$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft File: ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json) Hash identifier: vfncj0b+eoZy4TIgWZIUPZEeJv0xUcqs7f+mfL9cGAg= Subject key identifier: 92:EA:6A:D0:30:62:7F:00:C7:9E:F0:F9:7B:3F:84:51:B0:9B:93:78 Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 Certificate issuer: /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Certificate serial: 0B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft Manifest number: 0B3C Signing time: Mon 28 Apr 2025 19:32:59 +0000 Manifest this update: Mon 28 Apr 2025 19:32:58 +0000 Manifest next update: Mon 05 May 2025 19:32:58 +0000 Files and hashes: 1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: kSKQUB/HOad3w1WeoEFH33KBRmDy+7Jm328gwY7dQRU=) 2: AD989788E05511EEADC7D67EC4F9AE02.roa (hash: gKXy2g22Zjp1Hqmn7Qc1nw8xcDNaJidEhFHTK4F7AJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3 Validity Not Before: Apr 28 19:32:58 2025 GMT Not After : May 5 19:32:58 2025 GMT Subject: CN=680fd7eb-1a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:2d:ca:b2:09:1a:87:4a:d2:f9:34:75:5b: ce:b4:fd:d5:5e:5f:11:c4:c7:f9:27:53:36:44:f0: 4d:a4:2f:de:4c:fd:90:c0:3e:8a:21:15:39:2b:25: 38:e5:0a:38:63:cd:72:a3:33:c1:a2:63:d7:b6:e5: f6:d8:34:f9:01:eb:34:85:66:18:df:3f:66:38:a1: a7:8b:58:b3:51:79:fb:3a:d4:38:bc:93:10:a5:67: e0:5b:f9:3a:09:5a:09:d7:85:d9:ef:f6:08:6b:83: 50:f9:8d:6e:e5:c7:f1:b6:0e:5a:b3:61:43:0a:91: fc:86:d3:99:f4:c7:b5:fc:68:72:e6:e3:54:57:1e: 4f:ec:82:cd:d6:ff:2b:d4:f3:99:c0:ff:4f:e8:a0: 24:4a:76:d9:c6:37:7c:7b:34:7e:d6:4f:1a:19:07: 5a:05:e4:f8:cd:2c:ca:6b:2c:cb:cc:b1:0e:e9:f0: e5:9d:87:2e:11:9c:e8:fc:09:8f:be:42:e9:11:d4: 58:15:1d:20:da:fe:7a:71:85:39:e9:a6:e0:d9:b0: 40:fa:52:6d:e6:ad:ca:41:52:07:4f:83:15:1b:86: b4:18:a4:4e:15:17:26:8b:0d:13:27:e7:da:70:6b: 27:99:27:d8:f8:4f:cd:9a:f7:1c:3a:51:5d:62:46: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EA:6A:D0:30:62:7F:00:C7:9E:F0:F9:7B:3F:84:51:B0:9B:93:78 X509v3 Authority Key Identifier: keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:1a:92:88:94:65:5d:cb:d0:eb:48:38:9a:5b:2d:08:27:09: b2:fe:bc:34:f1:bb:d4:0e:08:88:8d:09:21:19:5c:78:1b:54: a4:75:fb:db:46:4c:db:bb:6c:32:11:8c:88:37:f6:c2:33:5c: e7:ef:34:4d:33:5f:5e:01:c6:56:19:60:31:22:51:b8:cc:7d: 3e:ec:47:25:f8:48:76:15:21:44:4c:51:38:e6:92:4b:1e:59: 49:52:2e:ff:6d:a8:ef:d8:b8:9d:bc:27:5c:0f:75:05:ca:87: a0:59:fc:9b:39:7b:cf:48:e1:f6:43:89:49:e9:1e:aa:e4:aa: 51:67:59:84:bc:de:3c:e5:f9:f8:a3:58:63:e3:7c:14:1a:62: da:7f:47:97:65:a7:61:fb:6a:7e:c3:2c:6a:90:18:16:fd:ee: 35:32:d5:28:f8:ad:18:a2:36:37:64:ea:a6:fb:83:e6:75:f7: 6c:3f:28:fc:b0:0d:6d:0f:ee:f6:eb:2f:cd:41:3a:94:14:cd: 69:ec:59:d7:88:cb:21:82:65:f5:9e:92:cb:95:e4:65:df:2a: 13:cb:5f:44:e2:bd:8b:3d:41:78:d0:e9:92:2b:3d:3e:b3:ad: 46:45:12:07:1d:54:58:82:4d:05:fe:ec:c6:d8:c8:57:66:80: da:33:e8:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5 MTNENDE5RTMwHhcNMjUwNDI4MTkzMjU4WhcNMjUwNTA1MTkzMjU4WjAYMRYwFAYD VQQDEw02ODBmZDdlYi0xYTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmstyrIJGodK0vk0dVvOtP3VXl8RxMf5J1M2RPBNpC/eTP2QwD6KIRU5KyU4 5Qo4Y81yozPBomPXtuX22DT5Aes0hWYY3z9mOKGni1izUXn7OtQ4vJMQpWfgW/k6 CVoJ14XZ7/YIa4NQ+Y1u5cfxtg5as2FDCpH8htOZ9Me1/Ghy5uNUVx5P7ILN1v8r 1POZwP9P6KAkSnbZxjd8ezR+1k8aGQdaBeT4zSzKayzLzLEO6fDlnYcuEZzo/AmP vkLpEdRYFR0g2v56cYU56abg2bBA+lJt5q3KQVIHT4MVG4a0GKROFRcmiw0TJ+fa cGsnmSfY+E/NmvccOlFdYkaITQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLqatAw Yn8Ax57w+Xs/hFGwm5N4MB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5 RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn MlFKX3praGs4bXlSUFVHZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpGpKIlGVdy9DrSDiaWy0IJwmy/rw08bvUDgiIjQkhGVx4G1Skdfvb Rkzbu2wyEYyIN/bCM1zn7zRNM19eAcZWGWAxIlG4zH0+7Ecl+Eh2FSFETFE45pJL HllJUi7/bajv2LidvCdcD3UFyoegWfybOXvPSOH2Q4lJ6R6q5KpRZ1mEvN485fn4 o1hj43wUGmLaf0eXZadh+2p+wyxqkBgW/e41MtUo+K0YojY3ZOqm+4PmdfdsPyj8 sA1tD+726y/NQTqUFM1p7FnXiMshgmX1npLLleRl3yoTy19E4r2LPUF40OmSKz0+ s61GRRIHHVRYgk0F/uzG2MhXZoDaM+jR -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:48 2025 by rpki-client on console.sobornost.net