$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: mSflxIu4fPXXuInDAVpE4SzdW+r6/PzJuvuK9TqjC38= Subject key identifier: 68:41:F5:33:A2:FF:96:C7:EF:03:81:A2:DA:5B:29:F3:F8:09:52:FB Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C01 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0BFA Signing time: Mon 28 Apr 2025 16:54:17 +0000 Manifest this update: Mon 28 Apr 2025 16:54:17 +0000 Manifest next update: Mon 05 May 2025 16:54:17 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: hHNQKOZGkFAnE8YLDFyc8a2YD2PWc/R+8Wn2tS8TBxI=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3073 (0xc01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Apr 28 16:54:17 2025 GMT Not After : May 5 16:54:17 2025 GMT Subject: CN=680fb2b9-d8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:54:22:0c:2e:b9:55:00:3b:6e:86:17:f8: 4c:62:93:c8:9d:f3:d0:d9:4d:56:28:66:8c:45:cb: 6e:95:2f:a9:d7:e6:2c:02:96:5f:9d:e5:61:11:f7: db:43:ee:6e:6d:af:bf:93:cf:ae:dc:41:37:3e:e6: aa:ae:59:0b:8d:b4:e2:9b:b1:64:3b:5f:10:60:ce: bb:80:ac:c1:f7:be:84:1d:c9:e6:fa:37:70:5f:d3: d4:b7:bf:1f:65:d1:09:c0:bb:d1:d2:1a:ca:32:c6: 9a:e9:35:2a:06:49:42:2f:88:61:30:3c:27:d5:d0: 27:25:03:d3:60:2a:fc:b0:95:a6:90:34:63:3e:9a: 49:e4:d3:67:4a:67:b4:c5:5a:d9:b3:ea:da:e3:19: 2d:44:cf:be:b3:fb:95:f0:d7:d7:6f:75:a6:40:e4: 08:dd:f4:7a:02:24:83:10:a0:9b:ac:5a:37:d2:7d: 32:2c:89:ab:f6:f7:35:83:85:7b:8b:cb:ee:3b:d5: 7e:4a:07:77:89:d6:03:4d:d2:22:5c:bb:e9:43:1f: d3:c2:a9:9b:42:bf:7c:ae:53:7d:e2:a2:01:6d:1c: bd:41:84:41:98:53:e8:f8:c1:75:3c:a8:d4:6e:4c: 41:0f:43:25:81:0b:01:ef:5e:45:c0:e7:85:d7:f7: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:41:F5:33:A2:FF:96:C7:EF:03:81:A2:DA:5B:29:F3:F8:09:52:FB X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b0:24:73:4d:74:65:de:6f:92:69:4f:a7:0b:4f:9a:fc:b1: 84:39:20:30:54:a8:d5:b5:a4:9c:0c:85:14:ec:78:cc:01:79: e1:dd:d0:4e:33:07:1b:96:20:31:f6:fc:6f:24:20:1e:0e:b7: b0:59:1d:60:c5:4e:b2:cf:26:af:24:f3:ec:6c:a3:ce:97:24: d2:6c:36:e0:c1:b8:01:26:87:48:71:da:8b:bb:4f:8f:62:6d: 59:9f:75:83:66:7f:b4:ff:be:0f:3b:f4:85:fa:32:ad:58:c0: d5:30:46:c4:72:99:55:37:30:b5:8a:6b:30:a7:55:50:5e:da: 1c:24:42:31:42:ce:a9:ce:85:7c:e4:5b:ac:a6:77:25:3e:9c: 78:fc:79:e3:8b:72:7b:99:43:05:25:9a:49:a1:a6:af:8d:df: 15:9e:f4:c2:05:fc:75:5d:b8:ad:15:c9:da:d8:ba:bb:ae:a5: ab:8c:90:53:03:05:20:f2:c2:6f:2f:af:6f:3b:1a:99:8d:ae: 7c:65:91:13:18:d7:7b:ee:26:62:2a:bc:5d:44:d7:c1:42:6d: 87:98:c7:60:59:27:41:f3:d2:5e:32:4c:29:0c:09:f3:aa:70: e2:01:b1:c2:bb:1b:a9:7b:19:26:40:38:f3:c1:1d:3f:ec:5b: 6c:c2:03:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUwNDI4MTY1NDE3WhcNMjUwNTA1MTY1NDE3WjAYMRYwFAYD VQQDEw02ODBmYjJiOS1kOGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUpUIgwuuVUAO26GF/hMYpPInfPQ2U1WKGaMRctulS+p1+YsApZfneVhEffb Q+5uba+/k8+u3EE3PuaqrlkLjbTim7FkO18QYM67gKzB976EHcnm+jdwX9PUt78f ZdEJwLvR0hrKMsaa6TUqBklCL4hhMDwn1dAnJQPTYCr8sJWmkDRjPppJ5NNnSme0 xVrZs+ra4xktRM++s/uV8NfXb3WmQOQI3fR6AiSDEKCbrFo30n0yLImr9vc1g4V7 i8vuO9V+Sgd3idYDTdIiXLvpQx/TwqmbQr98rlN94qIBbRy9QYRBmFPo+MF1PKjU bkxBD0MlgQsB715FwOeF1/fL4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhB9TOi /5bH7wOBotpbKfP4CVL7MB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWsCRzTXRl3m+SaU+nC0+a/LGEOSAwVKjVtaScDIUU7HjMAXnh3dBO MwcbliAx9vxvJCAeDrewWR1gxU6yzyavJPPsbKPOlyTSbDbgwbgBJodIcdqLu0+P Ym1Zn3WDZn+0/74PO/SF+jKtWMDVMEbEcplVNzC1imswp1VQXtocJEIxQs6pzoV8 5FuspnclPpx4/Hnji3J7mUMFJZpJoaavjd8VnvTCBfx1XbitFcna2Lq7rqWrjJBT AwUg8sJvL69vOxqZja58ZZETGNd77iZiKrxdRNfBQm2HmMdgWSdB89JeMkwpDAnz qnDiAbHCuxupexkmQDjzwR0/7FtswgPz -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:48 2025 by rpki-client on console.sobornost.net