$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: j+kszjcE0HSicypEyio/5A3WKE8WmPQ583ASmm7AASM= Subject key identifier: DC:6F:B2:F3:7C:26:8C:A8:16:F6:83:9A:23:BE:A6:B1:24:FA:35:43 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1BBA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1BB8 Signing time: Thu 24 Apr 2025 16:14:36 +0000 Manifest this update: Thu 24 Apr 2025 16:14:35 +0000 Manifest next update: Thu 01 May 2025 16:14:35 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: sv6ZHm4k8DHhxw3DFVXXIoYxIG5ZdpGGmQZ3dTW7RJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7098 (0x1bba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Apr 24 16:14:35 2025 GMT Not After : May 1 16:14:35 2025 GMT Subject: CN=680a636b-1424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:77:c6:8b:32:dc:be:71:d8:f4:82:cd:84:02: 6b:11:60:e5:28:b7:a5:ba:12:69:d2:9a:2f:ab:86: 13:e0:20:6e:99:7c:d7:ef:57:88:92:c2:e5:18:63: 27:23:7e:fe:3d:94:a3:79:bc:00:5b:72:21:52:5b: b8:02:5b:d6:a1:4a:85:9b:f5:8d:cd:76:00:fd:c8: 4b:3f:1e:72:a5:04:df:8f:f2:5e:b9:a3:a6:32:4e: f6:39:08:f7:8f:aa:71:22:d0:da:d3:53:e1:68:a4: 48:f2:c2:38:af:c5:0d:5f:4d:34:ee:54:be:cb:06: fe:c3:5a:d6:71:0b:d2:d6:ed:b7:7e:72:58:fe:c3: 6a:90:bf:93:81:b4:aa:a4:a0:93:80:cd:79:a1:1f: 77:1d:19:76:eb:27:ad:cc:b8:5a:9f:b5:12:3c:99: 42:63:c7:b1:9c:3d:54:18:e3:05:98:81:b5:06:2b: 98:b2:ea:e4:c5:b5:fd:99:5e:c9:fd:40:5b:47:d7: b3:d6:b2:b6:61:6a:87:91:ab:8d:cf:80:65:14:1a: 98:20:87:0e:ab:32:d4:89:21:09:bb:42:f1:b0:04: cb:cc:76:52:4b:06:23:23:99:66:24:39:4c:8f:2d: a3:28:17:22:20:d5:48:a4:6d:b3:05:32:d3:cb:9a: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6F:B2:F3:7C:26:8C:A8:16:F6:83:9A:23:BE:A6:B1:24:FA:35:43 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:82:2b:3c:c1:89:06:43:fb:88:73:76:a5:3f:f4:9f:cf:ab: 20:e1:34:1e:bf:25:ca:85:b1:54:ca:c6:de:cd:c2:c0:2e:75: 9a:2b:78:de:ef:76:f7:f5:ae:69:b7:a8:d8:8d:a5:21:59:d6: c2:d5:4e:22:5d:43:68:d6:47:a3:b1:bd:a7:50:25:44:40:b7: 85:06:22:f5:42:fd:c6:ab:de:3d:94:b2:2c:c9:3c:6f:b5:21: 9c:51:5c:ce:52:ff:3e:9e:54:18:10:4d:8d:cf:bc:4f:5e:86: 65:c9:b2:07:0a:a8:80:6e:30:ac:61:8e:a0:4a:7f:c0:a2:ee: df:de:07:9e:0f:54:bf:49:cb:18:fb:dc:2f:3e:a8:55:ef:b6: 4b:ce:0e:aa:fb:d9:9d:bc:6a:dc:82:61:86:c5:fb:a4:d6:21: 18:6e:61:6e:f6:c6:0b:84:58:e8:1c:89:78:39:53:ac:62:62: f7:98:8a:f5:d2:f4:ae:fa:b8:90:9d:12:d9:97:99:f0:30:43: 99:ad:2d:8e:99:cc:6e:8a:82:3c:29:1c:96:0b:39:db:4c:87: 30:88:21:fb:a7:79:20:e5:c4:f7:e8:55:6e:b7:33:5a:75:81: ef:f5:b7:3c:8a:7f:37:a5:35:35:d6:20:e3:32:5f:88:64:1d: fe:68:d0:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUwNDI0MTYxNDM1WhcNMjUwNTAxMTYxNDM1WjAYMRYwFAYD VQQDEw02ODBhNjM2Yi0xNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3fGizLcvnHY9ILNhAJrEWDlKLeluhJp0povq4YT4CBumXzX71eIksLlGGMn I37+PZSjebwAW3IhUlu4AlvWoUqFm/WNzXYA/chLPx5ypQTfj/JeuaOmMk72OQj3 j6pxItDa01PhaKRI8sI4r8UNX0007lS+ywb+w1rWcQvS1u23fnJY/sNqkL+TgbSq pKCTgM15oR93HRl26yetzLhan7USPJlCY8exnD1UGOMFmIG1BiuYsurkxbX9mV7J /UBbR9ez1rK2YWqHkauNz4BlFBqYIIcOqzLUiSEJu0LxsATLzHZSSwYjI5lmJDlM jy2jKBciINVIpG2zBTLTy5oy+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxvsvN8 JoyoFvaDmiO+prEk+jVDMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQgis8wYkGQ/uIc3alP/Sfz6sg4TQevyXKhbFUysbezcLALnWaK3je 73b39a5pt6jYjaUhWdbC1U4iXUNo1kejsb2nUCVEQLeFBiL1Qv3Gq949lLIsyTxv tSGcUVzOUv8+nlQYEE2Nz7xPXoZlybIHCqiAbjCsYY6gSn/Aou7f3geeD1S/ScsY +9wvPqhV77ZLzg6q+9mdvGrcgmGGxfuk1iEYbmFu9sYLhFjoHIl4OVOsYmL3mIr1 0vSu+riQnRLZl5nwMEOZrS2OmcxuioI8KRyWCznbTIcwiCH7p3kg5cT36FVutzNa dYHv9bc8in83pTU11iDjMl+IZB3+aNAe -----END CERTIFICATE-----Generated at Thu Apr 24 18:07:57 2025 by rpki-client on console.sobornost.net