$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json) Hash identifier: y2VF+P1sVroLRBoHwlVGSRg2CxBsNZjjpI5tN911lB4= Subject key identifier: 68:F5:3E:70:2C:0F:45:CD:F8:E8:E2:50:B3:5B:49:99:05:E7:52:13 Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft Manifest number: 6F Signing time: Sun 27 Apr 2025 05:44:50 +0000 Manifest this update: Sun 27 Apr 2025 05:44:50 +0000 Manifest next update: Sun 04 May 2025 05:44:50 +0000 Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: DyNmlGXpBQyHl7CDiXf8qEQ5hLXPaVq8wWO6qy6K2bM=) 2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: APURPczfV1ii5Oz3jn5uLGx4X2/aeoAU9n96jwy9b0A=) 3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: utVxhZKF0BG0gKmfkjY5U3UQKAW2XCaaTxVRnaQMDbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582 Validity Not Before: Apr 27 05:44:50 2025 GMT Not After : May 4 05:44:50 2025 GMT Subject: CN=680dc452-0ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:f0:5e:d3:be:c7:10:62:3e:7b:e4:be:d1: 9d:f2:fc:6d:5b:f3:96:ab:2b:5a:3d:21:31:aa:77: db:1d:66:52:6e:23:97:1a:6a:15:6f:6e:d0:77:a2: 0d:98:a1:2c:48:59:ba:f7:eb:b9:a2:a9:e9:30:8f: cc:73:98:ae:06:5d:5b:4b:67:67:c5:31:94:22:5e: 84:6f:9b:23:36:92:53:48:38:23:61:32:2f:de:da: 50:dd:3e:49:25:72:6d:d4:01:ed:d5:4e:5f:78:a1: 95:ec:ac:d4:37:84:a2:85:0a:fe:e3:d5:9e:75:0e: b6:84:8a:e4:e3:ad:be:27:95:8a:52:58:0e:39:05: c4:a0:f7:44:12:21:2e:6a:eb:22:39:2b:0a:97:ee: 39:d2:b1:8c:04:b1:12:f2:50:a5:75:22:37:39:0a: d4:87:7a:0b:d9:e3:02:53:48:9f:2e:ec:ad:51:d0: e4:1f:24:fb:17:55:b2:16:99:af:c9:13:65:bb:29: 88:ff:45:bb:b3:9b:6a:ab:f0:e0:64:33:15:a7:01: 1a:75:da:36:34:e2:db:cc:59:df:59:0d:62:5b:01: e7:e8:87:65:5f:2d:eb:5a:a9:27:6e:f3:69:7e:6b: 1d:a1:d5:86:2f:9e:cc:df:67:c3:f3:61:76:2c:38: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F5:3E:70:2C:0F:45:CD:F8:E8:E2:50:B3:5B:49:99:05:E7:52:13 X509v3 Authority Key Identifier: keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:8d:6a:0c:83:dd:a6:38:dc:8a:c6:df:38:de:66:cc:73:f7: 5b:d0:08:68:7f:21:d1:8f:5d:77:f0:3c:b2:73:0c:f5:48:82: 3f:0b:e5:0b:53:7a:dc:ff:6c:68:56:87:27:a1:49:b7:e9:7c: cc:3d:3f:fa:92:7e:1e:53:99:7c:d1:c2:fc:af:5a:5b:d9:7f: af:78:c6:a8:a8:f7:6b:e4:b7:1e:a0:af:d5:54:0d:00:a8:c9: 02:d0:84:2e:77:d5:ab:35:e4:09:e1:a7:b5:0f:ae:b8:30:ff: f9:e7:3c:46:61:4e:c0:3f:a9:9e:9f:d0:fd:97:a9:57:f3:10: 73:a1:8d:75:ab:81:e1:9e:d8:c7:4c:57:6e:e1:44:72:66:b5: 00:20:cd:fc:6a:eb:16:b4:e9:c7:83:c7:cf:94:37:25:21:36: b7:93:66:66:54:2f:4e:32:d9:96:19:f1:33:54:08:d9:00:1f: 57:c4:a0:fe:a0:b0:fe:0c:4c:08:ab:4c:a3:c8:b3:0a:bf:78: 26:26:7f:35:5c:b9:e6:e7:31:8b:ed:c5:8c:12:cd:8f:cb:47: 80:1c:a4:ae:83:5c:53:a5:81:bd:b1:ae:87:c6:a4:39:2c:77: 10:5b:47:f9:ef:d8:cc:46:14:b8:4e:6d:ad:4c:f2:7e:7c:31: 79:71:66:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzZGQTExMC8GA1UEBRMoNTUzM0E3QzU3QkY0REIxRTUzOEY5RTc3RTBCNDg2OEI4 RjkwQzU4MjAeFw0yNTA0MjcwNTQ0NTBaFw0yNTA1MDQwNTQ0NTBaMBgxFjAUBgNV BAMTDTY4MGRjNDUyLTBmZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbA/Be077HEGI+e+S+0Z3y/G1b85arK1o9ITGqd9sdZlJuI5caahVvbtB3og2Y oSxIWbr367miqekwj8xzmK4GXVtLZ2fFMZQiXoRvmyM2klNIOCNhMi/e2lDdPkkl cm3UAe3VTl94oZXsrNQ3hKKFCv7j1Z51DraEiuTjrb4nlYpSWA45BcSg90QSIS5q 6yI5KwqX7jnSsYwEsRLyUKV1Ijc5CtSHegvZ4wJTSJ8u7K1R0OQfJPsXVbIWma/J E2W7KYj/Rbuzm2qr8OBkMxWnARp12jY04tvMWd9ZDWJbAefoh2VfLetaqSdu82l+ ax2h1YYvnszfZ8PzYXYsOP/PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaPU+cCwP Rc346OJQs1tJmQXnUhMwHwYDVR0jBBgwFoAUVTOnxXv02x5Tj5534LSGi4+QxYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3NkZBLzlDNTJBN0U4ODRD OTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1VGo1NTM0TFNHaTQtUXhZ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlRPbnhYdjAyeDVUajU1MzRMU0dpNC1ReFlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 NkZBLzlDNTJBN0U4ODRDOTExRUZCNTREMEM0OUM0RjlBRTAyL1ZUT254WHYwMng1 VGo1NTM0TFNHaTQtUXhZSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSNagyD3aY43IrG3zjeZsxz91vQCGh/IdGPXXfwPLJzDPVIgj8L5QtT etz/bGhWhyehSbfpfMw9P/qSfh5TmXzRwvyvWlvZf694xqio92vktx6gr9VUDQCo yQLQhC531as15Anhp7UPrrgw//nnPEZhTsA/qZ6f0P2XqVfzEHOhjXWrgeGe2MdM V27hRHJmtQAgzfxq6xa06ceDx8+UNyUhNreTZmZUL04y2ZYZ8TNUCNkAH1fEoP6g sP4MTAirTKPIswq/eCYmfzVcuebnMYvtxYwSzY/LR4AcpK6DXFOlgb2xrofGpDks dxBbR/nv2MxGFLhOba1M8n58MXlxZsw= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net