$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft File: FrVkt1jfzVLFzokRkuMbcVscv-g.mft (raw, json) Hash identifier: AG7BaSmDUUwMxO/l8oK61YqFYUhfsc7Yu7SGR/gfyVs= Subject key identifier: A0:BB:CA:B8:62:E0:77:A0:CE:5F:D9:A6:D4:F3:B0:49:56:58:60:B2 Authority key identifier: 16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 Certificate issuer: /CN=A91CF4FE/serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Certificate serial: 3513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft Manifest number: 34C4 Signing time: Sat 26 Apr 2025 14:25:31 +0000 Manifest this update: Sat 26 Apr 2025 14:25:31 +0000 Manifest next update: Sat 03 May 2025 14:25:31 +0000 Files and hashes: 1: FrVkt1jfzVLFzokRkuMbcVscv-g.crl (hash: YNBHvfqdpTGYsf/VKCwI6pinMGnFTK2hrptyKANMJvA=) 2: 10DAE05EB04811EABB4AEF61C4F9AE02.roa (hash: +b4JTzk5rUoiBhLUxnA3EW+SFsT+j/Ycd9v6oicmMdQ=) 3: 40DFD5AC650711EFB94FD44FC4F9AE02.roa (hash: 7lbO8FJw1G5XebxqgjyAycbRZnwkoSKxE4lbb1qM6S8=) 4: F6FAB490BB5811EF8C37CB81C4F9AE02.roa (hash: 8BNZKJ0bk38KOQOWjsH36VcnyN3HEx5P7NFwwrluJjM=) 5: 534379FCEE1611ECA6DE1824C4F9AE02.roa (hash: nz0TqyYIJbty+IiMMO1L40DQ1f9SJsrGYZW4STnoOWg=) 6: 5F22E1129B3011EF952F2762C4F9AE02.roa (hash: GzI1DKhtNKvZlRIctznDCQywZe9adFXYq+KIp89kCD4=) 7: 427BAA66E23211E8BD132210C4F9AE02.roa (hash: M3hgU5ipnFVKj6gek7MHkg0fz4T5KcW7+G9KqLsqkNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13587 (0x3513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF4FE, serialNumber=16B564B758DFCD52C5CE891192E31B715B1CBFE8 Validity Not Before: Apr 26 14:25:31 2025 GMT Not After : May 3 14:25:31 2025 GMT Subject: CN=680cecdb-c6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:96:0f:94:b0:10:fc:fb:33:9e:f4:55:f1: 72:35:ed:31:2a:7f:8e:38:a5:d3:1e:02:93:d9:ba: 10:e2:e2:53:73:26:35:41:3b:b7:59:32:0d:85:95: 00:4b:26:57:f0:f3:ba:f2:b3:23:c8:df:ef:7e:9b: 5b:fd:b8:36:2a:18:24:cc:0c:79:e0:30:0d:be:c7: 0a:f0:5f:5d:f6:0e:66:72:9b:31:c2:08:64:21:a7: dc:8f:3f:4b:9f:b6:8b:5f:a9:b8:84:78:90:5f:01: 80:65:33:d3:5a:fd:5a:a7:49:9c:19:b4:46:8f:09: 6f:f4:78:d6:78:2b:b9:34:b3:62:79:a7:98:1d:74: 6f:99:6c:70:01:39:d5:2c:7d:2b:0e:b3:7e:fe:4b: 61:56:3a:8b:f2:ca:a4:79:e0:f8:13:03:68:22:f2: c1:cb:0b:e2:48:05:6d:7d:89:cb:80:df:8b:45:b9: 74:60:2c:a5:9c:32:a1:ed:5a:db:13:82:29:94:f7: d2:1d:8c:20:b8:34:e9:44:5f:fe:3b:71:b8:b9:0b: 0d:a3:d5:d1:44:b6:23:15:77:7f:d0:15:6f:6c:4a: 35:b4:68:45:85:80:0d:09:22:55:9b:82:e1:8d:f7: 3a:20:2b:64:2f:38:bc:b9:66:05:c9:d7:31:7e:17: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BB:CA:B8:62:E0:77:A0:CE:5F:D9:A6:D4:F3:B0:49:56:58:60:B2 X509v3 Authority Key Identifier: