$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json) Hash identifier: +pF/WO1Zvl9YxJuCrXYx11cktncUDIh0dXn8oYBTIK4= Subject key identifier: 69:69:BD:24:42:36:6A:D8:65:6D:31:20:42:13:B0:A8:F7:80:1B:9C Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft Manifest number: 3F Signing time: Sun 27 Apr 2025 06:16:54 +0000 Manifest this update: Sun 27 Apr 2025 06:16:54 +0000 Manifest next update: Sun 04 May 2025 06:16:54 +0000 Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: 1VS9RmyJMDPZ2PgkKE4+7M+QxIzf8Ni26s9uFPcfe+g=) 2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Validity Not Before: Apr 27 06:16:54 2025 GMT Not After : May 4 06:16:54 2025 GMT Subject: CN=680dcbd6-5565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:60:e3:1a:3f:86:d3:c5:34:12:79:57:30: 41:15:6b:a8:a6:93:0f:de:f3:9f:f9:03:e4:5d:6b: 72:e9:0a:ae:19:24:37:21:ee:c4:67:96:e4:fe:1e: 8f:ec:50:08:aa:81:28:bc:6b:e1:2a:ee:c2:33:de: 7e:d9:ca:0f:8f:f4:e6:32:12:b7:f8:82:fc:b5:13: 59:e7:8d:85:94:68:a2:44:10:ea:64:e9:49:ff:3a: 7b:91:38:73:6c:31:5b:b6:ac:82:26:c7:85:ae:f6: e4:83:ef:af:b9:02:9f:bc:48:d9:eb:76:fd:be:e5: 40:ec:57:a9:36:49:da:a2:21:b7:ce:f2:d6:c9:01: be:28:bc:be:7b:57:5c:23:cb:a7:b2:37:e6:8c:7f: 80:fd:c6:70:ee:aa:b7:99:d8:77:b2:7a:77:de:bb: 08:5d:4b:64:4a:de:c9:9b:b7:be:5d:59:64:14:d0: 61:6e:04:07:e8:fa:f4:ae:a1:2c:7d:d0:13:22:2c: de:01:0c:44:51:6f:17:c8:ab:50:88:08:b1:99:1e: bd:28:b8:5d:c6:8e:20:93:02:21:6d:4b:95:70:6a: 56:81:9f:07:ff:ff:7c:9f:54:a1:37:ff:66:27:fa: 2b:d8:b9:a5:1b:bc:3c:ef:a8:3a:5f:4e:e1:0d:32: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:BD:24:42:36:6A:D8:65:6D:31:20:42:13:B0:A8:F7:80:1B:9C X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:55:8d:b7:e8:d0:35:98:cf:f0:b1:ee:6e:0c:57:4b:73:b9: c2:0c:c0:7b:24:d2:f8:4e:6f:dd:43:31:bc:5c:8e:8a:2d:95: 13:a0:eb:c3:e8:db:19:7c:eb:bd:52:f8:8e:38:b6:67:40:88: c7:62:37:1c:a5:a4:f2:9b:07:fe:03:1a:02:dd:ae:34:82:eb: e7:e7:5b:44:1c:63:20:90:21:74:18:63:1c:53:c6:a2:b2:31: 17:06:fe:90:5a:e4:29:19:f9:95:76:23:71:99:0e:65:4b:e3: a9:ad:8e:e9:ad:05:74:a4:39:2f:fe:6a:9b:37:59:bc:5f:17: 1e:51:7b:37:f1:5a:7f:81:93:c8:a1:0a:7e:8b:31:00:e8:0a: 70:85:8d:da:3c:8f:ee:8c:a1:5b:e1:17:a8:0d:dd:f5:a4:26: a5:7b:02:f4:49:a7:2b:48:8d:19:f9:7c:a3:4c:ce:11:b8:52: 8c:48:54:50:81:32:16:6d:51:af:94:c9:52:25:85:3a:72:39: fc:99:9d:fe:a9:92:05:9a:55:1f:5f:77:0a:47:c5:39:38:0f: 72:8a:6b:e5:05:a4:5f:47:34:39:58:0d:c7:81:8b:d9:c7:a4: da:c5:b9:86:df:cb:a3:d3:6b:44:38:2d:ce:31:30:08:aa:03: ca:76:9d:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQkNENUFCRDlDOTFDQTFFN0YyQzQ1NTU3MDVCMjk0MDRG NTA1QkRDNTAeFw0yNTA0MjcwNjE2NTRaFw0yNTA1MDQwNjE2NTRaMBgxFjAUBgNV BAMTDTY4MGRjYmQ2LTU1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH1mDjGj+G08U0EnlXMEEVa6imkw/e85/5A+Rda3LpCq4ZJDch7sRnluT+Ho/s UAiqgSi8a+Eq7sIz3n7Zyg+P9OYyErf4gvy1E1nnjYWUaKJEEOpk6Un/OnuROHNs MVu2rIImx4Wu9uSD76+5Ap+8SNnrdv2+5UDsV6k2SdqiIbfO8tbJAb4ovL57V1wj y6eyN+aMf4D9xnDuqreZ2HeyenfeuwhdS2RK3smbt75dWWQU0GFuBAfo+vSuoSx9 0BMiLN4BDERRbxfIq1CICLGZHr0ouF3GjiCTAiFtS5VwalaBnwf//3yfVKE3/2Yn +ivYuaUbvDzvqDpfTuENMp5vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaWm9JEI2 athlbTEgQhOwqPeAG5wwHwYDVR0jBBgwFoAUvNWr2ckcoefyxFVXBbKUBPUFvcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzEyREU4QTVFQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdk5XcjJja2NvZWZ5eEZWWEJiS1VCUFVGdmNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJG MjgxLzEyREU4QTVFQzY2RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2Vm eXhGVlhCYktVQlBVRnZjVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZVjbfo0DWYz/Cx7m4MV0tzucIMwHsk0vhOb91DMbxcjootlROg68Po 2xl8671S+I44tmdAiMdiNxylpPKbB/4DGgLdrjSC6+fnW0QcYyCQIXQYYxxTxqKy MRcG/pBa5CkZ+ZV2I3GZDmVL46mtjumtBXSkOS/+aps3WbxfFx5RezfxWn+Bk8ih Cn6LMQDoCnCFjdo8j+6MoVvhF6gN3fWkJqV7AvRJpytIjRn5fKNMzhG4UoxIVFCB MhZtUa+UyVIlhTpyOfyZnf6pkgWaVR9fdwpHxTk4D3KKa+UFpF9HNDlYDceBi9nH pNrFuYbfy6PTa0Q4Lc4xMAiqA8p2nTM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net