$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft File: 6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json) Hash identifier: 05igJNTGrY7Rl3L08AKUkIXPCcKUi8xMNT1JdGjlIIk= Subject key identifier: 48:DD:8A:09:2B:9C:26:0F:DE:37:2D:E6:75:05:CF:D0:59:78:AC:E7 Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 Certificate issuer: /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft Manifest number: 0294 Signing time: Sun 27 Apr 2025 01:11:53 +0000 Manifest this update: Sun 27 Apr 2025 01:11:53 +0000 Manifest next update: Sun 04 May 2025 01:11:52 +0000 Files and hashes: 1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: 1MDCItjF2fHW0LMfffAkfpmWs3BX1PTMmhlZ9RMOxvE=) 2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: r9L4CmzavsqqBK92JPFfdFnoYkrBESFuwdtJEjg40XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Validity Not Before: Apr 27 01:11:53 2025 GMT Not After : May 4 01:11:52 2025 GMT Subject: CN=680d8459-89d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d2:e1:63:1f:d8:55:5b:d3:ac:2b:7f:c3:6b: 28:94:e1:9c:2e:0c:15:5d:4c:69:29:3d:0d:e9:56: 27:f9:c4:44:c2:04:78:75:9f:d5:0b:92:56:3c:bb: 55:94:de:15:09:60:9a:8c:7a:61:4a:b6:1a:bb:da: 72:bd:16:23:6a:01:ac:b8:f6:53:9b:6c:37:8c:51: 4b:40:5b:7e:2f:a0:28:be:61:47:9b:61:3b:3a:02: 97:86:30:19:eb:08:be:67:5e:1b:ab:97:98:4d:02: 67:45:ba:12:f2:2c:57:a7:a5:3b:38:4d:25:10:58: 7e:55:22:4e:64:e5:87:56:7d:5b:0f:ff:36:b2:5f: 9b:b9:83:d6:d5:8d:a8:c4:4a:98:24:46:80:b2:36: 56:cc:4a:ce:72:e0:9b:b0:24:f2:f7:71:ce:2a:f9: df:bf:68:f6:c1:28:85:34:7e:64:16:6a:c8:9a:10: 7c:fb:6e:9c:3e:4a:48:34:90:eb:a3:c4:96:8a:63: 42:7b:f8:37:4c:e0:54:dc:ec:0e:0e:c9:bd:5d:8d: 4c:ce:89:40:72:31:56:72:ab:48:3f:78:6d:57:35: ea:b6:1b:f8:d3:88:41:4b:1f:e2:b2:70:26:80:c8: 83:79:ed:84:2c:97:bd:88:27:9d:5b:25:7d:db:06: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DD:8A:09:2B:9C:26:0F:DE:37:2D:E6:75:05:CF:D0:59:78:AC:E7 X509v3 Authority Key Identifier: keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f8:75:95:2e:e1:e4:d0:5c:dd:ed:54:73:d6:50:d0:fb:1a: 09:ff:cc:1c:95:7e:64:4f:6e:43:63:fb:41:87:d0:22:9e:ed: c2:a4:c4:3f:ed:f3:09:fb:9d:7b:8b:b9:b3:db:2e:9b:2d:ea: 1c:8d:6e:4e:57:55:c0:71:f6:a3:12:45:01:28:71:e5:be:e2: 4d:e5:b5:6d:1e:7d:92:7f:97:0a:ea:d9:e9:08:67:30:ed:97: 2d:aa:e1:6f:3c:1c:56:b2:f8:93:5a:5d:fd:21:48:d7:6b:bc: 2e:ee:1e:3a:68:6f:ef:02:5f:0c:f0:45:6f:30:73:d5:8f:ee: 33:e0:c4:5c:d1:19:63:8b:15:31:1e:2e:13:f6:93:4b:86:46: f9:68:2c:97:3d:49:ba:0c:a2:eb:12:d3:46:06:bd:d2:c5:f2: b7:e3:f9:ea:89:b8:ee:95:94:3a:06:6a:a5:47:80:d3:6a:59: 6d:89:ec:a6:ac:64:27:37:b4:26:93:86:70:6d:99:f5:d0:da: 43:d1:f9:97:5d:17:4e:03:4c:fe:e7:dc:3c:f0:1c:85:e4:da: ba:06:7d:a2:3b:d5:04:ca:4b:52:9a:cd:f5:3c:b7:b1:d3:b3: e2:04:16:e9:0d:39:8b:22:f0:f2:86:1b:bd:95:19:6a:c2:92: 80:53:11:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NTExMTAvBgNVBAUTKEU4MTFGNjM3RDZERDg2M0U1Qzc0RjMyRTI5QkNFMjc4 RkFCMjU4RjcwHhcNMjUwNDI3MDExMTUzWhcNMjUwNTA0MDExMTUyWjAYMRYwFAYD VQQDEw02ODBkODQ1OS04OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdLhYx/YVVvTrCt/w2solOGcLgwVXUxpKT0N6VYn+cREwgR4dZ/VC5JWPLtV lN4VCWCajHphSrYau9pyvRYjagGsuPZTm2w3jFFLQFt+L6AovmFHm2E7OgKXhjAZ 6wi+Z14bq5eYTQJnRboS8ixXp6U7OE0lEFh+VSJOZOWHVn1bD/82sl+buYPW1Y2o xEqYJEaAsjZWzErOcuCbsCTy93HOKvnfv2j2wSiFNH5kFmrImhB8+26cPkpINJDr o8SWimNCe/g3TOBU3OwODsm9XY1MzolAcjFWcqtIP3htVzXqthv404hBSx/isnAm gMiDee2ELJe9iCedWyV92wYwqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjdigkr nCYP3jct5nUFz9BZeKznMB8GA1UdIwQYMBaAFOgR9jfW3YY+XHTzLim84nj6slj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1MS83MkQ3RDhCNEZE RDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhqNWNkUE11S2J6aWVQcXlX UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZCSDJOOWJkaGo1Y2RQTXVLYnppZVBxeVdQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1MS83MkQ3RDhCNEZERDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhq NWNkUE11S2J6aWVQcXlXUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE+HWVLuHk0Fzd7VRz1lDQ+xoJ/8wclX5kT25DY/tBh9Ainu3CpMQ/ 7fMJ+517i7mz2y6bLeocjW5OV1XAcfajEkUBKHHlvuJN5bVtHn2Sf5cK6tnpCGcw 7ZctquFvPBxWsviTWl39IUjXa7wu7h46aG/vAl8M8EVvMHPVj+4z4MRc0RljixUx Hi4T9pNLhkb5aCyXPUm6DKLrEtNGBr3SxfK34/nqibjulZQ6BmqlR4DTalltieym rGQnN7Qmk4ZwbZn10NpD0fmXXRdOA0z+59w88ByF5Nq6Bn2iO9UEyktSms31PLex 07PiBBbpDTmLIvDyhhu9lRlqwpKAUxE1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net