$ rpki-client -vvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json) Hash identifier: shXw8+Zh3QitIoUWuPXKprRTkc4XNW7p8YeGg2a8T9s= Subject key identifier: 60:4C:C5:D0:58:BF:4E:FE:32:AD:C1:DD:67:4F:70:E2:5F:ED:14:20 Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft Manifest number: 0C1C Signing time: Mon 28 Apr 2025 18:53:38 +0000 Manifest this update: Mon 28 Apr 2025 18:53:37 +0000 Manifest next update: Mon 05 May 2025 18:53:37 +0000 Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: 8pYA/q/FQjHOdQAVz9ddypDLZN+/k2pmW+25F8C5eY8=) 2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: CC9X+3CcYjfvDOG+Jd491zfowlADhabzoyJw/gqJGUg=) 3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: erICH0cme0SAzh4DFMOpR5Ja+e0q51Z/KWddXql4mQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8 Validity Not Before: Apr 28 18:53:37 2025 GMT Not After : May 5 18:53:37 2025 GMT Subject: CN=680fceb2-0f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b1:2c:b8:71:3f:0c:b5:eb:a3:48:29:b4:86: 8f:7f:8f:a0:ad:ca:22:c1:0a:d4:b5:e8:de:b3:84: 86:a8:b3:71:a7:9f:b4:1d:d5:d0:64:1b:c1:a5:76: 8e:32:db:9e:64:ae:f1:85:49:df:a5:d1:97:7c:a0: 25:7b:12:01:61:b9:d0:2c:7b:84:47:1d:e2:ae:dc: 31:e0:3f:ef:88:3b:0d:dd:bf:90:cf:72:84:8c:53: 56:c3:28:4f:49:2f:18:46:ef:52:09:d8:a3:5b:15: d2:37:3a:4f:08:04:83:f4:83:ff:1c:65:59:28:89: 43:34:34:73:46:60:5d:0e:26:71:1e:95:68:10:e4: fb:c8:f6:39:5a:19:2f:d4:16:89:77:8b:fc:3f:cb: 99:84:14:52:7f:a8:55:ea:d5:d1:47:1a:0b:6c:86: bb:6a:e9:a0:e0:73:d1:0a:55:13:a3:1e:0e:68:08: 3f:f2:3f:04:14:bb:6c:29:c0:26:5d:55:17:76:43: 36:51:f8:b6:c4:b8:42:28:ed:d3:3d:b8:95:d3:9b: 54:e7:e7:10:f8:04:87:1c:cf:03:4d:95:bc:ec:70: eb:f6:38:74:43:92:a5:e8:93:c4:0f:ad:40:b1:47: fa:fd:a7:18:51:72:f2:9e:56:fb:10:61:25:64:2b: d9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4C:C5:D0:58:BF:4E:FE:32:AD:C1:DD:67:4F:70:E2:5F:ED:14:20 X509v3 Authority Key Identifier: keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ec:a9:c9:9a:ab:4d:6a:ce:8c:bf:99:fe:eb:f7:70:f0:05: af:ff:4d:1a:7c:77:08:31:5e:52:1a:2d:c0:5c:5d:0f:1e:72: 79:3b:4f:c1:a4:cc:9f:69:04:20:a7:dc:4f:cd:a7:dc:0c:61: ca:0a:c4:c3:53:53:89:3d:ed:25:83:2f:5a:ac:8c:33:db:1f: 7f:08:36:7d:ea:c6:d9:7f:90:13:e9:53:f4:81:a7:29:62:f8: 8a:81:be:96:27:5f:02:f1:bf:9b:59:99:85:cc:61:99:0d:be: 45:26:65:b1:78:ee:37:57:f6:15:79:b8:95:ea:ff:61:de:77: 2d:7c:de:51:0d:cd:92:f6:95:88:64:2c:03:80:d1:8c:5e:38: 86:8e:57:12:a3:e0:87:48:ed:58:83:03:c7:81:07:4e:36:0a: a5:b2:1b:de:45:d8:c7:c6:ce:c7:3e:ed:d4:d2:19:7a:dc:18: 71:15:c7:3d:6b:e2:5f:e2:17:a3:f8:bb:3a:3d:e8:bf:b7:08: 09:b7:c6:20:63:7c:fd:e2:76:92:c0:75:de:0c:93:05:df:26: 4e:f6:69:e4:18:36:d5:f9:a8:64:67:89:b3:1c:03:4a:4b:cc: a7:ec:10:0d:1a:08:4b:14:1f:3e:66:5f:23:98:9a:70:71:46: f8:ea:17:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIzREMxMTAvBgNVBAUTKDU1RjJFNDg3NDAwNThFOEZDQzRGOTAxQTRBMzNFMUY0 MTc2MjAwRjgwHhcNMjUwNDI4MTg1MzM3WhcNMjUwNTA1MTg1MzM3WjAYMRYwFAYD VQQDEw02ODBmY2ViMi0wZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bEsuHE/DLXro0gptIaPf4+grcoiwQrUtejes4SGqLNxp5+0HdXQZBvBpXaO MtueZK7xhUnfpdGXfKAlexIBYbnQLHuERx3irtwx4D/viDsN3b+Qz3KEjFNWwyhP SS8YRu9SCdijWxXSNzpPCASD9IP/HGVZKIlDNDRzRmBdDiZxHpVoEOT7yPY5Whkv 1BaJd4v8P8uZhBRSf6hV6tXRRxoLbIa7aumg4HPRClUTox4OaAg/8j8EFLtsKcAm XVUXdkM2Ufi2xLhCKO3TPbiV05tU5+cQ+ASHHM8DTZW87HDr9jh0Q5Kl6JPED61A sUf6/acYUXLynlb7EGElZCvZbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBMxdBY v07+Mq3B3WdPcOJf7RQgMB8GA1UdIwQYMBaAFFXy5IdABY6PzE+QGkoz4fQXYgD4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjNEQy8wNjYzOUY4NjBB OTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpvX01UNUFhU2pQaDlCZGlB UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZmTGtoMEFGam9fTVQ1QWFTalBoOUJkaUFQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjNEQy8wNjYzOUY4NjBBOTMxMUVBODVBRDg4NkFDNEY5QUUwMi9WZkxraDBBRmpv X01UNUFhU2pQaDlCZGlBUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl7KnJmqtNas6Mv5n+6/dw8AWv/00afHcIMV5SGi3AXF0PHnJ5O0/B pMyfaQQgp9xPzafcDGHKCsTDU1OJPe0lgy9arIwz2x9/CDZ96sbZf5AT6VP0gacp YviKgb6WJ18C8b+bWZmFzGGZDb5FJmWxeO43V/YVebiV6v9h3nctfN5RDc2S9pWI ZCwDgNGMXjiGjlcSo+CHSO1YgwPHgQdONgqlshveRdjHxs7HPu3U0hl63BhxFcc9 a+Jf4hej+Ls6Pei/twgJt8YgY3z94naSwHXeDJMF3yZO9mnkGDbV+ahkZ4mzHANK S8yn7BANGghLFB8+Zl8jmJpwcUb46hde -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:54 2025 by rpki-client on console.sobornost.net