$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft File: YbAiM19NheFtR3oAatyOPy_alGA.mft (raw, json) Hash identifier: NMahz1jJsFnpXd2bJLvTZXG7lE9a9wS52btA6ZBRg7k= Subject key identifier: 99:18:BF:6C:87:E3:08:BC:6E:E5:DB:D2:02:23:9E:D2:F4:63:69:F9 Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60 Certificate issuer: /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460 Certificate serial: 0482 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft Manifest number: 0480 Signing time: Sat 26 Apr 2025 23:41:48 +0000 Manifest this update: Sat 26 Apr 2025 23:41:47 +0000 Manifest next update: Sat 03 May 2025 23:41:47 +0000 Files and hashes: 1: YbAiM19NheFtR3oAatyOPy_alGA.crl (hash: KVwe9yGtTWE6FXznbvsYZdpPnAl4/q7NXyDbCbyUEfI=) 2: FF4EB6B2395811ECA422C462C4F9AE02.roa (hash: kkkJWZ9fDn1htzEtE1zpX7lAAG0cOZUfH1foPNvS114=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1154 (0x482) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460 Validity Not Before: Apr 26 23:41:47 2025 GMT Not After : May 3 23:41:47 2025 GMT Subject: CN=680d6f3c-a715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:8a:94:ff:f9:46:44:8e:4e:d9:c5:a3:38: 22:d2:a5:90:ea:4b:9b:aa:5b:d1:44:cb:46:49:61: 5b:f7:12:90:71:38:89:36:b0:b8:82:77:e9:e5:ae: f4:35:2d:62:31:f9:e5:7d:bf:58:18:76:95:4f:26: f8:b0:74:95:81:f8:4f:4b:1f:db:27:9c:b0:8a:a3: f0:0e:35:24:87:3f:67:41:b4:6d:cd:bc:7c:15:80: 91:ad:8e:48:a5:b7:e9:80:56:d1:f3:0a:13:d5:b4: d3:b1:20:9d:ad:0b:63:b0:32:70:54:c2:04:a4:c5: 7a:1a:b7:9b:c2:67:e2:54:56:56:9c:4b:b6:ff:7a: df:0b:22:fa:e0:70:0d:71:48:cc:63:e0:0a:5d:9d: 4b:2b:81:7e:20:ab:f8:68:41:54:72:5b:8c:18:72: ec:c6:e2:c5:2e:d8:84:43:72:23:8d:8f:1e:88:84: 0e:f6:ec:a5:74:fa:6f:b4:ee:48:7e:1a:12:23:68: 6c:25:82:96:41:45:9a:e2:3f:1b:dc:ae:13:68:3f: 66:a6:95:4e:22:c7:ac:1a:84:57:06:42:84:ed:c3: 20:25:6d:19:90:a3:48:27:3d:47:5b:9b:f2:59:56: 0b:e3:c6:26:ba:ce:a8:f1:5c:0f:53:43:44:7d:db: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:18:BF:6C:87:E3:08:BC:6E:E5:DB:D2:02:23:9E:D2:F4:63:69:F9 X509v3 Authority Key Identifier: keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:b4:a6:9d:61:9f:06:b3:ae:6f:c4:10:ec:15:7a:d9:83:3c: 03:32:31:6c:ef:f5:6e:ee:e3:5c:88:f2:56:c3:9a:40:4a:32: 1e:6b:2e:29:20:f3:ec:25:e3:d8:7d:df:6c:e9:43:62:7c:f8: 20:46:d3:0a:4a:bd:09:d8:ba:c6:5e:e6:42:22:d3:ab:4d:99: 70:fc:77:bd:e1:63:4d:20:99:62:81:2a:8e:50:6d:c8:50:d0: 25:f3:da:69:a6:01:e3:1f:0a:32:c1:e2:46:8e:c8:43:bb:41: 50:56:70:53:8a:df:a2:bf:12:90:82:7d:e7:7c:99:93:6c:ee: 05:60:26:d0:5e:c3:65:80:6d:05:3a:25:0f:34:ee:72:cd:58: 83:52:3e:65:e4:45:62:b1:f6:8c:5d:9d:7a:f4:b5:fa:3d:91: e6:c1:08:86:e0:5b:d7:c9:9d:e2:5d:93:72:48:80:05:ef:18: 23:1a:1a:cb:d1:97:fb:39:ec:16:56:ec:e5:f9:6e:86:1b:f2: 33:97:3c:60:06:06:c3:84:b4:39:9e:6e:d2:95:29:4f:1d:24: 6e:1e:9d:e9:79:ea:4d:d0:c6:3a:0b:76:6d:87:90:74:ef:7e: 46:b7:25:87:83:be:ae:57:21:21:83:5c:54:6a:a2:56:f7:ac: 78:30:b7:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDNzcxMTAvBgNVBAUTKDYxQjAyMjMzNUY0RDg1RTE2RDQ3N0EwMDZBREM4RTNG MkZEQTk0NjAwHhcNMjUwNDI2MjM0MTQ3WhcNMjUwNTAzMjM0MTQ3WjAYMRYwFAYD VQQDEw02ODBkNmYzYy1hNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw+KlP/5RkSOTtnFozgi0qWQ6kubqlvRRMtGSWFb9xKQcTiJNrC4gnfp5a70 NS1iMfnlfb9YGHaVTyb4sHSVgfhPSx/bJ5ywiqPwDjUkhz9nQbRtzbx8FYCRrY5I pbfpgFbR8woT1bTTsSCdrQtjsDJwVMIEpMV6GrebwmfiVFZWnEu2/3rfCyL64HAN cUjMY+AKXZ1LK4F+IKv4aEFUcluMGHLsxuLFLtiEQ3IjjY8eiIQO9uyldPpvtO5I fhoSI2hsJYKWQUWa4j8b3K4TaD9mppVOIsesGoRXBkKE7cMgJW0ZkKNIJz1HW5vy WVYL48Ymus6o8VwPU0NEfdsnYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkYv2yH 4wi8buXb0gIjntL0Y2n5MB8GA1UdIwQYMBaAFGGwIjNfTYXhbUd6AGrcjj8v2pRg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0M3Ny9EQzIwMUFGRTM5 NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5TmhlRnRSM29BYXR5T1B5X2Fs R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liQWlNMTlOaGVGdFIzb0FhdHlPUHlfYWxHQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0M3Ny9EQzIwMUFGRTM5NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5Tmhl RnRSM29BYXR5T1B5X2FsR0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1tKadYZ8Gs65vxBDsFXrZgzwDMjFs7/Vu7uNciPJWw5pASjIeay4p IPPsJePYfd9s6UNifPggRtMKSr0J2LrGXuZCItOrTZlw/He94WNNIJligSqOUG3I UNAl89pppgHjHwoyweJGjshDu0FQVnBTit+ivxKQgn3nfJmTbO4FYCbQXsNlgG0F OiUPNO5yzViDUj5l5EVisfaMXZ169LX6PZHmwQiG4FvXyZ3iXZNySIAF7xgjGhrL 0Zf7OewWVuzl+W6GG/IzlzxgBgbDhLQ5nm7SlSlPHSRuHp3peepN0MY6C3Zth5B0 735GtyWHg76uVyEhg1xUaqJW96x4MLcN -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:03 2025 by rpki-client on console.sobornost.net