$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json) Hash identifier: rXBHcq4XWG1XKWwYeNPeHdoHg03KMHmv5uR54ZHVSic= Subject key identifier: 88:15:22:85:B4:9A:D2:57:76:B4:53:50:3E:CF:B3:2E:0A:D5:FB:2B Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Certificate serial: 0852 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft Manifest number: 081A Signing time: Sat 26 Apr 2025 20:48:36 +0000 Manifest this update: Sat 26 Apr 2025 20:48:36 +0000 Manifest next update: Sat 03 May 2025 20:48:36 +0000 Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: FUx8CuZwLSgeTBpI7ICG+0V6O0vfsJhFPRr7QHJHZMI=) 2: 65519ACC506C11EC99354984C4F9AE02.roa (hash: nEa6jfXtxG9N2Xq8i5UVfOUP23F8VB7FknoSsQg1RJ0=) 3: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: KU0OYgNotYA3UtDO5hlxYlQJ813PAymWu54BIJPXlUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF Validity Not Before: Apr 26 20:48:36 2025 GMT Not After : May 3 20:48:36 2025 GMT Subject: CN=680d46a4-b4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d3:f0:9f:cc:17:f8:c4:ff:15:e3:46:46:e3: 58:bf:b8:12:cb:7e:b0:13:08:b5:2a:15:d7:3f:0c: 3d:1f:51:a1:1e:d3:eb:1d:20:0a:8f:35:99:76:85: 67:44:3f:c1:07:45:09:23:43:56:b1:cf:75:4c:c0: ea:75:11:9d:4c:a6:24:ce:6f:f7:cd:5e:a7:52:66: 03:ba:4f:4e:21:e6:dc:8b:1c:d9:d4:0c:88:28:3d: 2a:de:d8:07:f4:69:34:33:8d:e1:8b:88:c4:ab:f3: 54:36:42:55:77:c5:2c:72:77:34:35:74:a8:f0:11: bf:53:90:32:e3:6a:1d:ee:2c:3a:b3:21:6c:f5:aa: f7:56:68:c2:2b:82:fd:61:a3:87:1a:38:00:b4:ab: 00:98:d2:79:94:24:73:f6:e2:4c:1f:a2:b1:70:d9: 89:99:95:96:fa:78:26:59:41:5b:39:de:6b:ab:95: 9f:12:2d:e1:ff:19:84:14:05:2c:67:55:1a:0c:56: 33:e3:43:13:87:b0:b4:06:bd:49:0a:76:7e:be:8c: 0d:8a:6a:3f:87:28:80:42:49:e2:a1:59:92:d8:65: 3f:99:d8:68:88:0a:a8:ef:fe:04:fe:db:7b:75:19: bd:c3:50:b3:76:8d:b1:10:00:b7:e9:89:6b:59:2a: 1c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:22:85:B4:9A:D2:57:76:B4:53:50:3E:CF:B3:2E:0A:D5:FB:2B X509v3 Authority Key Identifier: keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e2:9a:21:8e:44:cb:42:c2:f3:0f:02:11:58:16:6b:3c:37: 7c:32:0f:17:08:3d:0c:d3:d6:76:a8:42:96:c1:f1:c4:68:19: 98:32:60:1b:c8:59:c1:86:90:e0:d1:8f:3d:ba:09:a8:c7:3b: f4:ab:8c:f4:39:c4:76:8f:9d:e8:10:de:72:67:72:0e:6e:02: 0e:28:17:2e:cc:5c:d0:37:bf:47:b3:3a:ca:a6:b5:f9:20:a0: 4a:2e:59:98:2b:d5:0b:b2:ff:42:42:4e:55:be:3f:73:58:c8: 58:88:1f:7f:8e:c2:a1:12:63:19:c6:0b:78:4d:62:d4:62:0e: 1d:9f:69:94:7f:d3:24:2d:e7:87:36:af:c0:34:5e:f3:31:a2: 0f:2e:7c:fa:8a:70:7d:2a:9c:79:f6:52:98:95:47:c5:59:8d: e2:ef:32:fe:0b:70:9c:67:27:f2:8b:b0:4a:45:d3:02:68:4b: 4e:11:34:d8:6c:94:01:01:28:d1:ee:3e:b5:c0:ab:e9:2b:59: e6:83:fc:c9:36:3c:96:ca:fb:ed:68:df:80:78:ea:63:75:17: 0e:10:42:75:82:1e:ea:39:84:53:fa:8e:a0:53:b0:7c:96:a6: f8:1b:2d:1a:dd:ab:8b:d9:47:f8:59:34:c4:0b:e0:7c:ce:f9: 0e:40:09:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKEZFRjJDMUM0RUEwOTY0NDc3NTE0QzFBQTk0NkU2QzQx Nzc4RDA2QkYwHhcNMjUwNDI2MjA0ODM2WhcNMjUwNTAzMjA0ODM2WjAYMRYwFAYD VQQDEw02ODBkNDZhNC1iNGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtPwn8wX+MT/FeNGRuNYv7gSy36wEwi1KhXXPww9H1GhHtPrHSAKjzWZdoVn RD/BB0UJI0NWsc91TMDqdRGdTKYkzm/3zV6nUmYDuk9OIebcixzZ1AyIKD0q3tgH 9Gk0M43hi4jEq/NUNkJVd8Uscnc0NXSo8BG/U5Ay42od7iw6syFs9ar3VmjCK4L9 YaOHGjgAtKsAmNJ5lCRz9uJMH6KxcNmJmZWW+ngmWUFbOd5rq5WfEi3h/xmEFAUs Z1UaDFYz40MTh7C0Br1JCnZ+vowNimo/hyiAQknioVmS2GU/mdhoiAqo7/4E/tt7 dRm9w1Czdo2xEAC36YlrWSocoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgVIoW0 mtJXdrRTUD7Psy4K1fsrMB8GA1UdIwQYMBaAFP7ywcTqCWRHdRTBqpRubEF3jQa/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8zMzdBNjQzMkYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpFZDFGTUdxbEc1c1FYZU5C cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192TEJ4T29KWkVkMUZNR3FsRzVzUVhlTkJyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8zMzdBNjQzMkYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9fdkxCeE9vSlpF ZDFGTUdxbEc1c1FYZU5CcjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN4pohjkTLQsLzDwIRWBZrPDd8Mg8XCD0M09Z2qEKWwfHEaBmYMmAb yFnBhpDg0Y89ugmoxzv0q4z0OcR2j53oEN5yZ3IObgIOKBcuzFzQN79HszrKprX5 IKBKLlmYK9ULsv9CQk5Vvj9zWMhYiB9/jsKhEmMZxgt4TWLUYg4dn2mUf9MkLeeH Nq/ANF7zMaIPLnz6inB9Kpx59lKYlUfFWY3i7zL+C3CcZyfyi7BKRdMCaEtOETTY bJQBASjR7j61wKvpK1nmg/zJNjyWyvvtaN+AeOpjdRcOEEJ1gh7qOYRT+o6gU7B8 lqb4Gy0a3auL2Uf4WTTEC+B8zvkOQAka -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net