$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft File: YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json) Hash identifier: X2UcrPwkB3hV13fq/7NyThi3MmiFPXHxs1dDlvQOerQ= Subject key identifier: EE:B8:48:34:EE:97:A7:0F:D5:65:17:78:62:DC:6B:6B:3B:EE:45:20 Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 Certificate issuer: /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Certificate serial: 1175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft Manifest number: 116C Signing time: Sat 26 Apr 2025 17:09:52 +0000 Manifest this update: Sat 26 Apr 2025 17:09:51 +0000 Manifest next update: Sat 03 May 2025 17:09:51 +0000 Files and hashes: 1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: X3Pw4YTFJVcn/1eJ16Nxw7WldV4kmdgaZmBo1ysy9vQ=) 2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: SB9Ipu4AFekvf7xWy+dJxrZfjpqZ4b1Xx/G1XVRpODY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4469 (0x1175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2 Validity Not Before: Apr 26 17:09:51 2025 GMT Not After : May 3 17:09:51 2025 GMT Subject: CN=680d135f-51bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:35:77:c7:50:7c:8e:de:50:64:5f:45:83: 4a:ff:34:3e:73:00:32:67:4b:ae:49:45:0a:57:99: 96:c2:46:86:08:90:5d:ee:c8:c4:80:d2:d7:a1:8b: ae:b6:b2:84:73:ec:5e:fe:bf:52:0b:3c:b8:88:92: 77:f0:11:51:e1:b6:e4:03:6d:75:ac:ca:a3:ff:6b: 5b:f4:c4:09:a9:d8:4c:9c:e7:b8:d7:4a:62:86:6f: 62:eb:ad:00:e4:8e:ea:91:29:1a:eb:aa:57:d1:aa: 19:4d:b0:ca:5a:eb:06:35:66:1b:34:04:a7:84:51: 12:81:c9:13:f4:27:ba:13:fa:78:b5:31:60:84:d3: 2c:2c:6e:84:12:3c:b3:e6:bd:e7:ec:18:b5:9a:4a: be:99:48:f8:d3:f5:b1:39:bf:d8:0f:c2:f6:c6:40: 16:12:58:31:6c:7b:7a:88:11:ae:50:e4:57:cb:8e: ac:17:8d:40:ee:b2:1a:d6:b5:9c:79:b9:dc:a0:27: 75:1c:ca:08:87:17:11:6f:90:16:bf:53:f2:56:aa: 54:e5:29:76:1d:d3:fa:97:d4:59:2a:53:b9:47:4f: 56:1a:e7:ca:d8:66:6e:2c:fc:5d:d5:10:eb:ab:78: 01:fe:10:38:bc:3b:e1:f0:01:8d:e0:3e:29:4c:b8: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B8:48:34:EE:97:A7:0F:D5:65:17:78:62:DC:6B:6B:3B:EE:45:20 X509v3 Authority Key Identifier: keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:45:6a:1d:05:4c:2d:ea:2b:25:b1:dc:e7:c4:8e:4c:71:a8: 07:b3:2a:32:38:1b:e3:eb:cd:5f:12:5d:24:81:90:13:4b:a3: f2:44:56:de:a3:1f:99:d5:0b:9d:36:ab:6e:85:d2:dd:5d:02: 0b:cf:6f:bc:91:d4:9a:f6:7e:a2:e0:e6:20:1f:a6:bb:b8:5f: cb:ea:98:53:f1:44:d6:63:fa:c8:05:b3:35:56:00:e4:48:7e: 69:03:08:d5:a6:40:18:d7:41:94:1d:92:96:b5:92:f5:1d:c0: 52:29:8d:92:14:8f:29:93:ba:ca:ec:fc:9f:55:ec:f8:1e:62: 17:8f:dd:4a:1a:35:ff:3e:07:5c:37:ed:0a:05:d8:f0:36:73: f3:e5:d9:a9:20:6b:7f:43:cf:57:d6:23:32:b1:bf:78:01:f1: 97:4b:f8:3c:05:04:f3:98:a4:50:6c:d7:12:56:ad:42:6b:34: 64:24:fe:84:f7:d8:f6:1a:d0:8d:cb:73:cd:cd:1b:ec:84:ea: a8:5e:ec:e7:e5:77:25:c0:a3:f3:96:b2:f9:35:b1:33:72:7e: 60:56:52:f3:13:b6:90:56:43:c5:4d:b6:33:19:58:08:2e:dc: c3:04:b3:fa:40:b8:81:19:73:60:98:d4:63:7c:47:66:fb:4e: 76:8e:43:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCMjUxMTAvBgNVBAUTKDYxQ0I5MDg1RjAyRkY4RkE0NUU3MzJGNTgwMzQwRjQy NDlFMDBDQTIwHhcNMjUwNDI2MTcwOTUxWhcNMjUwNTAzMTcwOTUxWjAYMRYwFAYD VQQDEw02ODBkMTM1Zi01MWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUg1d8dQfI7eUGRfRYNK/zQ+cwAyZ0uuSUUKV5mWwkaGCJBd7sjEgNLXoYuu trKEc+xe/r9SCzy4iJJ38BFR4bbkA211rMqj/2tb9MQJqdhMnOe410pihm9i660A 5I7qkSka66pX0aoZTbDKWusGNWYbNASnhFESgckT9Ce6E/p4tTFghNMsLG6EEjyz 5r3n7Bi1mkq+mUj40/WxOb/YD8L2xkAWElgxbHt6iBGuUORXy46sF41A7rIa1rWc ebncoCd1HMoIhxcRb5AWv1PyVqpU5Sl2HdP6l9RZKlO5R09WGufK2GZuLPxd1RDr q3gB/hA4vDvh8AGN4D4pTLjIHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO64SDTu l6cP1WUXeGLca2s77kUgMB8GA1UdIwQYMBaAFGHLkIXwL/j6Recy9YA0D0JJ4Ayi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0IyNS8yQzYwREZEOEZE QTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1QcEY1ekwxZ0RRUFFrbmdE S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ljdVFoZkF2LVBwRjV6TDFnRFFQUWtuZ0RLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0IyNS8yQzYwREZEOEZEQTUxMUU4ODg1OUMwNkJDNEY5QUUwMi9ZY3VRaGZBdi1Q cEY1ekwxZ0RRUFFrbmdES0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6RWodBUwt6islsdznxI5McagHsyoyOBvj681fEl0kgZATS6PyRFbe ox+Z1QudNqtuhdLdXQILz2+8kdSa9n6i4OYgH6a7uF/L6phT8UTWY/rIBbM1VgDk SH5pAwjVpkAY10GUHZKWtZL1HcBSKY2SFI8pk7rK7PyfVez4HmIXj91KGjX/Pgdc N+0KBdjwNnPz5dmpIGt/Q89X1iMysb94AfGXS/g8BQTzmKRQbNcSVq1CazRkJP6E 99j2GtCNy3PNzRvshOqoXuzn5XclwKPzlrL5NbEzcn5gVlLzE7aQVkPFTbYzGVgI LtzDBLP6QLiBGXNgmNRjfEdm+052jkNQ -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:02 2025 by rpki-client on console.sobornost.net