$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft File: VB4KZv5g86rAJQLO8eSOYnpi90E.mft (raw, json) Hash identifier: NOoXd50cZdMSA+zzBhFQLHvVVlT2pPpys9k/b9Lzxvc= Subject key identifier: 53:07:3A:32:FA:DC:BB:B4:70:A1:61:A8:6C:12:B7:32:5D:13:C6:26 Authority key identifier: 54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 Certificate issuer: /CN=A91288D9/serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft Manifest number: 0AF5 Signing time: Mon 28 Apr 2025 19:42:38 +0000 Manifest this update: Mon 28 Apr 2025 19:42:38 +0000 Manifest next update: Mon 05 May 2025 19:42:38 +0000 Files and hashes: 1: VB4KZv5g86rAJQLO8eSOYnpi90E.crl (hash: hxpQvLA+XS+EbEKyrHh693Zcvh7Be/UoNrcgqupfCyc=) 2: E0FCE614425811EAADEA3B45C4F9AE02.roa (hash: uo0CqqDq1LW4OE16oHJh3v7l3D+UDenz/raY8uxIHFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91288D9, serialNumber=541E0A66FE60F3AAC02502CEF1E48E627A62F741 Validity Not Before: Apr 28 19:42:38 2025 GMT Not After : May 5 19:42:38 2025 GMT Subject: CN=680fda2e-183a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:fe:e3:55:61:f3:2c:cb:01:4c:a0:48:58: 20:bc:b3:91:d5:07:9f:08:b0:ad:eb:cb:2e:05:77: 2c:89:79:27:6c:54:eb:20:5e:09:cd:4a:6e:a1:83: 8e:b8:87:69:4e:54:c1:e0:10:35:8c:18:42:db:23: 8f:d8:e7:10:31:89:a7:7c:b8:e3:99:b2:56:66:04: b9:9a:4f:93:4e:1e:aa:b2:cc:65:ff:38:93:76:31: c1:a7:e4:e9:25:42:36:25:55:d3:5e:9f:50:43:fa: 74:a9:3f:e1:6c:ea:14:59:bd:50:8d:d5:c3:e3:e9: fb:1a:68:9b:5a:81:69:86:0e:77:18:91:96:45:1e: 76:38:a1:e4:eb:82:0d:a1:70:32:06:d5:70:1c:2a: 2e:f9:2c:a3:6d:74:61:02:d0:71:65:12:a0:10:1b: 87:37:37:dd:2b:6e:c1:09:48:b8:4a:d1:5a:06:2b: 15:1f:93:19:ed:f6:81:17:07:a5:a4:d4:86:8a:b1: 21:6f:23:c9:18:8f:18:74:10:13:b1:40:54:45:60: 5c:cd:be:b6:14:e0:10:4b:40:6b:b8:b3:b0:6a:5b: 9a:73:ac:1a:53:63:cd:68:90:86:2c:96:6c:f7:63: 6d:e2:69:52:75:53:34:bc:e7:28:f6:2a:74:60:e1: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:07:3A:32:FA:DC:BB:B4:70:A1:61:A8:6C:12:B7:32:5D:13:C6:26 X509v3 Authority Key Identifier: keyid:54:1E:0A:66:FE:60:F3:AA:C0:25:02:CE:F1:E4:8E:62:7A:62:F7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VB4KZv5g86rAJQLO8eSOYnpi90E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/BA59535E425711EA8F838A43C4F9AE02/VB4KZv5g86rAJQLO8eSOYnpi90E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a3:65:05:53:58:d8:c1:0d:5e:45:72:79:12:5c:82:1a:e9: 