$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: 6gpfsrAchWl9Wkt3B70dRSrvC/eEzWRmHEn+OA1/75k= Subject key identifier: 41:33:DF:19:CC:B8:86:96:F9:95:01:26:74:C3:74:95:C2:EF:C2:39 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: 9F Signing time: Fri 25 Apr 2025 05:13:27 +0000 Manifest this update: Fri 25 Apr 2025 05:13:27 +0000 Manifest next update: Fri 02 May 2025 05:13:27 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: iK/xt2mPbWdX7Q7gRbYH/on9dLhGU/7dAsmWplb+66o=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: DUAmLb46NS5+SPzS5A3HqFl4Nie2fVO5tlFoQkTdtDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Apr 25 05:13:27 2025 GMT Not After : May 2 05:13:27 2025 GMT Subject: CN=680b19f7-fa72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:28:76:b0:0b:ef:f9:b4:c6:5c:c0:04:73:33: fc:7f:76:b0:2d:2e:4e:53:cf:e1:48:3d:f9:1f:c2: 65:ba:d7:eb:24:95:7c:95:bd:ae:87:9b:a8:d7:7d: 4f:83:d2:54:98:4b:e1:3b:9a:b9:d5:7b:74:b1:e0: 5b:ff:26:cd:14:c4:8c:5c:21:da:48:49:da:6d:e1: 6d:bc:43:f7:67:11:ee:4c:79:71:c0:e2:d3:6e:67: 69:14:6a:22:81:da:df:04:79:fb:48:9b:9f:8f:d6: 4a:11:83:5d:30:1f:8c:0c:a8:ec:4d:87:30:67:84: fc:99:83:80:f0:ae:8f:fd:a0:6e:5b:f0:46:58:a7: 1c:64:df:9c:a6:bc:4e:e0:ae:f3:c8:36:ec:67:50: b6:3a:89:b7:d6:b2:1b:88:7c:7f:51:e7:b2:fd:be: 66:cb:ef:c8:b7:b2:df:06:52:d3:24:ae:d0:ad:d8: 50:e1:2e:f8:79:e0:3a:16:88:86:fa:d5:93:21:52: 15:77:60:1b:ee:46:d8:2b:bb:11:1d:8e:d4:86:44: f3:fc:28:95:c3:e7:a0:01:96:8c:99:40:af:92:1c: 44:aa:18:e4:98:b5:c5:3e:87:3f:41:80:d1:7b:c8: cc:2c:ba:c6:48:ed:5e:f2:c0:ef:29:dd:9a:ce:b8: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:33:DF:19:CC:B8:86:96:F9:95:01:26:74:C3:74:95:C2:EF:C2:39 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:59:3f:0d:28:20:5c:6d:05:fe:7c:f0:99:4a:8c:6f:84:2e: 00:58:0e:64:6e:fb:4e:55:ba:85:9f:8d:d6:fd:21:9f:6a:e5: ac:e7:6d:8b:e6:9d:b0:dd:b2:ae:3b:29:b7:c4:9c:b0:76:1f: 35:ab:97:3f:ef:b4:85:77:7a:e2:c4:32:25:a1:9d:90:a6:c8: 67:86:81:a6:78:cb:3d:3f:65:73:fd:7b:45:b2:13:e0:9c:f2: c2:a1:1a:6c:1e:c6:5d:4d:00:3e:fd:24:55:25:42:24:a5:14: b8:52:62:42:7e:11:cb:44:11:7d:d2:b6:70:6a:91:a9:30:c3: c4:27:eb:ce:8a:85:4c:a0:68:ec:05:45:aa:8a:52:41:57:ec: 3c:ae:90:b9:c5:da:e3:95:5d:22:98:36:86:31:37:8c:83:6c: ce:71:b9:bf:f5:52:10:b1:67:94:54:fb:59:45:f8:93:58:47: 80:06:b0:86:65:8c:2b:6d:bc:27:3f:24:7a:27:be:cc:38:6c: 09:3e:68:71:72:79:14:a7:a9:7c:ed:e3:2b:d0:6a:6f:ae:a2: 4e:40:d7:d0:26:bb:b3:5e:67:df:98:ad:e9:8d:f8:3c:ec:c4: 85:6f:e3:f3:0f:ea:e7:72:cf:43:b5:d9:1c:3a:a4:56:8e:4b: db:d6:e0:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUwNDI1MDUxMzI3WhcNMjUwNTAyMDUxMzI3WjAYMRYwFAYD VQQDEw02ODBiMTlmNy1mYTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxih2sAvv+bTGXMAEczP8f3awLS5OU8/hSD35H8JlutfrJJV8lb2uh5uo131P g9JUmEvhO5q51Xt0seBb/ybNFMSMXCHaSEnabeFtvEP3ZxHuTHlxwOLTbmdpFGoi gdrfBHn7SJufj9ZKEYNdMB+MDKjsTYcwZ4T8mYOA8K6P/aBuW/BGWKccZN+cprxO 4K7zyDbsZ1C2Oom31rIbiHx/Ueey/b5my+/It7LfBlLTJK7QrdhQ4S74eeA6FoiG +tWTIVIVd2Ab7kbYK7sRHY7UhkTz/CiVw+egAZaMmUCvkhxEqhjkmLXFPoc/QYDR e8jMLLrGSO1e8sDvKd2azrjwWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEz3xnM uIaW+ZUBJnTDdJXC78I5MB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8WT8NKCBcbQX+fPCZSoxvhC4AWA5kbvtOVbqFn43W/SGfauWs522L 5p2w3bKuOym3xJywdh81q5c/77SFd3rixDIloZ2QpshnhoGmeMs9P2Vz/XtFshPg nPLCoRpsHsZdTQA+/SRVJUIkpRS4UmJCfhHLRBF90rZwapGpMMPEJ+vOioVMoGjs BUWqilJBV+w8rpC5xdrjlV0imDaGMTeMg2zOcbm/9VIQsWeUVPtZRfiTWEeABrCG ZYwrbbwnPyR6J77MOGwJPmhxcnkUp6l87eMr0GpvrqJOQNfQJruzXmffmK3pjfg8 7MSFb+PzD+rncs9DtdkcOqRWjkvb1uA1 -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:41 2025 by rpki-client on console.sobornost.net