$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: HQZmm/etwxxpAG/gHRk/I49AxK6VhlOkUIAhBJEhX48= Subject key identifier: 2A:9A:7B:E2:F4:E0:76:A5:59:65:07:FE:9F:70:85:91:6C:C9:28:40 Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 011B Signing time: Fri 25 Apr 2025 03:56:00 +0000 Manifest this update: Fri 25 Apr 2025 03:55:59 +0000 Manifest next update: Fri 02 May 2025 03:55:59 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: UyP4ijrImlXGHjx+FCjzl6rbvZcR/YbMYBD+NonZ+nQ=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: voOu3FS6atcTzQMFzUe36XFmwRTAVJhuDBd+mVShCxg=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: BA5CliOHfNpPWNOYw+bi2ZaU/a9tMNZNL0MSCuu6uM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: Apr 25 03:55:59 2025 GMT Not After : May 2 03:55:59 2025 GMT Subject: CN=680b07cf-9a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:77:b4:7d:07:57:15:b6:c1:01:11:46:db:aa: 93:d2:7a:02:69:00:c5:38:78:80:a7:c1:1a:f8:59: 81:2e:f5:4c:22:87:d6:af:6f:ca:08:d2:03:30:e2: ad:34:c3:98:d2:b8:10:f7:c8:91:a9:ce:ad:9e:2d: 36:44:da:3d:bd:46:01:84:39:61:13:e2:f7:6c:9d: fd:00:58:c1:83:46:4d:26:59:3c:67:26:6d:3a:51: e0:b6:cb:91:4c:93:52:5d:c6:ef:cf:2d:bc:c4:e6: 84:c9:1a:9b:1d:5a:cf:10:1a:83:76:5c:c0:b7:e1: e4:a1:86:c3:34:4b:72:ba:7d:f7:d9:82:aa:e9:69: 92:30:51:da:ce:dc:75:b4:9b:7c:0b:bd:55:46:0b: ac:80:e8:67:f9:55:50:92:ce:fa:31:a1:86:af:fc: 91:4d:78:ef:02:dc:64:30:fa:01:35:b1:8e:de:7c: 9f:0b:b8:03:f1:84:ee:7b:23:ea:1a:1a:0b:1f:f0: c3:2a:16:56:ab:69:c5:d7:6c:b5:e9:7e:c6:52:54: 01:9b:d6:03:a8:47:1d:89:cf:53:30:96:e3:b4:ed: c9:b3:88:05:c6:af:e0:46:6b:37:7c:29:8d:a4:e0: 52:18:e2:36:50:d2:f2:e4:8f:24:a8:6a:a5:f4:19: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:7B:E2:F4:E0:76:A5:59:65:07:FE:9F:70:85:91:6C:C9:28:40 X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:63:ce:e9:75:fc:8c:60:0d:33:e7:60:00:45:5a:74:22:aa: 78:c1:6d:b8:e9:7a:e3:33:e2:fe:5e:a1:73:91:66:44:39:b7: be:40:41:ed:e0:c2:e0:9b:1e:5f:e3:17:02:46:85:3d:d0:c3: 35:7e:82:29:e2:64:12:92:40:ce:6e:ca:ce:66:84:bc:d6:7b: 49:95:0c:53:38:6b:a0:d8:b1:5a:bf:e7:eb:16:49:2e:fe:9f: bb:42:6f:f2:35:0a:04:84:cf:e9:26:85:49:0e:40:f6:69:50: ed:54:6f:54:2d:67:a6:1e:c4:55:a3:e1:5e:c0:dc:ff:03:48: cf:b9:3f:d6:d0:e9:33:b9:c8:4a:31:69:9e:de:cc:1b:c1:73: e3:15:ed:f8:21:be:30:09:59:e9:a4:25:6d:58:4f:7e:d8:3c: a3:f0:32:a7:31:fd:3c:54:6b:cd:2d:1b:6e:b4:79:75:d4:56: 7b:82:f6:92:e6:0b:68:4c:53:72:57:2c:a5:13:b1:b6:50:1b: bb:41:66:fa:03:82:ee:3a:a7:4b:6a:54:65:85:14:d8:dd:71: 3d:37:d2:e8:56:40:bc:fb:e3:f5:37:18:33:f8:fd:13:21:aa: 09:50:45:b1:d0:6c:1b:96:3d:f0:70:b4:6b:e0:0a:47:fe:81: 57:a5:57:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjUwNDI1MDM1NTU5WhcNMjUwNTAyMDM1NTU5WjAYMRYwFAYD VQQDEw02ODBiMDdjZi05YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33e0fQdXFbbBARFG26qT0noCaQDFOHiAp8Ea+FmBLvVMIofWr2/KCNIDMOKt NMOY0rgQ98iRqc6tni02RNo9vUYBhDlhE+L3bJ39AFjBg0ZNJlk8ZyZtOlHgtsuR TJNSXcbvzy28xOaEyRqbHVrPEBqDdlzAt+HkoYbDNEtyun332YKq6WmSMFHaztx1 tJt8C71VRgusgOhn+VVQks76MaGGr/yRTXjvAtxkMPoBNbGO3nyfC7gD8YTueyPq GhoLH/DDKhZWq2nF12y16X7GUlQBm9YDqEcdic9TMJbjtO3Js4gFxq/gRms3fCmN pOBSGOI2UNLy5I8kqGql9BmqiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqae+L0 4HalWWUH/p9whZFsyShAMB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuY87pdfyMYA0z52AARVp0Iqp4wW246XrjM+L+XqFzkWZEObe+QEHt 4MLgmx5f4xcCRoU90MM1foIp4mQSkkDObsrOZoS81ntJlQxTOGug2LFav+frFkku /p+7Qm/yNQoEhM/pJoVJDkD2aVDtVG9ULWemHsRVo+FewNz/A0jPuT/W0OkzuchK MWme3swbwXPjFe34Ib4wCVnppCVtWE9+2Dyj8DKnMf08VGvNLRtutHl11FZ7gvaS 5gtoTFNyVyylE7G2UBu7QWb6A4LuOqdLalRlhRTY3XE9N9LoVkC8++P1Nxgz+P0T IaoJUEWx0Gwblj3wcLRr4ApH/oFXpVfy -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:13 2025 by rpki-client on console.sobornost.net