$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json) Hash identifier: Yw86pbMEsVImfJs9531cZ1k+qqd83M9AN5OILoQe1AA= Subject key identifier: 40:8B:FD:B4:46:D5:C8:B2:5D:6D:C9:B8:98:9F:21:5F:1B:BC:B7:96 Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Certificate serial: 1A53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft Manifest number: 1A46 Signing time: Mon 28 Apr 2025 16:32:08 +0000 Manifest this update: Mon 28 Apr 2025 16:32:08 +0000 Manifest next update: Mon 05 May 2025 16:32:08 +0000 Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: vxCr9hNQ1xlZHfLXlIo+uSTKLjZH/wKH0uuIFwK+Gtg=) 2: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bo/SZs4FQGVCgHbfJ/qOcN+amQtsXWeV9LBgPktlbik=) 3: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: XfRW9hpvnBY9LTBMASrvKe5ewyj8spWmKtOVyqPmD0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6739 (0x1a53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Validity Not Before: Apr 28 16:32:08 2025 GMT Not After : May 5 16:32:08 2025 GMT Subject: CN=680fad88-6d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:e8:1a:26:9e:21:3e:5a:10:dc:22:96:48: 93:41:0c:7d:bc:84:39:68:d2:e1:c5:11:ee:a8:65: 04:97:47:ca:a2:8a:46:79:32:5d:62:86:7a:e9:d4: df:bf:ec:b0:f5:d3:af:c8:83:29:bc:90:a1:18:31: 17:b8:b0:0f:bc:e6:0b:7f:f3:25:5f:c0:44:de:6b: d0:f5:ea:69:04:42:30:54:62:bb:72:87:5a:00:65: 9f:17:2a:7a:22:86:16:a9:b5:82:f9:b2:83:22:be: cf:19:f6:7a:6c:53:67:d7:87:cd:97:97:29:55:12: 95:51:36:ed:bb:7e:74:37:72:3d:70:6f:bf:7b:54: ae:e2:90:43:bf:b4:3f:b4:28:56:10:e6:9a:3c:33: b8:db:1a:ff:b2:1b:b9:ae:46:c1:f7:cf:31:c8:f9: 5c:cb:49:79:49:37:22:87:e5:17:d8:a3:b9:64:be: 11:1e:1a:ed:e5:25:67:cf:49:15:54:d0:7d:7a:d4: bb:35:fc:8e:88:a3:74:a1:04:b9:e7:df:37:bd:3e: 5b:cf:49:aa:51:77:0f:56:61:93:d4:03:dc:74:56: e7:eb:c3:d6:b0:4a:52:6a:1a:72:d4:d5:b1:c3:67: 08:95:f1:a5:22:16:64:a1:d6:3e:d6:51:5c:98:17: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8B:FD:B4:46:D5:C8:B2:5D:6D:C9:B8:98:9F:21:5F:1B:BC:B7:96 X509v3 Authority Key Identifier: keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4a:c9:32:71:d5:26:b1:aa:cd:f7:90:5a:50:55:b9:4c:bf: d1:09:f6:02:a4:c8:70:3c:6d:e5:9f:fc:7a:ca:47:5b:11:59: e4:eb:ec:0f:89:d6:f3:29:e3:c8:0e:4d:36:3e:c2:3e:81:39: 33:36:7d:21:ff:ad:fa:32:f2:eb:bd:56:1b:58:89:97:5f:6e: ab:d2:46:33:05:81:d4:94:0b:e6:3b:3c:94:23:4b:2f:9d:1e: 13:51:19:6d:b7:87:06:47:8c:ce:31:4b:d6:69:ed:db:40:29: 6c:95:92:71:44:77:fc:54:74:86:9d:98:d4:29:be:f8:da:8a: a2:ed:73:e2:74:6f:99:54:7b:91:84:c6:66:01:20:1f:d7:78: c5:79:d7:29:9c:94:84:dd:5e:41:0b:5a:af:3a:de:71:d9:b5: 2d:de:e7:01:0f:fa:9b:9f:cd:26:0b:31:74:c8:8d:8b:a5:93: 99:c3:83:f4:e8:09:9f:a2:56:6d:ab:e7:36:90:d7:5c:0d:6f: 54:f1:86:bc:92:ad:9d:f8:83:d1:35:a6:52:b8:de:ac:89:b7: 5b:2a:76:36:71:66:6e:d3:7d:a3:a7:17:98:3c:10:7e:c2:51: a2:ce:e9:d0:18:94:ea:e2:0e:a8:6c:59:50:75:20:0d:79:77: bc:7d:c8:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyNjQxMTAvBgNVBAUTKDYwREQ2NUVDN0Y3MkVCNkM3REE4QjkzNzA2RTJEM0JB MEYwNjVCRkMwHhcNMjUwNDI4MTYzMjA4WhcNMjUwNTA1MTYzMjA4WjAYMRYwFAYD VQQDEw02ODBmYWQ4OC02ZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yvoGiaeIT5aENwilkiTQQx9vIQ5aNLhxRHuqGUEl0fKoopGeTJdYoZ66dTf v+yw9dOvyIMpvJChGDEXuLAPvOYLf/MlX8BE3mvQ9eppBEIwVGK7codaAGWfFyp6 IoYWqbWC+bKDIr7PGfZ6bFNn14fNl5cpVRKVUTbtu350N3I9cG+/e1Su4pBDv7Q/ tChWEOaaPDO42xr/shu5rkbB988xyPlcy0l5STcih+UX2KO5ZL4RHhrt5SVnz0kV VNB9etS7NfyOiKN0oQS55983vT5bz0mqUXcPVmGT1APcdFbn68PWsEpSahpy1NWx w2cIlfGlIhZkodY+1lFcmBctIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECL/bRG 1ciyXW3JuJifIV8bvLeWMB8GA1UdIwQYMBaAFGDdZex/cutsfai5Nwbi07oPBlv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI2NC9DNThENkZGQTQx MDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYyeDlxTGszQnVMVHVnOEdX X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOMWw3SDl5NjJ4OXFMazNCdUxUdWc4R1dfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI2NC9DNThENkZGQTQxMDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYy eDlxTGszQnVMVHVnOEdXX3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMSskycdUmsarN95BaUFW5TL/RCfYCpMhwPG3ln/x6ykdbEVnk6+wP idbzKePIDk02PsI+gTkzNn0h/636MvLrvVYbWImXX26r0kYzBYHUlAvmOzyUI0sv nR4TURltt4cGR4zOMUvWae3bQClslZJxRHf8VHSGnZjUKb742oqi7XPidG+ZVHuR hMZmASAf13jFedcpnJSE3V5BC1qvOt5x2bUt3ucBD/qbn80mCzF0yI2LpZOZw4P0 6AmfolZtq+c2kNdcDW9U8Ya8kq2d+IPRNaZSuN6sibdbKnY2cWZu032jpxeYPBB+ wlGizunQGJTq4g6obFlQdSANeXe8fcjz -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:52 2025 by rpki-client on console.sobornost.net