$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: UymFgP/eHlC6A6N6P13bI7CETaRNDOeX5M7hFQXz7fI= Subject key identifier: A3:CB:1F:58:B0:63:BD:18:B2:3C:A3:AF:D5:13:B3:AC:49:F0:E1:5B Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 094A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 08E4 Signing time: Sat 26 Apr 2025 20:24:35 +0000 Manifest this update: Sat 26 Apr 2025 20:24:34 +0000 Manifest next update: Sat 03 May 2025 20:24:34 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: gf5LPAeQnthKa4CXbeuBqOFk7el/CDuDDNP+Xr+3Dl0=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: AzLlJkV6uweEFCMcx/o9vS17187fN+9zNJtq2qRlwjg=) 4: 781C64FAF58611ED89273159C4F9AE02.roa (hash: KQsiNAY3rgJSqaPcQR/vrNEFqpIv1dzI+sj/d5igWno=) 5: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: tfdFxm7zDzSNY8KLHsb30XY14VNoD7lmA8Phn0Ip+7k=) 6: 9672E862793811EE92C54834C4F9AE02.roa (hash: VZDkUmHUSNQz0PuWGeefW0AZnX5klCTCiKAwXgSpJ9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2378 (0x94a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Apr 26 20:24:34 2025 GMT Not After : May 3 20:24:34 2025 GMT Subject: CN=680d4102-b8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:14:b1:05:a3:9c:a0:66:77:ca:e1:bd:2f:e7: b0:cf:56:4a:a5:67:c4:38:ab:de:5f:32:d4:64:e2: c3:15:89:59:39:e5:f8:d9:37:3e:83:93:8d:90:92: 61:ae:d5:fc:ab:6a:81:df:cf:11:e6:4f:4f:40:b4: 80:ce:91:b4:8e:57:84:c7:de:c1:21:8a:2d:b2:36: 0b:fb:94:41:4b:12:ec:4d:36:9d:ee:49:bd:e3:c4: 3d:2b:31:c7:ab:2a:f9:3d:b7:bb:64:36:ca:9d:f0: 86:ef:3e:76:2e:1f:a3:b2:0e:1a:73:ae:74:8d:7c: 24:d6:59:52:93:2a:2c:cf:45:4e:31:76:80:d2:1a: 60:68:e1:8e:ff:66:aa:34:03:d3:3b:c1:56:19:ab: 8f:2f:7e:fc:f9:eb:64:78:46:93:a1:1d:6b:c1:d1: cb:c8:fa:92:a4:97:cf:84:df:80:05:d1:97:00:02: 64:71:80:99:b7:40:01:c9:2d:f5:c9:2c:24:34:6c: d7:67:1c:d1:60:18:dc:2d:cd:c9:25:f4:1a:b6:1a: a2:30:fa:4d:d2:6a:66:84:29:2a:1a:40:f4:6c:2c: 70:ca:ca:25:2c:ac:82:15:55:e7:eb:c1:59:f0:ce: a9:97:fd:80:98:75:3e:3c:a4:c5:13:39:e1:64:93: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:1F:58:B0:63:BD:18:B2:3C:A3:AF:D5:13:B3:AC:49:F0:E1:5B X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:94:5a:c0:82:33:26:91:81:ab:91:7d:30:0e:62:b7:e8:61: a2:e6:d1:fa:7f:d8:bb:ff:3f:45:aa:d3:69:d7:a4:9d:22:04: 97:89:c1:da:2a:11:f9:56:7d:43:01:68:51:57:9a:8e:b9:10: c9:9a:aa:88:70:47:ad:a7:a1:a2:94:d6:d1:3c:9f:13:ae:38: 10:a8:44:c1:8e:49:3b:5e:50:d7:e0:21:21:cf:78:8f:77:a3: c2:c9:f5:5a:12:25:b9:89:b2:03:65:74:55:9b:ea:67:a5:aa: bf:47:8c:5f:9d:fa:56:86:ec:5f:e9:fd:0b:54:be:a2:0a:45: ca:b6:86:4f:78:83:ff:30:c3:61:8c:53:19:29:64:38:4e:b3: b7:b2:af:c9:49:0f:8f:72:b4:f5:92:8d:cb:3c:1d:af:d8:bb: 57:c9:96:7b:d4:d3:e3:67:55:86:cb:03:0e:3c:b7:05:a0:90: 5d:88:f2:9c:15:af:78:d3:95:28:22:9e:56:8f:32:53:ce:c9: bc:d0:9d:24:06:81:b3:25:8b:fd:bc:b0:db:3b:a8:8d:93:4e: fe:d7:cc:dc:ec:06:e7:27:35:0b:00:f9:f6:02:30:c5:c3:97: d0:96:c0:66:81:1b:c4:60:44:bb:8f:dc:e0:ec:4c:30:93:8c: 4b:65:ae:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwNDI2MjAyNDM0WhcNMjUwNTAzMjAyNDM0WjAYMRYwFAYD VQQDEw02ODBkNDEwMi1iOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxSxBaOcoGZ3yuG9L+ewz1ZKpWfEOKveXzLUZOLDFYlZOeX42Tc+g5ONkJJh rtX8q2qB388R5k9PQLSAzpG0jleEx97BIYotsjYL+5RBSxLsTTad7km948Q9KzHH qyr5Pbe7ZDbKnfCG7z52Lh+jsg4ac650jXwk1llSkyosz0VOMXaA0hpgaOGO/2aq NAPTO8FWGauPL378+etkeEaToR1rwdHLyPqSpJfPhN+ABdGXAAJkcYCZt0AByS31 ySwkNGzXZxzRYBjcLc3JJfQathqiMPpN0mpmhCkqGkD0bCxwysolLKyCFVXn68FZ 8M6pl/2AmHU+PKTFEznhZJNnAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPLH1iw Y70Ysjyjr9UTs6xJ8OFbMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMlFrAgjMmkYGrkX0wDmK36GGi5tH6f9i7/z9FqtNp16SdIgSXicHa KhH5Vn1DAWhRV5qOuRDJmqqIcEetp6GilNbRPJ8TrjgQqETBjkk7XlDX4CEhz3iP d6PCyfVaEiW5ibIDZXRVm+pnpaq/R4xfnfpWhuxf6f0LVL6iCkXKtoZPeIP/MMNh jFMZKWQ4TrO3sq/JSQ+PcrT1ko3LPB2v2LtXyZZ71NPjZ1WGywMOPLcFoJBdiPKc Fa9405UoIp5WjzJTzsm80J0kBoGzJYv9vLDbO6iNk07+18zc7AbnJzULAPn2AjDF w5fQlsBmgRvEYES7j9zg7Ewwk4xLZa7F -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:09 2025 by rpki-client on console.sobornost.net