$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft File: YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json) Hash identifier: QMQxkiSPrP9hTjZhLHn0DlE3GUzYBbaEA1Wd85NSbRk= Subject key identifier: C5:23:81:D4:2B:E1:59:CB:62:D0:95:CE:2D:C2:3C:71:8A:9A:43:42 Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF Certificate issuer: /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Certificate serial: 0752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft Manifest number: 0744 Signing time: Thu 24 Apr 2025 21:30:10 +0000 Manifest this update: Thu 24 Apr 2025 21:30:10 +0000 Manifest next update: Thu 01 May 2025 21:30:10 +0000 Files and hashes: 1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: T3ii1COFMQpcEq7AIbbKruXsDByIS99oiMWTZteexSM=) 2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: FIzrdEMOv1fIZmcPJP3FzubQvP1+SNQPr2X+yXFsJHc=) 3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: jLETSgP+BBiNgHQWnELyI/5SSWT6c6N4U6vnmqcVGjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF Validity Not Before: Apr 24 21:30:10 2025 GMT Not After : May 1 21:30:10 2025 GMT Subject: CN=680aad62-d5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:16:ba:97:f8:13:35:0e:83:26:f2:5a:35:29: e8:22:d6:3e:8a:47:ff:6e:ec:f7:27:53:13:b3:c1: 39:2d:d8:07:c1:74:d6:f2:cd:4c:50:4a:05:09:40: a8:9c:66:f0:73:b9:83:56:d6:89:49:41:fa:cb:08: 6f:5d:bd:4c:9d:70:71:e8:41:d8:eb:58:3a:9e:57: 9b:5e:6a:ce:ee:79:de:6a:1d:84:53:4a:d9:47:ca: 53:61:61:65:e4:e4:b5:d7:54:93:76:45:ca:0a:76: 03:62:8c:36:42:2a:8a:0a:34:2b:f0:88:5f:0e:98: ad:0e:6f:4d:3f:f3:e9:22:be:3f:4d:8a:31:7b:28: 37:53:c3:ea:50:eb:8a:2d:02:ea:b3:97:22:57:e7: 6e:f8:e9:79:76:70:ee:6b:42:87:c4:3b:1c:a5:70: c8:e0:df:fe:6d:ba:c0:5e:43:52:a2:ea:e3:f0:69: 55:41:ad:1d:ba:13:2d:87:47:0a:eb:38:32:f8:3f: c4:c9:0a:2b:1d:77:9a:ba:69:4c:5a:fe:d0:0d:87: ae:50:b2:25:f6:05:81:ee:aa:91:8d:d2:93:b8:83: 12:aa:65:78:8a:48:c8:99:de:47:ff:05:6b:b8:20: d3:2f:a3:43:1b:e8:03:0f:a5:b8:f2:a4:75:ac:28: 73:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:23:81:D4:2B:E1:59:CB:62:D0:95:CE:2D:C2:3C:71:8A:9A:43:42 X509v3 Authority Key Identifier: keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:15:2a:b6:c8:47:4b:47:f2:97:c4:cc:82:3e:b1:83:80:70: a0:9e:17:98:00:1f:61:84:5f:82:ea:8f:8c:d5:d7:e8:4c:b6: f6:c6:af:96:d2:5a:f3:7f:f4:c3:6a:06:88:e4:92:54:fa:60: 2e:21:ea:c8:a4:ca:ce:e9:f7:d2:1c:c6:d5:a8:9c:33:81:f7: 39:34:e4:43:45:c6:4c:d3:a6:f7:f1:7e:75:54:f6:bc:d1:c8: 81:ee:79:b4:5e:df:63:da:59:b4:d8:a4:7f:2c:4a:8c:44:52: d3:68:43:30:d8:e4:c2:c1:eb:ee:49:2b:bc:11:63:f4:69:bb: 84:2a:3b:a6:b2:9f:da:c8:24:e1:f8:3e:7c:17:fd:97:48:6d: b0:30:7e:b5:ac:b7:91:65:51:4d:4c:43:53:3d:40:1d:bb:bc: 7e:fe:97:44:52:2c:ef:3c:7d:c2:7d:6c:b3:1d:77:76:8e:c7: 28:3f:b8:a3:ae:7f:a2:16:79:31:b5:99:57:28:12:7c:b6:67: ad:f9:6d:e3:7a:f3:00:ee:f9:41:1b:28:66:b8:05:d9:c1:e6: cd:67:c2:94:da:3a:db:48:37:2e:fe:58:6a:61:fc:6e:2b:34: 5e:e4:2b:78:1b:4b:a3:89:88:f9:69:74:a5:b6:eb:87:f1:12: 5a:89:2d:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDYzMjkzMDQxMTlGMUE0N0Y1RDA2NDBCMkRGNzVERUYx RjY0QzdCQUYwHhcNMjUwNDI0MjEzMDEwWhcNMjUwNTAxMjEzMDEwWjAYMRYwFAYD VQQDEw02ODBhYWQ2Mi1kNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxa6l/gTNQ6DJvJaNSnoItY+ikf/buz3J1MTs8E5LdgHwXTW8s1MUEoFCUCo nGbwc7mDVtaJSUH6ywhvXb1MnXBx6EHY61g6nlebXmrO7nneah2EU0rZR8pTYWFl 5OS111STdkXKCnYDYow2QiqKCjQr8IhfDpitDm9NP/PpIr4/TYoxeyg3U8PqUOuK LQLqs5ciV+du+Ol5dnDua0KHxDscpXDI4N/+bbrAXkNSourj8GlVQa0duhMth0cK 6zgy+D/EyQorHXeaumlMWv7QDYeuULIl9gWB7qqRjdKTuIMSqmV4ikjImd5H/wVr uCDTL6NDG+gDD6W48qR1rChz/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUjgdQr 4VnLYtCVzi3CPHGKmkNCMB8GA1UdIwQYMBaAFGMpMEEZ8aR/XQZAst913vH2THuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84RkU3QThCODI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBIOWRCa0N5MzNYZThmWk1l NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1l5a3dRUm54cEg5ZEJrQ3kzM1hlOGZaTWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84RkU3QThCODI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9ZeWt3UVJueHBI OWRCa0N5MzNYZThmWk1lNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBFSq2yEdLR/KXxMyCPrGDgHCgnheYAB9hhF+C6o+M1dfoTLb2xq+W 0lrzf/TDagaI5JJU+mAuIerIpMrO6ffSHMbVqJwzgfc5NORDRcZM06b38X51VPa8 0ciB7nm0Xt9j2lm02KR/LEqMRFLTaEMw2OTCwevuSSu8EWP0abuEKjumsp/ayCTh +D58F/2XSG2wMH61rLeRZVFNTENTPUAdu7x+/pdEUizvPH3CfWyzHXd2jscoP7ij rn+iFnkxtZlXKBJ8tmet+W3jevMA7vlBGyhmuAXZwebNZ8KU2jrbSDcu/lhqYfxu KzRe5Ct4G0ujiYj5aXSltuuH8RJaiS3j -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:14 2025 by rpki-client on console.sobornost.net