$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft File: 3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json) Hash identifier: PzqlMnyQBP8ZhcuwjZuOmWeV3+wvzfPKgioG6g+NNe4= Subject key identifier: 51:35:A7:CF:DB:3D:09:11:03:6F:1D:70:E3:19:65:60:E8:07:64:40 Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 Certificate issuer: /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft Manifest number: 6A Signing time: Sun 27 Apr 2025 05:44:34 +0000 Manifest this update: Sun 27 Apr 2025 05:44:33 +0000 Manifest next update: Sun 04 May 2025 05:44:33 +0000 Files and hashes: 1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: X/ygEZHrt6eOGY6XLzNNpoimH21JEaAYyCYpPFz8Quc=) 2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0 Validity Not Before: Apr 27 05:44:33 2025 GMT Not After : May 4 05:44:33 2025 GMT Subject: CN=680dc442-fe77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:f6:89:48:29:89:94:d4:69:46:95:a3:1a: 3f:21:aa:87:43:6e:97:30:b6:b7:a5:d5:ee:7a:de: 1b:e0:29:7a:3d:60:69:0a:dc:40:00:78:e6:bd:45: 2c:97:20:17:81:be:5b:1e:d7:31:10:68:a6:30:f0: bd:74:be:25:6e:de:fb:62:be:b0:16:0d:31:60:48: 71:9a:b9:35:6c:27:1a:ac:91:f6:9c:ba:cc:5c:c8: 03:6a:2a:e7:ad:b7:07:9c:4b:bc:4d:de:70:ba:7c: 1e:58:d4:9b:e4:de:03:08:e2:cd:27:b1:43:9c:fc: 22:5d:6f:58:5b:5d:43:17:ed:2b:ef:8c:4c:ca:d5: 72:d8:7b:61:68:82:7e:2f:9c:73:31:5c:26:a1:36: 4a:eb:7b:06:2b:af:74:a5:27:71:5d:ba:9e:c5:6c: 0d:21:33:52:f6:2c:26:19:1d:c9:2f:40:01:4d:f3: 99:ab:1b:f4:c0:e4:e8:4c:dd:2f:93:69:dc:6c:84: c1:85:fb:3b:da:85:1b:98:9f:7d:26:01:33:7f:04: 2f:ac:f0:65:95:34:8d:93:50:d9:b6:7f:97:d1:1b: 25:9f:d5:19:ed:61:49:18:69:47:3e:49:27:1b:2d: 35:92:cc:24:cb:fa:df:d6:96:36:e4:92:6d:1b:49: ff:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:35:A7:CF:DB:3D:09:11:03:6F:1D:70:E3:19:65:60:E8:07:64:40 X509v3 Authority Key Identifier: keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:75:b8:2c:40:01:14:36:a1:ad:91:65:bb:35:b5:fa:b8:b3: a2:ea:45:d1:cd:5f:b3:02:86:ae:a8:92:75:5a:d2:99:4f:9c: 14:cc:fa:95:e6:5e:34:39:c6:78:cc:04:46:db:cc:56:d9:54: 25:cc:7c:c2:a2:2a:d0:ea:38:47:da:88:53:0b:40:9c:e6:d5: 86:72:f0:1d:b2:62:cb:de:c4:de:bd:e2:c8:5d:b7:7c:11:01: 88:77:08:2d:6d:8b:f9:5e:dd:0e:ba:e9:64:7a:4f:f1:43:13: 77:0e:a0:b7:72:c1:ec:4f:4e:e1:27:d9:ea:66:1c:05:e7:b9: 7e:4d:59:56:93:ec:73:d4:8a:84:93:bd:12:56:ba:2d:49:9c: 5b:73:97:9f:c8:75:c6:38:cc:7a:8b:15:59:7c:e1:c9:36:85: 0e:c5:c0:cc:6b:97:81:79:28:f5:14:8a:1f:d4:4a:89:b9:32: df:30:dc:00:ec:ef:f4:c9:c6:ba:05:aa:50:5e:f7:ed:43:9b: f9:ce:b1:33:3c:45:da:af:3c:79:11:92:8c:d4:60:9a:aa:67: 25:39:86:b5:66:74:1c:8e:d1:eb:d5:97:02:d1:4e:67:28:dd: 65:f1:79:2a:e0:58:89:24:fd:c9:5f:67:c5:61:04:13:64:18: eb:46:b2:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjZEQzExMC8GA1UEBRMoREQ1NzQ2MEYwQzEyQkUwNTQ2MTNBMkY0Mjk2N0IwN0RB NTY4N0JGMDAeFw0yNTA0MjcwNTQ0MzNaFw0yNTA1MDQwNTQ0MzNaMBgxFjAUBgNV BAMTDTY4MGRjNDQyLWZlNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5ZvaJSCmJlNRpRpWjGj8hqodDbpcwtrel1e563hvgKXo9YGkK3EAAeOa9RSyX IBeBvlse1zEQaKYw8L10viVu3vtivrAWDTFgSHGauTVsJxqskfacusxcyANqKuet twecS7xN3nC6fB5Y1Jvk3gMI4s0nsUOc/CJdb1hbXUMX7SvvjEzK1XLYe2Fogn4v nHMxXCahNkrrewYrr3SlJ3Fdup7FbA0hM1L2LCYZHckvQAFN85mrG/TA5OhM3S+T adxshMGF+zvahRuYn30mATN/BC+s8GWVNI2TUNm2f5fRGyWf1RntYUkYaUc+SScb LTWSzCTL+t/Wljbkkm0bSf8LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUTWnz9s9 CREDbx1w4xllYOgHZEAwHwYDVR0jBBgwFoAU3VdGDwwSvgVGE6L0KWewfaVoe/Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2NkRDLzVBMTgyQzdDODUy MzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2Vf QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1ZkR0R3d1N2Z1ZHRTZMMEtXZXdmYVZvZV9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 NkRDLzVBMTgyQzdDODUyMzExRUY5QjQ4RkY0MUM0RjlBRTAyLzNWZEdEd3dTdmdW R0U2TDBLV2V3ZmFWb2VfQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJp1uCxAARQ2oa2RZbs1tfq4s6LqRdHNX7MChq6oknVa0plPnBTM+pXm XjQ5xnjMBEbbzFbZVCXMfMKiKtDqOEfaiFMLQJzm1YZy8B2yYsvexN694shdt3wR AYh3CC1ti/le3Q666WR6T/FDE3cOoLdywexPTuEn2epmHAXnuX5NWVaT7HPUioST vRJWui1JnFtzl5/IdcY4zHqLFVl84ck2hQ7FwMxrl4F5KPUUih/USom5Mt8w3ADs 7/TJxroFqlBe9+1Dm/nOsTM8RdqvPHkRkozUYJqqZyU5hrVmdByO0evVlwLRTmco 3WXxeSrgWIkk/clfZ8VhBBNkGOtGspE= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net