$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: u5TzjFU4yrUgtlaAVDSnzdTYkiG3kjk+kZK2xaAqfGY= Subject key identifier: 2A:97:40:98:03:4B:B5:0E:31:E5:03:6C:C1:3F:E0:4A:3A:0D:AE:20 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: 9B Signing time: Sun 27 Apr 2025 05:11:13 +0000 Manifest this update: Sun 27 Apr 2025 05:11:12 +0000 Manifest next update: Sun 04 May 2025 05:11:12 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: 8P4Tuex1pDZmhkthBFRQgY20egM4g/MMUGuGuOKNSmM=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: Ls+MqXGV/peb18S4iXh7J0QZNFdZuOz4J59MYeTRfFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Apr 27 05:11:12 2025 GMT Not After : May 4 05:11:12 2025 GMT Subject: CN=680dbc70-7b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:26:c4:fe:5d:a3:22:ca:47:1c:c4:d7:66:18: e6:b7:36:5b:23:08:a8:0c:82:5d:df:d6:cf:e3:4e: f3:ac:ee:c1:f9:68:44:1a:47:f0:af:b3:c5:38:08: 1b:63:63:d1:9f:d3:2c:ed:aa:a0:e6:ce:de:c4:0e: 8c:ac:9e:3b:1a:59:27:b6:ca:40:73:55:5d:4d:c4: bd:81:f6:e0:dd:19:10:0c:6b:06:e6:50:83:f1:e7: ee:1d:aa:ab:d5:99:be:93:27:6c:43:63:82:e7:7e: 9b:84:82:39:ce:c4:96:0a:26:68:3f:f1:8d:df:c2: e0:20:d3:30:10:6d:de:10:8e:2c:23:d5:fe:2f:f7: 8f:84:5b:9d:68:1d:70:2d:ee:93:ff:71:78:dc:5d: c4:35:40:89:e7:cb:53:66:34:33:0b:86:58:51:7d: 54:67:a2:e7:8c:88:d4:f7:1d:28:89:bc:88:ef:34: e1:d6:f8:14:ec:2d:87:14:1a:a5:66:ee:b3:79:7d: ec:7e:ec:16:a4:5f:32:a9:95:91:8d:ba:46:f4:ab: 2d:86:91:ef:15:e6:20:d1:d3:98:d1:d3:b1:08:11: 21:22:be:c3:59:ad:48:c6:15:d7:d1:a7:f8:c1:09: 54:f0:55:f7:f2:15:b3:9c:05:d0:4a:c5:60:0d:b6: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:40:98:03:4B:B5:0E:31:E5:03:6C:C1:3F:E0:4A:3A:0D:AE:20 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:73:4e:54:ee:c7:ba:1c:7f:53:8f:25:1d:f9:d0:80:e5: c2:e1:a8:f8:5e:76:ef:58:16:ac:d8:e1:e5:79:14:d3:13:d8: cc:6d:15:db:e0:03:94:82:13:69:ad:7a:de:f8:65:cf:d0:71: 75:35:dc:fb:bc:2c:73:df:4c:26:b7:df:df:e4:1f:b1:62:6c: 02:f4:91:0c:8a:a1:90:12:0a:e6:91:0d:4b:5e:d4:6b:07:46: 2f:0d:04:12:a8:91:bc:4e:3e:42:6d:a8:69:f8:0e:08:de:6f: a5:60:17:9b:15:8b:9e:62:9a:08:ee:b7:7b:42:c0:55:68:70: 1a:94:0c:24:5f:cc:d1:1d:9f:02:06:d3:c4:33:ad:0b:4c:3f: 33:70:d0:92:9e:96:27:f8:e8:32:c8:bc:bd:70:38:90:55:74: 28:58:48:15:62:a2:09:c9:b5:b1:30:e6:ee:10:83:51:b6:0b: f2:42:2a:99:e2:7f:1f:26:b9:91:0e:50:b2:6b:7b:fd:60:11: b2:db:7b:88:5e:1d:47:94:54:f4:41:ec:f1:98:04:f7:d4:18: 73:04:df:60:34:02:25:5c:48:5d:08:c4:57:39:8a:b7:7d:8b: 05:4e:0d:96:e4:9a:23:b3:f3:56:e1:83:4d:16:b8:a9:d6:db: 56:07:3a:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUwNDI3MDUxMTEyWhcNMjUwNTA0MDUxMTEyWjAYMRYwFAYD VQQDEw02ODBkYmM3MC03YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CbE/l2jIspHHMTXZhjmtzZbIwioDIJd39bP407zrO7B+WhEGkfwr7PFOAgb Y2PRn9Ms7aqg5s7exA6MrJ47GlkntspAc1VdTcS9gfbg3RkQDGsG5lCD8efuHaqr 1Zm+kydsQ2OC536bhII5zsSWCiZoP/GN38LgINMwEG3eEI4sI9X+L/ePhFudaB1w Le6T/3F43F3ENUCJ58tTZjQzC4ZYUX1UZ6LnjIjU9x0oibyI7zTh1vgU7C2HFBql Zu6zeX3sfuwWpF8yqZWRjbpG9KsthpHvFeYg0dOY0dOxCBEhIr7DWa1IxhXX0af4 wQlU8FX38hWznAXQSsVgDbY1sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqXQJgD S7UOMeUDbME/4Eo6Da4gMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgi3NOVO7Huhx/U48lHfnQgOXC4aj4XnbvWBas2OHleRTTE9jMbRXb 4AOUghNprXre+GXP0HF1Ndz7vCxz30wmt9/f5B+xYmwC9JEMiqGQEgrmkQ1LXtRr B0YvDQQSqJG8Tj5Cbahp+A4I3m+lYBebFYueYpoI7rd7QsBVaHAalAwkX8zRHZ8C BtPEM60LTD8zcNCSnpYn+OgyyLy9cDiQVXQoWEgVYqIJybWxMObuEINRtgvyQiqZ 4n8fJrmRDlCya3v9YBGy23uIXh1HlFT0QezxmAT31BhzBN9gNAIlXEhdCMRXOYq3 fYsFTg2W5Jojs/NW4YNNFrip1ttWBzpN -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:59 2025 by rpki-client on console.sobornost.net