$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft File: JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json) Hash identifier: 7UGcmM3hlRFAidZgvFzy6xAoURaTKa31oKqyIi7pXsw= Subject key identifier: F1:AA:A8:54:2F:26:08:85:57:C6:35:BB:15:E6:9A:34:3D:DB:A9:CB Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 Certificate issuer: /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Certificate serial: 348F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft Manifest number: 470A Signing time: Mon 28 Apr 2025 14:21:00 +0000 Manifest this update: Mon 28 Apr 2025 14:20:59 +0000 Manifest next update: Mon 05 May 2025 14:20:59 +0000 Files and hashes: 1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: XJNWb9qPLqnJAYBGpdwkio6xZ2sQnXKQ9izGZVhBp7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13455 (0x348f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=272307B227936DB3EE3B6540602C32D958309F61 Validity Not Before: Apr 28 14:20:59 2025 GMT Not After : May 5 14:20:59 2025 GMT Subject: CN=680f8ecb-06c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c9:f0:ff:ec:6a:cf:3c:9f:8d:c9:a5:9d:fc: 08:43:77:cf:c7:2e:7d:b6:eb:5f:1a:df:55:e8:b4: 24:ce:88:48:37:5d:32:ca:ed:49:b2:53:aa:32:7d: 6e:0d:91:79:d9:f7:e2:7d:63:d9:54:f7:28:3c:29: cd:f3:3b:e0:20:4f:1d:4c:b4:d0:9f:0c:12:43:1b: b6:e5:3a:59:1f:16:ce:31:57:8a:0a:01:cf:1f:5d: f2:77:75:dd:b3:56:51:bd:49:13:dc:8a:b5:19:e6: 99:cb:41:53:d9:89:2d:76:b7:81:b2:6d:82:ec:43: f1:f8:e3:94:9a:5f:0e:84:0b:80:30:e8:c2:71:cb: 46:6d:a0:1a:8c:52:45:dc:08:55:4d:54:d3:e9:95: 4f:bc:7d:34:d4:42:96:3e:8c:eb:0d:6e:97:91:ba: 83:22:3c:ea:a9:6c:c4:9e:4e:36:16:ca:2e:1a:85: 2c:c9:74:bb:cd:9e:1b:3c:be:65:f8:20:1b:b6:5f: fe:2c:31:c5:30:ba:0e:6b:12:a4:e9:f1:bd:6c:2f: 48:b6:86:70:06:46:0f:ad:3e:00:6c:3a:18:87:76: 98:d5:3a:5f:fd:03:99:e4:e6:3d:4f:81:e4:2d:09: 72:cd:5d:fc:00:71:3e:f1:28:7d:f9:a2:53:c2:12: 85:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AA:A8:54:2F:26:08:85:57:C6:35:BB:15:E6:9A:34:3D:DB:A9:CB X509v3 Authority Key Identifier: keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ea:d7:69:e7:cf:ad:48:f0:b7:73:84:fa:74:38:67:09:c2: 4e:63:64:85:15:71:80:9d:d1:ae:dc:5d:ef:95:94:d2:0d:78: 0b:c3:60:2b:a0:2b:31:c3:a7:4a:c3:fa:b7:d4:0a:7e:21:ae: 22:34:65:c4:a4:a3:7b:01:bb:8f:e9:2b:e8:2a:38:b1:79:3a: b9:bb:cb:ee:3f:a5:2d:8e:25:c4:2a:e6:58:b8:4b:d4:64:be: 5b:90:70:69:53:1e:c6:77:13:a4:aa:a8:b0:54:d5:ce:ec:32: 99:ff:18:36:9b:c8:f3:dd:b1:1b:c8:1a:d7:98:01:63:d4:57: 2e:c7:50:0e:ec:38:b9:a7:89:f7:32:63:8e:a0:8f:d0:50:47: b3:43:44:57:3e:46:23:a6:e2:27:f3:f4:7d:ff:98:c5:15:bb: f5:49:b6:9d:dc:24:27:b9:b2:72:3b:a6:9a:bf:cf:f1:81:57: 65:c5:56:be:23:55:a3:ce:f2:a6:3d:89:fc:11:fe:34:a9:42: a7:9c:76:45:bd:91:a8:bf:55:be:ea:45:46:51:6a:cd:b2:bb: 96:d7:68:0b:63:0a:d6:1e:80:08:db:63:0c:76:2f:67:42:f7: b8:c5:64:82:9f:26:e5:4d:fd:2f:69:f4:3d:72:b4:c8:2a:9d: f0:d8:0b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDI3MjMwN0IyMjc5MzZEQjNFRTNCNjU0MDYwMkMzMkQ5 NTgzMDlGNjEwHhcNMjUwNDI4MTQyMDU5WhcNMjUwNTA1MTQyMDU5WjAYMRYwFAYD VQQDEw02ODBmOGVjYi0wNmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58nw/+xqzzyfjcmlnfwIQ3fPxy59tutfGt9V6LQkzohIN10yyu1JslOqMn1u DZF52ffifWPZVPcoPCnN8zvgIE8dTLTQnwwSQxu25TpZHxbOMVeKCgHPH13yd3Xd s1ZRvUkT3Iq1GeaZy0FT2YktdreBsm2C7EPx+OOUml8OhAuAMOjCcctGbaAajFJF 3AhVTVTT6ZVPvH001EKWPozrDW6XkbqDIjzqqWzEnk42FsouGoUsyXS7zZ4bPL5l +CAbtl/+LDHFMLoOaxKk6fG9bC9ItoZwBkYPrT4AbDoYh3aY1Tpf/QOZ5OY9T4Hk LQlyzV38AHE+8Sh9+aJTwhKF7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGqqFQv JgiFV8Y1uxXmmjQ926nLMB8GA1UdIwQYMBaAFCcjB7Ink22z7jtlQGAsMtlYMJ9h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJiUHVPMlZBWUN3eTJWZ3du MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0p5TUhzaWVUYmJQdU8yVkFZQ3d5MlZnd24yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJi UHVPMlZBWUN3eTJWZ3duMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA56tdp58+tSPC3c4T6dDhnCcJOY2SFFXGAndGu3F3vlZTSDXgLw2Ar oCsxw6dKw/q31Ap+Ia4iNGXEpKN7AbuP6SvoKjixeTq5u8vuP6UtjiXEKuZYuEvU ZL5bkHBpUx7GdxOkqqiwVNXO7DKZ/xg2m8jz3bEbyBrXmAFj1Fcux1AO7Di5p4n3 MmOOoI/QUEezQ0RXPkYjpuIn8/R9/5jFFbv1Sbad3CQnubJyO6aav8/xgVdlxVa+ I1WjzvKmPYn8Ef40qUKnnHZFvZGov1W+6kVGUWrNsruW12gLYwrWHoAI22MMdi9n Qve4xWSCnyblTf0vafQ9crTIKp3w2As3 -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net