$ rpki-client -vvf rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft File: BKm4kZsiD18-q9D03YXi9b28VQA.mft (raw, json) Hash identifier: mA4UrtbObQTkJbn6YfUJ7G0ENm1BxGPRzm32hiRs5vs= Subject key identifier: F6:DC:79:2F:E3:8C:6E:62:0C:30:C2:5A:C0:58:CA:03:77:60:BA:17 Authority key identifier: 04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 Certificate issuer: /CN=A913837F/serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft Manifest number: 0137 Signing time: Sun 27 Apr 2025 03:22:02 +0000 Manifest this update: Sun 27 Apr 2025 03:22:01 +0000 Manifest next update: Sun 04 May 2025 03:22:01 +0000 Files and hashes: 1: BKm4kZsiD18-q9D03YXi9b28VQA.crl (hash: vryluaqfaqq9Nbw14MQgsn/m1CeTLsRtNYGrdwOsjCI=) 2: 3D83357646E411EE82ED8843C4F9AE02.roa (hash: g/+jUDFbmU3qj9AfAKSl3kwzplQXj9NIVbGDOmw78Ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913837F, serialNumber=04A9B8919B220F5F3EABD0F4DD85E2F5BDBC5500 Validity Not Before: Apr 27 03:22:01 2025 GMT Not After : May 4 03:22:01 2025 GMT Subject: CN=680da2da-433d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:13:bf:63:ff:1b:de:18:34:af:25:60:6c: fb:af:ad:66:be:a2:5d:3c:54:53:8f:5d:53:37:8b: ed:5d:cd:1e:b8:44:e3:50:a7:48:49:9b:f2:97:1c: 64:43:62:e2:d1:a4:7a:35:11:1e:01:d5:59:cc:d8: 00:77:c8:cb:e7:52:db:7e:e5:da:47:8c:8c:35:a9: d3:03:0d:38:0e:03:1c:12:cb:c1:a3:ea:3d:5a:dd: 7e:2e:d1:74:f8:b0:25:6f:e6:c6:6a:92:88:f9:0a: 7a:15:a5:31:3e:ad:b7:2a:12:96:ca:58:41:68:d3: 10:de:5c:12:dc:2b:0c:0f:43:6e:c2:0a:a9:1a:e0: d7:41:ea:5c:db:3f:56:b7:8e:c6:43:38:9b:d6:45: 61:4c:5c:35:ca:f8:6a:93:a5:ba:fd:b7:20:a8:a9: 49:a2:88:9d:99:99:11:16:90:85:0d:a0:44:a2:ad: 24:a0:ca:d3:a4:aa:ff:16:c1:31:c3:40:39:d1:a5: ee:b6:7b:50:28:af:e0:d7:5e:ff:fe:0b:63:d4:9f: 07:91:e8:4b:98:90:d7:20:a3:cc:2e:bf:cf:13:b3: 37:f7:e4:80:b3:45:8a:90:43:1d:7a:3e:2c:37:a3: c1:63:ef:92:86:20:24:1e:73:88:df:47:e4:ba:d5: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DC:79:2F:E3:8C:6E:62:0C:30:C2:5A:C0:58:CA:03:77:60:BA:17 X509v3 Authority Key Identifier: keyid:04:A9:B8:91:9B:22:0F:5F:3E:AB:D0:F4:DD:85:E2:F5:BD:BC:55:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BKm4kZsiD18-q9D03YXi9b28VQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913837F/64590C1246E311EEB5E41642C4F9AE02/BKm4kZsiD18-q9D03YXi9b28VQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:b6:46:71:1e:2b:4c:4d:77:e8:05:58:d6:52:27:2c:f1:d8: 