57:3f:7d:44:25:66:ae:17:be:4d:a7:9d:ef:90:6a:12:e2:1c: 23:eb:66:48:8a:86:51:65:60:d1:36:8f:47:fd:ca:9f:43:ea: 24:b3:eb:2f:d7:b5:a0:48:dc:62:76:24:df:5f:42:76:09:3d: a0:91:5f:cc:c1:37:a9:2d:2b:9c:9a:ff:1d:39:8c:c2:57:71: 9c:90:7a:8d:15:45:0b:ff:3a:a4:3b:6f:c3:8b:d8:45:d4:80: fb:55:ee:82:f5:a3:72:05:ac:f9:6e:0b:d1:c6:ab:51:17:f1: 4d:46:3a:91:6e:a6:33:b3:bf:cb:0f:d3:d1:1a:b2:40:94:74: c5:b1:35:5f:90:5b:fe:76:96:87:22:6a:5f:51:74:d4:59:61: 82:e7:29:17:c5:e4:20:e1:36:45:d6:fc:d8:16:0f:cb:15:a3: 11:2f:47:da:44:f4:fd:28:76:be:3e:2b:33:f4:d4:67:82:05: 1e:97:af:da:04:cc:cf:ab:f8:96:00:5c:49:0d:0e:98:9e:70: 09:33:e5:28:a7:dc:15:9e:18:9b:58:07:e6:d2:c6:89:a7:92: e2:0b:40:56:69:08:07:21:50:d1:40:4f:4d:a1:24:5c:5d:52: 7b:57:fd:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg4RDkxMTAvBgNVBAUTKDU0MUUwQTY2RkU2MEYzQUFDMDI1MDJDRUYxRTQ4RTYy N0E2MkY3NDEwHhcNMjUwNDI4MTk0MjM4WhcNMjUwNTA1MTk0MjM4WjAYMRYwFAYD VQQDEw02ODBmZGEyZS0xODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqv+41Vh8yzLAUygSFggvLOR1QefCLCt68suBXcsiXknbFTrIF4JzUpuoYOO uIdpTlTB4BA1jBhC2yOP2OcQMYmnfLjjmbJWZgS5mk+TTh6qssxl/ziTdjHBp+Tp JUI2JVXTXp9QQ/p0qT/hbOoUWb1QjdXD4+n7GmibWoFphg53GJGWRR52OKHk64IN oXAyBtVwHCou+SyjbXRhAtBxZRKgEBuHNzfdK27BCUi4StFaBisVH5MZ7faBFwel pNSGirEhbyPJGI8YdBATsUBURWBczb62FOAQS0BruLOwaluac6waU2PNaJCGLJZs 92Nt4mlSdVM0vOco9ip0YOHjVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMHOjL6 3Lu0cKFhqGwStzJdE8YmMB8GA1UdIwQYMBaAFFQeCmb+YPOqwCUCzvHkjmJ6YvdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9CQTU5NTM1RTQy NTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2ckFKUUxPOGVTT1lucGk5 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZCNEtadjVnODZyQUpRTE84ZVNPWW5waTkwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODhEOS9CQTU5NTM1RTQyNTcxMUVBOEY4MzhBNDNDNEY5QUUwMi9WQjRLWnY1Zzg2 ckFKUUxPOGVTT1lucGk5MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8o2UFU1jYwQ1eRXJ5ElyCGulXP31EJWauF75Np53vkGoS4hwj62ZI ioZRZWDRNo9H/cqfQ+oks+sv17WgSNxidiTfX0J2CT2gkV/MwTepLSucmv8dOYzC V3GckHqNFUUL/zqkO2/Di9hF1ID7Ve6C9aNyBaz5bgvRxqtRF/FNRjqRbqYzs7/L D9PRGrJAlHTFsTVfkFv+dpaHImpfUXTUWWGC5ykXxeQg4TZF1vzYFg/LFaMRL0fa RPT9KHa+Pisz9NRnggUel6/aBMzPq/iWAFxJDQ6YnnAJM+Uop9wVnhibWAfm0saJ p5LiC0BWaQgHIVDRQE9NoSRcXVJ7V/0H -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:57 2025 by rpki-client on console.sobornost.net