$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json) Hash identifier: 26XhgnltZQC7HbFzirtg0wjz0ct/e1/J9x2HWpw4vAc= Subject key identifier: 62:62:05:A1:F9:C2:33:88:61:06:BC:4F:42:17:93:67:2F:50:3F:FE Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft Manifest number: 87 Signing time: Sun 27 Apr 2025 05:21:47 +0000 Manifest this update: Sun 27 Apr 2025 05:21:47 +0000 Manifest next update: Sun 04 May 2025 05:21:47 +0000 Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: pny0Q9IgY50SfNZaDTELl5sjZJWRNGSV/GJwHRAIR/g=) 2: 335E880A5A1811EFB08E4F38C4F9AE02.roa (hash: uB7Em80PKGY4uO2oMYJtskRF61M8oMXLAmFb1PjEp7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Validity Not Before: Apr 27 05:21:47 2025 GMT Not After : May 4 05:21:47 2025 GMT Subject: CN=680dbeeb-7f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:68:d8:42:c4:77:9b:da:97:d0:f4:05:b1: de:f5:2e:e8:4b:02:ff:6f:7d:ae:90:58:40:15:ae: 08:46:2c:bb:0d:3f:87:ad:2c:3c:be:b8:c2:19:ef: b2:ee:a4:4b:ec:5b:a9:23:73:a1:b5:10:00:58:47: 42:c2:66:75:ea:44:a4:2c:9c:85:0e:24:56:75:81: 4e:fe:fb:b3:f6:44:4b:14:85:9b:57:bb:7e:ed:92: e8:ed:97:b4:cd:31:d5:5c:9d:9a:74:29:3d:bc:54: f7:e4:c7:57:57:6e:61:25:af:d7:e3:22:60:ac:f8: 36:7d:0c:d4:bb:ee:64:60:fb:d0:db:dc:ee:d3:e0: e8:3e:e4:7a:61:35:f8:0d:95:3c:73:48:94:47:a1: b4:6a:b3:ac:c3:23:65:33:08:bd:36:dd:43:eb:b3: 2d:90:f7:c7:60:c4:4e:f9:7b:37:2d:82:81:61:9a: 6e:1b:c3:da:54:a3:92:ad:19:62:1e:5a:fe:21:94: f2:13:4b:3f:96:9e:a1:b6:48:7a:4a:15:3a:1d:e6: 81:9f:bf:eb:4f:a9:b5:f9:ec:e2:5c:a6:56:1f:7d: d1:df:c4:32:0c:2e:49:e5:62:d6:81:bc:08:a4:43: be:7e:ad:fe:a3:02:b3:3f:50:2b:57:07:c3:99:af: ac:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:05:A1:F9:C2:33:88:61:06:BC:4F:42:17:93:67:2F:50:3F:FE X509v3 Authority Key Identifier: keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:da:cf:a0:bf:0b:21:73:21:03:7c:68:bf:84:b8:e8:e7:9a: ed:5f:f4:44:4f:71:25:9c:de:65:cb:b2:c5:55:ad:35:c5:15: 62:81:59:8a:b1:82:f7:11:52:05:5c:3c:43:51:90:3c:65:ec: 45:de:d3:cd:81:49:af:23:96:5c:6f:54:ff:28:c3:00:cc:e2: 86:9a:7c:3c:9b:80:31:9c:e6:cd:74:21:10:cf:2e:2e:56:e5: f0:61:c5:92:28:4a:1a:ce:95:00:17:48:10:eb:11:3f:20:60: 46:dd:19:f2:a7:b3:37:4c:ee:89:ea:fa:28:e5:6f:bd:e6:62: d6:84:32:0b:10:fe:49:03:47:d8:59:50:e3:15:62:54:fd:9a: 31:d3:5e:6c:f1:dd:91:dd:26:0a:1a:2b:f3:49:38:2d:00:b8: c4:5c:76:39:d3:4c:8b:46:4c:bc:be:b3:9b:8a:0a:c1:22:9c: d2:72:2c:3b:fd:c0:da:36:c5:ff:8a:29:ef:2d:a8:3f:63:93: 36:83:6d:a5:af:15:da:5a:ba:e9:a8:47:f7:ee:0d:1c:d9:0b: 73:55:71:3a:d2:a2:3f:83:5d:a7:ee:4c:6b:ff:61:e4:86:74: cf:94:01:12:c7:45:69:86:2f:a4:46:a2:50:2f:86:ca:db:91: 6f:6d:5e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1RTAxMTAvBgNVBAUTKDA3OEI0QTgwRDFERkU2QzA1MjUzM0FBREIxOTUzNEFD NTlBMzk1NEIwHhcNMjUwNDI3MDUyMTQ3WhcNMjUwNTA0MDUyMTQ3WjAYMRYwFAYD VQQDEw02ODBkYmVlYi03ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PVo2ELEd5val9D0BbHe9S7oSwL/b32ukFhAFa4IRiy7DT+HrSw8vrjCGe+y 7qRL7FupI3OhtRAAWEdCwmZ16kSkLJyFDiRWdYFO/vuz9kRLFIWbV7t+7ZLo7Ze0 zTHVXJ2adCk9vFT35MdXV25hJa/X4yJgrPg2fQzUu+5kYPvQ29zu0+DoPuR6YTX4 DZU8c0iUR6G0arOswyNlMwi9Nt1D67MtkPfHYMRO+Xs3LYKBYZpuG8PaVKOSrRli Hlr+IZTyE0s/lp6htkh6ShU6HeaBn7/rT6m1+eziXKZWH33R38QyDC5J5WLWgbwI pEO+fq3+owKzP1ArVwfDma+shwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJiBaH5 wjOIYQa8T0IXk2cvUD/+MB8GA1UdIwQYMBaAFAeLSoDR3+bAUlM6rbGVNKxZo5VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzVFMC84NzIwQUIxODVB MTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVzQlNVenF0c1pVMHJGbWps VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0dEtnTkhmNXNCU1V6cXRzWlUwckZtamxVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzVFMC84NzIwQUIxODVBMTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVz QlNVenF0c1pVMHJGbWpsVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE2s+gvwshcyEDfGi/hLjo55rtX/RET3ElnN5ly7LFVa01xRVigVmK sYL3EVIFXDxDUZA8ZexF3tPNgUmvI5Zcb1T/KMMAzOKGmnw8m4AxnObNdCEQzy4u VuXwYcWSKEoazpUAF0gQ6xE/IGBG3Rnyp7M3TO6J6voo5W+95mLWhDILEP5JA0fY WVDjFWJU/Zox015s8d2R3SYKGivzSTgtALjEXHY500yLRky8vrObigrBIpzSciw7 /cDaNsX/iinvLag/Y5M2g22lrxXaWrrpqEf37g0c2QtzVXE60qI/g12n7kxr/2Hk hnTPlAESx0Vphi+kRqJQL4bK25FvbV6K -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:50 2025 by rpki-client on console.sobornost.net