$ rpki-client -vvf rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft File: vPLIrbwz4n5cdnSmbahlv1qma-U.mft (raw, json) Hash identifier: gYc9BUxQN3Qob+Yh/9PbbxeqDI+U65qC5c2D0qyKvNU= Subject key identifier: FE:E9:26:FA:01:C7:86:87:F1:7F:66:46:C2:C6:6D:B5:33:52:EC:25 Authority key identifier: BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 Certificate issuer: /CN=A91619D8/serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Certificate serial: 0588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft Manifest number: 0571 Signing time: Sat 26 Apr 2025 23:03:40 +0000 Manifest this update: Sat 26 Apr 2025 23:03:39 +0000 Manifest next update: Sat 03 May 2025 23:03:39 +0000 Files and hashes: 1: vPLIrbwz4n5cdnSmbahlv1qma-U.crl (hash: l7XBCDp3R1CHnLZ2DAENVKpt+L6rNemD16wiWj2Q+ug=) 2: E7584B4C86A211EE9791E012C4F9AE02.roa (hash: T5GiWxH5CJSVyfHnlJ00EWYvXgx25uLrmX6jBLWmVrk=) 3: 7B40808086A411EE90BD604AC4F9AE02.roa (hash: kPB+7Y3RTie/Oq7MRgPUTEuPgMZheJwSjNt8QuYQwFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1416 (0x588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91619D8, serialNumber=BCF2C8ADBC33E27E5C7674A66DA865BF5AA66BE5 Validity Not Before: Apr 26 23:03:39 2025 GMT Not After : May 3 23:03:39 2025 GMT Subject: CN=680d664c-b26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0a:83:00:67:95:ea:ba:f9:89:f4:88:c3:ea: 2d:58:7c:d8:67:c1:8d:d7:fd:9b:ad:80:1e:0a:20: c6:1d:dc:34:d0:08:57:ef:ff:93:85:50:7a:34:a1: 72:92:01:cf:2e:71:77:78:d7:34:5d:18:c4:9d:3a: a8:c6:aa:df:3e:e2:08:c2:3a:ca:d4:e3:5b:da:9b: 7e:be:da:9f:3a:0d:be:84:6d:11:ef:d5:72:89:62: 70:7d:0a:5e:78:f5:29:f6:20:f7:c2:c3:3a:62:63: a0:d2:dd:4c:80:d2:a8:9b:8b:4b:25:53:9c:e3:7c: e1:cb:38:cd:89:e9:36:6b:ad:4e:bc:1a:2c:2e:9f: b7:7d:34:84:b7:a4:45:fb:38:86:08:19:74:17:8a: 0e:a0:41:f3:d4:97:4c:48:60:0c:a1:5c:f2:70:14: 40:0c:43:22:38:75:f8:9e:bc:99:72:45:e3:ac:f7: 48:f5:0d:c0:c4:b9:9d:92:3b:47:6e:b9:f1:ff:78: 48:36:82:b0:2d:a1:86:98:cc:02:1e:7c:86:b7:ab: ec:1f:6a:40:82:9d:fd:d0:6d:61:f6:48:1a:ad:77: 99:0f:92:24:e0:98:99:86:02:8f:79:b7:43:93:2a: c5:1c:c3:79:63:bc:ed:ff:3b:6e:2d:fe:35:46:89: f1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:26:FA:01:C7:86:87:F1:7F:66:46:C2:C6:6D:B5:33:52:EC:25 X509v3 Authority Key Identifier: keyid:BC:F2:C8:AD:BC:33:E2:7E:5C:76:74:A6:6D:A8:65:BF:5A:A6:6B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPLIrbwz4n5cdnSmbahlv1qma-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91619D8/3558D1C6E43A11EBAC8D501AC4F9AE02/vPLIrbwz4n5cdnSmbahlv1qma-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:85:a7:d1:d6:6c:41:a1:2a:cd:e8:e7:62:aa:b3:7d:64:87: 