$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft File: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json) Hash identifier: ST4jCHw0OvGUInajCM4qHWv9F8NXc41DyPJrRyOOxP0= Subject key identifier: 0B:FD:06:78:6F:92:2D:7E:7E:37:02:A9:8B:06:EB:CF:23:0B:3B:A3 Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE Certificate issuer: /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Certificate serial: 0C61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft Manifest number: 0C53 Signing time: Thu 24 Apr 2025 18:18:09 +0000 Manifest this update: Thu 24 Apr 2025 18:18:08 +0000 Manifest next update: Thu 01 May 2025 18:18:08 +0000 Files and hashes: 1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: K13BWMD1roD9PrCUwYo34a6rwjjChD9bJk6sPN3a+NE=) 2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: VMJPLLhedlHAk4tQ5HhxEAJ5POLeqMTVPXSXcNzn0f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3169 (0xc61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE Validity Not Before: Apr 24 18:18:08 2025 GMT Not After : May 1 18:18:08 2025 GMT Subject: CN=680a8060-11fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:c8:7b:03:be:9b:ba:f3:a0:ff:b9:15:70: e9:f9:22:cb:7a:01:04:28:e9:ce:d3:67:64:75:36: df:10:d9:ac:d1:69:29:0d:02:29:e4:22:29:54:ef: 97:87:d9:73:de:22:bb:57:4b:db:7b:5d:4e:84:c7: 28:60:fb:d3:1b:cb:16:f6:82:b4:cb:49:90:70:f1: f4:9b:2a:96:1b:08:7f:69:c2:a7:7e:0d:d3:59:42: 88:30:ba:b7:01:38:5a:33:1a:9e:a3:4e:ed:4b:4d: 17:8b:a6:3d:b7:7f:6c:46:9b:a4:44:24:29:d1:89: 4b:91:be:29:ff:0f:23:8f:d8:1a:72:9d:32:ba:91: 33:1e:2b:cc:6f:8f:bf:d4:2e:2d:a7:68:6c:97:ee: 69:68:eb:49:f6:25:93:8c:aa:82:c7:12:20:05:b1: 93:2b:76:24:be:f1:11:b5:96:6e:26:75:34:7f:27: 3b:9d:7d:a8:42:9a:df:93:2d:47:b5:b2:29:2f:a2: a5:e4:2b:a3:91:ae:09:a3:bd:2b:01:9c:eb:04:30: 40:1d:3f:41:ac:19:ed:d0:64:b6:7d:55:e7:e2:b6: 5e:89:fb:ad:d8:24:72:79:0a:bc:15:91:2e:c9:12: de:1b:7c:e7:0d:0b:54:ab:6e:47:13:48:d3:f1:04: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FD:06:78:6F:92:2D:7E:7E:37:02:A9:8B:06:EB:CF:23:0B:3B:A3 X509v3 Authority Key Identifier: keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e8:85:82:9e:9e:0a:98:95:4d:b6:53:7d:b6:91:80:4e:9d: 41:94:e7:d2:00:87:9e:83:8a:5c:1f:df:97:ab:66:af:ca:02: a7:be:3f:2b:46:8a:2b:62:e7:36:2b:89:99:1c:f5:ab:90:28: ca:fd:df:ae:f0:ef:58:f1:a8:5c:4e:45:9d:b2:30:64:31:41: 45:39:2c:28:01:1e:a9:35:61:c2:a3:68:4c:57:82:99:15:12: ea:9b:51:b9:12:ea:4e:9b:16:c3:e4:7b:8f:29:42:61:19:28: 5d:c6:a2:7f:33:b7:f7:da:83:eb:b5:35:a7:75:c1:df:27:94: 83:0c:04:ef:3e:36:d8:fd:cf:10:e6:1e:72:2e:66:a3:03:50: 58:25:8b:01:33:3f:86:54:f6:c0:bb:d1:57:b4:d5:a6:75:3d: d9:46:cd:b9:ca:5e:62:b4:bd:37:70:7f:b0:e9:aa:76:40:2a: 15:30:e6:17:22:7e:7e:21:fb:39:78:43:df:c0:f4:9d:86:8c: be:8a:df:45:30:c7:ed:af:a1:74:8c:a5:b6:54:4a:9a:c3:c3: 90:6b:35:9c:6f:2e:bb:16:9e:8a:54:27:e7:1d:f9:c3:d2:67: d6:b2:e9:97:3d:65:7c:d2:25:7d:20:f0:8d:d6:df:8e:5f:60: 27:1b:2d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx ODQ1NzNERkUwHhcNMjUwNDI0MTgxODA4WhcNMjUwNTAxMTgxODA4WjAYMRYwFAYD VQQDEw02ODBhODA2MC0xMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sTIewO+m7rzoP+5FXDp+SLLegEEKOnO02dkdTbfENms0WkpDQIp5CIpVO+X h9lz3iK7V0vbe11OhMcoYPvTG8sW9oK0y0mQcPH0myqWGwh/acKnfg3TWUKIMLq3 AThaMxqeo07tS00Xi6Y9t39sRpukRCQp0YlLkb4p/w8jj9gacp0yupEzHivMb4+/ 1C4tp2hsl+5paOtJ9iWTjKqCxxIgBbGTK3YkvvERtZZuJnU0fyc7nX2oQprfky1H tbIpL6Kl5Cujka4Jo70rAZzrBDBAHT9BrBnt0GS2fVXn4rZeifut2CRyeQq8FZEu yRLeG3znDQtUq25HE0jT8QTLxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAv9Bnhv ki1+fjcCqYsG688jCzujMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2 T2ZzajBzNnlJemNZUlhQZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq6IWCnp4KmJVNtlN9tpGATp1BlOfSAIeeg4pcH9+Xq2avygKnvj8r RoorYuc2K4mZHPWrkCjK/d+u8O9Y8ahcTkWdsjBkMUFFOSwoAR6pNWHCo2hMV4KZ FRLqm1G5EupOmxbD5HuPKUJhGShdxqJ/M7f32oPrtTWndcHfJ5SDDATvPjbY/c8Q 5h5yLmajA1BYJYsBMz+GVPbAu9FXtNWmdT3ZRs25yl5itL03cH+w6ap2QCoVMOYX In5+Ifs5eEPfwPSdhoy+it9FMMftr6F0jKW2VEqaw8OQazWcby67Fp6KVCfnHfnD 0mfWsumXPWV80iV9IPCN1t+OX2AnGy1b -----END CERTIFICATE-----Generated at Thu Apr 24 20:39:22 2025 by rpki-client on console.sobornost.net