$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json) Hash identifier: kgTIByNQslZww4JbaIPvSbAeY9qarkEYtCe6ilfkdk8= Subject key identifier: E3:F5:67:D8:B9:25:45:84:5A:91:E5:4F:DD:2B:19:6F:92:B2:87:CB Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft Manifest number: 33 Signing time: Sun 27 Apr 2025 06:29:26 +0000 Manifest this update: Sun 27 Apr 2025 06:29:25 +0000 Manifest next update: Sun 04 May 2025 06:29:25 +0000 Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: q/5igkyCX4mm30MBFAYijmqK/mFctAehDtDiqByLUT8=) 2: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733 Validity Not Before: Apr 27 06:29:25 2025 GMT Not After : May 4 06:29:25 2025 GMT Subject: CN=680dcec5-8ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:88:bd:d7:e0:44:12:4c:19:78:18:db:d6: 44:b1:df:3c:3f:a2:c4:2a:52:da:d0:26:87:4b:34: ee:7f:9f:81:7d:85:3f:fe:89:da:69:50:b6:ad:9d: a6:e2:62:ed:e6:5c:82:ba:cd:f7:78:12:ec:a9:ac: bf:d2:fe:c1:5c:1d:f0:c1:40:64:89:f8:f6:51:b3: f8:16:16:e8:08:ae:d7:4c:ba:d2:d7:4d:6c:a8:d9: 13:6b:a4:c2:e7:3b:40:45:76:67:0f:eb:12:b9:2e: 85:5b:80:cd:5d:d3:e4:5f:f5:8b:5a:6a:14:e1:c3: 49:32:3c:83:2d:d2:1d:1a:16:fa:ba:66:7a:8a:7c: 2d:34:65:12:ee:6f:32:79:53:fb:9b:0c:8e:f2:ee: b0:17:88:03:e8:a5:cf:6f:8a:0f:a5:0d:e6:db:68: 3c:31:07:78:8f:bb:8d:28:23:dc:39:16:2c:96:05: 2f:1b:ca:72:e7:2e:51:a8:ef:86:d4:4d:15:64:bb: 8b:fa:fd:98:23:44:7f:32:36:b0:00:3b:04:bf:61: b6:00:52:67:da:23:e9:55:aa:bf:cf:07:f7:ca:06: 8e:c8:21:5e:49:db:2e:4b:ac:1b:5a:bf:15:b6:6e: a5:4b:42:ba:f5:86:c6:a3:b1:41:db:13:c5:1e:5d: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F5:67:D8:B9:25:45:84:5A:91:E5:4F:DD:2B:19:6F:92:B2:87:CB X509v3 Authority Key Identifier: keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ce:3d:84:54:98:26:9f:f1:48:24:41:b7:79:6f:52:cf:1e: 51:e2:74:d3:59:8e:58:a0:5f:83:1b:c1:8e:ac:fd:15:ac:19: 20:7f:16:22:ee:fc:70:82:cd:30:17:f9:b9:c6:65:3e:6a:d6: 40:f8:07:f1:1d:0c:ba:d7:35:f1:01:da:5d:fa:aa:a6:0b:29: 3b:bc:21:a4:0b:84:fd:d6:0d:52:ae:f8:99:04:10:1a:e8:10: 9a:a2:fb:95:e3:6a:97:a1:2d:3d:a9:71:aa:47:a4:8c:ff:c6: cd:5f:6a:5b:75:3c:05:95:74:94:7d:38:b7:c9:f5:9a:57:8c: cf:5c:29:f5:df:0d:30:fc:82:17:63:77:bb:b6:ea:cf:ea:f0: fd:3e:83:c7:4d:ca:02:f7:19:46:97:a1:99:43:c5:f2:50:1f: 3a:08:0e:49:c7:8a:c7:fe:06:39:fa:92:5c:da:9c:4d:d7:e8: 31:b5:8d:88:78:77:29:8e:22:19:20:92:af:a2:fa:02:66:fd: e7:7f:12:2b:88:ad:13:5e:ed:61:d6:9a:c8:d1:af:10:f2:5d: e1:e9:b0:07:9d:5e:01:76:29:d6:f2:a9:d3:33:0a:2f:26:76: 80:af:6b:ce:4d:ea:f8:45:65:bb:d4:88:d3:1f:18:d2:b3:0a: b7:b4:d1:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODEwMzExMC8GA1UEBRMoNjAzMUQwNjAxRDVDMkQ4N0FENjYyMzYxRTYzQkZGRDkx RTA0MDczMzAeFw0yNTA0MjcwNjI5MjVaFw0yNTA1MDQwNjI5MjVaMBgxFjAUBgNV BAMTDTY4MGRjZWM1LThlZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcQoi91+BEEkwZeBjb1kSx3zw/osQqUtrQJodLNO5/n4F9hT/+idppULatnabi Yu3mXIK6zfd4EuyprL/S/sFcHfDBQGSJ+PZRs/gWFugIrtdMutLXTWyo2RNrpMLn O0BFdmcP6xK5LoVbgM1d0+Rf9YtaahThw0kyPIMt0h0aFvq6ZnqKfC00ZRLubzJ5 U/ubDI7y7rAXiAPopc9vig+lDebbaDwxB3iPu40oI9w5FiyWBS8bynLnLlGo74bU TRVku4v6/ZgjRH8yNrAAOwS/YbYAUmfaI+lVqr/PB/fKBo7IIV5J2y5LrBtavxW2 bqVLQrr1hsajsUHbE8UeXdbnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4/Vn2Lkl RYRakeVP3SsZb5Kyh8swHwYDVR0jBBgwFoAUYDHQYB1cLYetZiNh5jv/2R4EBzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4MTAzLzkzREM3NTRFREUw MTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWURIUVlCMWNMWWV0WmlOaDVqdl8yUjRFQnpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 MTAzLzkzREM3NTRFREUwMTExRUY5MzMzNUYwQkM0RjlBRTAyL1lESFFZQjFjTFll dFppTmg1anZfMlI0RUJ6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHTOPYRUmCaf8UgkQbd5b1LPHlHidNNZjligX4MbwY6s/RWsGSB/FiLu /HCCzTAX+bnGZT5q1kD4B/EdDLrXNfEB2l36qqYLKTu8IaQLhP3WDVKu+JkEEBro EJqi+5XjapehLT2pcapHpIz/xs1falt1PAWVdJR9OLfJ9ZpXjM9cKfXfDTD8ghdj d7u26s/q8P0+g8dNygL3GUaXoZlDxfJQHzoIDknHisf+Bjn6klzanE3X6DG1jYh4 dymOIhkgkq+i+gJm/ed/EiuIrRNe7WHWmsjRrxDyXeHpsAedXgF2KdbyqdMzCi8m doCva85N6vhFZbvUiNMfGNKzCre00Qs= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net