$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft File: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json) Hash identifier: By91+fjGukSiPPToGDSDQOjjBCY843bUAT44IGEcSXo= Subject key identifier: A7:9C:B2:BE:2C:1D:4F:EB:98:AD:73:B5:87:1E:64:7D:02:19:25:ED Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 131F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft Manifest number: 1311 Signing time: Mon 28 Apr 2025 17:16:05 +0000 Manifest this update: Mon 28 Apr 2025 17:16:05 +0000 Manifest next update: Mon 05 May 2025 17:16:05 +0000 Files and hashes: 1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: lNZY2I52sIkwbeOL+aunU+Pdwof87dS2Yy6ChgCEQAU=) 2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: ++7RC+lcxadURbh9ihJKswyqNjTMzF1VYIMw23UQZNY=) 3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: YugUSTWItaHwoU0lMPP/vlXY7+UmWW6qtCLtQUAsjJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4895 (0x131f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: Apr 28 17:16:05 2025 GMT Not After : May 5 17:16:05 2025 GMT Subject: CN=680fb7d5-ffb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:49:8a:84:fd:da:b6:f7:11:42:fc:e5:68: cf:aa:d7:dc:9e:cf:ba:d6:8e:aa:b2:95:8f:36:8e: 2a:8a:f3:10:46:08:d0:16:a1:14:13:8d:66:0f:e6: ae:37:74:64:61:7c:39:9f:e0:9e:fb:55:e4:62:a4: 0e:97:5a:1b:70:63:43:b9:cd:4f:4f:65:05:93:45: 7e:14:07:79:3e:db:56:7c:fd:22:88:be:a2:98:35: 2b:fd:53:78:42:ce:9f:91:7c:fb:f2:d8:fd:64:7f: 28:df:ef:87:c1:92:03:99:31:ad:ef:02:5e:e5:20: ec:eb:e6:cf:04:59:ee:ee:9d:b9:86:42:b3:8b:5b: e4:36:85:a3:33:ec:33:b8:76:2e:e1:e2:ef:54:5b: d9:27:74:3d:00:eb:14:59:3c:ac:ef:3e:9d:a9:16: 9b:94:46:c0:7d:37:6e:90:6e:89:c0:c7:27:78:24: 39:1f:51:2c:d3:23:a5:5a:21:99:52:d2:f6:5e:6b: b6:a3:7a:84:f5:14:56:2f:87:82:e8:e3:bf:eb:90: 9d:84:c2:8b:fe:1f:e2:72:77:40:57:24:fc:59:19: cd:0b:24:10:6d:d2:a5:af:c1:c4:61:66:f1:f7:31: 8d:a9:c5:94:e5:57:d2:0d:39:eb:76:55:0c:68:2f: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9C:B2:BE:2C:1D:4F:EB:98:AD:73:B5:87:1E:64:7D:02:19:25:ED X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e4:d9:6c:b4:a1:b9:f3:5e:31:e6:4d:a4:b8:be:f8:73:04: ac:85:7c:91:8b:48:90:ab:24:36:c8:dd:ad:17:1d:4e:9a:d9: 13:7e:e3:3c:4a:d1:4d:15:08:dd:c0:46:53:29:fe:cf:59:8a: 7d:72:55:af:4b:02:6c:26:1a:a9:d4:cc:da:3a:fc:af:d0:67: d7:8f:29:74:b8:df:eb:b4:63:cc:70:a8:ca:e0:0c:58:c2:9c: 36:45:e4:27:65:29:17:82:78:75:90:cd:b5:d0:37:6b:f5:0e: 83:81:26:f5:55:63:22:87:c6:d9:d0:99:d6:1d:93:4a:1d:82: 6f:ee:ba:59:3c:7d:69:40:77:3e:7f:0e:65:b7:e4:35:ad:16: 1d:b6:46:e6:3d:27:08:7d:78:1d:bc:20:17:96:f6:fb:0c:41: 33:99:fd:4d:bf:75:75:b9:9e:2b:65:8d:ec:34:f8:5a:ac:63: f0:63:33:fc:67:2c:cc:98:22:1e:f9:2c:2b:be:18:8a:85:bb: fc:b7:d7:92:36:55:b9:dc:61:b3:74:bd:0b:99:69:ea:c9:41: e9:db:3b:42:b2:6c:19:8c:a5:81:31:b3:3f:43:3c:0a:f3:5a: 59:12:80:5e:56:1d:1f:69:03:34:d1:ab:e6:96:b1:46:e6:68: 55:00:e4:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwNDI4MTcxNjA1WhcNMjUwNTA1MTcxNjA1WjAYMRYwFAYD VQQDEw02ODBmYjdkNS1mZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm5JioT92rb3EUL85WjPqtfcns+61o6qspWPNo4qivMQRgjQFqEUE41mD+au N3RkYXw5n+Ce+1XkYqQOl1obcGNDuc1PT2UFk0V+FAd5PttWfP0iiL6imDUr/VN4 Qs6fkXz78tj9ZH8o3++HwZIDmTGt7wJe5SDs6+bPBFnu7p25hkKzi1vkNoWjM+wz uHYu4eLvVFvZJ3Q9AOsUWTys7z6dqRablEbAfTdukG6JwMcneCQ5H1Es0yOlWiGZ UtL2Xmu2o3qE9RRWL4eC6OO/65CdhMKL/h/icndAVyT8WRnNCyQQbdKlr8HEYWbx 9zGNqcWU5VfSDTnrdlUMaC8D2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKecsr4s HU/rmK1ztYceZH0CGSXtMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1 MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA75NlstKG5814x5k2kuL74cwSshXyRi0iQqyQ2yN2tFx1OmtkTfuM8 StFNFQjdwEZTKf7PWYp9clWvSwJsJhqp1MzaOvyv0GfXjyl0uN/rtGPMcKjK4AxY wpw2ReQnZSkXgnh1kM210Ddr9Q6DgSb1VWMih8bZ0JnWHZNKHYJv7rpZPH1pQHc+ fw5lt+Q1rRYdtkbmPScIfXgdvCAXlvb7DEEzmf1Nv3V1uZ4rZY3sNPharGPwYzP8 ZyzMmCIe+SwrvhiKhbv8t9eSNlW53GGzdL0LmWnqyUHp2ztCsmwZjKWBMbM/QzwK 81pZEoBeVh0faQM00avmlrFG5mhVAORj -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:15 2025 by rpki-client on console.sobornost.net