$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: 2Kyit5xXj/EYkxaRY2cxLSQ3s+mMlcsS+sGNbcrnFOU= Subject key identifier: 68:65:75:64:D6:BC:49:07:60:A0:E3:3D:82:C2:6A:4D:10:EC:4E:02 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 04EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 04D9 Signing time: Sat 26 Apr 2025 23:30:26 +0000 Manifest this update: Sat 26 Apr 2025 23:30:25 +0000 Manifest next update: Sat 03 May 2025 23:30:25 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: YMVQAhHzrsDQntCXTCyJo6OX+r0xGjfmCIRR+ohPtu0=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1259 (0x4eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Apr 26 23:30:25 2025 GMT Not After : May 3 23:30:25 2025 GMT Subject: CN=680d6c91-6572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:ed:2f:73:b1:e6:a4:c6:f0:d3:28:95:30: d9:35:4b:39:a8:86:50:21:30:12:22:ba:b0:92:ab: a5:30:12:0c:a2:e4:32:0b:f2:d1:5f:31:e8:89:bb: b6:c7:42:da:37:04:38:fd:65:a9:33:68:0b:de:31: 3b:ab:eb:a6:41:c7:76:a2:f5:49:16:da:cc:b7:34: 95:14:7b:1c:9f:f0:f3:54:0a:43:af:08:73:df:f2: 25:6b:8f:57:c0:bb:16:fb:62:cd:39:87:a9:ee:9b: be:c0:9a:94:00:be:72:6c:8f:fe:31:02:bc:58:39: d3:dd:ba:65:e7:cc:e0:48:7b:b3:aa:96:65:e5:08: 34:22:ba:7c:db:ff:51:0a:3d:5d:54:35:4b:93:1f: dd:84:8d:ab:4f:bb:ca:73:17:f7:f7:53:4b:4b:78: 34:26:36:e9:bf:43:7a:74:08:ae:f8:e0:87:cf:d9: d0:28:13:9d:c8:9c:d3:13:47:c7:be:a8:4b:fa:35: cc:c4:aa:67:6a:cc:37:b5:08:b0:55:14:b4:57:20: 19:fc:10:7e:85:a4:6f:25:e2:fa:12:bb:08:d0:cc: 67:45:54:13:87:0f:c0:17:0d:90:91:f1:13:9b:b1: 12:12:58:d3:46:9e:fb:4c:23:f8:2b:14:f5:76:9a: 93:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:75:64:D6:BC:49:07:60:A0:E3:3D:82:C2:6A:4D:10:EC:4E:02 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1f:ae:98:f7:f8:83:6c:cd:05:80:ca:0d:fb:2e:b9:ee:04: eb:d1:0c:9d:c4:1e:b6:0d:0b:21:e1:fb:e3:26:31:56:fc:94: 29:61:60:bb:07:63:58:30:7b:ef:df:5a:28:5b:07:ad:b9:c6: 79:51:26:1e:b6:ab:04:42:ac:13:18:4f:ce:e3:e5:ba:2f:c0: 2d:2c:db:96:44:15:80:d2:6a:b9:a4:c6:12:1b:dd:14:2e:b8: a7:46:9e:b6:6f:2f:41:95:07:47:67:05:5b:f3:30:28:49:8b: 6e:cf:fc:07:60:95:7a:7a:f0:55:7b:c9:f3:06:74:7f:8c:a7: 8a:e0:74:f2:43:be:3a:ab:98:d9:45:63:ab:6f:ab:bb:0f:de: fb:52:f9:6f:39:f0:5b:c1:14:65:93:92:fc:57:96:27:f7:a2: 22:a6:b9:d2:be:69:db:2f:ca:9b:f6:a4:c2:76:da:fe:19:d1: 2a:fb:84:22:bd:ad:c5:83:a5:d3:76:a7:99:50:1c:e3:97:f7: 5c:fa:2c:81:71:08:4d:6a:68:fd:04:00:25:d5:3c:7a:e6:e2: 53:95:92:8e:99:91:f6:b8:b2:6e:66:ae:1a:68:fb:ee:3c:a0: 39:c6:b5:2f:93:4f:af:4f:5d:c5:21:0b:34:18:a4:35:74:e7: 66:ba:59:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUwNDI2MjMzMDI1WhcNMjUwNTAzMjMzMDI1WjAYMRYwFAYD VQQDEw02ODBkNmM5MS02NTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptvtL3Ox5qTG8NMolTDZNUs5qIZQITASIrqwkqulMBIMouQyC/LRXzHoibu2 x0LaNwQ4/WWpM2gL3jE7q+umQcd2ovVJFtrMtzSVFHscn/DzVApDrwhz3/Ila49X wLsW+2LNOYep7pu+wJqUAL5ybI/+MQK8WDnT3bpl58zgSHuzqpZl5Qg0Irp82/9R Cj1dVDVLkx/dhI2rT7vKcxf391NLS3g0Jjbpv0N6dAiu+OCHz9nQKBOdyJzTE0fH vqhL+jXMxKpnasw3tQiwVRS0VyAZ/BB+haRvJeL6ErsI0MxnRVQThw/AFw2QkfET m7ESEljTRp77TCP4KxT1dpqTtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhldWTW vEkHYKDjPYLCak0Q7E4CMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQH66Y9/iDbM0FgMoN+y657gTr0QydxB62DQsh4fvjJjFW/JQpYWC7 B2NYMHvv31ooWwetucZ5USYetqsEQqwTGE/O4+W6L8AtLNuWRBWA0mq5pMYSG90U LrinRp62by9BlQdHZwVb8zAoSYtuz/wHYJV6evBVe8nzBnR/jKeK4HTyQ746q5jZ RWOrb6u7D977UvlvOfBbwRRlk5L8V5Yn96IiprnSvmnbL8qb9qTCdtr+GdEq+4Qi va3Fg6XTdqeZUBzjl/dc+iyBcQhNamj9BAAl1Tx65uJTlZKOmZH2uLJuZq4aaPvu PKA5xrUvk0+vT13FIQs0GKQ1dOdmuln/ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:46 2025 by rpki-client on console.sobornost.net