$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft File: rbkheCH_vuCW4c7EcJijFFokbqA.mft (raw, json) Hash identifier: dEIZbZhKoJWEZIhO5wb67pgkH/YL+0k9KIR/b0/+ssY= Subject key identifier: AA:51:FA:0F:50:77:7D:87:21:4B:A2:50:3D:6A:F7:26:F8:FC:4C:15 Authority key identifier: AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 Certificate issuer: /CN=A91F6E63/serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Certificate serial: 055E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft Manifest number: 0558 Signing time: Sat 26 Apr 2025 23:04:01 +0000 Manifest this update: Sat 26 Apr 2025 23:04:01 +0000 Manifest next update: Sat 03 May 2025 23:04:01 +0000 Files and hashes: 1: rbkheCH_vuCW4c7EcJijFFokbqA.crl (hash: F3f1Ij7/KYU9xd2x9YpvHvdnxJhZjSn/GSkTIwmKFow=) 2: 0C0402DEE5CD11EBADAD0E66C4F9AE02.roa (hash: C+71hKrmRR9fYlphYRnTOW1PJp3T8YQjGXM58/kjFCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1374 (0x55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E63, serialNumber=ADB9217821FFBEE096E1CEC47098A3145A246EA0 Validity Not Before: Apr 26 23:04:01 2025 GMT Not After : May 3 23:04:01 2025 GMT Subject: CN=680d6661-b075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:63:63:a8:21:92:98:cf:d6:e9:5b:53:4a: a3:32:fe:4b:e9:ba:24:d3:c6:51:11:7e:71:89:ee: 6a:16:e4:d7:b6:b7:dd:a0:26:a0:d2:b3:0b:45:44: bb:4b:b5:08:eb:db:9b:c0:a6:3e:a9:6d:3d:77:1d: 99:af:d9:d6:4c:ff:d6:c6:42:b0:87:c4:ba:ff:a2: 9c:29:c8:fb:fd:ce:81:20:24:1a:36:c1:d9:70:66: 5a:85:93:9f:f5:27:bd:04:94:25:e0:14:5b:64:e7: a4:c0:84:bb:b0:a7:98:1a:6f:e7:ec:be:22:e2:9a: f7:83:29:ad:89:61:8a:f7:c3:76:95:69:41:f9:71: 1a:e9:7b:e2:26:22:b9:f8:f7:46:18:08:49:23:d4: 7d:1c:70:e2:1e:b7:68:f7:11:ca:25:02:5d:5d:91: 53:32:2b:2f:0c:8c:33:0f:8c:ee:1e:8f:d8:af:2c: a2:dd:3c:44:ba:e4:97:7f:54:8f:be:3d:4f:53:e6: 0a:a4:55:5c:5b:82:ff:ca:17:55:48:cb:2f:2e:e7: 6e:2a:67:9a:5d:6d:37:77:37:20:cb:19:fe:3f:48: 5d:41:27:95:b8:c3:9a:b8:b5:3f:fb:16:3e:3c:42: 9b:0b:38:e8:4b:ed:ba:1d:15:93:10:37:20:8b:f2: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:51:FA:0F:50:77:7D:87:21:4B:A2:50:3D:6A:F7:26:F8:FC:4C:15 X509v3 Authority Key Identifier: keyid:AD:B9:21:78:21:FF:BE:E0:96:E1:CE:C4:70:98:A3:14:5A:24:6E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbkheCH_vuCW4c7EcJijFFokbqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E63/D69CD928E4A411EB8BC5C546C4F9AE02/rbkheCH_vuCW4c7EcJijFFokbqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:69:91:64:cd:6f:06:bf:a4:cf:93:ca:6e:2b:fa:a0:f1:ca: