$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft File: BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json) Hash identifier: c5WalnYnMWbIcEoUB3cEUxDZ/GSI/46DZQuFW4c8c8M= Subject key identifier: 2D:36:C1:4F:E4:E9:62:4C:95:CD:FD:F9:95:E1:D9:E5:A6:26:D4:5E Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft Manifest number: 04C1 Signing time: Sat 26 Apr 2025 23:29:55 +0000 Manifest this update: Sat 26 Apr 2025 23:29:55 +0000 Manifest next update: Sat 03 May 2025 23:29:55 +0000 Files and hashes: 1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: 5PgiOcmQZv8A3M3ZQYcituXihBQ0vH7qGyjaDxBwPgs=) 2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: sy0Mbt4ke59HBbem5DYUNkJ8NfZs0P/CrbYjmapjxqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Validity Not Before: Apr 26 23:29:55 2025 GMT Not After : May 3 23:29:55 2025 GMT Subject: CN=680d6c73-cf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:85:24:fd:ab:c5:8f:72:5d:07:6e:64:65: a2:72:34:19:f8:44:43:43:48:4c:db:c0:69:f9:c1: 68:14:7f:d4:d6:2a:4c:12:df:20:20:69:63:f5:55: 30:91:7d:54:0d:db:62:6d:aa:a8:2a:9c:c6:c2:5f: aa:1b:15:86:a8:7e:dd:9d:4a:87:b7:bd:ef:92:45: 34:7d:e3:bf:f0:b4:cd:91:d2:e4:76:ef:86:3d:88: 3d:ab:2b:83:6e:95:6c:b9:f8:f2:ef:16:60:bf:37: 70:03:0b:30:21:c9:5c:6a:1c:04:0a:a1:40:07:8a: 69:51:60:46:f7:27:54:cd:bd:3f:8e:11:c6:7f:86: c9:51:9b:a7:ba:87:f6:fb:2a:c3:96:b9:a1:4c:28: 42:22:83:08:55:26:3a:5c:2c:97:bc:a0:5c:b6:b2: b8:7b:15:d4:df:f6:cd:5a:a8:38:e3:59:c0:7a:fc: ed:46:19:7b:6f:3d:08:a4:39:10:b4:a5:97:5b:7b: 0f:2e:e0:2c:12:5b:59:42:e3:57:0a:de:ec:df:cc: 13:41:94:a2:79:16:ed:35:3d:15:4f:1e:a8:7f:04: a5:ba:b9:87:e3:5e:77:e0:93:fc:c3:de:b8:9b:48: a0:2f:9a:57:67:f5:54:f9:7e:fd:4d:d9:10:af:ae: 81:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:36:C1:4F:E4:E9:62:4C:95:CD:FD:F9:95:E1:D9:E5:A6:26:D4:5E X509v3 Authority Key Identifier: keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bc:2b:75:10:62:37:f3:85:03:ff:6f:28:0f:fd:c7:52:ff: c8:5f:09:2c:4f:b7:ca:75:67:d1:db:b7:a9:8b:74:03:86:0b: 40:3a:eb:91:6c:d6:91:a8:cc:33:5d:fd:3c:e0:03:9d:ed:17: bd:8e:e8:f3:64:03:77:22:6b:cc:35:a2:f6:2f:c8:92:2b:58: d5:57:2e:43:cd:df:85:7d:98:3c:30:82:f7:76:22:10:3b:f0: b2:6e:f6:62:1b:58:d7:6b:5b:1b:9c:e4:15:85:19:09:b9:e9: ec:37:fd:87:d1:53:8a:23:3c:00:5e:b0:c2:34:10:56:20:0d: 75:50:4c:22:9d:ae:18:e0:4c:0c:07:82:52:2b:53:37:61:b2: c3:ff:76:ab:18:5b:23:50:b0:d0:81:89:ee:22:18:2d:75:dd: e2:8e:41:7a:b3:54:0c:16:d9:db:15:7c:7c:4a:f0:48:87:73: 3e:95:5a:f3:7f:ff:8f:6e:65:1b:e6:e6:ad:5f:17:15:fb:02: 94:1f:03:34:56:ac:a6:63:c7:14:69:bf:dd:54:08:5d:91:0f: 9c:87:cd:0c:55:01:d1:20:c0:d6:6e:f5:60:8a:92:85:4e:21: d0:24:73:a4:e3:98:e7:ab:52:0e:26:fa:ed:63:a4:76:f2:d6: 85:97:b1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIyQzExMTAvBgNVBAUTKDA2RDdBMTAyRDM4QzEwOTY4MDRGOERBNTJFMkNGNzhE ODkxQUM3MjEwHhcNMjUwNDI2MjMyOTU1WhcNMjUwNTAzMjMyOTU1WjAYMRYwFAYD VQQDEw02ODBkNmM3My1jZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdCFJP2rxY9yXQduZGWicjQZ+ERDQ0hM28Bp+cFoFH/U1ipMEt8gIGlj9VUw kX1UDdtibaqoKpzGwl+qGxWGqH7dnUqHt73vkkU0feO/8LTNkdLkdu+GPYg9qyuD bpVsufjy7xZgvzdwAwswIclcahwECqFAB4ppUWBG9ydUzb0/jhHGf4bJUZunuof2 +yrDlrmhTChCIoMIVSY6XCyXvKBctrK4exXU3/bNWqg441nAevztRhl7bz0IpDkQ tKWXW3sPLuAsEltZQuNXCt7s38wTQZSieRbtNT0VTx6ofwSlurmH41534JP8w964 m0igL5pXZ/VU+X79TdkQr66B9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC02wU/k 6WJMlc39+ZXh2eWmJtReMB8GA1UdIwQYMBaAFAbXoQLTjBCWgE+NpS4s942JGsch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjJDMS8yRUE1MUQ1NjIw REMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVKYUFUNDJsTGl6M2pZa2F4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0ZWhBdE9NRUphQVQ0MmxMaXozallrYXh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjJDMS8yRUE1MUQ1NjIwREMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVK YUFUNDJsTGl6M2pZa2F4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYvCt1EGI384UD/28oD/3HUv/IXwksT7fKdWfR27epi3QDhgtAOuuR bNaRqMwzXf084AOd7Re9jujzZAN3ImvMNaL2L8iSK1jVVy5Dzd+FfZg8MIL3diIQ O/CybvZiG1jXa1sbnOQVhRkJuensN/2H0VOKIzwAXrDCNBBWIA11UEwina4Y4EwM B4JSK1M3YbLD/3arGFsjULDQgYnuIhgtdd3ijkF6s1QMFtnbFXx8SvBIh3M+lVrz f/+PbmUb5uatXxcV+wKUHwM0VqymY8cUab/dVAhdkQ+ch80MVQHRIMDWbvVgipKF TiHQJHOk45jnq1IOJvrtY6R28taFl7E4 -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:01 2025 by rpki-client on console.sobornost.net