$ rpki-client -vvf rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft File: vgp-rCoKt52-BO5kAC1UgnWkzKY.mft (raw, json) Hash identifier: ZjNNIMjm0EYBYDPfFAx/zSz4l+LO8KA5Pf7A9mTKTEw= Subject key identifier: C2:42:84:71:10:38:03:26:00:41:63:E7:D5:E6:6D:FB:6A:EA:35:BB Authority key identifier: BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 Certificate issuer: /CN=A91C769F/serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft Manifest number: 015F Signing time: Sun 27 Apr 2025 02:57:09 +0000 Manifest this update: Sun 27 Apr 2025 02:57:08 +0000 Manifest next update: Sun 04 May 2025 02:57:08 +0000 Files and hashes: 1: vgp-rCoKt52-BO5kAC1UgnWkzKY.crl (hash: CXHshgvaPnlPw4VbUC5OExEdtlXOBYFHb6bkAKhTSe4=) 2: 0A469648099611EEB1AA195CC4F9AE02.roa (hash: A02rwfVNBQfsMotmEpSHcGKxAIis7L1vdf/V5rNai7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C769F, serialNumber=BE0A7EAC2A0AB79DBE04EE64002D548275A4CCA6 Validity Not Before: Apr 27 02:57:08 2025 GMT Not After : May 4 02:57:08 2025 GMT Subject: CN=680d9d05-1b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:bd:37:dc:04:27:0a:ed:99:2f:4c:4d:89: ad:51:49:8c:87:f5:6c:b6:c9:d5:a0:ef:f9:ec:66: 42:82:e0:a9:b4:bb:2a:7c:46:25:62:98:04:75:79: 8a:1d:e7:7b:2d:e2:c3:43:0f:85:04:b2:80:96:ab: d5:0d:20:dc:cb:ab:8b:fd:c3:f9:ca:0a:5a:40:d8: 2a:9d:29:b5:16:60:e0:3d:f4:44:c1:44:40:4f:6a: 26:1a:f2:92:fd:90:4a:6d:d2:c7:71:9b:f5:f5:b3: 9b:9e:60:67:af:60:fb:26:9a:41:c1:1c:0a:43:68: 7c:2e:56:a9:aa:ba:c2:a0:d8:55:e7:77:cd:e3:bf: ab:ee:b2:19:cc:35:78:eb:0e:05:e2:4a:4b:f6:ac: 59:f5:a0:6f:90:1e:df:f3:15:79:96:ea:4c:ab:ec: a9:25:b9:cd:2d:81:7b:64:cf:8e:2a:ba:ba:6e:0c: 89:57:11:b9:bb:2c:a9:f7:16:c8:33:f6:35:73:39: 9f:3d:7b:03:6a:a2:b7:03:9c:de:be:6b:1b:57:31: d7:7f:0c:1d:fe:4f:8e:ec:1e:04:40:5e:65:d1:7e: 37:17:dd:57:d9:bd:c6:f0:06:8c:06:d8:97:da:11: 39:e9:09:f4:ee:2b:4e:ec:89:1d:0b:47:3f:81:af: f7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:42:84:71:10:38:03:26:00:41:63:E7:D5:E6:6D:FB:6A:EA:35:BB X509v3 Authority Key Identifier: keyid:BE:0A:7E:AC:2A:0A:B7:9D:BE:04:EE:64:00:2D:54:82:75:A4:CC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgp-rCoKt52-BO5kAC1UgnWkzKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C769F/6AD117A4099111EEBD2E0E58C4F9AE02/vgp-rCoKt52-BO5kAC1UgnWkzKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:5a:4b:0f:9b:e5:9e:32:c8:91:c1:a3:20:4a:7e:6d:35:b7: