$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: sraUrG2NmI6subU7I9s0u/i3YdQCZ+9Hs4wGiVIUtRM= Subject key identifier: 8B:7E:48:9C:5C:70:ED:6B:B7:C6:01:02:B6:0A:39:3E:47:03:31:DC Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0AFD Signing time: Mon 28 Apr 2025 19:38:25 +0000 Manifest this update: Mon 28 Apr 2025 19:38:25 +0000 Manifest next update: Mon 05 May 2025 19:38:25 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: 77g9MIpOLPAu9IYRG6+5nuvdK2dJLgzS02vU1SDbfaI=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Apr 28 19:38:25 2025 GMT Not After : May 5 19:38:25 2025 GMT Subject: CN=680fd931-23cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:fb:4f:c1:ef:b3:1a:1a:ea:b2:16:0e:28: 1f:06:4b:9f:79:dc:7d:a2:e7:e1:41:a4:88:d0:d8: 3a:75:51:9f:db:22:5e:e8:35:b9:bb:a8:73:b0:5a: 12:be:b4:7c:02:de:74:36:9d:eb:c6:af:88:08:a7: c0:83:6d:2c:75:be:80:d7:67:68:8a:48:1b:0d:a5: 84:71:7f:e3:ec:27:a4:16:cd:5a:96:0e:88:38:f1: 97:b0:30:35:21:96:27:e5:0b:a5:42:30:22:c0:8e: f2:7b:3e:5b:f7:52:8e:70:cf:f2:af:da:89:b0:d9: dd:f4:2f:a8:33:27:03:f4:15:41:0d:90:59:ec:e7: 40:9d:cb:ef:38:a4:70:b1:34:55:54:af:5e:bd:0c: 5d:36:99:bf:e8:ea:b3:04:e0:12:e7:d5:51:25:73: 75:20:a3:7a:8c:4c:ff:2a:4b:e5:9a:fa:f1:a8:ce: b2:2d:06:94:df:cb:a1:7f:2f:a5:4c:56:cd:cd:72: 28:87:2b:9b:78:3d:e0:5c:0d:23:92:ba:a8:e2:ea: f4:be:d9:37:4d:3a:bf:5a:ce:d7:ac:66:6c:b3:fe: 57:d5:03:0f:50:b9:25:35:29:4d:9d:c2:c6:93:de: 0d:10:2a:f2:d7:ba:1b:88:00:84:9a:4e:20:4d:a6: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:48:9C:5C:70:ED:6B:B7:C6:01:02:B6:0A:39:3E:47:03:31:DC X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:98:ba:0e:d4:62:08:08:41:37:01:3c:38:1a:6b:b9:93:29: d7:68:cf:35:7e:65:a9:44:3f:93:8e:72:44:dd:cb:19:0e:47: 0d:96:a0:e9:b1:c6:c2:1a:c6:78:c4:a4:08:ab:3d:41:27:9c: bb:d2:60:53:17:4c:0b:db:02:f5:07:ea:6c:f5:b3:a2:31:5a: c7:f1:bf:d8:99:19:01:03:af:98:d2:2d:da:83:33:98:19:58: bd:cd:4b:03:9c:48:8e:c3:18:40:aa:35:6b:f9:39:90:2c:70: 6d:b1:c2:53:72:4b:82:8a:84:9c:00:0b:cc:18:44:ab:6e:dc: e7:8a:11:0d:c3:76:0e:35:fe:4a:7d:de:0a:51:33:b6:6a:bc: a2:ac:9d:91:3b:5d:6b:d2:7f:f3:b6:75:b4:39:2f:30:8e:a6: cc:77:ac:ab:ad:32:92:dd:09:7a:17:30:2a:6c:d6:c2:f7:3e: 1a:b7:07:ba:a6:46:88:db:f9:bb:48:52:40:0b:3e:40:40:fb: 7c:0a:7d:ef:12:bd:61:0b:a2:de:f6:ec:c4:02:ac:a8:30:6a: 58:8b:68:a3:e5:5b:2d:65:86:f1:cb:0a:2b:ec:e6:95:4a:46: ef:f1:69:04:4e:3e:da:38:8f:48:fc:f5:2b:b6:cb:6e:3e:49: 19:c6:57:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUwNDI4MTkzODI1WhcNMjUwNTA1MTkzODI1WjAYMRYwFAYD VQQDEw02ODBmZDkzMS0yM2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3D7T8Hvsxoa6rIWDigfBkufedx9oufhQaSI0Ng6dVGf2yJe6DW5u6hzsFoS vrR8At50Np3rxq+ICKfAg20sdb6A12doikgbDaWEcX/j7CekFs1alg6IOPGXsDA1 IZYn5QulQjAiwI7yez5b91KOcM/yr9qJsNnd9C+oMycD9BVBDZBZ7OdAncvvOKRw sTRVVK9evQxdNpm/6OqzBOAS59VRJXN1IKN6jEz/KkvlmvrxqM6yLQaU38uhfy+l TFbNzXIohyubeD3gXA0jkrqo4ur0vtk3TTq/Ws7XrGZss/5X1QMPULklNSlNncLG k94NECry17obiACEmk4gTaaw8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt+SJxc cO1rt8YBArYKOT5HAzHcMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJmLoO1GIICEE3ATw4Gmu5kynXaM81fmWpRD+TjnJE3csZDkcNlqDp scbCGsZ4xKQIqz1BJ5y70mBTF0wL2wL1B+ps9bOiMVrH8b/YmRkBA6+Y0i3agzOY GVi9zUsDnEiOwxhAqjVr+TmQLHBtscJTckuCioScAAvMGESrbtznihENw3YONf5K fd4KUTO2aryirJ2RO11r0n/ztnW0OS8wjqbMd6yrrTKS3Ql6FzAqbNbC9z4atwe6 pkaI2/m7SFJACz5AQPt8Cn3vEr1hC6Le9uzEAqyoMGpYi2ij5VstZYbxywor7OaV Skbv8WkETj7aOI9I/PUrtstuPkkZxlfF -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:56 2025 by rpki-client on console.sobornost.net