$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json) Hash identifier: A5pyJjJny5y9LjqRkSXSJ4q5yAh5R7QhqHsPWMwYlVs= Subject key identifier: B9:F1:34:B6:6D:29:73:9C:99:91:96:F3:84:5C:3A:AB:A8:3E:49:C5 Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 1376 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft Manifest number: 134E Signing time: Mon 28 Apr 2025 17:14:57 +0000 Manifest this update: Mon 28 Apr 2025 17:14:56 +0000 Manifest next update: Mon 05 May 2025 17:14:56 +0000 Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: qSrrdTZhz2N6NgninO7b1ETDLEtLWP0oTVHRYquUcq4=) 2: 872698A8041B11F0A98AFA39C4F9AE02.roa (hash: KRihtjgc09Z77Kl0lz0K09YLnot4iNb77HfA1M9eF18=) 3: 30C9CCC6AA7711EF87AB7648C4F9AE02.roa (hash: 9a/Xf144BGTz9lOQV2iGyEyfB/0EaARDTCMaH2wHCnE=) 4: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: cgaL7Wf09B5hb9Lh9/xte6mskd3x1yFmaoyUjIx3lJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4982 (0x1376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: Apr 28 17:14:56 2025 GMT Not After : May 5 17:14:56 2025 GMT Subject: CN=680fb791-a371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:be:5e:08:67:f1:4b:fb:d3:35:ed:db:15: b8:e2:d9:74:ef:19:7a:11:ec:d0:cd:a7:90:f5:4f: 64:c0:1d:71:1c:3d:5b:ef:6f:c8:dc:b4:5f:41:cd: d5:ef:a9:2d:eb:dc:7b:39:ef:d2:0b:c4:fc:6e:8a: cc:56:e3:29:57:0a:be:45:c9:4e:56:2f:4c:61:85: 79:eb:27:72:73:bc:40:a5:65:bc:e7:08:f2:1f:51: 1c:12:8f:80:a0:12:51:c1:37:2d:e7:5b:38:be:6d: 95:6d:6f:26:c1:c6:c2:76:4a:4d:56:a6:e5:0e:3e: de:3e:69:7a:5d:fe:d1:7c:ca:13:79:1a:58:e5:e6: ca:89:56:fc:b0:4f:64:ed:85:db:d6:93:3b:12:b9: d8:c5:bd:30:41:3c:fa:89:b2:ca:5d:56:22:35:41: 9e:62:c4:78:98:48:af:af:8b:d3:9b:0b:44:ff:dc: 1a:5a:65:18:b0:27:c8:80:12:d8:36:a2:f4:b8:4d: 53:5b:df:26:5f:88:c8:01:68:99:1f:8d:c3:1d:8c: 81:cc:a7:a4:19:ec:6d:71:ae:cf:aa:45:74:95:68: 47:ec:5f:04:62:7a:e2:cb:25:67:ff:8f:0a:56:59: 79:90:6a:bd:e6:e4:aa:81:de:1c:69:e7:9a:28:6c: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F1:34:B6:6D:29:73:9C:99:91:96:F3:84:5C:3A:AB:A8:3E:49:C5 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:84:98:bd:c2:50:e1:4c:64:99:4b:a7:8e:f3:d0:13:fd:eb: 58:f0:44:78:69:5c:73:f3:98:46:69:a9:71:22:9e:ea:15:83: a4:7e:6d:01:d5:d0:5a:cb:d4:8c:f2:81:f5:ea:a8:07:c5:0b: 2f:41:7c:cd:54:ad:28:69:47:08:6a:25:5d:6e:36:a1:1f:80: b6:17:39:af:48:a5:47:e4:e7:3e:62:f8:c6:45:11:18:be:eb: 60:fe:3f:c0:61:d6:6d:33:5e:4c:fd:60:7f:66:7b:6f:29:a0: ef:c5:06:5a:85:fa:58:26:84:35:92:bd:e1:32:0e:53:35:a7: 95:76:97:57:cb:aa:1c:00:c9:4d:ba:0d:b6:29:59:fb:25:1a: 7e:bb:5e:75:cf:c5:cf:59:35:0e:1c:df:75:3f:9b:3a:98:c1: 2c:95:88:10:ba:d5:56:87:d4:b7:49:a8:3e:cb:4c:e7:c9:57: a8:b6:ef:bd:24:8f:87:99:42:e9:f1:b1:b1:19:45:cc:95:68: c1:68:33:70:6b:fc:f6:d9:8d:49:c7:14:6c:c9:25:97:f7:99: 08:bb:2d:fe:15:c8:cd:f2:26:ff:36:83:44:13:b4:5b:1e:6d: 2f:f7:e3:b6:86:3e:e3:f7:1b:19:d0:a2:58:65:a0:46:b6:e4: 9c:c5:a1:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjUwNDI4MTcxNDU2WhcNMjUwNTA1MTcxNDU2WjAYMRYwFAYD VQQDEw02ODBmYjc5MS1hMzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp+++Xghn8Uv70zXt2xW44tl07xl6EezQzaeQ9U9kwB1xHD1b72/I3LRfQc3V 76kt69x7Oe/SC8T8borMVuMpVwq+RclOVi9MYYV56ydyc7xApWW85wjyH1EcEo+A oBJRwTct51s4vm2VbW8mwcbCdkpNVqblDj7ePml6Xf7RfMoTeRpY5ebKiVb8sE9k 7YXb1pM7ErnYxb0wQTz6ibLKXVYiNUGeYsR4mEivr4vTmwtE/9waWmUYsCfIgBLY NqL0uE1TW98mX4jIAWiZH43DHYyBzKekGextca7PqkV0lWhH7F8EYnriyyVn/48K Vll5kGq95uSqgd4caeeaKGxuWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnxNLZt KXOcmZGW84RcOquoPknFMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDlBRC82NTZERDI2QUE3NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhm TDBraGEzNjdBTlh3T21CY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBchJi9wlDhTGSZS6eO89AT/etY8ER4aVxz85hGaalxIp7qFYOkfm0B 1dBay9SM8oH16qgHxQsvQXzNVK0oaUcIaiVdbjahH4C2FzmvSKVH5Oc+YvjGRREY vutg/j/AYdZtM15M/WB/ZntvKaDvxQZahfpYJoQ1kr3hMg5TNaeVdpdXy6ocAMlN ug22KVn7JRp+u151z8XPWTUOHN91P5s6mMEslYgQutVWh9S3Sag+y0znyVeotu+9 JI+HmULp8bGxGUXMlWjBaDNwa/z22Y1JxxRsySWX95kIuy3+FcjN8ib/NoNEE7Rb Hm0v9+O2hj7j9xsZ0KJYZaBGtuScxaFL -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:44 2025 by rpki-client on console.sobornost.net