$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft File: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft (raw, json) Hash identifier: np/bwJ3vVj1fsesu+An3EUvJwyF4l9s5V39ij+mW8r0= Subject key identifier: 32:78:70:D8:7C:51:57:78:EC:1D:29:8E:FD:8C:F4:D0:A4:97:11:B7 Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 Certificate issuer: /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Certificate serial: 1F74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft Manifest number: 1F29 Signing time: Mon 28 Apr 2025 16:09:13 +0000 Manifest this update: Mon 28 Apr 2025 16:09:13 +0000 Manifest next update: Mon 05 May 2025 16:09:13 +0000 Files and hashes: 1: JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl (hash: QsmaYzUl4qCOsTIfT3Fwodpu1RKgpYsrJbrx92aI6io=) 2: 5B425102C0E911EF978F1385C4F9AE02.roa (hash: k1pIrPdvh6z0dp5En85XqdbWfUA4ZO6tHmuvy2durEk=) 3: 51242EA0157A11EEBF2E043CC4F9AE02.roa (hash: gdgPydJrUkK8DpVlQ4wmxtIpuGhoHfbxVdF/ULwigco=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8052 (0x1f74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E, serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9 Validity Not Before: Apr 28 16:09:13 2025 GMT Not After : May 5 16:09:13 2025 GMT Subject: CN=680fa829-6cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:6a:75:18:a4:a8:28:b8:5f:a0:c4:f8:85: 43:a7:8a:aa:29:1e:ca:8e:c4:2b:c2:a4:45:b0:07: 8b:c1:21:9e:72:f5:fc:d9:52:2e:26:d1:ac:d0:7a: c5:36:e6:9d:a4:d2:46:3e:cb:03:41:90:14:1b:f5: 64:c9:00:b1:74:ef:a2:ac:19:a6:97:e2:aa:83:47: bb:8c:e8:4e:39:d4:b4:2e:87:40:10:9f:09:02:9d: ea:63:60:eb:34:e8:1d:f1:7e:f6:10:cd:c0:f5:25: 23:e0:e0:f8:a6:f3:f0:4e:1f:78:04:3e:d5:3d:cd: 0b:a5:8e:a3:95:4a:75:a5:f1:02:1d:93:97:ae:2d: 0b:cd:90:58:dc:aa:de:f3:5e:db:cc:04:64:f5:12: 5d:2a:03:da:4b:6a:f4:7f:a1:f7:19:33:4f:5a:2b: dd:52:b3:ed:e9:ea:a0:4e:c8:6f:01:41:3f:db:87: 48:28:3b:b8:ab:5c:ce:56:54:e7:07:47:ce:7f:04: eb:88:ba:0c:03:b6:0f:9c:a7:b2:b0:67:b7:7a:13: 19:40:28:ab:50:c5:ce:4b:21:91:4a:de:fc:9f:49: 98:f0:88:1c:1c:18:af:57:ad:b4:f6:9e:8d:a7:33: fb:ed:1b:ca:d0:2c:fe:21:b0:73:26:66:8c:90:5e: 2a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:78:70:D8:7C:51:57:78:EC:1D:29:8E:FD:8C:F4:D0:A4:97:11:B7 X509v3 Authority Key Identifier: keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:97:3c:39:ed:3a:be:b6:8f:8b:d6:b1:dc:c0:b0:9d:f8:44: 36:c9:ab:9a:a9:f5:52:12:fb:61:d9:35:54:f1:7c:d5:34:77: 3a:c5:6e:09:2d:a1:26:2c:36:2c:70:09:98:34:0d:48:de:4b: 0a:7e:2f:87:a7:a1:71:a3:53:57:ca:ed:1f:5f:75:a3:d0:30: 88:c7:1f:49:8e:4d:04:ba:6d:ba:96:8a:a1:87:99:14:2b:93: 16:0e:ec:6b:ca:f4:bd:7c:91:a8:74:e9:1d:4b:f2:e5:fe:0d: 71:8d:59:dd:80:85:9b:b7:5c:1d:a4:77:6f:42:89:34:c2:0b: e5:70:ca:2f:c3:94:8c:74:43:09:36:2d:f8:7e:81:63:3e:45: 7b:9a:c8:6b:6d:85:1a:9f:ee:14:d9:b9:41:74:f3:92:7a:da: f8:9a:b2:55:61:7b:ce:cc:5a:3b:af:2b:c8:cb:26:35:ae:ac: f1:74:37:e5:3b:35:91:e4:14:b5:4e:4e:00:aa:63:af:e1:ac: 90:91:b9:a9:9f:50:8f:85:82:35:fa:c6:25:85:97:ac:2c:ba: c9:93:b2:8c:c9:b4:02:6a:fc:3e:e9:54:bc:19:1c:6a:1e:07: 96:9d:35:7e:71:d2:a3:42:4b:38:32:f3:0e:ad:ed:7b:3c:a2: 13:96:1d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDI1ODUyNDNENjgwNUYyRUE4QkMzRjYzQjgyMzY0QkE5 OTFGMzMwQjkwHhcNMjUwNDI4MTYwOTEzWhcNMjUwNTA1MTYwOTEzWjAYMRYwFAYD VQQDEw02ODBmYTgyOS02Y2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCBqdRikqCi4X6DE+IVDp4qqKR7KjsQrwqRFsAeLwSGecvX82VIuJtGs0HrF NuadpNJGPssDQZAUG/VkyQCxdO+irBmml+Kqg0e7jOhOOdS0LodAEJ8JAp3qY2Dr NOgd8X72EM3A9SUj4OD4pvPwTh94BD7VPc0LpY6jlUp1pfECHZOXri0LzZBY3Kre 817bzARk9RJdKgPaS2r0f6H3GTNPWivdUrPt6eqgTshvAUE/24dIKDu4q1zOVlTn B0fOfwTriLoMA7YPnKeysGe3ehMZQCirUMXOSyGRSt78n0mY8IgcHBivV6209p6N pzP77RvK0Cz+IbBzJmaMkF4q2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ4cNh8 UVd47B0pjv2M9NCklxG3MB8GA1UdIwQYMBaAFCWFJD1oBfLqi8P2O4I2S6mR8zC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9GNTk2N0U2QzVF RjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1cUx3X1k3Z2paTHFaSHpN TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZVWtQV2dGOHVxTHdfWTdnalpMcVpIek1May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMxRS9GNTk2N0U2QzVFRjExMUU2QTdEMUFGMjZDNEY5QUUwMi9KWVVrUFdnRjh1 cUx3X1k3Z2paTHFaSHpNTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYlzw57Tq+to+L1rHcwLCd+EQ2yauaqfVSEvth2TVU8XzVNHc6xW4J LaEmLDYscAmYNA1I3ksKfi+Hp6Fxo1NXyu0fX3Wj0DCIxx9Jjk0Eum26loqhh5kU K5MWDuxryvS9fJGodOkdS/Ll/g1xjVndgIWbt1wdpHdvQok0wgvlcMovw5SMdEMJ Ni34foFjPkV7mshrbYUan+4U2blBdPOSetr4mrJVYXvOzFo7ryvIyyY1rqzxdDfl OzWR5BS1Tk4AqmOv4ayQkbmpn1CPhYI1+sYlhZesLLrJk7KMybQCavw+6VS8GRxq HgeWnTV+cdKjQks4MvMOre17PKITlh36 -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:16 2025 by rpki-client on console.sobornost.net