$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json) Hash identifier: ErptkB3eD6guVVhlKY/F++NSM/plIcHBg40SaR3tHCc= Subject key identifier: D2:D8:FB:7B:0B:B5:C9:2E:05:58:13:D4:00:4E:9B:05:0B:17:BE:C7 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft Manifest number: 04F1 Signing time: Sat 26 Apr 2025 23:51:16 +0000 Manifest this update: Sat 26 Apr 2025 23:51:16 +0000 Manifest next update: Sat 03 May 2025 23:51:16 +0000 Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: oJdh/Td5d3TuSa/qfXYXKNQ7Cjl769wpy7PNZKAdEb8=) 2: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: iCGYHqcapZ1DKt8RS4ox+PrMVLiDQPhQLsfb9ZqKn8Y=) 3: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: PbZFsJ2ylUyKCBCI4ffjpcbXFms6YNAMvxiYJ/jYDds=) 4: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: UuOQPjOHW3te4OiVFYw+HXL7r4q+xv2PoIFABxSLF70=) 5: A1AD2E1A100711F0A5348853C4F9AE02.roa (hash: +PShJ4EoqfuCpf6gNxDmu7aN/QAGBDfOwwk1McSjw5Q=) 6: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: sg221W/egXu0ZEIvG5/3NuaO+9JdsATAt/T48V/WxaU=) 7: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: /udoJCuRJJiznFyAsVCyc0gM64uxhJqp5G9jTAQbZu4=) 8: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: cieJSU2MctUg0O+GWn4XGuRsQ3vHkHefCudId57mspk=) 9: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: 0Wp24a54v+z2yZzn7ZdVr/HDi0WffJnb8k/Q3oLm6hg=) 10: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: fhtBFY+6U1Q/NDrcrqBZE1BQCslriv3eFT6qN9HqyO4=) 11: D359E238716B11ED9F349A49C4F9AE02.roa (hash: aJuLqquEQyyIiKwXY41VQpBHPxNA/CIwMjOgaOCooJI=) 12: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (hash: F6cMcszW3btFH4NtjFMkcGJMShjA1GIWoT3qHzp5ayU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Apr 26 23:51:16 2025 GMT Not After : May 3 23:51:16 2025 GMT Subject: CN=680d7174-ab27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:74:87:39:3d:24:62:f3:6a:aa:bf:97:df: 6f:0f:f3:15:bc:e1:15:f9:e0:0f:01:8e:3b:f1:33: 61:a4:53:01:36:15:5e:97:40:2b:a1:a6:4f:85:8e: 7c:e3:5d:48:bb:98:08:ed:f0:cf:c4:25:eb:86:f2: 5b:4c:8f:84:00:80:dd:ee:05:bf:83:00:99:39:d0: 17:10:e9:57:b9:39:3b:b4:88:b1:c4:b5:8c:a9:6f: e3:e2:59:9e:2d:08:aa:fa:94:15:fa:56:cc:41:28: 22:43:88:f7:8c:9b:fc:01:82:cb:14:9a:b7:67:16: 46:e5:82:9c:0a:36:02:77:27:ff:8e:3a:f7:27:28: fa:30:66:64:c2:45:30:3a:25:93:bd:eb:04:68:6e: e8:e8:02:4a:45:81:2e:98:63:5b:e4:db:54:4d:15: bd:93:1b:4b:4a:b9:83:f6:8f:f1:f0:ea:ec:08:e8: 