$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft File: Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json) Hash identifier: zgF0zlSDqQU74Hw/+k1+PU92crV48EUSuUNAYem8FAY= Subject key identifier: 68:AA:88:08:59:75:28:81:B9:AC:EC:B8:B1:1A:91:F0:AA:8E:DF:35 Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E Certificate issuer: /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft Manifest number: 1395 Signing time: Mon 28 Apr 2025 19:29:24 +0000 Manifest this update: Mon 28 Apr 2025 19:29:23 +0000 Manifest next update: Mon 05 May 2025 19:29:23 +0000 Files and hashes: 1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: i9ZUocPTqmeHGtRXT4TywL11RZqmNs1LeSya6xj1ecc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E Validity Not Before: Apr 28 19:29:23 2025 GMT Not After : May 5 19:29:23 2025 GMT Subject: CN=680fd713-8122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:69:11:55:ea:ec:c5:08:e0:c9:0e:37:14: 9a:1e:3f:e4:ec:e5:81:2f:d6:2f:e3:e2:0c:2a:7d: 90:63:a1:34:c4:a1:c0:35:f9:38:04:29:7d:d8:0a: ce:05:88:a6:ff:a7:17:a1:ff:e5:7a:4c:b1:00:3f: 07:34:e1:9f:30:1a:a9:56:8a:7c:bc:eb:e0:cf:7a: 5c:d1:7e:30:c7:c5:39:b8:b8:a5:6c:fc:4c:db:f6: 00:91:29:8f:d4:49:09:2a:e2:2c:4f:72:d0:ab:40: 51:1d:ba:95:08:60:58:3f:1d:15:ce:92:01:38:a5: 42:79:68:6b:a9:aa:25:01:56:10:ce:07:5a:df:a5: c2:4d:86:5b:51:48:56:78:7b:54:8b:8a:ec:e0:9a: b9:c4:aa:8a:fe:34:03:0d:2b:5d:35:0f:5c:98:47: 51:d1:3c:3e:9c:51:44:2b:cf:33:57:c2:83:27:20: 54:62:5d:98:7c:8c:4f:7b:01:03:83:06:b7:33:d0: 00:29:0d:75:ae:33:e5:4c:32:8d:55:a5:a3:55:22: ad:b2:68:43:40:05:15:c2:76:24:fa:b7:f6:8b:19: 30:73:af:73:eb:98:9d:23:dd:0f:09:f3:64:80:ea: c6:c9:e0:bd:a4:2f:b9:3f:f0:30:4b:9a:4c:d7:6d: b9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AA:88:08:59:75:28:81:B9:AC:EC:B8:B1:1A:91:F0:AA:8E:DF:35 X509v3 Authority Key Identifier: keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:14:63:02:78:15:77:62:5c:3f:88:05:6a:09:0e:82:c7:81: 5e:fd:6f:dd:65:29:49:1d:13:ed:a4:03:f1:5f:2c:11:97:b7: 6d:15:1d:ee:67:6c:90:bd:fd:bb:db:98:90:b1:17:37:37:7d: 42:99:6a:de:66:fd:5b:ca:55:44:d7:94:81:66:4b:ff:26:e9: 17:4a:13:88:46:2a:5c:a1:5d:14:2f:7c:8d:9a:81:1f:66:cb: 19:5a:9b:ca:b8:ed:65:62:b2:a6:fe:2b:c0:bf:f0:6b:40:c9: 83:1b:04:f5:a7:d3:b9:be:e9:ac:ab:01:b4:27:cd:59:4a:5e: a6:a5:0e:29:c4:8f:d4:21:e0:ac:fc:d4:0a:12:e0:28:7e:15: 60:bd:50:7a:bd:5c:26:2c:89:41:df:50:23:31:9a:21:6b:93: c7:11:64:12:6e:45:82:b0:95:22:c5:91:a5:10:77:55:db:04: 9d:77:88:8c:bc:5e:91:ad:2a:fc:28:01:31:34:a8:92:76:f7: 08:4c:ce:b0:ed:14:fa:49:d4:93:ca:3a:9b:a0:3b:51:6a:20: c0:73:4a:01:fc:89:1e:84:4d:92:c9:84:c0:bd:2a:ef:74:5f: a5:55:75:98:d9:4d:77:05:c6:50:9d:31:43:0b:6f:cf:7f:85: 41:c4:0f:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKDYzRUJBNDg1MDI1MTEzNDBCODI1MjYxRDVFQzIwQTkx MjdBRjI5NUUwHhcNMjUwNDI4MTkyOTIzWhcNMjUwNTA1MTkyOTIzWjAYMRYwFAYD VQQDEw02ODBmZDcxMy04MTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLZpEVXq7MUI4MkONxSaHj/k7OWBL9Yv4+IMKn2QY6E0xKHANfk4BCl92ArO BYim/6cXof/lekyxAD8HNOGfMBqpVop8vOvgz3pc0X4wx8U5uLilbPxM2/YAkSmP 1EkJKuIsT3LQq0BRHbqVCGBYPx0VzpIBOKVCeWhrqaolAVYQzgda36XCTYZbUUhW eHtUi4rs4Jq5xKqK/jQDDStdNQ9cmEdR0Tw+nFFEK88zV8KDJyBUYl2YfIxPewED gwa3M9AAKQ11rjPlTDKNVaWjVSKtsmhDQAUVwnYk+rf2ixkwc69z65idI90PCfNk gOrGyeC9pC+5P/AwS5pM1225dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGiqiAhZ dSiBuazsuLEakfCqjt81MB8GA1UdIwQYMBaAFGPrpIUCURNAuCUmHV7CCpEnryle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUwQzRKU1lkWHNJS2tTZXZL VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ktdWtoUUpSRTBDNEpTWWRYc0lLa1NldktWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi9ZLXVraFFKUkUw QzRKU1lkWHNJS2tTZXZLVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJFGMCeBV3Ylw/iAVqCQ6Cx4Fe/W/dZSlJHRPtpAPxXywRl7dtFR3u Z2yQvf2725iQsRc3N31CmWreZv1bylVE15SBZkv/JukXShOIRipcoV0UL3yNmoEf ZssZWpvKuO1lYrKm/ivAv/BrQMmDGwT1p9O5vumsqwG0J81ZSl6mpQ4pxI/UIeCs /NQKEuAofhVgvVB6vVwmLIlB31AjMZoha5PHEWQSbkWCsJUixZGlEHdV2wSdd4iM vF6RrSr8KAExNKiSdvcITM6w7RT6SdSTyjqboDtRaiDAc0oB/IkehE2SyYTAvSrv dF+lVXWY2U13BcZQnTFDC2/Pf4VBxA+2 -----END CERTIFICATE-----Generated at Mon Apr 28 23:06:00 2025 by rpki-client on console.sobornost.net