9f:1c:ec:0e:0b:97:90:af:c5:20:34:6e:1d:4c:35:b8:6b:73: 43:47:ed:cd:e0:b6:ef:0a:85:a0:c6:c8:69:51:fa:4b:4c:10: b1:8c:c2:76:88:86:06:90:c2:b6:48:66:d5:86:52:6d:8b:74: 27:bc:cd:63:53:73:2d:01:a7:9b:26:14:17:dd:66:93:12:e7: 38:e0:d2:95:7d:75:b3:9e:88:2f:8d:7a:12:fd:4b:d7:2a:80: 75:a4:70:cf:61:92:6e:c0:bd:d2:34:1e:f8:33:ec:38:92:c3: b3:72:72:c5:6f:39:84:ec:b6:19:17:f6:28:50:21:8a:ad:b0: 0a:86:5a:ab:3d:f5:f8:0b:87:5a:d3:75:b5:e8:4f:fc:8a:c4: 9e:f2:6e:5e:6d:53:c8:d2:62:ed:d3:f4:b7:2f:a4:81:18:95: 7b:b0:87:98:15:01:4f:fe:9e:48:1c:4d:2b:ef:08:ec:8e:0d: ad:b4:c7:b1:4a:8d:ca:e1:45:91:03:42:bf:a9:87:ab:ba:27: c9:0e:4d:45:67:bf:7a:97:34:4d:52:8d:99:f3:24:fe:3f:64: c5:fc:39:95:0d:77:4c:fb:a7:00:64:2d:af:9f:fe:c3:2b:32: 3b:0d:a7:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE5RDgxMTAvBgNVBAUTKEJDRjJDOEFEQkMzM0UyN0U1Qzc2NzRBNjZEQTg2NUJG NUFBNjZCRTUwHhcNMjUwNDI2MjMwMzM5WhcNMjUwNTAzMjMwMzM5WjAYMRYwFAYD VQQDEw02ODBkNjY0Yy1iMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwqDAGeV6rr5ifSIw+otWHzYZ8GN1/2brYAeCiDGHdw00AhX7/+ThVB6NKFy kgHPLnF3eNc0XRjEnTqoxqrfPuIIwjrK1ONb2pt+vtqfOg2+hG0R79VyiWJwfQpe ePUp9iD3wsM6YmOg0t1MgNKom4tLJVOc43zhyzjNiek2a61OvBosLp+3fTSEt6RF +ziGCBl0F4oOoEHz1JdMSGAMoVzycBRADEMiOHX4nryZckXjrPdI9Q3AxLmdkjtH brnx/3hINoKwLaGGmMwCHnyGt6vsH2pAgp390G1h9kgarXeZD5Ik4JiZhgKPebdD kyrFHMN5Y7zt/ztuLf41RonxNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7pJvoB x4aH8X9mRsLGbbUzUuwlMB8GA1UdIwQYMBaAFLzyyK28M+J+XHZ0pm2oZb9apmvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTlEOC8zNTU4RDFDNkU0 M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRuNWNkblNtYmFobHYxcW1h LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZQTElyYnd6NG41Y2RuU21iYWhsdjFxbWEtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTlEOC8zNTU4RDFDNkU0M0ExMUVCQUM4RDUwMUFDNEY5QUUwMi92UExJcmJ3ejRu NWNkblNtYmFobHYxcW1hLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCahafR1mxBoSrN6OdiqrN9ZIefHOwOC5eQr8UgNG4dTDW4a3NDR+3N 4LbvCoWgxshpUfpLTBCxjMJ2iIYGkMK2SGbVhlJti3QnvM1jU3MtAaebJhQX3WaT Euc44NKVfXWznogvjXoS/UvXKoB1pHDPYZJuwL3SNB74M+w4ksOzcnLFbzmE7LYZ F/YoUCGKrbAKhlqrPfX4C4da03W16E/8isSe8m5ebVPI0mLt0/S3L6SBGJV7sIeY FQFP/p5IHE0r7wjsjg2ttMexSo3K4UWRA0K/qYeruifJDk1FZ796lzRNUo2Z8yT+ P2TF/DmVDXdM+6cAZC2vn/7DKzI7DacM -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:54 2025 by rpki-client on console.sobornost.net