21:bb:27:8a:d9:a8:ff:1c:93:75:b0:e8:ac:bb:0c: d0:fd:49:39:38:51:91:0a:3a:cc:e5:58:a5:8d:fa: 49:d1:0e:4a:9d:29:a9:69:e9:f0:88:42:ba:fb:2d: 29:42:1a:e2:31:25:2a:92:16:49:82:cd:12:aa:bd: 5b:39:77:6b:90:45:67:bc:e0:50:7a:99:03:2b:cd: 54:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D8:FB:7B:0B:B5:C9:2E:05:58:13:D4:00:4E:9B:05:0B:17:BE:C7 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:55:0f:2f:2c:8a:25:c9:10:38:6c:92:44:f4:22:7d:e1:3c: 1b:0d:0b:1b:56:44:fc:1e:0f:64:2a:f4:23:c2:cb:1f:b6:b4: 63:0a:a9:0a:73:33:cc:7e:40:c9:a4:a6:47:07:9a:69:71:c4: d3:c4:86:b9:2a:2f:1b:95:1b:1d:86:16:5a:a2:d4:00:02:83: 44:2a:ca:da:f5:50:bd:b7:33:de:43:a4:e7:d2:3c:15:d1:1b: e1:cb:ce:87:14:3d:2a:9f:5f:89:40:1a:c5:26:5c:16:07:8f: 44:14:1c:7c:76:6c:f8:88:81:22:b3:20:f3:29:41:ae:5d:8f: d9:a3:82:30:53:91:3d:ca:db:52:00:ea:a5:7e:61:af:f4:73: 7c:0f:af:fa:26:01:aa:1d:2a:c7:48:af:0e:13:b7:4f:9a:64: 0f:0d:50:9c:b0:ba:bb:87:f0:46:3f:43:35:13:f0:24:88:eb: b9:d3:ae:71:0a:e0:96:a0:71:c3:6c:3a:b7:6f:86:89:27:00: b4:40:7d:e9:bd:bd:79:c4:7b:cc:92:83:31:76:bb:21:14:54: cf:ce:fa:0f:a3:6c:ac:79:7f:5f:e2:88:7e:13:c7:bf:b1:21: 85:78:6e:9d:f7:b2:e3:64:70:13:f7:25:5f:02:2d:fe:f6:f3: 68:55:c0:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjUwNDI2MjM1MTE2WhcNMjUwNTAzMjM1MTE2WjAYMRYwFAYD VQQDEw02ODBkNzE3NC1hYjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+V0hzk9JGLzaqq/l99vD/MVvOEV+eAPAY478TNhpFMBNhVel0AroaZPhY58 411Iu5gI7fDPxCXrhvJbTI+EAIDd7gW/gwCZOdAXEOlXuTk7tIixxLWMqW/j4lme LQiq+pQV+lbMQSgiQ4j3jJv8AYLLFJq3ZxZG5YKcCjYCdyf/jjr3Jyj6MGZkwkUw OiWTvesEaG7o6AJKRYEumGNb5NtUTRW9kxtLSrmD9o/x8OrsCOghuyeK2aj/HJN1 sOisuwzQ/Uk5OFGRCjrM5ViljfpJ0Q5KnSmpaenwiEK6+y0pQhriMSUqkhZJgs0S qr1bOXdrkEVnvOBQepkDK81UtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLY+3sL tckuBVgT1ABOmwULF77HMB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S WF9JbVgtU1JrSng5ZEJSX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPVQ8vLIolyRA4bJJE9CJ94TwbDQsbVkT8Hg9kKvQjwssftrRjCqkK czPMfkDJpKZHB5ppccTTxIa5Ki8blRsdhhZaotQAAoNEKsra9VC9tzPeQ6Tn0jwV 0Rvhy86HFD0qn1+JQBrFJlwWB49EFBx8dmz4iIEisyDzKUGuXY/Zo4IwU5E9yttS AOqlfmGv9HN8D6/6JgGqHSrHSK8OE7dPmmQPDVCcsLq7h/BGP0M1E/AkiOu5065x CuCWoHHDbDq3b4aJJwC0QH3pvb15xHvMkoMxdrshFFTPzvoPo2yseX9f4oh+E8e/ sSGFeG6d97LjZHAT9yVfAi3+9vNoVcBs -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:11 2025 by rpki-client on console.sobornost.net