$ rpki-client -vvf rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft File: VG-WOuptbna5EQBSY8aKUfuJJ7c.mft (raw, json) Hash identifier: GOpBOeeOJ0uDqfZPigPFpsSQuLX3Z/B5aBuniGVlrIk= Subject key identifier: E3:D7:F2:06:85:99:F3:41:20:A5:4D:EE:6E:EB:3C:5A:C1:E7:74:25 Authority key identifier: 54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 Certificate issuer: /CN=A91148C8/serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Certificate serial: 0B0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft Manifest number: 0AFD Signing time: Mon 28 Apr 2025 19:37:20 +0000 Manifest this update: Mon 28 Apr 2025 19:37:19 +0000 Manifest next update: Mon 05 May 2025 19:37:19 +0000 Files and hashes: 1: VG-WOuptbna5EQBSY8aKUfuJJ7c.crl (hash: 6mUxnBHGLBf+q5muoumvJ4u1rylQ0nwaxTKOCjLjmVA=) 2: 7717CED6419911EA9B9A146BC4F9AE02.roa (hash: +lIDB4ZMJfUSud6W0iovrastNVgYPAXPsXe69l2eSPM=) 3: 77A99FC8419911EA9B9A146BC4F9AE02.roa (hash: D3fpRnO+H4w2WyJAekG120AEE5NS6PdOTqoTbZ8Xvyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2826 (0xb0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91148C8, serialNumber=546F963AEA6D6E76B911005263C68A51FB8927B7 Validity Not Before: Apr 28 19:37:19 2025 GMT Not After : May 5 19:37:19 2025 GMT Subject: CN=680fd8ef-f04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:92:ec:a6:70:84:18:89:57:84:fc:f9:96:55: 5b:bc:85:1c:43:80:f6:ca:15:3d:30:5e:39:d7:a9: 88:c4:32:9e:36:b4:6a:1d:ca:9d:ee:75:5b:00:ef: b8:1b:a5:f5:1e:10:d4:c6:d4:4c:49:a8:ac:30:95: 9c:41:bd:ff:e0:64:fe:c7:bf:f3:36:1d:3e:02:f0: 9f:6c:6d:6a:09:2c:ab:f4:64:c2:b0:69:5c:35:d5: 21:d3:ed:06:6b:a8:4a:2f:93:b2:d9:7e:0e:31:19: 98:97:37:33:86:13:9c:14:61:db:22:43:85:e2:c2: c8:79:e7:41:60:c5:e2:77:72:d5:6b:3b:50:d7:ff: 81:8f:64:6f:ed:b4:b7:18:ca:37:70:38:6d:39:7e: 77:47:88:05:91:ae:78:28:83:d5:5e:e7:6c:64:5c: 5f:4f:3f:2f:be:c6:48:5f:c2:cc:68:73:84:7a:05: ae:1a:17:0e:7f:c4:e5:f3:e5:f2:20:d0:b6:7a:fb: 47:3d:51:6e:ab:22:57:42:56:57:7c:20:ef:dc:ca: 15:97:ef:bd:0b:36:78:d4:38:70:8e:93:94:c3:b4: 30:77:1d:7c:9d:9c:2a:aa:2e:48:2a:65:71:4d:f2: 47:37:92:a8:40:d3:22:2c:6a:37:ed:30:43:db:8f: 17:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D7:F2:06:85:99:F3:41:20:A5:4D:EE:6E:EB:3C:5A:C1:E7:74:25 X509v3 Authority Key Identifier: keyid:54:6F:96:3A:EA:6D:6E:76:B9:11:00:52:63:C6:8A:51:FB:89:27:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VG-WOuptbna5EQBSY8aKUfuJJ7c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91148C8/3364D31640CA11EA8992B85DC4F9AE02/VG-WOuptbna5EQBSY8aKUfuJJ7c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:85:a5:11:67:3c:4c:36:01:b9:cc:75:bc:8f:ab:6b:10:2c: 