$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json) Hash identifier: CXskEjPnKVMC8Gk9No4zpPyhyutmnVkzMTlckl6ztic= Subject key identifier: B7:13:66:DE:96:11:92:AC:91:25:09:12:94:B8:2A:A7:84:5C:3C:65 Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Certificate serial: 028D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft Manifest number: 0288 Signing time: Sun 27 Apr 2025 01:12:35 +0000 Manifest this update: Sun 27 Apr 2025 01:12:34 +0000 Manifest next update: Sun 04 May 2025 01:12:34 +0000 Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: ThUjXLfClzLhI5mmoPkbi7ZnGLqyEE3D7TLdrSq/Q10=) 2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: lORLBE7+FfhOwINAGtcBHyopu2FbSYXSTs4IIjqvS/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991 Validity Not Before: Apr 27 01:12:34 2025 GMT Not After : May 4 01:12:34 2025 GMT Subject: CN=680d8482-6a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4f:02:9f:e3:5d:06:80:f5:00:d0:32:18:20: 6e:4b:3c:c9:66:36:1c:3d:2f:cb:ed:ed:09:ba:d9: 81:fa:21:fb:c8:5a:85:cb:40:09:fa:be:07:4c:03: 38:35:e4:7d:31:1f:57:7d:44:d6:d8:c7:ab:71:43: a3:38:d8:18:b0:d0:2f:88:43:21:84:0c:63:4a:9e: 60:8d:36:97:88:6f:66:71:75:0b:3a:21:63:5c:94: 05:23:f3:f7:5c:04:36:a6:9f:bb:35:1d:ce:10:48: 08:d1:b3:e2:66:0d:55:03:da:29:c5:0e:21:06:0e: c2:5c:f4:dc:71:2b:14:bd:23:09:13:69:67:5e:cc: fe:d2:a7:7a:26:94:c9:fb:02:cd:c4:0b:cc:42:89: 4d:e4:40:23:1e:8a:84:61:e6:db:1e:60:02:07:a3: e5:cf:66:d6:13:34:dd:6a:04:ae:d1:d3:d7:f8:45: 27:0b:3c:b7:ba:ec:a2:1a:97:33:7f:be:17:fd:3d: 98:e8:7a:29:28:2a:f9:5d:ea:3a:cc:62:e0:ea:ad: fd:98:83:fd:14:9b:67:1d:a4:04:86:83:18:24:1d: af:05:ce:b1:b6:04:fe:d8:d1:47:81:34:98:e8:f6: 29:cd:f1:7d:7e:48:a6:c4:44:7c:ae:6d:f4:c1:1d: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:13:66:DE:96:11:92:AC:91:25:09:12:94:B8:2A:A7:84:5C:3C:65 X509v3 Authority Key Identifier: keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:72:29:a6:30:13:d6:d5:1d:18:50:30:ac:3a:31:a0:96:56: 6a:76:51:5f:74:b2:da:bf:04:f1:46:57:6b:50:5d:0b:39:66: d2:c8:90:62:4e:0b:fa:d1:0e:d7:35:a4:fe:a1:69:f1:ae:5c: 67:76:2c:ac:d9:d7:79:26:74:58:ce:86:4a:db:f7:04:20:36: 04:98:d8:e0:7e:3f:5a:a0:34:83:81:3e:d4:70:ad:9a:fe:56: af:11:57:f5:84:82:18:dc:2b:fa:6e:6d:38:d1:de:7e:4b:91: 8e:b3:c2:a1:43:23:a9:f1:35:e7:2a:81:c7:ac:37:e6:5d:1a: d1:e6:a5:10:ba:45:aa:fd:94:ef:b8:f3:48:5a:4b:6f:c2:59: 56:af:e8:e0:d3:d3:20:3a:74:6f:6f:fd:b1:8f:f5:e5:4e:92: 6d:71:8a:ba:da:0b:70:da:e8:8a:24:ac:eb:65:5f:0d:93:06: 39:0e:73:b6:0b:c8:5c:ad:9b:57:c7:14:8f:31:f9:bc:33:bf: cf:c3:ff:9c:eb:b3:a3:a6:cd:1e:e8:74:8f:ca:2d:90:4f:5e: 29:e4:f0:2a:4b:c7:2f:f4:d9:f7:55:21:4b:d5:8b:93:e6:26: 9e:a4:3b:56:b6:c0:bc:cf:1e:c6:ac:27:db:84:51:09:08:a4: a4:41:d0:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxQjAxMTAvBgNVBAUTKEJDNjM4RTU3Q0E3QjkyMTQ0RkJBNzEzQUQ2REI2NEU2 RDBBRDQ5OTEwHhcNMjUwNDI3MDExMjM0WhcNMjUwNTA0MDExMjM0WjAYMRYwFAYD VQQDEw02ODBkODQ4Mi02YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv08Cn+NdBoD1ANAyGCBuSzzJZjYcPS/L7e0JutmB+iH7yFqFy0AJ+r4HTAM4 NeR9MR9XfUTW2MercUOjONgYsNAviEMhhAxjSp5gjTaXiG9mcXULOiFjXJQFI/P3 XAQ2pp+7NR3OEEgI0bPiZg1VA9opxQ4hBg7CXPTccSsUvSMJE2lnXsz+0qd6JpTJ +wLNxAvMQolN5EAjHoqEYebbHmACB6Plz2bWEzTdagSu0dPX+EUnCzy3uuyiGpcz f74X/T2Y6HopKCr5Xeo6zGLg6q39mIP9FJtnHaQEhoMYJB2vBc6xtgT+2NFHgTSY 6PYpzfF9fkimxER8rm30wR28oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcTZt6W EZKskSUJEpS4KqeEXDxlMB8GA1UdIwQYMBaAFLxjjlfKe5IUT7pxOtbbZObQrUmR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzFCMC8xNUNGNUE4ODAx QjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2toUlB1bkU2MXR0azV0Q3RT WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZHT09WOHA3a2hSUHVuRTYxdHRrNXRDdFNaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzFCMC8xNUNGNUE4ODAxQjYxMUVEQjFBNEQyODJDNEY5QUUwMi92R09PVjhwN2to UlB1bkU2MXR0azV0Q3RTWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIcimmMBPW1R0YUDCsOjGgllZqdlFfdLLavwTxRldrUF0LOWbSyJBi Tgv60Q7XNaT+oWnxrlxndiys2dd5JnRYzoZK2/cEIDYEmNjgfj9aoDSDgT7UcK2a /lavEVf1hIIY3Cv6bm040d5+S5GOs8KhQyOp8TXnKoHHrDfmXRrR5qUQukWq/ZTv uPNIWktvwllWr+jg09MgOnRvb/2xj/XlTpJtcYq62gtw2uiKJKzrZV8NkwY5DnO2 C8hcrZtXxxSPMfm8M7/Pw/+c67Ojps0e6HSPyi2QT14p5PAqS8cv9Nn3VSFL1YuT 5iaepDtWtsC8zx7GrCfbhFEJCKSkQdCp -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net