a4:d3:ba:f9:80:94:b8:0d:3d:39:b5:78:45:bd:98:b6:b9:ad: 12:8b:89:c6:be:5b:fd:6f:28:f6:94:d3:e0:ef:d8:33:21:dc: 8c:27:81:9f:34:e2:b4:95:d6:bf:61:9a:43:9a:d6:91:6e:81: b0:24:59:fc:fc:51:84:30:a4:f5:2b:4e:df:f2:d6:1c:38:ee: 80:6f:2c:a3:d0:53:19:4b:62:44:95:50:48:bc:c8:27:a3:45: 46:db:35:82:65:a9:3b:29:9c:da:ef:0d:7a:b4:b1:78:98:9a: 5c:47:f4:78:4f:20:18:ab:fa:20:e3:75:29:8b:eb:09:b8:fa: e0:79:b6:0e:d8:97:d2:e4:56:fe:20:a0:84:83:0d:be:c2:d6: bc:dc:23:8c:30:9d:03:f3:8c:3c:72:23:77:e5:b1:48:31:30: a6:a4:af:01:96:be:c0:cb:0c:63:01:9b:27:3e:de:aa:4d:d1: 63:53:fc:cb:22:a6:01:a0:99:ad:93:8b:a5:27:3a:a7:14:c8: 13:7d:2c:8e:8a:f9:d3:00:a4:99:48:b9:9f:5f:6f:32:2d:34: 10:f2:d5:d9:05:3d:3e:20:a7:57:f4:ea:a3:bc:71:76:fc:45: 06:e3:e1:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjMxMTAvBgNVBAUTKEFEQjkyMTc4MjFGRkJFRTA5NkUxQ0VDNDcwOThBMzE0 NUEyNDZFQTAwHhcNMjUwNDI2MjMwNDAxWhcNMjUwNTAzMjMwNDAxWjAYMRYwFAYD VQQDEw02ODBkNjY2MS1iMDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqdjY6ghkpjP1ulbU0qjMv5L6bok08ZREX5xie5qFuTXtrfdoCag0rMLRUS7 S7UI69ubwKY+qW09dx2Zr9nWTP/WxkKwh8S6/6KcKcj7/c6BICQaNsHZcGZahZOf 9Se9BJQl4BRbZOekwIS7sKeYGm/n7L4i4pr3gymtiWGK98N2lWlB+XEa6XviJiK5 +PdGGAhJI9R9HHDiHrdo9xHKJQJdXZFTMisvDIwzD4zuHo/Yryyi3TxEuuSXf1SP vj1PU+YKpFVcW4L/yhdVSMsvLuduKmeaXW03dzcgyxn+P0hdQSeVuMOauLU/+xY+ PEKbCzjoS+26HRWTEDcgi/JAmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpR+g9Q d32HIUuiUD1q9yb4/EwVMB8GA1UdIwQYMBaAFK25IXgh/77gluHOxHCYoxRaJG6g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2My9ENjlDRDkyOEU0 QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1Q1c0YzdFY0ppakZGb2ti cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jia2hlQ0hfdnVDVzRjN0VjSmlqRkZva2JxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2My9ENjlDRDkyOEU0QTQxMUVCOEJDNUM1NDZDNEY5QUUwMi9yYmtoZUNIX3Z1 Q1c0YzdFY0ppakZGb2ticUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiaZFkzW8Gv6TPk8puK/qg8cqk07r5gJS4DT05tXhFvZi2ua0Si4nG vlv9byj2lNPg79gzIdyMJ4GfNOK0lda/YZpDmtaRboGwJFn8/FGEMKT1K07f8tYc OO6Abyyj0FMZS2JElVBIvMgno0VG2zWCZak7KZza7w16tLF4mJpcR/R4TyAYq/og 43Upi+sJuPrgebYO2JfS5Fb+IKCEgw2+wta83COMMJ0D84w8ciN35bFIMTCmpK8B lr7AywxjAZsnPt6qTdFjU/zLIqYBoJmtk4ulJzqnFMgTfSyOivnTAKSZSLmfX28y LTQQ8tXZBT0+IKdX9OqjvHF2/EUG4+HH -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net