$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json) Hash identifier: Ah9knIfWch26+ZoQx03aCvm3YuHCjdZ/jAJvi2HuZ9E= Subject key identifier: F0:2A:8C:8D:9C:43:89:FD:96:D1:83:AB:1B:9A:09:E0:7E:57:32:3E Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft Manifest number: 38 Signing time: Sun 27 Apr 2025 06:23:03 +0000 Manifest this update: Sun 27 Apr 2025 06:23:02 +0000 Manifest next update: Sun 04 May 2025 06:23:02 +0000 Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: poXYNkjHRMxKlwFDRp2543d3BkaMxtGbuWS4GRhegjE=) 2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: vwuRFoQ8j2nxDneRxv7aNdc+Cd7umBY/3NvhL9KJqC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772 Validity Not Before: Apr 27 06:23:02 2025 GMT Not After : May 4 06:23:02 2025 GMT Subject: CN=680dcd46-95e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:fc:ed:58:d4:4a:a9:16:9c:29:f1:a8:10: 58:72:20:a0:c8:5c:47:38:cb:ee:aa:22:04:f7:d1: 35:d7:a7:f6:cc:54:aa:a1:23:d1:37:72:15:46:7c: b3:86:e2:1c:45:70:9d:f8:5c:90:55:58:52:56:20: c4:ee:ad:84:92:3e:b5:1d:b0:4a:45:13:29:11:61: 83:e1:c7:48:4d:ce:cb:8e:d1:fe:1c:fb:fd:85:b1: b6:60:99:c9:5e:da:02:5f:a5:dd:11:dc:0d:19:94: d8:f3:54:2a:0c:b3:0a:a0:d8:dc:5a:0f:ba:e0:95: 2b:d3:0c:c9:3a:bc:17:8f:d0:12:d4:08:e8:19:aa: 5b:e4:ae:60:ac:b1:2e:22:a6:cf:48:70:5f:2e:36: 0b:6c:8f:50:30:3e:a0:37:3d:c9:9d:22:9b:86:cd: 6e:23:23:99:b6:20:24:0f:63:ad:25:37:90:12:97: 9e:2f:3d:3c:16:d0:44:ba:a7:f0:26:5f:44:0a:a4: 10:9e:a1:08:51:27:09:de:37:e5:b5:f5:77:b3:b9: a1:1f:cd:14:c7:5f:39:d1:f3:f0:28:e8:e7:a1:37: a9:e6:84:f9:9b:1c:29:f4:56:f3:cb:74:14:92:85: 0e:da:fe:52:96:83:36:28:f2:f4:e2:d8:f5:46:56: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2A:8C:8D:9C:43:89:FD:96:D1:83:AB:1B:9A:09:E0:7E:57:32:3E X509v3 Authority Key Identifier: keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:0c:19:e6:47:8a:ab:e3:8e:7e:da:03:42:03:c6:c7:58:46: c8:97:c5:f4:5d:10:e9:91:7c:9b:7a:bd:74:db:6d:ae:02:91: ed:51:28:34:76:7e:fa:2d:b2:bc:af:2b:6a:ac:3e:be:ec:12: c0:95:7b:47:9f:5d:c6:31:04:54:61:05:9b:0a:ca:bd:bd:54: 6c:59:24:ee:ba:8b:a3:88:42:53:94:65:10:41:f5:e1:96:93: c3:dd:33:ee:00:f1:37:5f:b6:7b:c5:58:d3:41:21:3d:f8:4e: b1:be:c1:d2:a7:12:87:46:3a:e4:65:ce:5e:68:bd:93:c0:ab: d9:a7:1a:83:d7:df:45:69:e9:a2:38:8c:f3:10:84:ea:f6:97: 92:a7:e5:79:23:50:a7:28:53:99:52:3d:e1:c7:e1:71:27:a9: f6:82:da:5a:b1:e3:e2:6f:3e:e5:47:5b:94:fb:39:2f:54:74: 8f:82:1b:08:e9:dc:11:6c:92:57:98:26:81:44:16:99:fd:7c: 5e:37:35:61:41:e6:83:c8:c6:fb:fe:44:d1:12:58:0e:73:f9: 2b:4d:f5:9c:a4:b3:9e:b1:b4:fa:81:99:8c:08:9a:83:03:b1: 0e:3f:b8:d6:b7:bc:af:13:99:b7:37:c7:8a:58:af:85:9d:df: 84:9f:bc:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTgzMjExMC8GA1UEBRMoQkU5QjkwNEVCNzZDQjA1QzYwQzNFMkMzNzlFMkZBNDg5 QTBFMTc3MjAeFw0yNTA0MjcwNjIzMDJaFw0yNTA1MDQwNjIzMDJaMBgxFjAUBgNV BAMTDTY4MGRjZDQ2LTk1ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3z/ztWNRKqRacKfGoEFhyIKDIXEc4y+6qIgT30TXXp/bMVKqhI9E3chVGfLOG 4hxFcJ34XJBVWFJWIMTurYSSPrUdsEpFEykRYYPhx0hNzsuO0f4c+/2FsbZgmcle 2gJfpd0R3A0ZlNjzVCoMswqg2NxaD7rglSvTDMk6vBeP0BLUCOgZqlvkrmCssS4i ps9IcF8uNgtsj1AwPqA3PcmdIpuGzW4jI5m2ICQPY60lN5ASl54vPTwW0ES6p/Am X0QKpBCeoQhRJwneN+W19XezuaEfzRTHXznR8/Ao6OehN6nmhPmbHCn0VvPLdBSS hQ7a/lKWgzYo8vTi2PVGVp+7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8CqMjZxD if2W0YOrG5oJ4H5XMj4wHwYDVR0jBBgwFoAUvpuQTrdssFxgw+LDeeL6SJoOF3Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODMyLzI2RTU4MjU0RDBC QTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4Z3ctTERlZUw2U0pvT0Yz SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdnB1UVRyZHNzRnhndy1MRGVlTDZTSm9PRjNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 ODMyLzI2RTU4MjU0RDBCQTExRUY4OTZDRDAyNkM0RjlBRTAyL3ZwdVFUcmRzc0Z4 Z3ctTERlZUw2U0pvT0YzSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMMGeZHiqvjjn7aA0IDxsdYRsiXxfRdEOmRfJt6vXTbba4Cke1RKDR2 fvotsryvK2qsPr7sEsCVe0efXcYxBFRhBZsKyr29VGxZJO66i6OIQlOUZRBB9eGW k8PdM+4A8TdftnvFWNNBIT34TrG+wdKnEodGOuRlzl5ovZPAq9mnGoPX30Vp6aI4 jPMQhOr2l5Kn5XkjUKcoU5lSPeHH4XEnqfaC2lqx4+JvPuVHW5T7OS9UdI+CGwjp 3BFskleYJoFEFpn9fF43NWFB5oPIxvv+RNESWA5z+StN9Zyks56xtPqBmYwImoMD sQ4/uNa3vK8Tmbc3x4pYr4Wd34SfvAM= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net