$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft File: tVGhYNO-3KVi6d395AkzcktpuQA.mft (raw, json) Hash identifier: Gc+GDvND+Sgy+b0b1qImVzsLVXidg3doSUYDibinKe0= Subject key identifier: 0D:3A:20:39:20:E1:3B:AB:1E:F7:48:25:4D:31:C6:5B:95:02:90:1D Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 Certificate issuer: /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft Manifest number: 019E Signing time: Sun 27 Apr 2025 02:21:35 +0000 Manifest this update: Sun 27 Apr 2025 02:21:35 +0000 Manifest next update: Sun 04 May 2025 02:21:34 +0000 Files and hashes: 1: tVGhYNO-3KVi6d395AkzcktpuQA.crl (hash: cebC6WjY9kfne8IjASwPYvt46yPdVaxDXaTWDyDVtyo=) 2: A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (hash: ojParvJ0FGJUPZ25zNdYUl2YaHcSyrc33U2l9MfbPKU=) 3: A63F9024AB6B11EDA5C53A0AC4F9AE02.roa (hash: 67QdihmJWNEdpWctmJLskykPLPRUaTyZfL1MUDXMOe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900 Validity Not Before: Apr 27 02:21:35 2025 GMT Not After : May 4 02:21:34 2025 GMT Subject: CN=680d94af-6c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:50:f4:12:32:9d:35:43:49:95:a5:69:15: 65:15:b8:35:50:60:08:89:9e:e8:d3:b9:b7:80:b1: 8c:de:00:c8:b5:eb:a4:b3:83:73:e7:90:0b:22:57: 25:ba:75:8d:43:ba:ee:43:48:62:c8:c9:b5:72:4c: e1:79:17:7b:4a:b5:62:c2:fe:2d:ee:ac:04:3b:a6: 4a:b7:a6:74:f7:85:ca:cd:88:22:77:3f:e8:cb:1a: 83:57:1d:3d:fc:a6:84:52:ad:a5:a2:3d:86:96:b5: 39:4e:32:19:59:38:00:03:cd:50:eb:a6:a6:c0:b5: 25:83:9f:da:6a:87:f8:12:7a:9b:da:41:15:00:a0: 66:fd:4a:cb:e9:10:43:01:cc:fb:56:53:bf:13:0e: 78:3e:53:d0:1d:28:d8:04:3d:ca:a4:2a:c9:fd:65: 3b:e2:da:4c:b4:fc:3e:a6:a9:39:1c:33:c4:18:26: ab:27:3d:e7:d0:fa:d0:ac:d2:58:97:bb:4e:81:25: ab:bb:b9:24:84:4c:be:5a:7d:3d:9a:9e:11:60:7b: d0:37:b3:b9:61:27:a6:2c:e8:61:1e:1c:21:18:7f: e0:50:25:92:42:2a:b1:bc:64:9f:bf:b7:db:0a:2d: ba:da:a9:ff:09:19:66:1c:b1:a7:b8:b7:3e:d5:87: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3A:20:39:20:E1:3B:AB:1E:F7:48:25:4D:31:C6:5B:95:02:90:1D X509v3 Authority Key Identifier: keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:81:25:dd:69:0c:23:a4:4c:d9:cb:bf:aa:88:5f:99:36:2e: 5f:ad:d1:01:cd:6d:1f:10:ee:47:18:9a:f5:79:2b:6b:17:02: ec:1a:4f:f1:58:ee:dd:d5:ca:32:d0:b9:12:6f:c2:86:cd:fb: b7:09:d6:95:fb:bb:5e:8d:1a:90:52:61:a2:b2:1c:ea:22:dd: 68:e7:a2:47:b8:44:8b:3e:19:07:51:21:40:f7:5a:ec:e7:52: c1:0a:1e:dc:1e:a1:32:86:9a:9b:14:0d:9d:17:27:10:c4:f2: eb:ce:de:0f:ad:32:c8:60:64:4f:7d:7e:be:da:fc:dc:a0:6b: b9:fc:72:bf:46:bc:c9:7b:a4:46:bf:45:17:f6:91:80:d9:a5: 5a:43:e1:93:55:38:a5:fb:d9:9b:9f:cb:21:23:70:0d:a3:b5: d0:3a:fe:68:15:e0:2e:f9:80:24:27:c6:a1:d5:b2:8a:eb:bc: 4b:e6:28:5c:07:40:90:c9:2f:89:3f:18:98:5e:01:44:86:51: fa:9e:cf:38:46:a6:26:0a:96:3a:0a:ee:da:dd:fc:93:3e:b9: 54:b3:69:95:71:f1:49:d0:1c:ab:17:74:87:ef:b1:a3:80:0e: db:b1:5c:73:63:3e:6b:12:d3:89:e8:af:f4:1d:e9:c7:be:0c: 72:12:d1:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzRkUxMTAvBgNVBAUTKEI1NTFBMTYwRDNCRURDQTU2MkU5RERGREU0MDkzMzcy NEI2OUI5MDAwHhcNMjUwNDI3MDIyMTM1WhcNMjUwNTA0MDIyMTM0WjAYMRYwFAYD VQQDEw02ODBkOTRhZi02YzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznBQ9BIynTVDSZWlaRVlFbg1UGAIiZ7o07m3gLGM3gDIteuks4Nz55ALIlcl unWNQ7ruQ0hiyMm1ckzheRd7SrViwv4t7qwEO6ZKt6Z094XKzYgidz/oyxqDVx09 /KaEUq2loj2GlrU5TjIZWTgAA81Q66amwLUlg5/aaof4Enqb2kEVAKBm/UrL6RBD Acz7VlO/Ew54PlPQHSjYBD3KpCrJ/WU74tpMtPw+pqk5HDPEGCarJz3n0PrQrNJY l7tOgSWru7kkhEy+Wn09mp4RYHvQN7O5YSemLOhhHhwhGH/gUCWSQiqxvGSfv7fb Ci262qn/CRlmHLGnuLc+1YcwCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA06IDkg 4TurHvdIJU0xxluVApAdMB8GA1UdIwQYMBaAFLVRoWDTvtylYund/eQJM3JLabkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzNGRS9EMzFBNjc3QUFC NjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNLVmk2ZDM5NUFremNrdHB1 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWR2hZTk8tM0tWaTZkMzk1QWt6Y2t0cHVRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzNGRS9EMzFBNjc3QUFCNjgxMUVEQTVDQTVCMDlDNEY5QUUwMi90VkdoWU5PLTNL Vmk2ZDM5NUFremNrdHB1UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAugSXdaQwjpEzZy7+qiF+ZNi5frdEBzW0fEO5HGJr1eStrFwLsGk/x WO7d1coy0LkSb8KGzfu3CdaV+7tejRqQUmGishzqIt1o56JHuESLPhkHUSFA91rs 51LBCh7cHqEyhpqbFA2dFycQxPLrzt4PrTLIYGRPfX6+2vzcoGu5/HK/RrzJe6RG v0UX9pGA2aVaQ+GTVTil+9mbn8shI3ANo7XQOv5oFeAu+YAkJ8ah1bKK67xL5ihc B0CQyS+JPxiYXgFEhlH6ns84RqYmCpY6Cu7a3fyTPrlUs2mVcfFJ0ByrF3SH77Gj gA7bsVxzYz5rEtOJ6K/0HenHvgxyEtF+ -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net