0e:e0:84:45:e4:56:92:16:cd:b3:48:02:9b:d5:e2:59:46:78: e6:9c:a6:13:d2:a5:c9:1b:b3:b5:04:08:e6:1a:cd:86:79:8f: 1c:23:6d:88:be:48:d3:03:89:25:e3:61:05:3b:01:cf:4d:7f: 46:3a:8e:87:a4:13:6f:a6:87:3e:72:31:7a:51:82:3a:68:31: f7:c6:70:b1:b9:34:c9:0b:8a:fc:3b:70:1b:ba:ec:62:d4:f8: 8c:23:2e:c8:e6:35:bb:9e:7f:53:b6:6a:f9:16:0d:88:6d:25: d2:c0:d0:8d:c1:a0:64:4c:87:3a:99:f5:25:2c:11:b0:eb:b6: d6:f3:d2:3d:44:62:70:a6:f5:f8:a7:c6:61:6d:e4:d4:4a:28: 44:49:f2:99:d2:2d:9c:de:38:31:48:50:d5:8f:48:57:95:cc: 91:6d:37:77:d2:10:d4:5d:50:5c:11:04:1a:26:88:fc:69:ed: bc:a6:33:77:a4:3e:c0:a6:dd:dd:f5:24:e6:15:f2:53:19:26: 90:64:35:0d:a7:b7:4c:e4:94:c6:82:6c:42:16:2b:b6:e6:c6: 22:73:e3:b3:42:24:e3:77:1e:b5:78:1f:7c:c9:89:cb:91:7e: ec:79:52:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4QzgxMTAvBgNVBAUTKDU0NkY5NjNBRUE2RDZFNzZCOTExMDA1MjYzQzY4QTUx RkI4OTI3QjcwHhcNMjUwNDI4MTkzNzE5WhcNMjUwNTA1MTkzNzE5WjAYMRYwFAYD VQQDEw02ODBmZDhlZi1mMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJLspnCEGIlXhPz5llVbvIUcQ4D2yhU9MF4516mIxDKeNrRqHcqd7nVbAO+4 G6X1HhDUxtRMSaisMJWcQb3/4GT+x7/zNh0+AvCfbG1qCSyr9GTCsGlcNdUh0+0G a6hKL5Oy2X4OMRmYlzczhhOcFGHbIkOF4sLIeedBYMXid3LVaztQ1/+Bj2Rv7bS3 GMo3cDhtOX53R4gFka54KIPVXudsZFxfTz8vvsZIX8LMaHOEegWuGhcOf8Tl8+Xy INC2evtHPVFuqyJXQlZXfCDv3MoVl++9CzZ41DhwjpOUw7Qwdx18nZwqqi5IKmVx TfJHN5KoQNMiLGo37TBD248XfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPX8gaF mfNBIKVN7m7rPFrB53QlMB8GA1UdIwQYMBaAFFRvljrqbW52uREAUmPGilH7iSe3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDhDOC8zMzY0RDMxNjQw Q0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJuYTVFUUJTWThhS1VmdUpK N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZHLVdPdXB0Ym5hNUVRQlNZOGFLVWZ1Sko3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDhDOC8zMzY0RDMxNjQwQ0ExMUVBODk5MkI4NURDNEY5QUUwMi9WRy1XT3VwdGJu YTVFUUJTWThhS1VmdUpKN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThaURZzxMNgG5zHW8j6trECwO4IRF5FaSFs2zSAKb1eJZRnjmnKYT 0qXJG7O1BAjmGs2GeY8cI22IvkjTA4kl42EFOwHPTX9GOo6HpBNvpoc+cjF6UYI6 aDH3xnCxuTTJC4r8O3Abuuxi1PiMIy7I5jW7nn9Ttmr5Fg2IbSXSwNCNwaBkTIc6 mfUlLBGw67bW89I9RGJwpvX4p8ZhbeTUSihESfKZ0i2c3jgxSFDVj0hXlcyRbTd3 0hDUXVBcEQQaJoj8ae28pjN3pD7Apt3d9STmFfJTGSaQZDUNp7dM5JTGgmxCFiu2 5sYic+OzQiTjdx61eB98yYnLkX7seVI5 -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:47 2025 by rpki-client on console.sobornost.net