$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft File: uSVP8yozKY2dXGFc_aRTFeFcfLU.mft (raw, json) Hash identifier: jWSR9bdVROP3bVulRM7QcbBdeoNw2IzDfEIoGOILZs4= Subject key identifier: 1D:AF:76:CD:F6:5F:D1:F7:E4:DB:94:5B:C6:FB:84:60:B7:55:1B:D4 Authority key identifier: B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 Certificate issuer: /CN=A91F3043/serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Certificate serial: 0639 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft Manifest number: 0630 Signing time: Sat 26 Apr 2025 22:22:47 +0000 Manifest this update: Sat 26 Apr 2025 22:22:46 +0000 Manifest next update: Sat 03 May 2025 22:22:46 +0000 Files and hashes: 1: uSVP8yozKY2dXGFc_aRTFeFcfLU.crl (hash: MRSABsyLIpgIGSObcUECVDrDsciVb0nHPoXhCE8USh8=) 2: BDFE68F491FD11EB84408D16C4F9AE02.roa (hash: NiOCVi1ZAoRhfdZ2LF+ut8x9beDsO9AQBCdgx3wc2ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3043, serialNumber=B9254FF32A33298D9D5C615CFDA45315E15C7CB5 Validity Not Before: Apr 26 22:22:46 2025 GMT Not After : May 3 22:22:46 2025 GMT Subject: CN=680d5cb7-8b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ab:c8:aa:ba:23:6c:ab:db:7a:9e:82:ad:f5: 07:ef:51:87:26:63:eb:78:e6:a2:38:e6:2f:59:57: 4d:ba:0f:e3:a4:21:fb:a1:3b:fa:21:b0:86:89:16: 9d:04:21:d8:4c:23:b1:5d:30:b2:a7:67:35:81:8f: 82:06:dd:39:24:43:31:df:e2:04:f5:5d:e8:f0:69: cd:d3:90:9e:6c:7b:61:5f:2c:62:89:d6:71:fd:9e: 6a:34:23:4e:a4:ea:be:dc:ab:be:90:93:2f:33:4f: 25:d9:ac:83:ba:ae:b2:f3:2c:c9:13:df:f6:97:3e: fc:05:66:71:c7:4e:a9:80:8a:e8:48:fc:96:cb:4e: d1:e0:e9:0d:aa:48:f7:3c:35:78:e5:87:8f:97:15: d0:8f:d5:a0:29:24:dc:21:d6:36:cc:67:2f:57:b0: 40:a7:58:29:a9:ea:6b:1d:2d:1a:f0:f8:a8:55:fa: 0a:3f:20:10:ca:ad:2c:fa:c7:5f:b3:64:84:47:49: 1b:65:01:4e:24:02:96:9a:c9:0b:c7:11:66:f5:2e: 51:82:c7:ec:7d:88:70:da:00:31:ce:9e:b0:23:e5: e0:49:c9:5b:38:f8:7d:e4:67:66:00:37:ab:59:16: 35:79:39:77:06:04:fd:09:21:3a:4b:11:58:44:27: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AF:76:CD:F6:5F:D1:F7:E4:DB:94:5B:C6:FB:84:60:B7:55:1B:D4 X509v3 Authority Key Identifier: keyid:B9:25:4F:F3:2A:33:29:8D:9D:5C:61:5C:FD:A4:53:15:E1:5C:7C:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSVP8yozKY2dXGFc_aRTFeFcfLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3043/396C5D4091FC11EBA998DB14C4F9AE02/uSVP8yozKY2dXGFc_aRTFeFcfLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:1c:36:ef:21:be:9a:eb:47:ab:f4:db:01:25:bc:28:2f:53: 