$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft File: yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json) Hash identifier: VyTo6dB1G+AWqv2EMKsjFB+aJ0OoDQt8712vuXWnHbY= Subject key identifier: CE:C2:B0:E7:C9:92:3F:DD:04:FC:22:41:68:86:8F:2C:79:E4:31:0A Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5 Certificate issuer: /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft Manifest number: 01A7 Signing time: Sun 27 Apr 2025 02:17:19 +0000 Manifest this update: Sun 27 Apr 2025 02:17:19 +0000 Manifest next update: Sun 04 May 2025 02:17:19 +0000 Files and hashes: 1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: uHQR2ui6iVD1FnE/Yg56fpiRoWDUVSRX1u/5IxT109E=) 2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: /ERrUArKmo0KgEQ70S3Uf+U0E1QNCp3+3kkOG/O7FLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5 Validity Not Before: Apr 27 02:17:19 2025 GMT Not After : May 4 02:17:19 2025 GMT Subject: CN=680d93af-1768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:73:bf:50:ec:f9:14:9f:04:d7:0e:84:e6: 4a:19:50:f4:d7:1e:d8:dd:1d:7b:21:4d:1c:8a:ec: 10:05:7f:df:02:32:9b:af:95:17:a1:42:7c:63:32: 9a:50:5b:70:65:af:54:10:82:48:97:c6:d6:fc:4f: 8f:96:ca:5d:6f:fe:76:ab:7c:1d:00:b9:0a:0f:1a: fc:5f:f3:a2:6c:cb:00:4c:9d:30:28:f1:83:cf:49: ff:3f:c0:ea:95:b5:92:b4:1c:29:f6:03:ba:68:0d: f4:2d:ab:f6:d1:2f:84:d1:36:45:bd:99:e8:0f:db: 0e:99:00:17:b8:04:84:3a:d1:1c:fc:b4:24:71:5b: 69:1b:d5:f1:fc:9b:a8:ce:93:74:b0:c0:0b:21:51: 94:8d:79:39:eb:d6:7d:fd:0b:7a:60:ca:75:de:96: 8e:56:73:37:bf:65:c0:28:1d:99:cd:64:a1:8e:ed: ab:e6:ff:cf:cc:56:4d:a3:dc:38:18:d5:5b:3a:dd: 8a:38:4b:06:3c:08:f2:a6:81:12:ad:46:f8:bd:77: e0:c0:f2:e6:8e:0a:d4:f8:67:0a:e1:57:47:52:c6: 16:d0:d9:69:31:25:2e:f9:e7:d2:c2:48:ba:ad:85: a7:a0:9b:26:47:1b:d8:11:2b:5f:a3:2f:3e:17:55: 29:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C2:B0:E7:C9:92:3F:DD:04:FC:22:41:68:86:8F:2C:79:E4:31:0A X509v3 Authority Key Identifier: keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7b:3b:1f:7a:1d:d2:62:7e:8a:e9:ec:d6:b1:78:a0:17:5e: 49:89:58:7c:d4:a9:a0:7a:5c:94:13:53:e4:57:bd:95:60:7e: 05:d9:1b:67:2b:c1:e4:c8:c1:5a:1a:1f:3a:bf:21:34:cb:bb: 6d:fa:22:7d:e0:58:01:7b:c1:6f:ac:c9:88:cb:35:eb:db:01: 10:50:43:b9:d0:01:84:b4:8b:73:3f:18:08:89:82:c4:79:6b: 65:61:66:cc:82:a3:d3:94:65:f3:d8:bb:4d:18:cb:6a:de:17: 1b:0d:6d:c7:0a:12:a8:cf:63:9a:06:c6:87:18:41:a3:9d:71: a4:5b:91:31:bd:62:9b:08:20:fc:f1:14:a3:ba:35:08:a8:e1: 0e:4a:58:ab:81:c5:3d:75:10:be:bc:f8:94:c7:15:0d:9b:dd: 04:3a:7a:be:2e:6a:2d:a7:59:9c:b3:81:f2:d4:f3:f8:46:b9: 00:05:c8:22:ff:06:fe:37:fb:39:59:e8:87:d6:35:c9:37:49: 7e:58:2a:f1:6c:e8:26:0f:a5:94:db:53:8e:d6:e9:fc:b0:ab: 58:f5:9a:d2:47:56:1e:40:80:48:c7:82:ce:6b:b8:05:76:d2: a7:b2:5f:db:f5:a9:34:40:61:45:76:74:b5:12:02:e3:d3:9d: 61:2d:0f:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTMxMTAvBgNVBAUTKEM4RTA1OTFFN0U1MTdENDE5Q0ZDODYxNzFDRENBOUZE RTYyNkU4RjUwHhcNMjUwNDI3MDIxNzE5WhcNMjUwNTA0MDIxNzE5WjAYMRYwFAYD VQQDEw02ODBkOTNhZi0xNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pJzv1Ds+RSfBNcOhOZKGVD01x7Y3R17IU0ciuwQBX/fAjKbr5UXoUJ8YzKa UFtwZa9UEIJIl8bW/E+Plspdb/52q3wdALkKDxr8X/OibMsATJ0wKPGDz0n/P8Dq lbWStBwp9gO6aA30Lav20S+E0TZFvZnoD9sOmQAXuASEOtEc/LQkcVtpG9Xx/Juo zpN0sMALIVGUjXk569Z9/Qt6YMp13paOVnM3v2XAKB2ZzWShju2r5v/PzFZNo9w4 GNVbOt2KOEsGPAjypoESrUb4vXfgwPLmjgrU+GcK4VdHUsYW0NlpMSUu+efSwki6 rYWnoJsmRxvYEStfoy8+F1Up0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7CsOfJ kj/dBPwiQWiGjyx55DEKMB8GA1UdIwQYMBaAFMjgWR5+UX1BnPyGFxzcqf3mJuj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFMy9BOTQ2MjRCNDk5 NjgxMUVEQjE2MkY4NjFDNEY5QUUwMi95T0JaSG41UmZVR2NfSVlYSE55cF9lWW02 UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPQlpIbjVSZlVHY19JWVhITnlwX2VZbTZQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjNFMy9BOTQ2MjRCNDk5NjgxMUVEQjE2MkY4NjFDNEY5QUUwMi95T0JaSG41UmZV R2NfSVlYSE55cF9lWW02UFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ezsfeh3SYn6K6ezWsXigF15JiVh81KmgelyUE1PkV72VYH4F2Rtn K8HkyMFaGh86vyE0y7tt+iJ94FgBe8FvrMmIyzXr2wEQUEO50AGEtItzPxgIiYLE eWtlYWbMgqPTlGXz2LtNGMtq3hcbDW3HChKoz2OaBsaHGEGjnXGkW5ExvWKbCCD8 8RSjujUIqOEOSlirgcU9dRC+vPiUxxUNm90EOnq+Lmotp1mcs4Hy1PP4RrkABcgi /wb+N/s5WeiH1jXJN0l+WCrxbOgmD6WU21OO1un8sKtY9ZrSR1YeQIBIx4LOa7gF dtKnsl/b9ak0QGFFdnS1EgLj051hLQ/5 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:06 2025 by rpki-client on console.sobornost.net