$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json) Hash identifier: 4pRf88engWsDbhJheR89fo7McPTPwrXyVQIyKD97XvE= Subject key identifier: 22:34:46:C2:10:7D:7E:FC:66:18:40:B9:E5:91:36:F8:54:4C:DC:81 Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft Manifest number: 28 Signing time: Sun 27 Apr 2025 06:34:01 +0000 Manifest this update: Sun 27 Apr 2025 06:34:01 +0000 Manifest next update: Sun 04 May 2025 06:34:01 +0000 Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: KV41yz6SGmilPFdgO4YUdca+6jhQCMPnW1bd12yHeCk=) 2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: LcUO14s0wegdTiNX+dgH1WWwhW/HYrgfbp8JINcrU+U=) 3: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: FSLv08dRTBFk7OJGwtktmBOjNRJNtTBGwj1NskH7kyw=) 4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: mLH/qF33HuSxb2ZOhtlDD/C41cd08Ge05vK6Yy9o0+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E Validity Not Before: Apr 27 06:34:01 2025 GMT Not After : May 4 06:34:01 2025 GMT Subject: CN=680dcfd9-d0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:eb:5c:69:83:dc:9f:0f:1e:4f:e0:c5:f7: bd:1f:34:bb:96:63:c8:79:7e:e9:dd:58:a9:8c:86: 79:04:4c:b5:2b:ae:48:61:56:aa:b2:7d:33:80:fe: 36:f9:c6:08:6c:c0:72:37:b6:2c:a5:59:f5:89:5e: 71:de:d3:31:c1:a6:31:43:fb:25:01:8a:b1:3c:cb: 94:92:78:7f:26:62:32:df:83:3e:6d:e8:1a:29:91: c7:a5:76:05:0f:4f:9e:5a:c0:7f:b8:c1:27:63:e2: 33:bf:2c:e5:c4:9b:40:7d:ef:0d:32:0b:1d:89:d7: 17:7a:18:f8:49:c0:42:20:92:cc:f9:b8:b5:75:f1: 38:d7:ee:62:37:2c:ed:ba:06:66:c2:9d:01:8b:53: 57:59:7e:9f:dd:a9:a4:47:3b:be:05:ca:e0:0a:67: 15:d3:3a:3d:ed:61:87:f5:de:a6:b9:c3:0b:66:c8: 24:1f:f2:cd:57:86:84:23:df:b4:87:37:d7:a0:86: 30:eb:7e:ba:01:d2:87:80:74:c2:26:04:2c:4f:44: 86:44:6c:a1:05:98:d5:5e:e9:da:df:88:d8:1b:8c: 99:68:90:d3:56:2a:dc:95:c0:81:f8:af:ee:02:eb: b2:01:43:03:ec:f0:84:aa:6a:7f:c6:e1:92:4c:8f: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:34:46:C2:10:7D:7E:FC:66:18:40:B9:E5:91:36:F8:54:4C:DC:81 X509v3 Authority Key Identifier: keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:98:5a:a8:89:c5:e9:3d:bd:09:39:da:81:d1:28:c6:74:24: ba:46:0f:e6:89:9c:6a:43:c5:9e:1e:70:4c:e7:ea:f5:66:82: 0f:1a:8e:f4:38:57:ed:d4:8e:68:a5:65:5a:eb:c7:28:b5:25: dc:ca:fc:ce:4a:32:82:45:aa:86:11:03:23:ae:9c:b6:1d:c5: ae:56:16:cb:96:6d:b4:fe:7c:a6:4d:d9:7c:16:bd:d8:9b:ea: 3b:9e:00:19:eb:09:01:ea:73:5c:53:3e:cf:2c:c1:6b:74:2e: fd:24:c9:65:ca:92:3d:4f:b7:8b:57:dc:96:97:4a:de:73:6d: ea:b1:1a:9a:04:fa:7c:e2:d2:f5:5f:39:b5:98:fe:1b:b5:a8: 20:3b:76:1c:b4:4a:63:ff:f8:ae:24:88:3a:b3:0a:01:75:05: 49:32:48:b0:2b:27:47:31:3e:6c:0e:fe:4e:a1:e8:a7:92:fa: a4:eb:9e:85:c1:7e:77:18:28:23:15:5b:79:07:50:8b:58:24: 57:40:20:fd:af:bb:8a:d0:89:57:0e:1e:82:86:4f:6b:60:a7: 27:54:28:61:da:05:c5:bf:13:89:34:30:27:d6:cd:9c:50:82: 9b:da:b0:b6:aa:d7:69:44:59:91:22:47:9e:03:ae:b7:fc:91: c1:8b:7e:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RTFGQzExMC8GA1UEBRMoQ0E1RjdBMzEyMUMxRjVGOTg5NTIwQzdBNTE5NzEzRkIz QTY4Q0E3RTAeFw0yNTA0MjcwNjM0MDFaFw0yNTA1MDQwNjM0MDFaMBgxFjAUBgNV BAMTDTY4MGRjZmQ5LWQwYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDB9+tcaYPcnw8eT+DF970fNLuWY8h5fundWKmMhnkETLUrrkhhVqqyfTOA/jb5 xghswHI3tiylWfWJXnHe0zHBpjFD+yUBirE8y5SSeH8mYjLfgz5t6BopkceldgUP T55awH+4wSdj4jO/LOXEm0B97w0yCx2J1xd6GPhJwEIgksz5uLV18TjX7mI3LO26 BmbCnQGLU1dZfp/dqaRHO74FyuAKZxXTOj3tYYf13qa5wwtmyCQf8s1XhoQj37SH N9eghjDrfroB0oeAdMImBCxPRIZEbKEFmNVe6drfiNgbjJlokNNWKtyVwIH4r+4C 67IBQwPs8ISqan/G4ZJMj1WhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIjRGwhB9 fvxmGEC55ZE2+FRM3IEwHwYDVR0jBBgwFoAUyl96MSHB9fmJUgx6UZcT+zpoyn4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFMUZDLzVCMzI1RkE2RTlC OTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3lu NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveWw5Nk1TSEI5Zm1KVWd4NlVaY1QtenBveW40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF MUZDLzVCMzI1RkE2RTlCOTExRUZCNkRBNDE0Q0M0RjlBRTAyL3lsOTZNU0hCOWZt SlVneDZVWmNULXpwb3luNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC+YWqiJxek9vQk52oHRKMZ0JLpGD+aJnGpDxZ4ecEzn6vVmgg8ajvQ4 V+3UjmilZVrrxyi1JdzK/M5KMoJFqoYRAyOunLYdxa5WFsuWbbT+fKZN2XwWvdib 6jueABnrCQHqc1xTPs8swWt0Lv0kyWXKkj1Pt4tX3JaXSt5zbeqxGpoE+nzi0vVf ObWY/hu1qCA7dhy0SmP/+K4kiDqzCgF1BUkySLArJ0cxPmwO/k6h6KeS+qTrnoXB fncYKCMVW3kHUItYJFdAIP2vu4rQiVcOHoKGT2tgpydUKGHaBcW/E4k0MCfWzZxQ gpvasLaq12lEWZEiR54Drrf8kcGLfug= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net