$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft File: VXcPY6DmX0wvyWrxmLxXhNznikY.mft (raw, json) Hash identifier: xpAIxDSM3Hxi+27w9LCGGAgihfROWNCaF4A296VkMeY= Subject key identifier: 06:E8:1B:03:4A:B2:93:27:F9:21:4B:A9:F0:F3:B0:84:83:A9:CD:2C Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft Manifest number: 89 Signing time: Sun 27 Apr 2025 05:24:13 +0000 Manifest this update: Sun 27 Apr 2025 05:24:13 +0000 Manifest next update: Sun 04 May 2025 05:24:13 +0000 Files and hashes: 1: VXcPY6DmX0wvyWrxmLxXhNznikY.crl (hash: WSt3eGIGXjHY4UbEgJNuR2I+ESs4qSIwqDYBBjqCc4k=) 2: 3590B0F65B9B11EFB90EBF42C4F9AE02.roa (hash: 969jdHyGdAb1flnXmcu6oMyF0jGTp5cUzC4c61xE+18=) 3: 887E73265B9A11EF80F47C41C4F9AE02.roa (hash: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU=) 4: 8A54B9326F0C11EF866A7A83C4F9AE02.roa (hash: 4E2LrZlO3ISS0nbt57DW68xHKT/RNp0hNVMadZS9u+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Validity Not Before: Apr 27 05:24:13 2025 GMT Not After : May 4 05:24:13 2025 GMT Subject: CN=680dbf7d-a90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:cd:a2:8f:4f:2a:d4:cb:79:7e:af:f6:99: 6d:5c:7e:32:1e:57:53:a1:db:8d:6e:0c:55:f7:9e: 8e:49:2a:80:42:69:fa:68:4e:fd:32:57:05:9f:df: 98:e1:22:4d:29:9f:9f:6b:30:3a:0d:a1:72:41:b7: b2:bc:11:7a:ad:8a:f9:43:7b:16:98:39:67:8f:0b: 74:c7:de:a1:2c:59:29:47:b6:e2:a4:18:ec:96:e9: dd:ca:34:b0:e3:e4:bd:f0:af:12:c7:ae:37:ec:b8: 6d:ee:43:51:83:2f:e2:26:c3:a2:a1:78:9c:9e:33: 23:0a:e1:5c:ca:34:62:21:b5:3d:6d:cf:3d:f5:1e: b4:97:f1:82:4b:26:89:92:9d:d0:3a:48:c5:cb:1f: a8:bc:e8:5d:cb:66:1a:44:0d:ac:f3:73:93:a2:57: ef:bc:6d:22:ec:1f:d6:7e:37:34:5d:1d:99:0a:82: 7d:04:c9:8b:6d:1b:4e:6d:44:9a:1b:9f:d8:a2:d3: 4d:e1:53:2a:50:09:d1:9b:f4:6b:b6:52:17:10:1f: 79:d6:84:0b:d6:ea:2c:4c:bc:c6:9e:99:5d:eb:e8: 4b:fc:f6:73:11:fb:f0:57:02:e7:f2:cb:47:fd:b3: 41:c1:79:db:6d:10:d3:bd:14:5d:b5:9b:ed:72:21: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E8:1B:03:4A:B2:93:27:F9:21:4B:A9:F0:F3:B0:84:83:A9:CD:2C X509v3 Authority Key Identifier: keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:19:76:85:6c:d9:dd:a2:c2:a0:e2:e7:9a:e0:ba:59:f0:80: 0e:5e:05:e0:f4:30:3e:a0:6e:85:61:d9:1d:c2:1a:5e:44:7c: cf:b6:f9:85:37:63:0f:fb:d4:d5:49:4d:ad:4e:85:c5:c2:47: 91:64:c2:06:b8:7b:64:b2:7d:c1:4d:3c:dc:94:36:b2:7e:e8: 29:21:eb:6b:19:e7:fe:8a:51:9c:e2:05:58:a7:d4:f5:2c:ed: c7:7b:95:7d:24:e4:55:0c:de:be:c6:3c:70:85:37:61:20:8b: 09:97:58:9f:85:46:87:ca:72:22:df:b3:b4:0d:ac:d6:19:8d: 13:a3:fb:96:20:96:33:f8:4e:35:9f:d1:09:48:99:0f:d8:8e: 94:c3:fb:1a:14:3d:57:75:04:4f:af:a6:c1:e5:ce:a2:ef:34: 02:6f:39:03:a1:b5:f3:65:a9:79:09:13:d5:23:f9:3b:88:a8: 48:11:32:2c:24:9b:15:6a:c4:be:c2:4e:5d:18:8b:73:07:b1: 6d:f7:02:26:56:ce:02:e8:79:50:8b:38:71:77:0c:dc:8e:7c: 5f:f6:6c:5f:5d:d5:a2:ec:f8:d8:37:47:31:17:13:dc:09:50: c4:77:ad:52:19:cb:e2:c1:b6:3b:bf:8a:b2:ea:23:db:d6:50: 08:7b:fa:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDU1NzcwRjYzQTBFNjVGNEMyRkM5NkFGMTk4QkM1Nzg0 RENFNzhBNDYwHhcNMjUwNDI3MDUyNDEzWhcNMjUwNTA0MDUyNDEzWjAYMRYwFAYD VQQDEw02ODBkYmY3ZC1hOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5nNoo9PKtTLeX6v9pltXH4yHldToduNbgxV956OSSqAQmn6aE79MlcFn9+Y 4SJNKZ+fazA6DaFyQbeyvBF6rYr5Q3sWmDlnjwt0x96hLFkpR7bipBjslundyjSw 4+S98K8Sx6437Lht7kNRgy/iJsOioXicnjMjCuFcyjRiIbU9bc899R60l/GCSyaJ kp3QOkjFyx+ovOhdy2YaRA2s83OTolfvvG0i7B/Wfjc0XR2ZCoJ9BMmLbRtObUSa G5/YotNN4VMqUAnRm/RrtlIXEB951oQL1uosTLzGnpld6+hL/PZzEfvwVwLn8stH /bNBwXnbbRDTvRRdtZvtciGrJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAboGwNK spMn+SFLqfDzsISDqc0sMB8GA1UdIwQYMBaAFFV3D2Og5l9ML8lq8Zi8V4Tc54pG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xMkQzMEZEODVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgwd3Z5V3J4bUx4WGhOem5p a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZYY1BZNkRtWDB3dnlXcnhtTHhYaE56bmlrWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xMkQzMEZEODVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9WWGNQWTZEbVgw d3Z5V3J4bUx4WGhOem5pa1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQGXaFbNndosKg4uea4LpZ8IAOXgXg9DA+oG6FYdkdwhpeRHzPtvmF N2MP+9TVSU2tToXFwkeRZMIGuHtksn3BTTzclDayfugpIetrGef+ilGc4gVYp9T1 LO3He5V9JORVDN6+xjxwhTdhIIsJl1ifhUaHynIi37O0DazWGY0To/uWIJYz+E41 n9EJSJkP2I6Uw/saFD1XdQRPr6bB5c6i7zQCbzkDobXzZal5CRPVI/k7iKhIETIs JJsVasS+wk5dGItzB7Ft9wImVs4C6HlQizhxdwzcjnxf9mxfXdWi7PjYN0cxFxPc CVDEd61SGcviwbY7v4qy6iPb1lAIe/oQ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net