$ rpki-client -vvf rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft File: MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft (raw, json) Hash identifier: V3Mb1Bp0rGbd0UU3ukv9PBLuMptJxv0f8WguUjSWuLI= Subject key identifier: 68:79:5D:B4:5C:1D:CE:85:4F:75:99:DE:90:79:67:E6:C8:60:CB:4E Authority key identifier: 31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 Certificate issuer: /CN=A91F378B/serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft Manifest number: D3 Signing time: Sun 27 Apr 2025 04:29:53 +0000 Manifest this update: Sun 27 Apr 2025 04:29:53 +0000 Manifest next update: Sun 04 May 2025 04:29:53 +0000 Files and hashes: 1: MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl (hash: +naPIBCBEK5u3IGfZBHsk+6YU50eWm7rogwPBxLasrs=) 2: 4FCB21E6E05211EE8AEC805CC4F9AE02.roa (hash: +YBZ5ZIb6u7/Qx6y05kFQ2mmnk33q8W1HFBaQuaUJcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F378B, serialNumber=318553ED09C200958CB15DCCE277CC48AA42A388 Validity Not Before: Apr 27 04:29:53 2025 GMT Not After : May 4 04:29:53 2025 GMT Subject: CN=680db2c1-3de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:f1:bf:81:32:6c:cc:ab:8b:8a:1e:0f:3e: 8e:16:96:94:06:c9:1a:92:d7:9d:67:15:0e:f0:9a: 72:23:d8:65:a2:44:39:f7:95:15:0d:ca:b3:08:c2: ce:2a:32:53:8f:dc:4a:64:55:69:99:c2:c3:31:8e: 11:83:43:ae:d6:d0:9f:44:01:d9:6a:d9:b7:c1:c8: 6d:d8:a4:1b:84:2a:54:e0:1a:e2:e3:50:a6:84:4b: a6:b2:d7:7f:3d:d2:e2:38:b9:73:05:a2:55:ce:85: 66:33:82:63:dd:f6:a3:32:21:76:23:43:7d:fc:c6: 80:76:22:bc:85:fe:10:23:76:2e:0a:03:7b:69:ca: a6:ae:8b:0c:0d:c6:0d:04:90:92:8e:3e:ac:3b:c9: 7e:fc:f5:ac:8c:73:72:3a:65:3d:b1:b3:7f:38:5b: ff:19:a4:25:26:9e:bf:35:44:29:cd:bb:ed:f3:1a: ad:ec:a2:f7:4e:48:4e:59:39:af:1c:4e:a7:78:82: 7b:75:27:75:0d:7f:67:c3:44:ab:11:e2:b7:b0:ef: 4e:77:36:de:59:9f:80:92:93:c5:a1:3c:56:34:96: 2b:83:3d:c8:ff:6b:d3:7f:11:33:e8:0f:f9:2f:5c: 92:f9:d5:cd:da:af:2d:2f:cd:8b:11:3a:2b:3a:0a: bb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:5D:B4:5C:1D:CE:85:4F:75:99:DE:90:79:67:E6:C8:60:CB:4E X509v3 Authority Key Identifier: keyid:31:85:53:ED:09:C2:00:95:8C:B1:5D:CC:E2:77:CC:48:AA:42:A3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYVT7QnCAJWMsV3M4nfMSKpCo4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F378B/C13AA776E05111EEB5B0925BC4F9AE02/MYVT7QnCAJWMsV3M4nfMSKpCo4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e9:0b:3f:8c:1f:6c:97:05:86:18:08:99:af:6c:ce:89:90: 30:5a:d0:a6:ab:d6:81:64:ca:4d:d7:16:31:51:5f:76:90:bb: 37:2a:62:f0:1c:68:d2:46:0c:51:c2:21:7c:d6:d5:c1:30:db: 75:a1:a4:e0:3f:c2:3f:5b:cc:6f:65:56:78:5c:86:b0:f7:e7: be:80:40:cb:c2:f7:71:94:ce:ca:89:40:93:be:2f:5b:c7:d9: de:25:c5:28:12:87:36:02:15:ca:8b:b6:27:94:4d:4d:0d:ea: 10:ae:2a:11:ae:da:53:4f:17:3a:bb:49:d8:53:9c:c2:89:2b: 28:a0:1c:fd:a0:e3:b4:f0:d4:98:5f:36:92:99:e0:52:1a:62: 1d:f3:62:80:44:a2:e7:90:98:6b:ec:57:3f:dd:ce:2a:95:6b: db:b7:1d:ed:39:4e:f9:a7:91:4b:b5:61:55:1d:1a:ed:0e:02: 64:95:4c:0d:2a:56:f1:63:87:82:9b:7b:38:3f:82:b0:13:17: 59:bd:54:5b:06:22:68:c2:70:14:dd:2d:ec:6b:ed:74:c5:cd: 91:38:e9:86:2d:b4:f9:50:1a:08:48:fa:cc:29:fc:c2:3c:1f: cd:ec:7c:83:4b:1e:b4:51:46:20:96:44:55:af:0a:4f:b0:de: 89:3b:10:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3OEIxMTAvBgNVBAUTKDMxODU1M0VEMDlDMjAwOTU4Q0IxNURDQ0UyNzdDQzQ4 QUE0MkEzODgwHhcNMjUwNDI3MDQyOTUzWhcNMjUwNTA0MDQyOTUzWjAYMRYwFAYD VQQDEw02ODBkYjJjMS0zZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWHxv4EybMyri4oeDz6OFpaUBskaktedZxUO8JpyI9hlokQ595UVDcqzCMLO KjJTj9xKZFVpmcLDMY4Rg0Ou1tCfRAHZatm3wcht2KQbhCpU4Bri41CmhEumstd/ PdLiOLlzBaJVzoVmM4Jj3fajMiF2I0N9/MaAdiK8hf4QI3YuCgN7acqmrosMDcYN BJCSjj6sO8l+/PWsjHNyOmU9sbN/OFv/GaQlJp6/NUQpzbvt8xqt7KL3TkhOWTmv HE6neIJ7dSd1DX9nw0SrEeK3sO9OdzbeWZ+AkpPFoTxWNJYrgz3I/2vTfxEz6A/5 L1yS+dXN2q8tL82LETorOgq7HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGh5XbRc Hc6FT3WZ3pB5Z+bIYMtOMB8GA1UdIwQYMBaAFDGFU+0JwgCVjLFdzOJ3zEiqQqOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzc4Qi9DMTNBQTc3NkUw NTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FKV01zVjNNNG5mTVNLcENv NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01ZVlQ3UW5DQUpXTXNWM000bmZNU0twQ280Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzc4Qi9DMTNBQTc3NkUwNTExMUVFQjVCMDkyNUJDNEY5QUUwMi9NWVZUN1FuQ0FK V01zVjNNNG5mTVNLcENvNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC06Qs/jB9slwWGGAiZr2zOiZAwWtCmq9aBZMpN1xYxUV92kLs3KmLw HGjSRgxRwiF81tXBMNt1oaTgP8I/W8xvZVZ4XIaw9+e+gEDLwvdxlM7KiUCTvi9b x9neJcUoEoc2AhXKi7YnlE1NDeoQrioRrtpTTxc6u0nYU5zCiSsooBz9oOO08NSY XzaSmeBSGmId82KARKLnkJhr7Fc/3c4qlWvbtx3tOU75p5FLtWFVHRrtDgJklUwN KlbxY4eCm3s4P4KwExdZvVRbBiJownAU3S3sa+10xc2ROOmGLbT5UBoISPrMKfzC PB/N7HyDSx60UUYglkRVrwpPsN6JOxAC -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net