$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: zyAfkVHoV0O7HEIF+hj53uG6GPBc2puW5h74mif9cP4= Subject key identifier: 8A:59:B7:6E:CD:9D:AC:DB:66:7E:D0:11:28:B7:CE:74:F2:C4:97:DE Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 094F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 093D Signing time: Mon 28 Apr 2025 20:41:30 +0000 Manifest this update: Mon 28 Apr 2025 20:41:29 +0000 Manifest next update: Mon 05 May 2025 20:41:29 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: Elyr06vju80QOqh1BYhO86njL2VKriz0BJO8FSCbuoc=) 2: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: EhRN/uooWnaf/BKx+rG8uVpZETp6E4AIAKPHufyI6h0=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: AlqDLojfq/3K+BcDiv2qbdt3OzeIJeW5BYNJ45Km+FU=) 4: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: lALAU96uBUqRbrTkDfaqUsPuADDi3BxVAQqhmKJyzX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Apr 28 20:41:29 2025 GMT Not After : May 5 20:41:29 2025 GMT Subject: CN=680fe7f9-9ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:11:dc:1e:24:72:04:46:12:87:34:92:a8: fa:79:d0:12:d9:53:55:72:bd:e6:46:0f:9d:db:32: 5b:4f:2c:de:2c:37:9b:05:6b:b2:d2:99:12:73:21: e9:44:27:53:0c:2b:dc:7a:7a:99:2b:f2:26:c2:4e: 1a:4d:52:a1:c1:25:37:47:6e:a1:ac:ba:24:97:b8: 37:08:f5:d7:7c:b9:fb:c3:1a:fe:06:fe:cd:73:9a: 0d:b1:7f:e0:b4:f3:9b:eb:65:7c:2a:0e:67:e7:fa: c6:0e:56:73:df:eb:4e:9c:ff:90:69:68:82:17:11: 0c:07:1b:99:10:ea:79:9e:2a:49:83:7c:b9:b8:28: f2:da:39:78:8a:e1:fd:94:52:31:ab:b8:b4:c9:84: f0:e5:4c:30:e8:9a:ae:5e:cb:94:e9:c2:22:29:21: e0:07:eb:63:e2:46:b7:ee:72:12:7e:9b:37:e2:25: 9e:32:72:30:ed:85:31:86:45:ea:ca:32:75:bf:21: d2:b8:cb:6f:10:6e:d9:36:33:52:62:fc:4c:bf:2f: 99:dc:8a:fc:75:16:8b:1e:62:c4:2c:b8:19:57:75: ea:18:7a:98:7b:87:ee:cd:3c:a1:8d:cb:ab:5e:27: ce:ee:d5:df:c7:0e:ba:74:e9:20:f2:df:33:62:5e: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:59:B7:6E:CD:9D:AC:DB:66:7E:D0:11:28:B7:CE:74:F2:C4:97:DE X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a8:30:36:3b:8b:7b:65:47:41:3b:f3:11:23:7f:e5:3c:6c: cc:3d:eb:fc:68:2f:bc:71:e0:38:0c:8e:ba:ac:68:37:a8:64: 16:24:30:bc:44:af:e3:3a:3a:e9:76:b0:81:c3:ee:ca:a8:a9: 45:88:fb:f7:b2:07:53:1e:33:fe:3b:23:42:b4:9e:9c:93:55: 48:11:d8:df:24:99:92:0a:8b:f8:6e:27:7e:b0:1c:36:43:95: a3:4b:cb:38:2f:99:93:80:b6:80:bd:70:7a:e5:03:5d:6f:1f: 85:ec:07:86:67:2e:28:2f:77:05:95:1c:f6:aa:c4:d5:54:57: 2e:95:4e:e9:b3:53:dc:09:7b:57:dc:30:e7:9b:9a:67:2d:b2: e0:35:ee:7f:b4:ce:89:f4:a7:3d:1d:7e:fd:a6:24:bd:d4:1f: d5:55:77:fc:38:80:14:62:13:14:bc:71:47:ec:29:87:db:65: e4:b6:06:4b:a7:10:a4:d9:f0:68:16:2b:96:d7:bc:6e:65:08: 93:1b:86:e4:d2:08:c7:72:08:d3:3c:9f:4f:f7:84:06:02:a4: 9b:53:f2:15:b8:53:72:71:4d:cc:be:11:1e:c7:06:76:8d:fc: 27:fe:d9:00:c6:69:6e:94:a8:cd:5e:23:80:79:51:10:bf:41: a5:9c:e1:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjUwNDI4MjA0MTI5WhcNMjUwNTA1MjA0MTI5WjAYMRYwFAYD VQQDEw02ODBmZTdmOS05Y2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3sR3B4kcgRGEoc0kqj6edAS2VNVcr3mRg+d2zJbTyzeLDebBWuy0pkScyHp RCdTDCvcenqZK/Imwk4aTVKhwSU3R26hrLokl7g3CPXXfLn7wxr+Bv7Nc5oNsX/g tPOb62V8Kg5n5/rGDlZz3+tOnP+QaWiCFxEMBxuZEOp5nipJg3y5uCjy2jl4iuH9 lFIxq7i0yYTw5Uww6JquXsuU6cIiKSHgB+tj4ka37nISfps34iWeMnIw7YUxhkXq yjJ1vyHSuMtvEG7ZNjNSYvxMvy+Z3Ir8dRaLHmLELLgZV3XqGHqYe4fuzTyhjcur XifO7tXfxw66dOkg8t8zYl59UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpZt27N nazbZn7QESi3znTyxJfeMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvqDA2O4t7ZUdBO/MRI3/lPGzMPev8aC+8ceA4DI66rGg3qGQWJDC8 RK/jOjrpdrCBw+7KqKlFiPv3sgdTHjP+OyNCtJ6ck1VIEdjfJJmSCov4bid+sBw2 Q5WjS8s4L5mTgLaAvXB65QNdbx+F7AeGZy4oL3cFlRz2qsTVVFculU7ps1PcCXtX 3DDnm5pnLbLgNe5/tM6J9Kc9HX79piS91B/VVXf8OIAUYhMUvHFH7CmH22XktgZL pxCk2fBoFiuW17xuZQiTG4bk0gjHcgjTPJ9P94QGAqSbU/IVuFNycU3MvhEexwZ2 jfwn/tkAxmlulKjNXiOAeVEQv0GlnOGY -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:57 2025 by rpki-client on console.sobornost.net