keyid:16:B5:64:B7:58:DF:CD:52:C5:CE:89:11:92:E3:1B:71:5B:1C:BF:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrVkt1jfzVLFzokRkuMbcVscv-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4FE/BA13124E1D8511E2A77999DC08B02CD2/FrVkt1jfzVLFzokRkuMbcVscv-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3a:cc:86:58:7b:b7:96:30:53:b5:59:30:89:e3:60:9e:13: da:57:ba:13:b9:f1:cf:43:76:c9:59:a6:a1:93:f5:45:6c:51: b0:04:9d:ed:12:c0:ba:cf:3f:b6:f0:30:41:42:3b:9b:86:04: f7:ff:24:bb:47:b7:b6:41:1f:03:c9:b6:b4:01:1c:81:da:0d: 05:b0:42:8e:fe:98:33:d8:81:52:ce:67:93:88:1e:06:47:29: 5b:b1:d2:72:94:8b:f3:36:00:b4:a0:d0:37:ee:40:ee:d2:ad: a9:28:ee:42:a0:03:e4:11:9e:c0:c5:ac:34:93:4d:7d:bb:b6: a1:1f:a3:a4:70:0a:9a:ff:c6:6a:eb:c7:bd:08:ba:59:2b:38: 12:8d:06:5b:2d:22:58:a3:a8:df:6a:67:44:6c:86:6b:28:d2: 93:9a:ef:3a:d7:bd:d3:b5:b5:ed:f2:ca:25:00:5c:13:e5:00: a5:92:ac:39:74:9a:47:e3:bb:17:dd:28:fc:63:aa:a7:37:1d: 06:b5:67:4b:a9:60:14:e6:cf:ad:7c:07:89:b9:22:96:ca:7f: 9c:1b:90:f0:65:91:10:2b:fd:62:48:44:d4:d3:c9:4b:76:a3: 26:77:a8:c5:86:fb:3d:32:6b:39:c9:d2:31:78:f4:7b:bc:c2: 08:4c:d6:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y0RkUxMTAvBgNVBAUTKDE2QjU2NEI3NThERkNENTJDNUNFODkxMTkyRTMxQjcx NUIxQ0JGRTgwHhcNMjUwNDI2MTQyNTMxWhcNMjUwNTAzMTQyNTMxWjAYMRYwFAYD VQQDEw02ODBjZWNkYi1jNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyuWD5SwEPz7M570VfFyNe0xKn+OOKXTHgKT2boQ4uJTcyY1QTu3WTINhZUA SyZX8PO68rMjyN/vfptb/bg2KhgkzAx54DANvscK8F9d9g5mcpsxwghkIafcjz9L n7aLX6m4hHiQXwGAZTPTWv1ap0mcGbRGjwlv9HjWeCu5NLNieaeYHXRvmWxwATnV LH0rDrN+/kthVjqL8sqkeeD4EwNoIvLBywviSAVtfYnLgN+LRbl0YCylnDKh7Vrb E4IplPfSHYwguDTpRF/+O3G4uQsNo9XRRLYjFXd/0BVvbEo1tGhFhYANCSJVm4Lh jfc6ICtkLzi8uWYFydcxfhfeawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKC7yrhi 4Hegzl/ZptTzsElWWGCyMB8GA1UdIwQYMBaAFBa1ZLdY381Sxc6JEZLjG3FbHL/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjRGRS9CQTEzMTI0RTFE ODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpWTEZ6b2tSa3VNYmNWc2N2 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyVmt0MWpmelZMRnpva1JrdU1iY1ZzY3YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjRGRS9CQTEzMTI0RTFEODUxMUUyQTc3OTk5REMwOEIwMkNEMi9GclZrdDFqZnpW TEZ6b2tSa3VNYmNWc2N2LWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIOsyGWHu3ljBTtVkwieNgnhPaV7oTufHPQ3bJWaahk/VFbFGwBJ3t EsC6zz+28DBBQjubhgT3/yS7R7e2QR8Dyba0ARyB2g0FsEKO/pgz2IFSzmeTiB4G RylbsdJylIvzNgC0oNA37kDu0q2pKO5CoAPkEZ7Axaw0k019u7ahH6OkcAqa/8Zq 68e9CLpZKzgSjQZbLSJYo6jfamdEbIZrKNKTmu86173TtbXt8solAFwT5QClkqw5 dJpH47sX3Sj8Y6qnNx0GtWdLqWAU5s+tfAeJuSKWyn+cG5DwZZEQK/1iSETU08lL dqMmd6jFhvs9Mms5ydIxePR7vMIITNa0 -----END CERTIFICATE-----Generated at Sat Apr 26 15:55:41 2025 by rpki-client on console.sobornost.net