$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft File: myAvlYUe_EtkzjtAnGxgSzW0mNg.mft (raw, json) Hash identifier: iwG7kZF8fItreGSEaMiJVC7l6ScZs7mPpDMMdpqkIZI= Subject key identifier: A3:06:6A:08:8C:66:9C:06:55:B2:E8:34:9F:41:EE:32:82:25:CA:EC Authority key identifier: 9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 Certificate issuer: /CN=A91F5CE4/serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Certificate serial: 09AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft Manifest number: 099E Signing time: Sat 26 Apr 2025 19:51:33 +0000 Manifest this update: Sat 26 Apr 2025 19:51:32 +0000 Manifest next update: Sat 03 May 2025 19:51:32 +0000 Files and hashes: 1: myAvlYUe_EtkzjtAnGxgSzW0mNg.crl (hash: v9q+4SWa3rlaBOkE8xSwMLsqAq0p1wUdFq6bxRHrfmk=) 2: 1EEB10267CFB11EBA8C7B009C4F9AE02.roa (hash: O77zp6ks0TqxaDAkJp4Lm1+BoJkZNosQNYkw2uGOZ3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2474 (0x9aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5CE4, serialNumber=9B202F95851EFC4B64CE3B409C6C604B35B498D8 Validity Not Before: Apr 26 19:51:32 2025 GMT Not After : May 3 19:51:32 2025 GMT Subject: CN=680d3944-bac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:da:cd:05:2b:8e:d2:25:51:84:11:3c:a2: 3b:80:f8:ec:63:50:0e:6e:0e:d0:b5:b5:66:90:0e: bd:03:c6:8a:57:ec:12:b2:d7:11:16:e2:b9:27:5d: d5:0b:15:75:6f:e9:e6:b2:25:9e:e3:b1:64:b5:e2: 79:c6:2e:1a:8f:59:41:f4:5d:52:1d:50:0c:02:d2: 0d:72:57:56:f7:1e:f1:b3:9e:67:63:a0:61:65:7e: 76:2c:2b:be:fa:e8:d3:8e:37:99:b2:69:01:ff:44: c7:27:91:9a:d8:62:ce:68:98:16:2e:9a:37:7d:df: e0:64:d6:a2:f4:d4:99:dc:a1:0b:08:78:48:05:be: 09:f2:4e:c1:da:38:44:e3:29:3f:f3:a7:bd:b7:36: f7:03:66:b4:f5:2a:52:33:30:2e:6b:51:67:1a:e8: 55:e3:34:a4:df:0e:10:da:05:c2:46:93:b1:e7:30: 4f:3a:7f:b3:74:13:62:06:8e:e5:31:a0:9a:5b:48: 75:a5:be:4c:13:a3:a8:5a:b0:d7:2d:eb:16:c6:8a: 16:fe:f0:48:d4:62:64:57:c2:12:96:cf:3b:e9:36: 8a:ec:9c:c7:f0:52:cd:50:61:92:65:23:90:34:b4: dd:a4:cd:44:73:f2:e7:86:34:1e:24:1e:c3:de:25: d5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:06:6A:08:8C:66:9C:06:55:B2:E8:34:9F:41:EE:32:82:25:CA:EC X509v3 Authority Key Identifier: keyid:9B:20:2F:95:85:1E:FC:4B:64:CE:3B:40:9C:6C:60:4B:35:B4:98:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/myAvlYUe_EtkzjtAnGxgSzW0mNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5CE4/3EFF1A9A863611EAAE6B1142C4F9AE02/myAvlYUe_EtkzjtAnGxgSzW0mNg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e4:84:77:a6:bf:35:1b:55:6a:88:e0:fd:ef:71:f6:82:bd: 