$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: q8nMj+6mkF6qMrc1zQ6fyEDIvHPAW1XU7FH+nRg9Dg0= Subject key identifier: F3:3D:0D:C9:0C:02:8D:F3:35:97:2A:EF:9F:07:7C:2A:D4:AD:25:2F Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 23 Signing time: Sun 27 Apr 2025 06:38:38 +0000 Manifest this update: Sun 27 Apr 2025 06:38:38 +0000 Manifest next update: Sun 04 May 2025 06:38:38 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: RzUeN7N4RX/x1bhAf6dixpxJkuuEeep2nLtKaWJCB60=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Apr 27 06:38:38 2025 GMT Not After : May 4 06:38:38 2025 GMT Subject: CN=680dd0ee-181d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d2:df:06:0d:d3:8b:10:39:a3:e1:12:59:f2: 3f:23:0e:2f:a6:0f:11:1e:5e:2d:79:15:13:48:0e: 12:25:89:9c:a2:ea:52:b6:7a:f9:91:a2:20:d5:23: 16:85:e8:8b:c7:91:4c:de:94:56:4b:63:ed:4f:ef: 22:a7:bf:bc:51:95:e2:d3:1d:8e:05:a3:40:7b:c0: f1:12:46:12:0d:74:10:dc:9f:34:9c:37:68:ea:35: 36:b4:45:79:1b:28:d7:9f:eb:c1:f8:23:b2:e9:9a: 40:df:b5:5c:87:6a:fa:c4:63:35:0c:f0:56:e8:01: 99:e1:94:c2:02:3f:91:54:7f:8d:c7:ed:70:05:52: e5:1a:e2:59:a4:f2:bb:76:cf:3f:c8:3d:03:eb:88: 27:47:66:d1:68:eb:90:4b:f3:64:af:61:df:5c:2a: a8:f2:3f:b2:61:f4:d1:ea:01:32:6b:28:20:ca:77: bc:fd:43:32:ec:57:fc:e1:44:f5:59:5d:f8:de:06: 4e:8f:e4:d0:cb:14:c3:5c:62:3c:94:e9:9f:d8:92: 39:2e:1e:b7:23:f6:05:60:75:0e:1a:4f:f9:eb:b6: 0f:c8:99:5d:f9:04:7c:2e:17:d4:89:f7:73:29:7c: 7c:3f:a5:1d:f3:0d:cc:39:b7:be:4e:4e:66:27:cb: 04:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3D:0D:C9:0C:02:8D:F3:35:97:2A:EF:9F:07:7C:2A:D4:AD:25:2F X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:5d:44:33:bb:91:f1:ac:d8:54:c0:f6:09:28:2b:4c:45:7e: 84:97:5c:f2:e4:a3:50:f6:47:dc:5e:d6:be:50:eb:f9:c9:d4: 51:2e:7d:cf:7e:61:1f:e0:d8:dc:8f:ba:02:ee:c0:d9:39:cf: cf:68:b1:3d:34:ff:61:82:cd:5e:79:0c:45:94:51:cb:24:0f: bd:37:b0:73:bf:14:2b:ae:9a:93:94:d0:b6:14:bf:e3:a2:20: 68:b3:4e:69:d2:3f:4f:e8:8b:c5:bc:0d:81:42:6f:fe:71:e4: 6f:1f:c4:51:a7:6d:c1:2f:18:2e:ed:c8:b5:66:10:ba:77:5f: 1b:3d:fc:81:51:ee:2a:b6:64:9f:07:58:42:45:d8:73:eb:c6: 5c:36:f3:33:ab:20:cb:fd:7a:12:61:c8:c1:e6:d5:0e:93:ae: 9a:13:a5:40:01:65:08:00:03:96:78:be:ad:da:f2:13:55:6d: 63:67:79:d0:66:19:69:b7:99:4f:73:4c:7e:11:e3:a1:ee:7a: 23:1e:90:b8:2b:f9:4a:56:77:00:82:d2:b2:03:fc:58:95:ec: ba:3d:5a:3b:22:d4:38:73:f6:df:f5:9d:7a:67:ea:6f:8f:64: cc:64:ec:a3:4f:93:47:d7:53:95:23:21:7e:2b:5c:96:fd:fb: 1e:56:ed:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA0MjcwNjM4MzhaFw0yNTA1MDQwNjM4MzhaMBgxFjAUBgNV BAMTDTY4MGRkMGVlLTE4MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb0t8GDdOLEDmj4RJZ8j8jDi+mDxEeXi15FRNIDhIliZyi6lK2evmRoiDVIxaF 6IvHkUzelFZLY+1P7yKnv7xRleLTHY4Fo0B7wPESRhINdBDcnzScN2jqNTa0RXkb KNef68H4I7LpmkDftVyHavrEYzUM8FboAZnhlMICP5FUf43H7XAFUuUa4lmk8rt2 zz/IPQPriCdHZtFo65BL82SvYd9cKqjyP7Jh9NHqATJrKCDKd7z9QzLsV/zhRPVZ XfjeBk6P5NDLFMNcYjyU6Z/YkjkuHrcj9gVgdQ4aT/nrtg/ImV35BHwuF9SJ93Mp fHw/pR3zDcw5t75OTmYnywT/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8z0NyQwC jfM1lyrvnwd8KtStJS8wHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHJdRDO7kfGs2FTA9gkoK0xFfoSXXPLko1D2R9xe1r5Q6/nJ1FEufc9+ YR/g2NyPugLuwNk5z89osT00/2GCzV55DEWUUcskD703sHO/FCuumpOU0LYUv+Oi IGizTmnSP0/oi8W8DYFCb/5x5G8fxFGnbcEvGC7tyLVmELp3Xxs9/IFR7iq2ZJ8H WEJF2HPrxlw28zOrIMv9ehJhyMHm1Q6TrpoTpUABZQgAA5Z4vq3a8hNVbWNnedBm GWm3mU9zTH4R46HueiMekLgr+UpWdwCC0rID/FiV7Lo9Wjsi1Dhz9t/1nXpn6m+P ZMxk7KNPk0fXU5UjIX4rXJb9+x5W7Ys= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net