cc:8b:29:4d:22:55:0e:e8:b2:f8:1e:f5:59:80:18:96:aa:65: 4e:37:38:9e:30:86:31:76:3a:67:b4:5b:02:e3:31:e8:7a:f4: 64:c7:3c:c4:99:a6:ea:df:50:37:24:6a:2b:02:dc:4e:f1:bd: 36:4a:21:4e:92:21:11:1f:9e:31:30:24:e5:f8:77:1d:e0:13: 55:64:1c:fd:8b:11:f4:8f:2b:d8:57:81:d1:7d:39:6f:21:88: 3b:92:43:29:a6:bb:74:2b:c7:69:be:63:ae:0a:0a:49:f0:60: 9d:9d:74:4e:10:65:7c:c1:29:2a:15:b0:49:81:91:bd:7e:ff: 4d:a8:ed:c9:18:3e:8a:30:38:35:24:7a:d4:ac:42:f6:79:8b: 0c:19:31:2e:fe:c3:7f:be:84:72:b7:fd:9c:c5:ee:06:ca:d3: 1c:68:a2:05:87:04:9c:b3:12:15:69:b5:0c:05:53:ed:6d:25: fe:30:92:77:6d:ab:10:ca:ef:ec:f6:cf:2d:c6:4b:a9:7b:8d: 23:65:5c:02:cb:21:4f:4d:92:55:8a:3c:21:32:a8:00:c5:24: 62:76:8e:73:6e:90:42:aa:fd:6e:50:2f:1b:0e:81:e9:b9:e4: b5:51:ca:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc2OUYxMTAvBgNVBAUTKEJFMEE3RUFDMkEwQUI3OURCRTA0RUU2NDAwMkQ1NDgy NzVBNENDQTYwHhcNMjUwNDI3MDI1NzA4WhcNMjUwNTA0MDI1NzA4WjAYMRYwFAYD VQQDEw02ODBkOWQwNS0xYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3O9N9wEJwrtmS9MTYmtUUmMh/VstsnVoO/57GZCguCptLsqfEYlYpgEdXmK Hed7LeLDQw+FBLKAlqvVDSDcy6uL/cP5ygpaQNgqnSm1FmDgPfREwURAT2omGvKS /ZBKbdLHcZv19bObnmBnr2D7JppBwRwKQ2h8LlapqrrCoNhV53fN47+r7rIZzDV4 6w4F4kpL9qxZ9aBvkB7f8xV5lupMq+ypJbnNLYF7ZM+OKrq6bgyJVxG5uyyp9xbI M/Y1czmfPXsDaqK3A5zevmsbVzHXfwwd/k+O7B4EQF5l0X43F91X2b3G8AaMBtiX 2hE56Qn07itO7IkdC0c/ga/3bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJChHEQ OAMmAEFj59Xmbftq6jW7MB8GA1UdIwQYMBaAFL4KfqwqCredvgTuZAAtVIJ1pMym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY5Ri82QUQxMTdBNDA5 OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1Mi1CTzVrQUMxVWduV2t6 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZncC1yQ29LdDUyLUJPNWtBQzFVZ25Xa3pLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY5Ri82QUQxMTdBNDA5OTExMUVFQkQyRTBFNThDNEY5QUUwMi92Z3AtckNvS3Q1 Mi1CTzVrQUMxVWduV2t6S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGWksPm+WeMsiRwaMgSn5tNbfMiylNIlUO6LL4HvVZgBiWqmVONzie MIYxdjpntFsC4zHoevRkxzzEmabq31A3JGorAtxO8b02SiFOkiERH54xMCTl+Hcd 4BNVZBz9ixH0jyvYV4HRfTlvIYg7kkMpprt0K8dpvmOuCgpJ8GCdnXROEGV8wSkq FbBJgZG9fv9NqO3JGD6KMDg1JHrUrEL2eYsMGTEu/sN/voRyt/2cxe4GytMcaKIF hwScsxIVabUMBVPtbSX+MJJ3basQyu/s9s8txkupe40jZVwCyyFPTZJVijwhMqgA xSRido5zbpBCqv1uUC8bDoHpueS1Ucrr -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net