$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft File: YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json) Hash identifier: BgrhWYghRBqZAGVZVzhkf+BNkl6DbrF2e06vth8Yf/Q= Subject key identifier: E4:94:BD:2B:4F:27:0F:70:C8:8F:11:ED:59:0C:4A:26:F5:63:97:30 Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 Certificate issuer: /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft Manifest number: 6C Signing time: Sun 27 Apr 2025 05:42:29 +0000 Manifest this update: Sun 27 Apr 2025 05:42:28 +0000 Manifest next update: Sun 04 May 2025 05:42:28 +0000 Files and hashes: 1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: ohYIqBf01XOwW+BFTHwLdVKgIFaU0n5AgMI78v41frQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180 Validity Not Before: Apr 27 05:42:28 2025 GMT Not After : May 4 05:42:28 2025 GMT Subject: CN=680dc3c5-e019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:89:e8:37:55:82:3e:bf:6e:05:f8:e1:1c: 24:59:c8:09:d2:39:1b:44:55:a5:1c:c9:ec:7d:f2: 5d:93:75:80:f9:71:71:d2:24:03:87:2c:f9:62:e2: 0c:73:9c:26:aa:68:0e:09:e9:b0:c1:51:76:20:02: dd:e9:96:2f:f5:c5:98:73:ef:3d:2d:f7:48:47:0d: 45:24:80:f3:c5:ea:7c:f3:bf:c1:33:69:7c:ef:05: e8:a3:d4:b0:e8:52:7e:c1:d5:94:f9:01:97:c3:6b: 87:87:70:f6:0f:ae:12:53:6a:7d:48:9b:70:08:dc: c0:71:2f:46:70:62:5d:55:16:15:b7:2f:22:bf:48: c3:1d:06:e4:0a:3b:e8:38:97:a9:b3:ae:e5:4e:ac: 58:66:26:9e:39:ef:00:3f:d4:85:d4:05:18:6a:2c: 3c:62:8f:dd:7a:bb:b2:7e:b9:43:80:d6:4d:81:ce: 22:94:76:9b:b9:c8:fc:a3:61:ec:4b:cc:c4:09:82: 98:73:39:25:43:b2:8d:72:3a:d0:06:22:f0:1b:12: 9e:79:fe:19:78:9b:84:08:ce:98:9b:f0:ec:2f:33: c2:44:ad:ae:bc:2d:77:d5:ed:4f:8e:1b:ca:e2:86: f6:b0:ac:0e:20:fd:76:43:e4:0d:72:f0:6a:38:68: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:94:BD:2B:4F:27:0F:70:C8:8F:11:ED:59:0C:4A:26:F5:63:97:30 X509v3 Authority Key Identifier: keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:03:78:f7:b2:70:29:20:e6:88:96:f1:ad:68:e9:c7:d7:6c: de:e8:6f:ea:a8:0b:06:98:61:8c:3d:b2:48:f3:65:88:96:16: 53:93:54:41:7d:85:00:a2:bb:97:32:0f:b8:b5:0d:24:bc:2f: 4d:95:0c:33:aa:8b:23:8f:3f:e7:7f:ff:f3:9f:1a:c6:1d:8a: 60:20:a4:7c:fe:ad:0b:83:a4:1b:83:97:9e:0c:ae:d8:8d:69: aa:07:75:15:7b:26:6f:c4:d0:94:bf:78:18:1f:79:21:f8:49: b5:ef:cd:a9:9b:b9:f2:56:53:17:d8:4f:03:57:0e:62:3b:42: 4d:e4:0b:f2:a7:30:6c:46:14:9a:64:69:0c:6a:e8:b6:c8:a8: 97:51:e1:5d:6b:a7:db:e0:27:7f:19:53:66:9b:6b:0e:27:b0: 67:9d:48:6d:88:fd:5a:08:80:44:dd:d5:77:3b:c1:8f:d0:75: 20:d5:d1:76:b4:e5:d0:17:11:d7:b5:0b:c9:01:11:4b:a0:7a: a3:9f:7d:20:1c:01:f7:ce:16:f1:3e:09:e7:c7:c1:1a:a5:53: b2:86:91:02:f5:3e:92:d2:bc:80:34:7b:dd:f7:f8:50:80:75: e5:15:e6:df:1f:b5:a1:3a:1b:6a:20:9a:b9:98:a5:52:32:5d: b8:33:5b:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNENTExMC8GA1UEBRMoNjMwNURDQjU1RkQxNEI1QzdBQTI5NEFFMzdDNzAyNzU2 OTJGNDE4MDAeFw0yNTA0MjcwNTQyMjhaFw0yNTA1MDQwNTQyMjhaMBgxFjAUBgNV BAMTDTY4MGRjM2M1LWUwMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuAonoN1WCPr9uBfjhHCRZyAnSORtEVaUcyex98l2TdYD5cXHSJAOHLPli4gxz nCaqaA4J6bDBUXYgAt3pli/1xZhz7z0t90hHDUUkgPPF6nzzv8EzaXzvBeij1LDo Un7B1ZT5AZfDa4eHcPYPrhJTan1Im3AI3MBxL0ZwYl1VFhW3LyK/SMMdBuQKO+g4 l6mzruVOrFhmJp457wA/1IXUBRhqLDxij916u7J+uUOA1k2BziKUdpu5yPyjYexL zMQJgphzOSVDso1yOtAGIvAbEp55/hl4m4QIzpib8OwvM8JEra68LXfV7U+OG8ri hvawrA4g/XZD5A1y8Go4aPDBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5JS9K08n D3DIjxHtWQxKJvVjlzAwHwYDVR0jBBgwFoAUYwXctV/RS1x6opSuN8cCdWkvQYAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0Q1LzdBOUEyNTEwN0ZF RjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4Nm9wU3VOOGNDZFdrdlFZ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXdYY3RWX1JTMXg2b3BTdU44Y0NkV2t2UVlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0Q1LzdBOUEyNTEwN0ZFRjExRUZBODJERjYzOUM0RjlBRTAyL1l3WGN0Vl9SUzF4 Nm9wU3VOOGNDZFdrdlFZQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHgDePeycCkg5oiW8a1o6cfXbN7ob+qoCwaYYYw9skjzZYiWFlOTVEF9 hQCiu5cyD7i1DSS8L02VDDOqiyOPP+d///OfGsYdimAgpHz+rQuDpBuDl54MrtiN aaoHdRV7Jm/E0JS/eBgfeSH4SbXvzambufJWUxfYTwNXDmI7Qk3kC/KnMGxGFJpk aQxq6LbIqJdR4V1rp9vgJ38ZU2abaw4nsGedSG2I/VoIgETd1Xc7wY/QdSDV0Xa0 5dAXEde1C8kBEUugeqOffSAcAffOFvE+CefHwRqlU7KGkQL1PpLSvIA0e933+FCA deUV5t8ftaE6G2ogmrmYpVIyXbgzW0I= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net