$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft File: bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json) Hash identifier: +mwmY6S6dPrvNcCmHYFKekhZi5dbe10fcTsUuFmkjXU= Subject key identifier: 04:72:CE:F3:26:0F:7E:45:84:FC:EE:3C:A2:F1:09:95:01:0D:46:5C Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8 Certificate issuer: /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8 Certificate serial: 23CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft Manifest number: 5FFA Signing time: Thu 24 Apr 2025 14:15:26 +0000 Manifest this update: Thu 24 Apr 2025 14:15:25 +0000 Manifest next update: Thu 01 May 2025 14:15:25 +0000 Files and hashes: 1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: QKHV4gsf9g8BC76fjIY1n8nRpAM7dD1GKmPl36JON6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9164 (0x23cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8 Validity Not Before: Apr 24 14:15:25 2025 GMT Not After : May 1 14:15:25 2025 GMT Subject: CN=680a477e-ab00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:7c:b3:80:44:5a:fc:65:97:55:02:f3:fd: bd:36:2e:de:a3:6e:33:10:f3:9d:09:86:34:b5:ac: 0e:b1:b9:53:5c:66:80:3f:2d:16:21:91:0f:87:7c: 50:47:e5:03:cb:70:a4:a4:9c:82:30:0e:ab:fe:2d: 48:a9:1e:51:8e:a3:bb:d9:d5:97:8e:50:f9:33:3c: fb:ce:44:4d:d9:26:5c:04:a0:70:08:ca:fa:b0:70: 08:43:c9:dc:c1:00:76:42:36:83:70:b5:50:c3:71: 4c:d5:9e:bf:fe:0f:a7:4b:6f:c8:f3:92:67:8c:6e: 60:49:98:87:80:23:c5:02:81:79:8e:90:aa:4d:f7: 65:eb:9e:fc:60:36:6c:95:34:c2:38:d8:94:1b:2a: 2c:01:11:d6:b0:a0:81:25:fa:e2:81:00:fd:2d:3a: 9d:8a:01:bb:34:c0:d8:5c:39:50:ef:57:78:c2:2d: e6:b9:f2:38:0a:9a:05:9a:f0:72:a6:bf:a2:5c:40: 6e:25:1d:93:05:c7:8f:10:d1:1d:16:87:cd:78:73: 3e:59:cb:16:95:be:cf:08:c8:d7:89:48:ec:fa:78: 66:3a:8d:e1:0a:28:f7:d2:25:ae:28:e8:9e:fe:8b: b7:68:1a:7e:57:6f:db:51:ba:65:06:e3:dd:da:f5: 2c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:72:CE:F3:26:0F:7E:45:84:FC:EE:3C:A2:F1:09:95:01:0D:46:5C X509v3 Authority Key Identifier: keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c2:1a:3b:f5:d1:56:73:53:e2:f3:f6:b7:21:15:76:d7:82: d6:64:d0:87:97:58:9c:f3:2a:cd:27:64:19:42:e3:d1:18:7d: 78:46:16:a5:6e:55:f3:1e:bf:a2:45:cb:4d:1c:72:1f:a4:e9: 2f:e1:68:57:da:3a:6d:16:10:61:dc:e0:d0:03:98:6c:06:f8: a2:c8:db:0a:79:ff:71:3e:fe:8d:c7:bc:08:b6:4e:45:78:39: b2:b5:1a:a0:b6:e2:16:da:9c:8d:06:26:6e:ca:60:8a:49:24: c2:5a:ef:16:17:a2:cc:6b:77:07:56:44:60:39:85:44:1a:87: cf:4d:ec:c6:8d:94:91:70:ad:e0:4d:c2:b5:eb:b9:5c:e7:ba: 19:93:19:5b:e0:bf:55:1a:84:24:27:5e:f1:f5:42:ba:d3:75: 89:02:61:b9:41:58:ac:ce:49:f5:be:ef:ef:3a:7e:16:0b:47: 03:89:43:73:b0:51:94:15:4f:1f:ad:4a:a7:d3:13:a2:52:a6: 25:3d:b1:62:b2:19:07:13:83:8a:a4:17:43:aa:c6:ae:69:56: 7d:26:2c:83:10:2a:e8:cf:71:57:4a:49:06:17:97:fb:2e:45: 1b:48:e3:61:69:ef:60:51:f5:3d:92:18:f6:d6:bc:6d:80:85: d7:7f:73:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDZFNDVBQUYwMEQyNkYxRjA3N0Q2NzQ3MzkxNDRENEI4 QzM5NEYzQjgwHhcNMjUwNDI0MTQxNTI1WhcNMjUwNTAxMTQxNTI1WjAYMRYwFAYD VQQDEw02ODBhNDc3ZS1hYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+h8s4BEWvxll1UC8/29Ni7eo24zEPOdCYY0tawOsblTXGaAPy0WIZEPh3xQ R+UDy3CkpJyCMA6r/i1IqR5RjqO72dWXjlD5Mzz7zkRN2SZcBKBwCMr6sHAIQ8nc wQB2QjaDcLVQw3FM1Z6//g+nS2/I85JnjG5gSZiHgCPFAoF5jpCqTfdl6578YDZs lTTCONiUGyosARHWsKCBJfrigQD9LTqdigG7NMDYXDlQ71d4wi3mufI4CpoFmvBy pr+iXEBuJR2TBcePENEdFofNeHM+WcsWlb7PCMjXiUjs+nhmOo3hCij30iWuKOie /ou3aBp+V2/bUbplBuPd2vUsNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARyzvMm D35FhPzuPKLxCZUBDUZcMB8GA1UdIwQYMBaAFG5FqvANJvHwd9Z0c5FE1LjDlPO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThmQjMxblJ6a1VUVXVNT1U4 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrV3E4QTBtOGZCMzFuUnprVVRVdU1PVTg3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThm QjMxblJ6a1VUVXVNT1U4N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuwho79dFWc1Pi8/a3IRV214LWZNCHl1ic8yrNJ2QZQuPRGH14Rhal blXzHr+iRctNHHIfpOkv4WhX2jptFhBh3ODQA5hsBviiyNsKef9xPv6Nx7wItk5F eDmytRqgtuIW2pyNBiZuymCKSSTCWu8WF6LMa3cHVkRgOYVEGofPTezGjZSRcK3g TcK167lc57oZkxlb4L9VGoQkJ17x9UK603WJAmG5QViszkn1vu/vOn4WC0cDiUNz sFGUFU8frUqn0xOiUqYlPbFishkHE4OKpBdDqsauaVZ9JiyDECroz3FXSkkGF5f7 LkUbSONhae9gUfU9khj21rxtgIXXf3MI -----END CERTIFICATE-----Generated at Thu Apr 24 15:52:51 2025 by rpki-client on console.sobornost.net