$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft File: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft (raw, json) Hash identifier: FDNoMcdL1TfVSsQZ20F0obJCrzLCyWrqnHCg83vxrM0= Subject key identifier: 6F:B5:DD:8E:9F:E7:92:A4:EB:E7:FD:47:78:39:C6:DC:EE:1A:D4:53 Authority key identifier: 05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC Certificate issuer: /CN=A91AB8D7/serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft Manifest number: 01B0 Signing time: Sun 27 Apr 2025 02:16:56 +0000 Manifest this update: Sun 27 Apr 2025 02:16:56 +0000 Manifest next update: Sun 04 May 2025 02:16:56 +0000 Files and hashes: 1: BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl (hash: DDbNaNxH+bViI+yvtUhWOljtSQfqMKkgr7HOlB2IKWI=) 2: 1ED3BAF898A011ED9D31B05CC4F9AE02.roa (hash: uh86cXyNLUaa3Xl47qiV2uyaXTpPI55uWsM8f80qnzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB8D7, serialNumber=050DC03B5D5945A33EAB951817F1679BD910C6AC Validity Not Before: Apr 27 02:16:56 2025 GMT Not After : May 4 02:16:56 2025 GMT Subject: CN=680d9398-6f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:a8:b1:a1:93:e4:0f:97:dd:00:5d:61:e8: 44:25:e3:d9:4f:d9:bf:9b:80:ce:cf:6f:b0:21:90: 8a:80:88:70:5a:00:2d:94:5e:5f:d6:85:ae:db:f9: d5:b0:d6:60:81:f0:1c:cc:c4:64:e4:c8:4f:e5:38: 62:da:18:74:c6:c0:87:8a:79:f1:0e:ac:52:dc:ea: 5a:63:71:43:93:5c:88:9a:68:f4:42:0f:bc:c9:c3: f7:4e:8c:f4:7c:f7:fa:52:d5:55:7f:69:2f:f2:d8: b6:bb:f4:55:21:32:11:d0:e4:dd:8d:5b:5c:db:96: 0f:43:0a:0e:14:01:67:41:70:c4:5f:c3:20:01:2c: f5:98:6e:8d:a2:c2:8d:c9:30:aa:66:78:6b:fd:e5: c2:7b:6d:13:35:66:86:a8:5b:e1:59:dc:0f:29:ec: aa:b9:2c:fc:87:6d:4c:be:ba:4f:62:20:c5:fd:47: b1:9a:59:23:31:36:9f:d8:14:ae:0f:3a:8e:09:57: 4d:c2:f4:0b:00:30:2d:29:fb:07:4f:b8:eb:df:7c: 3c:e4:47:a8:71:f8:de:48:a8:86:e8:41:52:36:c0: 91:86:71:23:01:ad:56:1e:ee:da:1f:ce:b3:46:f2: 71:6e:f4:69:11:d7:68:70:2d:5b:cd:1a:6b:ef:34: 1c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:DD:8E:9F:E7:92:A4:EB:E7:FD:47:78:39:C6:DC:EE:1A:D4:53 X509v3 Authority Key Identifier: keyid:05:0D:C0:3B:5D:59:45:A3:3E:AB:95:18:17:F1:67:9B:D9:10:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB8D7/B67F301A989D11EDB4E30F5CC4F9AE02/BQ3AO11ZRaM-q5UYF_Fnm9kQxqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:01:86:de:87:88:12:e6:9b:52:65:b1:71:d8:ca:b8:72:db: 93:ba:b1:ac:1d:e5:e8:ab:9d:5d:a0:f3:f3:7d:59:68:5b:0c: f3:0f:03:b4:b3:19:cc:41:17:cf:d1:ef:16:55:6e:4f:62:7f: 86:62:8d:fa:86:19:f0:ff:06:44:79:33:40:52:0a:75:22:7c: 1a:6e:45:02:2c:28:f8:ce:bd:ca:11:ec:1d:e9:d6:b5:4e:e1: ff:1a:f9:0d:c3:b2:66:63:ac:9a:73:2a:15:18:91:ff:97:65: 2b:bf:9e:f8:f5:e3:8f:0e:32:95:20:4d:ce:0d:bf:ea:ed:9d: 41:44:6c:09:ca:4b:63:64:25:2b:77:57:6d:fc:e7:ee:77:f0: d4:7b:66:8f:19:a6:ed:b1:30:27:8e:05:f9:bf:f4:8a:64:f1: 12:0a:99:cd:f3:b9:47:4e:27:73:f0:9d:7a:64:10:b6:eb:f3: 43:6b:16:05:68:00:aa:fc:17:49:29:59:c2:02:7d:c3:e5:b4: 0d:13:61:78:d0:d5:90:8d:66:36:7e:4d:56:42:35:69:4b:21: 8b:2b:15:0e:aa:8e:80:b2:93:f1:f3:0a:f6:bc:66:e8:23:ae: f6:05:48:73:79:a8:31:5f:db:fe:8f:a3:8c:7d:95:9c:d4:6c: fb:d0:99:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4RDcxMTAvBgNVBAUTKDA1MERDMDNCNUQ1OTQ1QTMzRUFCOTUxODE3RjE2NzlC RDkxMEM2QUMwHhcNMjUwNDI3MDIxNjU2WhcNMjUwNTA0MDIxNjU2WjAYMRYwFAYD VQQDEw02ODBkOTM5OC02ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu26osaGT5A+X3QBdYehEJePZT9m/m4DOz2+wIZCKgIhwWgAtlF5f1oWu2/nV sNZggfAczMRk5MhP5Thi2hh0xsCHinnxDqxS3OpaY3FDk1yImmj0Qg+8ycP3Toz0 fPf6UtVVf2kv8ti2u/RVITIR0OTdjVtc25YPQwoOFAFnQXDEX8MgASz1mG6NosKN yTCqZnhr/eXCe20TNWaGqFvhWdwPKeyquSz8h21MvrpPYiDF/UexmlkjMTaf2BSu DzqOCVdNwvQLADAtKfsHT7jr33w85EeocfjeSKiG6EFSNsCRhnEjAa1WHu7aH86z RvJxbvRpEddocC1bzRpr7zQckwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+13Y6f 55Kk6+f9R3g5xtzuGtRTMB8GA1UdIwQYMBaAFAUNwDtdWUWjPquVGBfxZ5vZEMas MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjhENy9CNjdGMzAxQTk4 OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJhTS1xNVVZRl9Gbm05a1F4 cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRM0FPMTFaUmFNLXE1VVlGX0ZubTlrUXhxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjhENy9CNjdGMzAxQTk4OUQxMUVEQjRFMzBGNUNDNEY5QUUwMi9CUTNBTzExWlJh TS1xNVVZRl9Gbm05a1F4cXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKAYbeh4gS5ptSZbFx2Mq4ctuTurGsHeXoq51doPPzfVloWwzzDwO0 sxnMQRfP0e8WVW5PYn+GYo36hhnw/wZEeTNAUgp1InwabkUCLCj4zr3KEewd6da1 TuH/GvkNw7JmY6yacyoVGJH/l2Urv5749eOPDjKVIE3ODb/q7Z1BRGwJyktjZCUr d1dt/Ofud/DUe2aPGabtsTAnjgX5v/SKZPESCpnN87lHTidz8J16ZBC26/NDaxYF aACq/BdJKVnCAn3D5bQNE2F40NWQjWY2fk1WQjVpSyGLKxUOqo6AspPx8wr2vGbo I672BUhzeagxX9v+j6OMfZWc1Gz70Jmd -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net