$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft File: BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft (raw, json) Hash identifier: K54VHecyZbregNSLjJMAKiXRh2z8eV9EsUteTRwQL90= Subject key identifier: E6:E4:FF:43:5D:07:86:5E:DC:8F:53:C6:78:DA:D7:2A:09:83:7A:FC Authority key identifier: 05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 Certificate issuer: /CN=A9199B85/serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft Manifest number: E5 Signing time: Sun 27 Apr 2025 01:09:49 +0000 Manifest this update: Sun 27 Apr 2025 01:09:49 +0000 Manifest next update: Sun 04 May 2025 01:09:49 +0000 Files and hashes: 1: BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl (hash: nnAH/LaRugP5+ZxzK/b0hOR8Jhzefi8jXlC0AgRtBV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B85, serialNumber=05A336F646C6833789B6AE7C92072B7F94D9DC29 Validity Not Before: Apr 27 01:09:49 2025 GMT Not After : May 4 01:09:49 2025 GMT Subject: CN=680d83dd-b66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ec:94:dd:a6:da:d1:c3:45:b2:88:63:dd:9c: 28:3c:a7:90:d8:7f:95:89:24:4e:e2:09:e3:7b:13: 41:5d:10:c3:1e:a9:d7:1b:c4:3f:87:e6:94:4e:c2: 8c:f2:e7:7a:ee:76:42:40:d4:02:8f:d1:33:ee:5b: 35:8b:94:26:c1:0e:ae:20:18:5d:e9:73:fe:0b:b8: 7c:ce:e7:cd:58:a4:bc:4b:86:49:7d:30:d3:41:f5: 4f:e9:6c:8c:70:1d:89:d7:68:ef:42:ae:06:eb:34: 4b:18:55:f3:83:7f:e0:85:0b:e5:93:6a:4a:19:91: 1c:29:d1:18:d1:17:58:c9:20:d0:d6:92:9f:3e:73: 90:6e:b9:70:63:60:c1:92:14:7f:b0:fa:10:5c:ae: d7:f6:9f:19:23:f5:e3:2a:f1:ac:77:a9:5a:6a:e5: 9d:40:27:f7:55:fa:bb:c1:a1:df:3d:e2:83:e3:b9: 20:98:98:7a:de:d0:8a:fa:ef:59:8a:f6:6c:27:cd: 61:16:0c:e2:3c:06:bf:b5:2a:33:4d:fd:ee:a8:94: 11:e3:03:42:96:e7:f0:ec:77:77:b4:29:4d:ef:27: ff:8f:87:94:d0:ea:56:49:f6:fd:ec:82:09:5e:0a: 13:ef:5b:87:5a:f7:38:10:28:4b:52:f3:35:50:67: b3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E4:FF:43:5D:07:86:5E:DC:8F:53:C6:78:DA:D7:2A:09:83:7A:FC X509v3 Authority Key Identifier: keyid:05:A3:36:F6:46:C6:83:37:89:B6:AE:7C:92:07:2B:7F:94:D9:DC:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BaM29kbGgzeJtq58kgcrf5TZ3Ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/7D86A238C61511EEA718E338C4F9AE02/BaM29kbGgzeJtq58kgcrf5TZ3Ck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:2b:ec:be:f5:8e:5b:cd:1a:6b:6f:7d:90:b6:02:77:83:dc: 95:57:20:d0:4c:b2:97:4b:9b:05:0f:d3:6b:95:ee:f9:10:1a: d9:a8:b3:e6:03:a5:60:5e:ac:c7:8a:08:75:f6:fa:f5:6d:61: cc:3c:0d:54:bb:ab:8f:0f:62:97:01:54:73:ae:28:7d:29:63: 23:74:ec:33:be:aa:0b:03:e6:eb:50:b8:ec:4a:d1:ef:ea:73: b1:00:bb:a5:ed:be:18:5a:dc:d2:28:35:e1:3f:bd:3e:df:65: 7e:c3:7a:18:3c:05:8a:43:b3:6c:98:79:a6:90:af:20:f2:3b: 65:1d:86:d2:4b:75:8d:59:37:60:ed:a8:10:9e:a2:59:0e:7e: af:55:00:2e:a6:0a:b9:c4:e6:7e:56:82:f0:3c:16:df:a1:95: 3b:79:31:b7:75:12:e6:b5:5f:be:73:c3:19:98:4d:ea:b5:23: b1:86:ee:d3:9d:3a:46:ac:4b:ce:bc:a2:55:6d:10:76:34:0c: a5:98:c6:be:28:0e:d0:eb:f2:52:3b:56:a0:2c:99:b3:b7:7e: 38:b6:b5:8f:65:d0:5d:ee:fb:10:a6:2b:ba:aa:3b:c5:04:8a: 79:c0:d2:48:67:b2:83:02:b6:b5:d2:fd:4e:51:0e:1f:75:4d: f6:d4:ef:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCODUxMTAvBgNVBAUTKDA1QTMzNkY2NDZDNjgzMzc4OUI2QUU3QzkyMDcyQjdG OTREOURDMjkwHhcNMjUwNDI3MDEwOTQ5WhcNMjUwNTA0MDEwOTQ5WjAYMRYwFAYD VQQDEw02ODBkODNkZC1iNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+yU3aba0cNFsohj3ZwoPKeQ2H+ViSRO4gnjexNBXRDDHqnXG8Q/h+aUTsKM 8ud67nZCQNQCj9Ez7ls1i5QmwQ6uIBhd6XP+C7h8zufNWKS8S4ZJfTDTQfVP6WyM cB2J12jvQq4G6zRLGFXzg3/ghQvlk2pKGZEcKdEY0RdYySDQ1pKfPnOQbrlwY2DB khR/sPoQXK7X9p8ZI/XjKvGsd6laauWdQCf3Vfq7waHfPeKD47kgmJh63tCK+u9Z ivZsJ81hFgziPAa/tSozTf3uqJQR4wNClufw7Hd3tClN7yf/j4eU0OpWSfb97IIJ XgoT71uHWvc4EChLUvM1UGezVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObk/0Nd B4Ze3I9Txnja1yoJg3r8MB8GA1UdIwQYMBaAFAWjNvZGxoM3ibaufJIHK3+U2dwp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS83RDg2QTIzOEM2 MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6ZUp0cTU4a2djcmY1VFoz Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JhTTI5a2JHZ3plSnRxNThrZ2NyZjVUWjNDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI4NS83RDg2QTIzOEM2MTUxMUVFQTcxOEUzMzhDNEY5QUUwMi9CYU0yOWtiR2d6 ZUp0cTU4a2djcmY1VFozQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4K+y+9Y5bzRprb32QtgJ3g9yVVyDQTLKXS5sFD9Nrle75EBrZqLPm A6VgXqzHigh19vr1bWHMPA1Uu6uPD2KXAVRzrih9KWMjdOwzvqoLA+brULjsStHv 6nOxALul7b4YWtzSKDXhP70+32V+w3oYPAWKQ7NsmHmmkK8g8jtlHYbSS3WNWTdg 7agQnqJZDn6vVQAupgq5xOZ+VoLwPBbfoZU7eTG3dRLmtV++c8MZmE3qtSOxhu7T nTpGrEvOvKJVbRB2NAylmMa+KA7Q6/JSO1agLJmzt344trWPZdBd7vsQpiu6qjvF BIp5wNJIZ7KDAra10v1OUQ4fdU321O/j -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:01 2025 by rpki-client on console.sobornost.net