$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft File: Bats53QFyQRH8nu2EgCypDHeStw.mft (raw, json) Hash identifier: cjll2vPVtfvikmc7G9ExlGagP3uZxZnvHAgPdIMtrUY= Subject key identifier: C1:83:75:AC:3A:21:1F:90:06:EA:7C:65:A8:4E:5C:5D:F7:2D:0C:BF Authority key identifier: 05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC Certificate issuer: /CN=A9131589/serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft Manifest number: 0267 Signing time: Sun 27 Apr 2025 01:21:48 +0000 Manifest this update: Sun 27 Apr 2025 01:21:47 +0000 Manifest next update: Sun 04 May 2025 01:21:47 +0000 Files and hashes: 1: Bats53QFyQRH8nu2EgCypDHeStw.crl (hash: LjMoAK/bXD2xnQLEjFF/es8IFGBOVnTHSgZfzVPWEHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=05AB6CE77405C90447F27BB61200B2A431DE4ADC Validity Not Before: Apr 27 01:21:47 2025 GMT Not After : May 4 01:21:47 2025 GMT Subject: CN=680d86ab-7252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:8e:84:1e:44:9c:b4:33:9b:11:0a:57:d7: c5:1f:dc:42:34:e9:79:89:df:98:6c:6c:64:a7:c1: 0c:73:78:31:05:f2:6a:18:a1:bf:71:a1:98:04:1b: 1a:a7:79:03:fe:50:4d:a7:cb:ab:39:5d:af:1b:3a: 5b:3c:ee:17:3f:c8:59:5c:b7:d4:a9:8e:58:17:ac: 82:f0:ad:ad:36:4b:4c:b6:54:c8:07:17:ad:db:d3: 80:26:76:51:90:5c:de:e7:98:07:1c:93:0b:41:cd: 9e:37:4b:dd:65:bc:de:7e:aa:d2:36:93:f7:41:0f: 79:cb:32:d0:65:18:b7:23:a5:89:7e:71:92:25:c3: 62:33:1c:fe:19:03:d1:ac:d9:96:27:ca:35:e5:dd: 35:05:89:cf:f4:12:69:5e:93:91:f6:fb:5e:43:10: 70:c1:78:8c:06:4c:30:a3:dd:20:a2:8d:9c:4d:c7: d4:a5:81:08:08:4f:ff:9b:5c:8e:30:65:5c:75:f8: 9e:9b:e4:ff:b9:7b:d2:a0:6c:29:59:86:4c:71:d2: ce:c6:a0:2f:44:df:dc:f4:7b:51:2c:9d:28:68:07: 62:d0:82:82:2f:a1:33:b3:af:22:24:0e:d2:02:91: 5b:bc:49:93:67:f9:1e:64:42:24:ee:51:d5:db:95: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:75:AC:3A:21:1F:90:06:EA:7C:65:A8:4E:5C:5D:F7:2D:0C:BF X509v3 Authority Key Identifier: keyid:05:AB:6C:E7:74:05:C9:04:47:F2:7B:B6:12:00:B2:A4:31:DE:4A:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bats53QFyQRH8nu2EgCypDHeStw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/4158463A0CCC11EDB0993C15C4F9AE02/Bats53QFyQRH8nu2EgCypDHeStw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0e:4c:6f:4c:7f:eb:f7:f6:31:e6:07:dd:b7:78:32:d1:38: 24:f5:27:80:15:5f:95:47:3a:5e:a5:79:58:de:ba:8d:94:8f: 61:66:ad:91:50:05:b2:fd:f5:82:9a:0d:7b:62:83:b6:34:41: d4:3f:b2:7e:25:14:fe:a0:fe:5f:a2:9f:17:45:a0:7f:79:bf: 3e:49:19:b5:8c:08:51:a3:d3:91:7d:b7:56:b7:64:24:0c:19: 27:b2:46:ef:90:66:cb:23:4b:65:5d:ce:fe:68:75:0c:a7:9d: 6d:6d:dd:2c:9b:32:25:01:25:45:4f:d0:a1:04:40:1f:67:ea: 13:97:4e:f0:4e:35:38:da:a6:aa:09:2e:4c:de:b5:f0:d3:4b: db:17:52:fe:ea:50:82:03:3d:53:22:ab:e5:67:19:55:d0:94: 9e:44:4d:a5:5c:08:b7:f0:0e:7f:ab:bf:71:b9:e6:4c:91:14: 0a:4a:1b:ab:29:a7:0f:42:36:cd:87:20:62:b9:0b:79:d3:a8: 67:61:16:47:f3:b6:21:ea:8c:d6:30:01:b5:b2:6b:27:76:77: 28:be:95:e3:81:e0:53:cf:c3:bc:20:55:c3:4b:3d:f2:27:5d: b0:37:35:27:9a:cc:f8:62:e1:60:5d:6b:18:ac:33:57:f0:6f: 9b:e0:01:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKDA1QUI2Q0U3NzQwNUM5MDQ0N0YyN0JCNjEyMDBCMkE0 MzFERTRBREMwHhcNMjUwNDI3MDEyMTQ3WhcNMjUwNTA0MDEyMTQ3WjAYMRYwFAYD VQQDEw02ODBkODZhYi03MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVuOhB5EnLQzmxEKV9fFH9xCNOl5id+YbGxkp8EMc3gxBfJqGKG/caGYBBsa p3kD/lBNp8urOV2vGzpbPO4XP8hZXLfUqY5YF6yC8K2tNktMtlTIBxet29OAJnZR kFze55gHHJMLQc2eN0vdZbzefqrSNpP3QQ95yzLQZRi3I6WJfnGSJcNiMxz+GQPR rNmWJ8o15d01BYnP9BJpXpOR9vteQxBwwXiMBkwwo90goo2cTcfUpYEICE//m1yO MGVcdfiem+T/uXvSoGwpWYZMcdLOxqAvRN/c9HtRLJ0oaAdi0IKCL6Ezs68iJA7S ApFbvEmTZ/keZEIk7lHV25UWBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGDdaw6 IR+QBup8ZahOXF33LQy/MB8GA1UdIwQYMBaAFAWrbOd0BckER/J7thIAsqQx3krc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS80MTU4NDYzQTBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlRUkg4bnUyRWdDeXBESGVT dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhdHM1M1FGeVFSSDhudTJFZ0N5cERIZVN0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS80MTU4NDYzQTBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi9CYXRzNTNRRnlR Ukg4bnUyRWdDeXBESGVTdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFDkxvTH/r9/Yx5gfdt3gy0Tgk9SeAFV+VRzpepXlY3rqNlI9hZq2R UAWy/fWCmg17YoO2NEHUP7J+JRT+oP5fop8XRaB/eb8+SRm1jAhRo9ORfbdWt2Qk DBknskbvkGbLI0tlXc7+aHUMp51tbd0smzIlASVFT9ChBEAfZ+oTl07wTjU42qaq CS5M3rXw00vbF1L+6lCCAz1TIqvlZxlV0JSeRE2lXAi38A5/q79xueZMkRQKShur KacPQjbNhyBiuQt506hnYRZH87Yh6ozWMAG1smsndncovpXjgeBTz8O8IFXDSz3y J12wNzUnmsz4YuFgXWsYrDNX8G+b4AHB -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:27 2025 by rpki-client on console.sobornost.net