$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json) Hash identifier: NXc5MG2eGBp800wvKkoUmRf19nJwbkQOo91qNTsth8s= Subject key identifier: 1C:CE:3E:06:15:2D:4C:3B:D0:BF:F4:3D:D5:38:38:91:0C:3A:CB:6F Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 34BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft Manifest number: 349B Signing time: Mon 28 Apr 2025 14:44:40 +0000 Manifest this update: Mon 28 Apr 2025 14:44:40 +0000 Manifest next update: Mon 05 May 2025 14:44:40 +0000 Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: EnvddKzORA7vZzcR6W5B7qyCqG/PbLRZZP8Ml1UonYw=) 2: E0AFFE78218611EF8555476BC4F9AE02.roa (hash: cjt/jzLyIkh6PDpshMiImoc4eT6q581b7EMbqraXEP4=) 3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: 3yE7jzzRRf/nsUpYCxz901DViCqtx9fcvzcGq8i3VT0=) 4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: iBQaFzR8EsNKfOhQyR2WaqwTnXNt65iEA7xvcPEERlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:44:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13500 (0x34bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Apr 28 14:44:40 2025 GMT Not After : May 5 14:44:40 2025 GMT Subject: CN=680f9458-4c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:1a:70:4b:02:46:42:01:e1:a1:bd:e2:7a: 2d:a9:d7:ea:a8:68:6d:e8:cb:f4:22:ed:56:5f:6d: f5:76:a8:97:c1:8f:68:ce:ed:6a:d1:ec:dc:ea:b3: 08:71:0c:3d:ac:20:8a:b7:6e:cf:da:da:6b:62:21: ab:45:ee:ef:2f:9d:23:60:5d:ea:10:5e:aa:e4:52: 24:97:ee:e8:61:8f:d2:9c:aa:69:b1:6e:6a:ac:f7: 25:b1:2c:b2:d0:47:54:fc:34:46:b3:dc:b6:3c:f0: d6:af:5e:a7:1a:a0:aa:66:b8:37:52:5d:4e:e7:bd: 02:ec:dc:ef:04:6c:f2:d5:47:e6:03:1b:c2:55:03: 89:15:01:6f:e9:37:29:80:22:b1:c3:01:94:4c:0a: 54:86:6b:7e:11:b6:1a:33:41:01:a4:38:ed:bc:28: 05:4e:c7:72:81:d5:28:f0:00:b5:5c:02:47:4b:35: a2:b6:89:61:86:43:4a:a9:d8:7b:8d:4f:00:04:26: 28:a9:0d:bf:bb:54:82:21:51:fd:f7:98:7c:26:c6: d1:b6:39:bd:b3:5c:51:99:4c:7e:45:97:03:cd:8d: 88:fe:e7:15:38:fe:0b:2b:49:ff:1a:85:90:23:95: 7d:db:d6:8e:34:6c:13:d6:eb:78:21:18:5c:43:03: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CE:3E:06:15:2D:4C:3B:D0:BF:F4:3D:D5:38:38:91:0C:3A:CB:6F X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ce:fa:fc:09:d3:b5:6f:46:5f:b0:ec:43:f7:34:2f:b5:89: ca:d3:26:c2:f8:55:23:9f:cd:ac:aa:fe:9c:8c:ba:1e:3b:86: b3:04:ee:f8:c6:da:f3:11:f5:cd:77:fe:f2:2f:1d:89:a0:46: 84:92:f0:3f:9d:4a:93:45:31:ae:80:e3:e6:a8:61:62:61:3a: 4c:31:0a:48:18:25:33:74:7d:71:d2:54:f5:fb:6b:b6:7b:6a: 2f:07:d4:eb:27:e6:72:70:24:db:59:c2:9a:3a:94:c4:65:4f: 10:c3:07:ef:70:70:e7:8d:31:e7:46:26:5a:29:b3:40:d4:bb: 91:10:1b:e6:a1:b4:17:0f:a8:97:fd:dc:ce:ae:20:e2:85:6d: 89:c5:c1:7b:17:68:3f:eb:d9:cb:08:e1:2a:14:50:94:97:15: c4:75:69:16:c8:fb:ba:3a:dd:1c:62:7a:38:43:dc:ad:82:5e: fb:91:e7:4f:72:fa:20:6b:1f:41:f2:76:80:8b:7a:ea:95:c7: 29:a3:8a:71:bd:a9:79:60:22:00:7a:8c:1f:7a:59:eb:86:2d: 45:af:28:7c:bc:1d:6b:df:34:f2:fc:6b:44:e9:4f:cd:0e:dd: 19:01:71:13:6f:50:c3:cc:cd:27:75:76:a8:90:35:32:d1:dc: f4:5f:23:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjUwNDI4MTQ0NDQwWhcNMjUwNTA1MTQ0NDQwWjAYMRYwFAYD VQQDEw02ODBmOTQ1OC00YzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzYacEsCRkIB4aG94notqdfqqGht6Mv0Iu1WX231dqiXwY9ozu1q0ezc6rMI cQw9rCCKt27P2tprYiGrRe7vL50jYF3qEF6q5FIkl+7oYY/SnKppsW5qrPclsSyy 0EdU/DRGs9y2PPDWr16nGqCqZrg3Ul1O570C7NzvBGzy1UfmAxvCVQOJFQFv6Tcp gCKxwwGUTApUhmt+EbYaM0EBpDjtvCgFTsdygdUo8AC1XAJHSzWitolhhkNKqdh7 jU8ABCYoqQ2/u1SCIVH995h8JsbRtjm9s1xRmUx+RZcDzY2I/ucVOP4LK0n/GoWQ I5V929aONGwT1ut4IRhcQwOXqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzOPgYV LUw70L/0PdU4OJEMOstvMB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnzvr8CdO1b0ZfsOxD9zQvtYnK0ybC+FUjn82sqv6cjLoeO4azBO74 xtrzEfXNd/7yLx2JoEaEkvA/nUqTRTGugOPmqGFiYTpMMQpIGCUzdH1x0lT1+2u2 e2ovB9TrJ+ZycCTbWcKaOpTEZU8QwwfvcHDnjTHnRiZaKbNA1LuREBvmobQXD6iX /dzOriDihW2JxcF7F2g/69nLCOEqFFCUlxXEdWkWyPu6Ot0cYno4Q9ytgl77kedP cvogax9B8naAi3rqlccpo4pxval5YCIAeowfelnrhi1Fryh8vB1r3zTy/GtE6U/N Dt0ZAXETb1DDzM0ndXaokDUy0dz0XyM9 -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:01 2025 by rpki-client on console.sobornost.net