$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft File: _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json) Hash identifier: p41eWiKIBumWDthrPrGQzPAS4KHaYU78jFwroaBUKMI= Subject key identifier: B0:49:FD:51:29:51:D8:C6:CD:F2:FE:B9:44:98:81:8A:3A:A7:EB:1C Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 Certificate issuer: /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft Manifest number: 32 Signing time: Sun 27 Apr 2025 06:28:56 +0000 Manifest this update: Sun 27 Apr 2025 06:28:55 +0000 Manifest next update: Sun 04 May 2025 06:28:55 +0000 Files and hashes: 1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: HcVKkIMf8XDLi5iJ6anfqsLAXZdIOgLwKn5juV9ft+4=) 2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: v5aAOYFTKYQs9mswlL+k53rGpICa845yISkOLh9tIAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20 Validity Not Before: Apr 27 06:28:55 2025 GMT Not After : May 4 06:28:55 2025 GMT Subject: CN=680dcea7-ac33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:bb:ee:1a:02:c4:31:1f:48:6f:16:40:67: f5:e8:2b:1a:d6:1b:d6:ce:33:8f:94:b2:95:6f:62: 9e:b8:83:c8:17:27:5a:b2:75:ed:ba:09:11:da:4d: 7d:53:80:ac:d7:87:e1:2f:fa:56:b5:08:09:86:9b: 17:64:9e:9c:06:09:e1:eb:f1:e5:50:87:01:ca:3c: d9:f2:73:9c:3a:4e:5b:ac:11:9c:c7:7a:fd:8e:5b: d9:50:43:ca:3e:b4:96:45:77:b8:35:6e:40:f2:bd: cd:a6:73:cc:3b:92:c7:99:b3:13:92:b6:2f:2f:11: 15:1a:4f:d8:da:75:7c:dc:b0:a3:8d:74:03:32:3e: 99:2d:db:c8:4f:3b:13:c9:b2:6e:af:3f:68:4e:1a: d6:a6:8d:14:15:f5:95:1e:2b:07:a8:fe:db:be:f1: a9:c7:cc:04:cb:29:61:2d:29:d5:cc:9a:3d:a8:1a: 05:b4:22:81:3a:86:b2:35:c8:6d:d4:0f:33:37:53: 79:fa:3e:0e:81:d3:ce:ab:54:f4:31:41:a8:83:f8: e6:09:fb:f8:78:7b:29:9c:fa:d6:aa:97:b5:22:2d: e5:03:f8:83:89:a3:09:ee:02:43:51:29:2d:47:53: 19:69:ae:8d:00:ca:94:a5:70:eb:9d:b2:80:fb:e1: e9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:FD:51:29:51:D8:C6:CD:F2:FE:B9:44:98:81:8A:3A:A7:EB:1C X509v3 Authority Key Identifier: keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:99:43:8a:a7:7d:c4:b5:b2:4a:2b:da:33:8f:7a:07:84:05: 02:91:c9:07:3e:e0:6d:d6:08:9a:ba:7e:bc:db:79:9d:6d:dd: 42:e2:73:4c:3f:32:df:29:6e:16:6a:2e:ec:38:37:f7:0a:8f: 91:a7:ed:e7:b4:7c:7c:c8:81:26:ca:92:c0:88:50:08:4d:51: 2a:6c:62:fb:f8:a0:bc:7c:32:f9:9f:a0:bb:0e:00:94:ee:90: 33:46:72:ff:27:43:9b:dd:98:67:72:61:c4:0d:67:51:40:d1: 88:be:3d:e9:cb:1f:57:8d:02:61:90:ee:67:47:ce:a2:a3:16: d0:e7:52:b1:56:60:fb:b8:e2:c3:12:17:ed:cb:db:2b:48:27: ee:6e:ba:41:1f:9c:b0:f6:5c:16:95:40:95:53:9a:84:3d:6a: 11:5e:76:c6:ee:be:e0:14:51:41:09:67:83:ff:73:17:8a:8f: ff:fd:e3:c6:5b:f5:62:d8:c8:4b:2c:14:ec:8d:fa:f2:73:ad: f9:66:c0:35:53:43:36:c9:20:fb:c8:e9:b1:c9:03:a5:11:40: 85:df:a6:12:a5:c4:c1:82:86:fb:f9:4e:0a:b2:c7:10:3e:2f: db:19:79:ce:e0:3b:3f:db:52:b0:60:f0:ae:99:a0:9d:3e:7e: 5a:64:72:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzRGQjExMC8GA1UEBRMoRkYyMEJDMzc5RDg5QTBEQjNCRTZGQ0YyOTBGQTNERDUy RUI3RkEyMDAeFw0yNTA0MjcwNjI4NTVaFw0yNTA1MDQwNjI4NTVaMBgxFjAUBgNV BAMTDTY4MGRjZWE3LWFjMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkPbvuGgLEMR9IbxZAZ/XoKxrWG9bOM4+UspVvYp64g8gXJ1qyde26CRHaTX1T gKzXh+Ev+la1CAmGmxdknpwGCeHr8eVQhwHKPNnyc5w6TlusEZzHev2OW9lQQ8o+ tJZFd7g1bkDyvc2mc8w7kseZsxOSti8vERUaT9jadXzcsKONdAMyPpkt28hPOxPJ sm6vP2hOGtamjRQV9ZUeKweo/tu+8anHzATLKWEtKdXMmj2oGgW0IoE6hrI1yG3U DzM3U3n6Pg6B086rVPQxQaiD+OYJ+/h4eymc+taql7UiLeUD+IOJownuAkNRKS1H Uxlpro0AypSlcOudsoD74enrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsEn9USlR 2MbN8v65RJiBijqn6xwwHwYDVR0jBBgwFoAU/yC8N52JoNs75vzykPo91S63+iAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDNEZCLzA5OEZFMkU4RENE QzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05zNzV2enlrUG85MVM2My1p QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX3lDOE41MkpvTnM3NXZ6eWtQbzkxUzYzLWlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD NEZCLzA5OEZFMkU4RENEQzExRUY4RTI5MTg0NEM0RjlBRTAyL195QzhONTJKb05z NzV2enlrUG85MVM2My1pQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHyZQ4qnfcS1skor2jOPegeEBQKRyQc+4G3WCJq6frzbeZ1t3ULic0w/ Mt8pbhZqLuw4N/cKj5Gn7ee0fHzIgSbKksCIUAhNUSpsYvv4oLx8MvmfoLsOAJTu kDNGcv8nQ5vdmGdyYcQNZ1FA0Yi+PenLH1eNAmGQ7mdHzqKjFtDnUrFWYPu44sMS F+3L2ytIJ+5uukEfnLD2XBaVQJVTmoQ9ahFedsbuvuAUUUEJZ4P/cxeKj//948Zb 9WLYyEssFOyN+vJzrflmwDVTQzbJIPvI6bHJA6URQIXfphKlxMGChvv5TgqyxxA+ L9sZec7gOz/bUrBg8K6ZoJ0+flpkckc= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net