95:4b:69:90:a1:2c:41:1a:d1:48:b7:79:81:0f:ee:e1:e2:71: 78:fd:06:69:f3:59:69:67:17:0e:ef:e8:49:95:2b:05:7e:cf: a8:4a:b7:58:88:db:0e:d6:8b:2e:cc:73:23:52:e5:ef:76:6e: da:42:76:f5:c1:10:77:a8:a9:51:44:01:ce:5c:5a:3a:fd:31: 01:11:a3:39:47:1b:9d:96:87:d8:49:01:87:f7:4f:04:4b:75: e6:6c:c2:43:8e:11:ab:af:65:00:68:eb:af:d7:03:8b:bf:c3: db:22:7b:7a:f1:4c:2b:d6:10:b8:c2:07:86:9d:98:3b:1c:85: 73:39:54:ed:04:99:59:d2:31:64:6b:bd:22:5c:bb:ec:81:fb: 84:9b:8b:da:72:f6:a1:70:8e:21:ab:57:d9:a1:d1:65:0a:b9: 81:f3:8f:36:25:b2:69:8d:5c:76:1d:1b:88:81:12:0b:c4:99: 99:c0:9f:9f:52:51:44:39:65:93:dd:e6:e0:57:93:7d:0a:e5: 1f:11:7b:f1:e5:ca:bf:b9:61:d8:b1:28:a6:b1:5d:47:8c:f4: 81:72:af:dd:95:f1:6b:bd:df:47:52:36:25:b9:a5:76:e5:92: 2b:6c:05:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwNDMxMTAvBgNVBAUTKEI5MjU0RkYzMkEzMzI5OEQ5RDVDNjE1Q0ZEQTQ1MzE1 RTE1QzdDQjUwHhcNMjUwNDI2MjIyMjQ2WhcNMjUwNTAzMjIyMjQ2WjAYMRYwFAYD VQQDEw02ODBkNWNiNy04Yjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqvIqrojbKvbep6CrfUH71GHJmPreOaiOOYvWVdNug/jpCH7oTv6IbCGiRad BCHYTCOxXTCyp2c1gY+CBt05JEMx3+IE9V3o8GnN05CebHthXyxiidZx/Z5qNCNO pOq+3Ku+kJMvM08l2ayDuq6y8yzJE9/2lz78BWZxx06pgIroSPyWy07R4OkNqkj3 PDV45YePlxXQj9WgKSTcIdY2zGcvV7BAp1gpqeprHS0a8PioVfoKPyAQyq0s+sdf s2SER0kbZQFOJAKWmskLxxFm9S5RgsfsfYhw2gAxzp6wI+XgSclbOPh95GdmADer WRY1eTl3BgT9CSE6SxFYRCf/3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2vds32 X9H35NuUW8b7hGC3VRvUMB8GA1UdIwQYMBaAFLklT/MqMymNnVxhXP2kUxXhXHy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzA0My8zOTZDNUQ0MDkx RkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZMmRYR0ZjX2FSVEZlRmNm TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VTVlA4eW96S1kyZFhHRmNfYVJURmVGY2ZMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzA0My8zOTZDNUQ0MDkxRkMxMUVCQTk5OERCMTRDNEY5QUUwMi91U1ZQOHlvektZ MmRYR0ZjX2FSVEZlRmNmTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxHDbvIb6a60er9NsBJbwoL1OVS2mQoSxBGtFIt3mBD+7h4nF4/QZp 81lpZxcO7+hJlSsFfs+oSrdYiNsO1osuzHMjUuXvdm7aQnb1wRB3qKlRRAHOXFo6 /TEBEaM5RxudlofYSQGH908ES3XmbMJDjhGrr2UAaOuv1wOLv8PbInt68Uwr1hC4 wgeGnZg7HIVzOVTtBJlZ0jFka70iXLvsgfuEm4vacvahcI4hq1fZodFlCrmB8482 JbJpjVx2HRuIgRILxJmZwJ+fUlFEOWWT3ebgV5N9CuUfEXvx5cq/uWHYsSimsV1H jPSBcq/dlfFrvd9HUjYluaV25ZIrbAXo -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net