$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft File: YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json) Hash identifier: zTvEEFEH2SZ8jL/9ohcsTcVwBraw7WhfTxce+wrYcFw= Subject key identifier: AB:1E:79:57:A5:52:9B:D8:4A:B0:51:7F:78:10:69:8B:29:8E:F8:8D Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft Manifest number: E5 Signing time: Sun 27 Apr 2025 04:22:17 +0000 Manifest this update: Sun 27 Apr 2025 04:22:17 +0000 Manifest next update: Sun 04 May 2025 04:22:16 +0000 Files and hashes: 1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: iz7N1FE31VjJPB1lQ0eGVEyCtDD90YzI4nf6QDbfO7c=) 2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: QQ0CP8HHmI7PCShWjhNg26xSyERliRPL6u4e6U+9a/k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50 Validity Not Before: Apr 27 04:22:17 2025 GMT Not After : May 4 04:22:16 2025 GMT Subject: CN=680db0f9-d526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:de:5c:86:ea:ed:ed:53:cf:4e:cf:9d:52: 65:67:53:47:89:8b:c8:92:ed:1e:f5:67:97:a5:73: 7a:b9:16:58:83:9e:48:5e:9a:29:1b:ce:68:c3:6d: 5d:97:a8:81:3b:e4:17:fc:7f:09:59:00:51:00:bd: 9b:5d:d1:c5:b3:0a:20:a8:f1:47:2e:f9:12:d3:dd: 33:40:db:d7:40:2d:5e:0d:e6:c6:28:6a:1c:74:60: 4d:d3:13:30:7d:d4:1c:5c:b1:60:e1:d1:50:df:0d: b3:54:b0:64:3e:bd:7c:67:a1:03:fa:17:22:87:8d: 07:50:e0:dd:0a:fc:6f:7a:41:66:33:de:99:2b:3c: 39:83:6c:d3:7f:a8:33:10:91:ea:5d:46:14:eb:42: 8f:d6:39:6e:5f:ed:61:27:b1:f4:06:b6:59:4e:18: e3:2c:81:2e:d8:fa:82:45:aa:2d:b4:69:6d:e8:d3: 10:87:e3:2d:74:96:c3:8f:74:87:f3:93:4a:92:13: 2d:0d:7d:8e:77:01:09:14:c6:56:84:44:15:e2:28: 41:1f:75:3c:21:32:f1:62:80:93:4e:40:40:26:fe: 9d:54:23:19:76:82:4a:e6:14:18:f3:30:a2:a6:13: df:7f:a7:71:e6:83:ee:db:e8:21:a7:18:c8:de:dd: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1E:79:57:A5:52:9B:D8:4A:B0:51:7F:78:10:69:8B:29:8E:F8:8D X509v3 Authority Key Identifier: keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:4f:99:e5:bc:06:82:6b:41:7b:41:e5:ca:40:b1:0d:15:2c: d9:cc:a4:d0:b7:bd:01:3e:6d:ec:4d:72:a6:e4:db:1c:82:c1: db:84:af:30:44:55:2d:d8:89:ec:55:fd:55:8f:66:46:d1:f2: 42:1c:f7:e0:31:a3:dd:2b:8f:48:de:b7:ef:4a:4e:15:3e:9b: da:42:6a:be:79:b9:9a:d4:02:a0:d9:c0:f8:ea:33:65:37:01: 5a:5e:01:30:f3:b1:ef:21:22:14:60:a1:a9:56:ba:b9:12:3d: 06:5d:ba:53:1a:54:3a:9d:2a:2d:a0:a0:f8:72:5d:68:ef:2e: 06:da:25:c5:70:81:65:f8:f7:d2:09:ce:92:d5:0e:6f:50:ed: 19:2c:36:72:88:47:f6:dc:64:7a:4a:41:1e:88:f1:f9:dc:78: 6c:b8:73:ce:e0:a8:06:07:f8:2c:eb:3c:ba:8f:96:78:ed:67: 6b:d6:c2:ac:61:a6:42:fc:2b:7f:f9:cc:ad:d9:4d:44:3c:11: 1d:d6:7c:81:ee:24:69:00:aa:7a:b4:10:07:64:35:3e:3a:33: fa:42:85:49:6c:f5:a6:5a:b7:c6:b1:97:ee:ec:0b:4d:c1:0c: 06:d3:7b:ce:53:40:28:1e:29:29:ed:c9:b8:f5:79:ec:f4:34: 7a:ff:36:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5 NUE3QUNDNTAwHhcNMjUwNDI3MDQyMjE3WhcNMjUwNTA0MDQyMjE2WjAYMRYwFAYD VQQDEw02ODBkYjBmOS1kNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtW3eXIbq7e1Tz07PnVJlZ1NHiYvIku0e9WeXpXN6uRZYg55IXpopG85ow21d l6iBO+QX/H8JWQBRAL2bXdHFswogqPFHLvkS090zQNvXQC1eDebGKGocdGBN0xMw fdQcXLFg4dFQ3w2zVLBkPr18Z6ED+hcih40HUODdCvxvekFmM96ZKzw5g2zTf6gz EJHqXUYU60KP1jluX+1hJ7H0BrZZThjjLIEu2PqCRaottGlt6NMQh+MtdJbDj3SH 85NKkhMtDX2OdwEJFMZWhEQV4ihBH3U8ITLxYoCTTkBAJv6dVCMZdoJK5hQY8zCi phPff6dx5oPu2+ghpxjI3t2fSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKseeVel UpvYSrBRf3gQaYspjviNMB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DMDc2NDU3MkNCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5 ejF3Z0U1YllWeG1WcDZ6RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5T5nlvAaCa0F7QeXKQLENFSzZzKTQt70BPm3sTXKm5NscgsHbhK8w RFUt2InsVf1Vj2ZG0fJCHPfgMaPdK49I3rfvSk4VPpvaQmq+ebma1AKg2cD46jNl NwFaXgEw87HvISIUYKGpVrq5Ej0GXbpTGlQ6nSotoKD4cl1o7y4G2iXFcIFl+PfS Cc6S1Q5vUO0ZLDZyiEf23GR6SkEeiPH53HhsuHPO4KgGB/gs6zy6j5Z47Wdr1sKs YaZC/Ct/+cyt2U1EPBEd1nyB7iRpAKp6tBAHZDU+OjP6QoVJbPWmWrfGsZfu7AtN wQwG03vOU0AoHikp7cm49Xns9DR6/zaA -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net