$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft File: SL_YCBmvF_vAh15iBvAoIqewTpg.mft (raw, json) Hash identifier: 8vl9PORuiE3CxoEEcKslnlCS+wyYVwBeXJQHh55NT60= Subject key identifier: 9D:C5:C5:A2:EE:39:F1:E6:8E:4C:23:96:9C:76:C3:72:3F:64:DE:D2 Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft Manifest number: 030B Signing time: Sun 27 Apr 2025 02:28:31 +0000 Manifest this update: Sun 27 Apr 2025 02:28:30 +0000 Manifest next update: Sun 04 May 2025 02:28:30 +0000 Files and hashes: 1: SL_YCBmvF_vAh15iBvAoIqewTpg.crl (hash: UoqEmaSZwrV8GOFjiyjNDbbN3dkZhFn8DVmVsG4z2Qw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EC2D, serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98 Validity Not Before: Apr 27 02:28:30 2025 GMT Not After : May 4 02:28:30 2025 GMT Subject: CN=680d964f-7c5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:c8:58:5f:9a:ac:3d:fe:5c:5f:ee:39:00: 5c:46:9f:1c:3d:d4:16:bb:67:ae:b0:de:49:3e:42: f0:69:b8:15:57:a7:bb:78:e7:09:66:a8:c1:e1:ca: 2a:cc:14:4a:77:0f:01:6a:72:30:9d:75:ab:ed:ad: c0:c0:ce:0f:4a:d1:1f:5d:7c:40:e2:40:ee:28:5f: ef:7d:17:2d:67:47:c8:cf:9e:fa:f1:31:d8:35:4e: 1c:c7:f3:84:10:10:02:65:d8:00:15:59:7c:04:99: ff:a6:1b:ac:b1:e6:f5:a3:26:e5:d1:82:5e:5e:84: 36:d3:f7:ac:42:bf:59:57:10:7a:41:61:7b:b4:e4: 62:cc:a8:dc:00:c3:05:ef:ab:fa:e6:19:b3:b1:7e: b7:54:cf:2f:a5:6e:eb:cd:fa:c9:99:85:41:18:45: 33:d0:b5:a7:ce:7e:04:20:26:ad:cc:89:0b:8a:e5: 0d:0b:94:68:8c:33:b3:ee:dd:18:15:d2:df:42:e6: b6:75:24:18:c5:88:23:e7:e8:d4:3a:a3:f1:91:6f: 49:12:a6:0f:dc:81:09:86:3a:8e:08:83:92:f1:5a: 38:8c:f1:03:e5:56:f9:0c:23:01:d0:95:9d:ce:2e: f5:a7:41:93:fe:f4:7b:13:b8:79:08:25:e3:9d:ba: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C5:C5:A2:EE:39:F1:E6:8E:4C:23:96:9C:76:C3:72:3F:64:DE:D2 X509v3 Authority Key Identifier: keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b6:27:6a:75:4e:82:65:a2:c5:bd:82:4c:de:31:a7:05:6a: 1d:59:7e:f2:2a:a0:87:48:76:29:ab:29:a8:6a:24:bc:8e:c6: db:f2:68:4e:2b:0b:fb:96:4c:e7:03:78:db:0e:50:0d:f1:6d: d0:1e:d5:e6:6d:f3:df:6c:ba:e8:e0:ac:d7:8a:09:fc:e0:9a: c1:35:75:90:41:19:74:77:6f:25:e3:10:a8:ba:b3:1c:c1:3f: 7d:74:af:23:e6:f8:39:97:30:48:6f:e4:62:35:5b:3c:25:a8: 9f:62:19:a1:16:64:af:e9:d9:01:d7:f2:1d:71:14:1f:59:2a: 2b:b6:74:53:dd:a3:95:46:c1:fb:8a:33:82:50:ab:2a:3e:11: 30:85:9f:c0:16:16:01:3e:8f:79:d3:f0:90:d9:95:a9:24:4b: 81:a2:57:70:1d:b8:14:f6:f0:4f:00:5e:8f:19:19:91:fd:e3: 49:1f:bd:17:e9:c9:d5:13:64:e4:43:9c:48:04:71:4a:02:d3: 34:78:74:8e:20:ea:27:b2:98:7b:0e:95:bc:fc:a3:f3:70:55: bb:c6:2e:84:64:db:63:36:96:ef:9b:c2:7a:75:6e:7b:cd:55: ff:6a:24:ee:72:92:b0:4c:9a:27:5c:a2:ad:e1:07:c9:3f:d0: fe:bd:8a:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDMkQxMTAvBgNVBAUTKDQ4QkZEODA4MTlBRjE3RkJDMDg3NUU2MjA2RjAyODIy QTdCMDRFOTgwHhcNMjUwNDI3MDIyODMwWhcNMjUwNTA0MDIyODMwWjAYMRYwFAYD VQQDEw02ODBkOTY0Zi03YzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gDIWF+arD3+XF/uOQBcRp8cPdQWu2eusN5JPkLwabgVV6e7eOcJZqjB4coq zBRKdw8BanIwnXWr7a3AwM4PStEfXXxA4kDuKF/vfRctZ0fIz5768THYNU4cx/OE EBACZdgAFVl8BJn/phusseb1oybl0YJeXoQ20/esQr9ZVxB6QWF7tORizKjcAMMF 76v65hmzsX63VM8vpW7rzfrJmYVBGEUz0LWnzn4EICatzIkLiuUNC5RojDOz7t0Y FdLfQua2dSQYxYgj5+jUOqPxkW9JEqYP3IEJhjqOCIOS8Vo4jPED5Vb5DCMB0JWd zi71p0GT/vR7E7h5CCXjnbq9cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3FxaLu OfHmjkwjlpx2w3I/ZN7SMB8GA1UdIwQYMBaAFEi/2AgZrxf7wIdeYgbwKCKnsE6Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZfdkFoMTVpQnZBb0lxZXdU cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NMX1lDQm12Rl92QWgxNWlCdkFvSXFld1RwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9TTF9ZQ0JtdkZf dkFoMTVpQnZBb0lxZXdUcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7tidqdU6CZaLFvYJM3jGnBWodWX7yKqCHSHYpqymoaiS8jsbb8mhO Kwv7lkznA3jbDlAN8W3QHtXmbfPfbLro4KzXign84JrBNXWQQRl0d28l4xCourMc wT99dK8j5vg5lzBIb+RiNVs8JaifYhmhFmSv6dkB1/IdcRQfWSortnRT3aOVRsH7 ijOCUKsqPhEwhZ/AFhYBPo950/CQ2ZWpJEuBoldwHbgU9vBPAF6PGRmR/eNJH70X 6cnVE2TkQ5xIBHFKAtM0eHSOIOonsph7DpW8/KPzcFW7xi6EZNtjNpbvm8J6dW57 zVX/aiTucpKwTJonXKKt4QfJP9D+vYon -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net