2d:f3:97:02:fe:7b:35:a7:ba:da:6d:03:13:3a:c3:73:19:5c: 15:ba:7d:e8:24:3b:49:0e:30:c2:dd:ee:95:7f:f5:5c:a1:cd: 77:d0:c0:9a:32:1d:2b:17:20:0f:06:bd:d7:83:54:33:2a:46: c1:bd:f7:63:39:03:11:e4:55:22:8f:11:d1:43:ab:76:89:c7: bc:f0:2e:03:c2:da:d8:a5:83:df:2a:90:35:8f:f2:77:62:08: 0f:dd:b1:5e:02:3f:41:ab:10:cd:98:3f:10:aa:c3:7b:33:0f: 6c:fe:1a:e3:42:b1:57:93:8e:13:ff:5c:04:d5:13:fd:a4:22: ce:e1:3c:51:5d:25:2e:8c:f0:9e:bb:a2:ac:83:32:c6:d9:59: f0:c2:9f:9b:b8:8c:01:c8:b8:e1:46:79:08:6f:62:b0:15:58: 0a:b2:e0:0b:0b:07:a8:91:2b:72:48:9a:73:77:9c:0d:6d:9e: 78:20:f9:37:51:47:d6:b0:fb:2b:3c:ac:44:e2:8d:03:fe:58: 22:16:1c:50:6e:f2:0b:83:23:85:29:5d:50:a1:b9:40:f8:3e: d4:d5:8c:c3:04:dd:9c:19:08:56:ed:c5:c4:fd:e5:68:da:7a: d8:66:37:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVDRTQxMTAvBgNVBAUTKDlCMjAyRjk1ODUxRUZDNEI2NENFM0I0MDlDNkM2MDRC MzVCNDk4RDgwHhcNMjUwNDI2MTk1MTMyWhcNMjUwNTAzMTk1MTMyWjAYMRYwFAYD VQQDEw02ODBkMzk0NC1iYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtznazQUrjtIlUYQRPKI7gPjsY1AObg7QtbVmkA69A8aKV+wSstcRFuK5J13V CxV1b+nmsiWe47FkteJ5xi4aj1lB9F1SHVAMAtINcldW9x7xs55nY6BhZX52LCu+ +ujTjjeZsmkB/0THJ5Ga2GLOaJgWLpo3fd/gZNai9NSZ3KELCHhIBb4J8k7B2jhE 4yk/86e9tzb3A2a09SpSMzAua1FnGuhV4zSk3w4Q2gXCRpOx5zBPOn+zdBNiBo7l MaCaW0h1pb5ME6OoWrDXLesWxooW/vBI1GJkV8ISls876TaK7JzH8FLNUGGSZSOQ NLTdpM1Ec/LnhjQeJB7D3iXVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMGagiM ZpwGVbLoNJ9B7jKCJcrsMB8GA1UdIwQYMBaAFJsgL5WFHvxLZM47QJxsYEs1tJjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUNFNC8zRUZGMUE5QTg2 MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9FdGt6anRBbkd4Z1N6VzBt TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL215QXZsWVVlX0V0a3pqdEFuR3hnU3pXMG1OZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUNFNC8zRUZGMUE5QTg2MzYxMUVBQUU2QjExNDJDNEY5QUUwMi9teUF2bFlVZV9F dGt6anRBbkd4Z1N6VzBtTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB5IR3pr81G1VqiOD973H2gr0t85cC/ns1p7rabQMTOsNzGVwVun3o JDtJDjDC3e6Vf/Vcoc130MCaMh0rFyAPBr3Xg1QzKkbBvfdjOQMR5FUijxHRQ6t2 ice88C4DwtrYpYPfKpA1j/J3YggP3bFeAj9BqxDNmD8QqsN7Mw9s/hrjQrFXk44T /1wE1RP9pCLO4TxRXSUujPCeu6KsgzLG2Vnwwp+buIwByLjhRnkIb2KwFVgKsuAL CweokStySJpzd5wNbZ54IPk3UUfWsPsrPKxE4o0D/lgiFhxQbvILgyOFKV1QoblA +D7U1YzDBN2cGQhW7cXE/eVo2nrYZjck -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:14 2025 by rpki-client on console.sobornost.net