40:be:d1:fe:14:71:f9:55:1c:cb:fe:d7:92:7a:9b:93:61:60: dd:c5:19:05:a3:67:37:c5:30:17:98:12:c5:40:5a:3c:75:53: 31:99:bf:cf:ac:50:e3:51:f8:34:1b:4d:60:89:1d:d6:0c:95: 5f:1d:63:c2:25:b1:e6:dd:0b:7b:b4:f1:27:fa:20:1f:97:02: 19:ec:f4:11:d9:c2:4c:44:09:0e:09:2c:b7:ba:9a:ed:f4:b0: 62:37:f4:e2:45:fa:4f:1a:6a:5f:54:f5:b2:9c:ab:5b:19:00: 83:72:f5:91:9a:3d:3c:49:2f:5a:ff:9b:a4:6d:8a:55:87:ce: 15:1b:7f:b5:d8:33:ec:3a:b8:5c:d3:1d:05:75:04:fd:1a:ef: fe:5b:4f:e5:a6:da:08:35:e1:0e:04:38:28:f8:26:56:6f:5b: 17:b2:aa:13:66:c4:25:65:44:8d:df:e6:9a:0c:84:4d:b8:c3: e8:ab:ad:cf:c7:27:2f:fd:80:67:a8:1d:f6:cb:6e:e6:9a:94: cf:7a:5a:4e:c2:12:b8:84:dd:50:5a:95:2e:0b:97:e1:1e:47: a4:ea:65:7b:b5:4e:78:41:ef:44:f3:a6:3d:72:1f:98:f3:40: 6a:46:99:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzN0YxMTAvBgNVBAUTKDA0QTlCODkxOUIyMjBGNUYzRUFCRDBGNEREODVFMkY1 QkRCQzU1MDAwHhcNMjUwNDI3MDMyMjAxWhcNMjUwNTA0MDMyMjAxWjAYMRYwFAYD VQQDEw02ODBkYTJkYS00MzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWsTv2P/G94YNK8lYGz7r61mvqJdPFRTj11TN4vtXc0euETjUKdISZvylxxk Q2Li0aR6NREeAdVZzNgAd8jL51LbfuXaR4yMNanTAw04DgMcEsvBo+o9Wt1+LtF0 +LAlb+bGapKI+Qp6FaUxPq23KhKWylhBaNMQ3lwS3CsMD0NuwgqpGuDXQepc2z9W t47GQzib1kVhTFw1yvhqk6W6/bcgqKlJooidmZkRFpCFDaBEoq0koMrTpKr/FsEx w0A50aXutntQKK/g117//gtj1J8HkehLmJDXIKPMLr/PE7M39+SAs0WKkEMdej4s N6PBY++ShiAkHnOI30fkutW6rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbceS/j jG5iDDDCWsBYygN3YLoXMB8GA1UdIwQYMBaAFASpuJGbIg9fPqvQ9N2F4vW9vFUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODM3Ri82NDU5MEMxMjQ2 RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQxOC1xOUQwM1lYaTliMjhW UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JLbTRrWnNpRDE4LXE5RDAzWVhpOWIyOFZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODM3Ri82NDU5MEMxMjQ2RTMxMUVFQjVFNDE2NDJDNEY5QUUwMi9CS200a1pzaUQx OC1xOUQwM1lYaTliMjhWUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0tkZxHitMTXfoBVjWUics8dhAvtH+FHH5VRzL/teSepuTYWDdxRkF o2c3xTAXmBLFQFo8dVMxmb/PrFDjUfg0G01giR3WDJVfHWPCJbHm3Qt7tPEn+iAf lwIZ7PQR2cJMRAkOCSy3uprt9LBiN/TiRfpPGmpfVPWynKtbGQCDcvWRmj08SS9a /5ukbYpVh84VG3+12DPsOrhc0x0FdQT9Gu/+W0/lptoINeEOBDgo+CZWb1sXsqoT ZsQlZUSN3+aaDIRNuMPoq63Pxycv/YBnqB32y27mmpTPelpOwhK4hN1QWpUuC5fh Hkek6mV7tU54Qe9E86Y9ch+Y80BqRpkN -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:31 2025 by rpki-client on console.sobornost.net