$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft File: cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json) Hash identifier: tNWRusxnZOmb7AzPNcR6YnWpPa1SxHUUiQl1R3ieqDI= Subject key identifier: 37:B0:D7:02:4C:54:AE:47:6E:DB:12:A4:0D:55:0B:21:9E:AE:7C:C3 Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 Certificate issuer: /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft Manifest number: 0599 Signing time: Sat 26 Apr 2025 22:52:33 +0000 Manifest this update: Sat 26 Apr 2025 22:52:32 +0000 Manifest next update: Sat 03 May 2025 22:52:32 +0000 Files and hashes: 1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: 1brGCc2OHDbg7Q9ev6izfTdZtFxOgc1c1YtwHzW+PCM=) 2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: CjCSmslBUSukL+VQeriKJzpmD5FpwHuT7xL5fJExCAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741 Validity Not Before: Apr 26 22:52:32 2025 GMT Not After : May 3 22:52:32 2025 GMT Subject: CN=680d63b1-a991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:18:7b:f8:17:57:02:c4:20:03:ce:3e:eb: de:9b:40:d4:44:b2:4e:89:bd:3e:8e:1a:05:37:0d: 47:5b:42:35:31:c4:3c:6f:69:7f:5f:9c:df:7c:48: 11:55:ba:0a:f0:6f:85:0f:55:85:b7:79:a0:3b:f2: fb:9a:13:fb:ca:5a:a1:86:38:8a:f5:2f:68:7b:c5: 96:f7:08:fb:de:6f:0a:ba:a8:ae:e4:1a:16:93:21: 42:da:11:22:62:fb:74:76:5b:69:86:58:da:5e:0e: db:cd:e9:5c:4b:9d:fc:a9:a1:04:4f:f8:81:bd:48: 97:6b:72:77:79:bd:67:9a:02:f6:51:6d:da:83:52: 27:05:28:f3:08:f8:be:5c:4b:7d:25:04:be:68:e9: 51:99:af:6f:e5:bb:58:f7:c9:d7:23:68:ef:d8:2f: 0b:b2:fb:02:54:f3:14:bf:c1:4e:9c:19:25:1c:0a: ac:98:38:32:33:f7:09:a5:dc:19:1f:d9:93:6d:69: 8c:08:2a:92:c1:4c:e0:75:14:49:75:7f:e1:00:54: 8b:d0:71:9a:c6:21:ac:49:2e:9b:ad:13:96:04:7d: f6:eb:b7:67:a5:d6:31:b0:5f:f4:09:80:fe:96:a6: c6:c1:36:ff:93:a8:43:6b:51:bf:82:70:7d:80:ff: a0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B0:D7:02:4C:54:AE:47:6E:DB:12:A4:0D:55:0B:21:9E:AE:7C:C3 X509v3 Authority Key Identifier: keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:0f:6f:05:89:22:00:cf:b5:87:7e:4c:43:cf:5e:a1:55:7a: 36:fb:e2:f5:25:aa:c7:a3:39:64:1c:92:ff:87:a5:a9:fc:87: fb:15:8e:4f:59:c6:fa:21:3a:28:97:be:0d:37:04:65:a0:27: 81:6b:2b:c2:cc:7e:29:0e:bb:95:92:2b:1d:f9:5e:22:03:fe: 36:9d:4d:15:0b:df:62:95:ab:94:b5:6b:b3:fa:fc:83:51:52: a2:02:67:cf:27:9b:14:82:7f:bb:b0:c7:f2:05:02:3e:a7:66: df:fc:c9:90:79:34:67:35:55:e9:9f:25:52:4a:10:5f:97:90: 1e:b7:e1:5c:67:33:ed:fd:32:46:a3:34:aa:54:96:ba:2f:df: 6b:28:5e:05:47:9d:a1:a3:8f:e0:1e:9f:98:2c:1e:b1:a5:82: a5:94:44:5b:4e:98:44:d1:f5:f9:c8:38:58:d4:77:07:94:51: de:b1:6d:04:50:2c:89:4a:5b:a6:e2:0c:b7:bb:16:a3:64:9c: 3f:2c:e9:f1:20:af:17:9f:45:16:9a:2d:1b:78:5a:4a:77:a6: d2:37:35:ab:c2:1d:98:2c:2a:81:ba:45:68:68:d4:33:5c:60: b0:ec:41:0b:23:bf:9a:55:46:d6:9c:5a:1a:3d:5d:02:82:f5: b1:57:fe:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw NjVGMTQ3NDEwHhcNMjUwNDI2MjI1MjMyWhcNMjUwNTAzMjI1MjMyWjAYMRYwFAYD VQQDEw02ODBkNjNiMS1hOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC4Ye/gXVwLEIAPOPuvem0DURLJOib0+jhoFNw1HW0I1McQ8b2l/X5zffEgR VboK8G+FD1WFt3mgO/L7mhP7ylqhhjiK9S9oe8WW9wj73m8Kuqiu5BoWkyFC2hEi Yvt0dltphljaXg7bzelcS538qaEET/iBvUiXa3J3eb1nmgL2UW3ag1InBSjzCPi+ XEt9JQS+aOlRma9v5btY98nXI2jv2C8LsvsCVPMUv8FOnBklHAqsmDgyM/cJpdwZ H9mTbWmMCCqSwUzgdRRJdX/hAFSL0HGaxiGsSS6brROWBH3267dnpdYxsF/0CYD+ lqbGwTb/k6hDa1G/gnB9gP+gAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDew1wJM VK5HbtsSpA1VCyGernzDMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1 dld2clJJYXRSblFHWHhSMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgD28FiSIAz7WHfkxDz16hVXo2++L1JarHozlkHJL/h6Wp/If7FY5P Wcb6ITool74NNwRloCeBayvCzH4pDruVkisd+V4iA/42nU0VC99ilauUtWuz+vyD UVKiAmfPJ5sUgn+7sMfyBQI+p2bf/MmQeTRnNVXpnyVSShBfl5Aet+FcZzPt/TJG ozSqVJa6L99rKF4FR52ho4/gHp+YLB6xpYKllERbTphE0fX5yDhY1HcHlFHesW0E UCyJSlum4gy3uxajZJw/LOnxIK8Xn0UWmi0beFpKd6bSNzWrwh2YLCqBukVoaNQz XGCw7EELI7+aVUbWnFoaPV0CgvWxV/66 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net