$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: 2OXi4NLlA9doEqYDE2G1+9cz5ccszb4qERKvjR1ihMc= Subject key identifier: EC:E6:D6:44:BF:44:E7:D5:39:10:87:5C:26:8B:60:E9:89:1A:EA:EC Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: B0 Signing time: Sun 27 Apr 2025 04:52:42 +0000 Manifest this update: Sun 27 Apr 2025 04:52:41 +0000 Manifest next update: Sun 04 May 2025 04:52:41 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: AS33Suiw6e85bnT4y81vTFWnFG/zvDD/fB/V58sGi9k=) 2: FDC5FC0C232411EF868B873EC4F9AE02.roa (hash: ollqUlHXEfXQhQfDGC+/77xh3ifYmQTxENHBKgBxBPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Apr 27 04:52:41 2025 GMT Not After : May 4 04:52:41 2025 GMT Subject: CN=680db81a-1b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:68:4e:78:13:36:1d:f3:2b:82:d5:0e:c9: 49:57:da:3f:87:6f:90:3b:32:19:35:d9:50:52:af: 41:53:b3:58:43:70:60:4c:f8:84:8d:0f:b1:0d:4f: df:7d:67:b3:62:df:f3:75:8d:54:a6:78:ad:60:1e: 42:da:11:a2:ef:3a:77:29:d9:70:f0:0b:41:60:ea: 7e:7f:8a:e6:f9:26:38:11:6a:82:6e:d5:ff:28:d6: 94:6e:12:dc:e2:7c:79:83:9f:8c:f0:7c:05:bf:40: d4:c5:01:85:ef:13:76:38:e9:5e:79:fd:dd:3c:d0: be:6f:70:11:f7:2b:2b:9f:b3:13:f0:1d:19:44:3f: f0:be:0d:c3:bc:2b:7f:d6:77:dc:17:10:c4:07:13: 51:45:19:1f:c5:52:12:ea:ad:2b:93:c9:e8:ca:24: 2f:dc:5b:87:35:64:14:fc:d9:a1:60:58:7f:1a:66: 30:14:d6:2d:42:92:3e:b1:6e:04:84:42:cc:27:f5: d1:d9:19:21:d9:cf:65:b9:28:e7:05:d3:8b:a7:ab: 12:91:f4:6f:ec:46:ce:2e:c0:7a:c3:5f:68:47:06: 50:20:05:c2:45:32:be:95:8f:47:71:10:76:b3:03: 0e:a0:ac:4d:f4:5f:2b:8d:c5:7d:c1:2d:58:a2:b3: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E6:D6:44:BF:44:E7:D5:39:10:87:5C:26:8B:60:E9:89:1A:EA:EC X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:34:ae:27:15:39:41:24:f0:67:9a:65:bb:60:54:e3:15:f6: 46:6e:09:eb:53:ba:1b:b1:7b:c2:0e:24:29:f2:b9:ab:38:e4: 9b:9b:44:4f:35:c0:80:ee:a0:66:b8:80:f0:aa:9c:0b:2c:ec: 64:b6:a5:a4:7f:f8:89:99:3a:fc:38:4c:f4:6d:38:58:c4:8d: e6:58:db:5d:ea:8a:6f:0f:ba:73:de:72:7f:31:15:c2:82:0d: fa:65:86:cd:dd:06:1d:d3:be:14:94:65:29:ad:9a:c0:c3:0d: 49:e4:8b:bc:64:39:14:30:c7:44:89:76:27:0f:70:c8:29:bd: 88:3f:33:ef:ce:ad:5c:ff:a1:40:d4:aa:36:9a:7b:86:3a:19: 79:b7:68:a8:7c:5c:d4:58:78:b6:d0:6e:c0:0b:81:bf:42:8e: 58:7f:fd:35:4d:81:66:c1:dd:75:b6:69:03:90:e5:9a:74:7d: 61:0c:d4:f2:37:45:09:b0:e3:7e:f7:16:f8:72:25:3a:25:c6: ae:84:2b:26:d1:94:9f:4f:e0:ed:d2:2b:f6:f5:11:45:3b:1e: 73:12:f9:a0:53:e7:45:df:0b:0d:e8:15:0f:85:6c:fa:d5:38: e2:3d:5d:5d:57:40:18:56:ef:cc:ff:a7:7f:37:23:e1:4e:b9: 98:1e:b1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUwNDI3MDQ1MjQxWhcNMjUwNTA0MDQ1MjQxWjAYMRYwFAYD VQQDEw02ODBkYjgxYS0xYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LdoTngTNh3zK4LVDslJV9o/h2+QOzIZNdlQUq9BU7NYQ3BgTPiEjQ+xDU/f fWezYt/zdY1UpnitYB5C2hGi7zp3Kdlw8AtBYOp+f4rm+SY4EWqCbtX/KNaUbhLc 4nx5g5+M8HwFv0DUxQGF7xN2OOleef3dPNC+b3AR9ysrn7MT8B0ZRD/wvg3DvCt/ 1nfcFxDEBxNRRRkfxVIS6q0rk8noyiQv3FuHNWQU/NmhYFh/GmYwFNYtQpI+sW4E hELMJ/XR2Rkh2c9luSjnBdOLp6sSkfRv7EbOLsB6w19oRwZQIAXCRTK+lY9HcRB2 swMOoKxN9F8rjcV9wS1YorOtDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzm1kS/ ROfVORCHXCaLYOmJGursMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkNK4nFTlBJPBnmmW7YFTjFfZGbgnrU7obsXvCDiQp8rmrOOSbm0RP NcCA7qBmuIDwqpwLLOxktqWkf/iJmTr8OEz0bThYxI3mWNtd6opvD7pz3nJ/MRXC gg36ZYbN3QYd074UlGUprZrAww1J5Iu8ZDkUMMdEiXYnD3DIKb2IPzPvzq1c/6FA 1Ko2mnuGOhl5t2iofFzUWHi20G7AC4G/Qo5Yf/01TYFmwd11tmkDkOWadH1hDNTy N0UJsON+9xb4ciU6JcauhCsm0ZSfT+Dt0iv29RFFOx5zEvmgU+dF3wsN6BUPhWz6 1TjiPV1dV0AYVu/M/6d/NyPhTrmYHrGH -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net