$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json) Hash identifier: pZybxKQp8gymce7hYr3Z5KB0TqgWwf1lkhq7GK//KZU= Subject key identifier: 56:72:D7:B3:70:9F:89:2F:A7:CE:43:2D:80:53:9F:82:EB:33:21:D0 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft Manifest number: 2E Signing time: Sun 27 Apr 2025 06:30:37 +0000 Manifest this update: Sun 27 Apr 2025 06:30:36 +0000 Manifest next update: Sun 04 May 2025 06:30:36 +0000 Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: KTtyuGtjLk4ex2oin2/Et6mGiXcX4vHrYBC/DJypUEU=) 2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: u93MIpjxF46V825wNe89adLBqBtdyI8rJgiDXDAPRbk=) 3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Validity Not Before: Apr 27 06:30:36 2025 GMT Not After : May 4 06:30:36 2025 GMT Subject: CN=680dcf0d-c282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:1c:b2:0c:3e:d4:51:b7:2f:f7:96:0e:46: d0:64:e5:80:b5:c3:3f:67:52:5e:60:4e:59:d1:86: e2:9e:c8:14:d1:a2:c8:fb:cf:75:78:b0:16:04:f5: 8b:80:9d:fb:b9:72:85:b1:54:90:12:8d:73:27:65: 16:c5:eb:b1:76:a7:98:58:12:ab:78:70:05:10:10: da:fa:73:cd:d7:9c:eb:e9:48:63:cb:4d:9c:76:ac: 81:4c:10:ec:41:d7:ca:b2:f1:0a:8f:8b:72:97:a3: 4e:8e:29:44:12:68:6b:14:9a:fb:3a:e8:7c:ad:01: 13:a3:5f:36:ae:04:83:92:a8:4d:d3:7e:fd:d3:4c: 69:3e:53:ca:74:d5:00:b4:ea:4b:be:ca:ff:a5:01: 18:a1:49:5b:14:3b:99:ee:6b:95:b3:55:c1:e4:2a: a9:16:29:99:14:d2:4c:db:68:a2:01:1f:b9:f1:e9: 75:39:fb:60:63:84:c6:ff:ab:90:4e:33:54:03:f0: 4f:a2:5d:c0:ac:5d:58:3b:7a:ce:1f:fb:0a:dc:bf: da:3d:21:c5:ac:7e:14:42:66:d5:eb:14:41:4f:79: b8:f4:d7:39:a8:35:36:34:77:ce:73:ca:d7:a3:2d: d4:1f:90:2e:72:6d:8b:db:a5:6e:87:d6:c8:66:9e: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:72:D7:B3:70:9F:89:2F:A7:CE:43:2D:80:53:9F:82:EB:33:21:D0 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e7:f9:1e:a6:2e:a6:4a:b7:21:8b:92:67:f6:cf:dd:27:6b: ca:2b:93:49:14:9b:a7:52:ba:63:12:44:4e:e1:ec:23:7b:66: e1:e6:0e:c9:88:ad:97:3d:b5:af:86:91:01:75:fa:db:02:c4: 24:b1:04:84:14:dd:1a:53:f3:93:5a:b0:32:48:0c:4a:54:74: 64:f1:5b:b2:e2:44:aa:78:39:f4:24:c1:d7:8c:6d:de:83:9e: af:b4:d3:e9:2e:57:5f:f5:fa:6a:e5:fa:80:7e:69:2b:2b:6e: 67:c6:9e:df:da:3a:88:93:92:b1:0a:d3:0a:9e:74:59:02:60: ff:0c:db:b5:94:d3:93:26:01:02:c1:43:7a:5c:29:2e:1a:f4: 78:4a:3b:60:12:44:ca:88:06:5e:1f:e1:6a:71:50:86:ee:c5: ca:c5:76:d3:4a:3b:79:79:b5:8a:7e:b6:d4:37:d2:ce:bd:88: f8:32:e7:db:c5:ec:8a:03:44:54:9b:75:eb:be:31:a9:41:aa: 29:f4:8b:f3:3c:41:e9:89:93:68:eb:a1:ea:c4:1a:ce:13:3e: d3:3f:1c:53:f2:16:38:bb:08:e8:c0:73:11:e4:df:b8:fe:e9: d1:f0:22:aa:2c:1d:35:f9:c5:27:a5:70:59:19:d5:92:d6:2b: f6:bb:87:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTA0MjcwNjMwMzZaFw0yNTA1MDQwNjMwMzZaMBgxFjAUBgNV BAMTDTY4MGRjZjBkLWMyODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUUhyyDD7UUbcv95YORtBk5YC1wz9nUl5gTlnRhuKeyBTRosj7z3V4sBYE9YuA nfu5coWxVJASjXMnZRbF67F2p5hYEqt4cAUQENr6c83XnOvpSGPLTZx2rIFMEOxB 18qy8QqPi3KXo06OKUQSaGsUmvs66HytAROjXzauBIOSqE3Tfv3TTGk+U8p01QC0 6ku+yv+lARihSVsUO5nua5WzVcHkKqkWKZkU0kzbaKIBH7nx6XU5+2BjhMb/q5BO M1QD8E+iXcCsXVg7es4f+wrcv9o9IcWsfhRCZtXrFEFPebj01zmoNTY0d85zytej LdQfkC5ybYvbpW6H1shmnuJLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVnLXs3Cf iS+nzkMtgFOfguszIdAwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE QjY2Lzc3QjYxOTlDRTA5QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RX cVJkdmtFendNRVBhVFpLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIrn+R6mLqZKtyGLkmf2z90na8ork0kUm6dSumMSRE7h7CN7ZuHmDsmI rZc9ta+GkQF1+tsCxCSxBIQU3RpT85NasDJIDEpUdGTxW7LiRKp4OfQkwdeMbd6D nq+00+kuV1/1+mrl+oB+aSsrbmfGnt/aOoiTkrEK0wqedFkCYP8M27WU05MmAQLB Q3pcKS4a9HhKO2ASRMqIBl4f4WpxUIbuxcrFdtNKO3l5tYp+ttQ30s69iPgy59vF 7IoDRFSbdeu+MalBqin0i/M8QemJk2jroerEGs4TPtM/HFPyFji7COjAcxHk37j+ 6dHwIqosHTX5xSelcFkZ1ZLWK/a7h0E= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net