:dd:c9:51:5c:ea:12:b3:9e:11: 1e:d1:17:65:e8:91:f7:89:ce:94:dd:e3:a9:34:05:c3:f4:f9: 4d:5d:71:be:97:46:b0:d2:10:d8:1e:6e:6a:19:63:31:62:b4: 0b:23:d9:28:c8:7a:41:c2:ba:d1:e6:a2:03:c2:bb:56:3f:d3: 2d:ec:68:f2:c7:6a:40:29:71:ec:fb:10:49:cc:13:c7:c5:ca: 51:c6:4a:48:1c:08:83:eb:2a:07:bb:aa:a5:a2:c5:48:ce:eb: df:f0:e8:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjUwNDI3MDIwNTI0WhcNMjUwNTA0MDIwNTI0WjAYMRYwFAYD VQQDEw02ODBkOTBlNS01YjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooq9hz94Qy95rhj3a5D96aZxzckkz120ygiT4aG97BnQAhKtjc3EqzvINxXJ FDwQFyZFHW8ggWRK9/Hxz1pQqkoQVBFM/SEDkieTSRwV4b30aSTr1pYWMeVjkV5Q nps8HA8Nn8jGyevpS2leXxqGccLejvQYsb43a3Axli4YilJws3swKOV7otQJHFMC TcciExdQdU3+WBnAlWW7LtYG2rssT6LqiDVf828XWg2z9LarK2q68Wwl2EdKBCJd uAxoyeMghpIEIjTxbWwtlvFwA42dXd/eRwlJU8W+j/IdtJT+q7Zu5CN5ekvY6Af6 Qo7oCi+oyJyZ5YXefIIP8DaULQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf1qdqW pI0FedIRy++NhvkBPLz1MB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0 YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARkSMvk5JOl/jIQ8hfXMfp3p9XGuJgaUO4U/mw3NRavfOdnTeCp/Rg nDriJageoleGRMwIHA6epRcEyNscEQm96kxKm81MACDDmXI0vjA7gvh6PhE34wdA WuFN4Tk/YzUYUyROowzeUI/+syxSj5M5v5j+ad5hU2FrG/RjCDJrwm79vKF+F1M7 Lm5kXUf5cAj2b4hy7jt+1NHdyVFc6hKznhEe0Rdl6JH3ic6U3eOpNAXD9PlNXXG+ l0aw0hDYHm5qGWMxYrQLI9koyHpBwrrR5qIDwrtWP9Mt7Gjyx2pAKXHs+xBJzBPH xcpRxkpIHAiD6yoHu6qlosVIzuvf8Oil -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:13 2025 by rpki-client on console.sobornost.net