$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json) Hash identifier: x7Kl0r+RwnAWQMlYjmAHGz017jt7gPEtcaKtVdWqvVc= Subject key identifier: 06:2E:4E:A6:A1:BC:E2:FB:4D:DF:FA:1B:A9:B3:03:64:8B:19:9B:64 Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft Manifest number: 012F Signing time: Sun 27 Apr 2025 03:31:13 +0000 Manifest this update: Sun 27 Apr 2025 03:31:13 +0000 Manifest next update: Sun 04 May 2025 03:31:12 +0000 Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: SxGd6wnRM4J+ZniIR80Bv6BALHTAJj97UkaatzJv0Tg=) 2: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: 9h3davUQ9pNDA3U7SYojAK+YEhrIBkhT56ukToleizY=) 3: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: DgTHE1vd+LuLJ/6bYp2I4wVbGI057+J0uGiHNmi5Ok4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286 Validity Not Before: Apr 27 03:31:13 2025 GMT Not After : May 4 03:31:12 2025 GMT Subject: CN=680da501-bff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0e:dc:31:e2:3b:e0:88:33:45:e8:13:c9:bc: 8c:ca:96:f1:23:20:45:b6:6c:fd:fc:68:0d:94:2b: 8e:8f:c3:cf:2e:65:f6:28:32:cc:e8:e1:19:1f:ec: d1:0f:08:db:5c:a0:cd:d6:ba:1f:1b:c4:6c:2f:b4: 66:8b:1c:56:90:43:4d:d5:80:07:02:43:20:36:84: 14:3f:76:ee:16:90:7a:76:3e:fc:41:01:2a:0f:26: 34:32:37:e9:0e:dc:66:01:1d:54:02:20:07:06:bd: 98:ab:c6:ee:57:07:b6:56:2e:b6:dc:bd:fe:cb:db: 8a:3c:85:3f:50:1e:5a:47:78:72:6b:9b:d7:b6:c2: fc:a6:95:6b:79:a1:cf:7a:1c:12:ac:99:73:0a:6b: 28:64:00:41:9f:64:34:fa:3c:78:10:ac:2f:05:ee: 0f:49:a1:45:e8:ec:2e:86:b2:ba:69:1e:ef:70:2a: 2c:da:ff:24:f3:27:b5:1b:c3:72:e6:2b:7d:8b:1d: 13:92:c2:3c:ce:f3:96:0b:0c:f0:00:e0:d7:94:e5: e3:2f:20:5b:e7:55:45:ab:7b:0c:ba:bb:5c:ea:61: de:90:dc:d4:67:85:80:8e:f8:fe:ff:cd:ee:00:58: 75:17:db:78:8a:04:53:de:99:7c:10:4e:5d:d1:2d: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2E:4E:A6:A1:BC:E2:FB:4D:DF:FA:1B:A9:B3:03:64:8B:19:9B:64 X509v3 Authority Key Identifier: keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:11:e3:eb:fb:d8:94:12:62:8f:d7:68:85:15:29:02:44:1a: d9:b7:43:a7:3e:d1:59:6a:eb:39:df:dc:a4:d7:0c:76:93:bf: 4e:38:d5:ef:f9:36:ba:b7:bf:65:92:d9:a3:3f:ec:8c:9e:15: 66:1c:dc:93:76:8c:be:0b:9e:81:0d:13:e7:ea:08:44:ee:9e: e5:b4:08:04:21:1f:52:0f:5b:cd:7d:be:2d:81:82:8f:e1:bd: 4a:4b:09:ee:12:41:2a:93:02:bf:12:57:7a:c3:b9:72:ad:36: f0:5d:7d:c5:67:15:f6:4f:1c:d9:5d:ae:1f:31:59:72:20:1b: a1:e5:f1:f1:8c:ea:e8:a3:b0:be:da:1a:1f:cb:c6:71:af:7c: 71:05:6b:b7:f9:de:75:8f:b7:3d:b3:f7:c0:3a:04:d5:c4:09: 43:16:38:30:a2:3c:15:39:4c:a6:07:e6:ea:94:b4:5f:9c:e4: 64:04:49:57:32:de:de:5c:1f:18:67:4b:cd:b2:97:36:62:b8: eb:1f:51:6d:e6:16:4a:02:c0:6d:b0:b9:51:e5:fc:3b:96:23: 37:3e:18:ef:b6:6d:08:cd:33:42:7a:5c:ad:f1:17:37:ca:1f: aa:16:9f:bb:f0:b4:7f:9d:ab:2a:50:b2:2c:15:e8:57:af:86: d3:77:95:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE QUE2Q0YyODYwHhcNMjUwNDI3MDMzMTEzWhcNMjUwNTA0MDMzMTEyWjAYMRYwFAYD VQQDEw02ODBkYTUwMS1iZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxg7cMeI74IgzRegTybyMypbxIyBFtmz9/GgNlCuOj8PPLmX2KDLM6OEZH+zR DwjbXKDN1rofG8RsL7RmixxWkENN1YAHAkMgNoQUP3buFpB6dj78QQEqDyY0Mjfp DtxmAR1UAiAHBr2Yq8buVwe2Vi623L3+y9uKPIU/UB5aR3hya5vXtsL8ppVreaHP ehwSrJlzCmsoZABBn2Q0+jx4EKwvBe4PSaFF6OwuhrK6aR7vcCos2v8k8ye1G8Ny 5it9ix0TksI8zvOWCwzwAODXlOXjLyBb51VFq3sMurtc6mHekNzUZ4WAjvj+/83u AFh1F9t4igRT3pl8EE5d0S0y8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYuTqah vOL7Td/6G6mzA2SLGZtkMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4 b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8EePr+9iUEmKP12iFFSkCRBrZt0OnPtFZaus539yk1wx2k79OONXv +Ta6t79lktmjP+yMnhVmHNyTdoy+C56BDRPn6ghE7p7ltAgEIR9SD1vNfb4tgYKP 4b1KSwnuEkEqkwK/Eld6w7lyrTbwXX3FZxX2TxzZXa4fMVlyIBuh5fHxjOroo7C+ 2hofy8Zxr3xxBWu3+d51j7c9s/fAOgTVxAlDFjgwojwVOUymB+bqlLRfnORkBElX Mt7eXB8YZ0vNspc2YrjrH1Ft5hZKAsBtsLlR5fw7liM3Phjvtm0IzTNCelyt8Rc3 yh+qFp+78LR/nasqULIsFehXr4bTd5Vw -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net