$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json) Hash identifier: 0zE7KPcnNid49ZxVfnvRjJ0lKErebyzQZXUTgOyvVL8= Subject key identifier: 92:B7:E7:8E:4C:57:0B:2C:E2:86:9A:81:63:CC:84:15:B7:43:FD:72 Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft Manifest number: 063B Signing time: Thu 24 Apr 2025 20:13:40 +0000 Manifest this update: Thu 24 Apr 2025 20:13:39 +0000 Manifest next update: Thu 01 May 2025 20:13:39 +0000 Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: KzA9ng0xSI9E2/+oXrRvPzzyg3PoFY2RtStH0k2pmCQ=) 2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: LyuoMJXz1NyXM9pSNW11Fa6fRcMflVH6LhgfRij1kVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Validity Not Before: Apr 24 20:13:39 2025 GMT Not After : May 1 20:13:39 2025 GMT Subject: CN=680a9b73-652a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:6c:6e:58:3f:0c:81:af:e6:e5:a9:27:04: 6f:37:1a:bd:b0:aa:3f:28:45:cb:72:1d:34:66:81: ad:b3:a0:ed:35:15:18:99:0d:e3:ff:d1:2d:4e:aa: 9c:89:41:52:39:df:0b:17:b1:e5:0f:1a:bc:e4:51: 19:a1:24:92:5d:2d:98:20:e2:f3:19:b6:89:0f:d0: e7:e6:1e:1c:30:d7:1e:fa:94:7c:1b:c3:35:3e:43: 63:57:83:95:53:46:cd:f1:d7:4a:61:8c:8b:05:d6: 57:5b:90:a4:fa:b9:b8:2f:d0:b1:53:f2:02:88:bb: bb:a7:d0:78:b3:80:fa:38:21:d2:7d:3c:6c:e2:aa: 54:05:68:41:fb:f3:31:f8:82:fb:19:c6:7f:77:69: 89:81:df:9b:2a:70:9a:0f:ad:53:6c:f8:2e:cb:e3: 49:c8:a2:70:cf:64:71:65:fb:37:c6:a6:96:81:76: 02:2d:19:8f:f4:ef:aa:a2:9b:95:45:e5:bf:92:7a: 73:f6:6d:e5:1b:71:06:a5:69:05:3a:fd:ac:c8:ea: 5c:ac:07:91:22:08:ef:39:fa:81:fe:85:f9:b4:9a: 57:ad:b7:44:43:f1:97:c9:14:e3:3c:12:05:af:d8: e6:7c:33:58:3d:9d:3d:c0:7f:39:d1:d8:a3:e2:6c: a3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B7:E7:8E:4C:57:0B:2C:E2:86:9A:81:63:CC:84:15:B7:43:FD:72 X509v3 Authority Key Identifier: keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:2b:bf:09:a0:59:7a:e8:0b:b0:33:20:9e:d1:63:4b:22:fc: 40:a0:e1:20:65:5f:5a:1f:59:10:59:2b:e6:41:60:68:8e:e8: 9f:80:23:c9:02:63:18:96:43:d8:b9:05:36:b6:2d:58:f0:5d: bf:58:7a:b0:3b:1c:cf:5c:8a:79:bc:a7:9b:1d:fe:81:62:db: a4:99:cf:2b:51:1c:76:16:71:10:38:1c:15:9a:da:13:70:57: 58:da:f6:99:41:32:5f:21:28:d1:fd:28:9b:2c:f6:aa:58:d5: fd:fc:6d:93:72:cf:67:6d:06:1c:73:5f:9e:2c:b7:62:03:ac: 8a:a3:8c:97:70:97:29:31:68:6b:8b:86:f5:07:58:7d:e1:f8: 66:d6:64:d8:79:23:6b:6a:7d:42:6e:21:36:d0:b7:7f:51:dc: a8:f1:26:f7:8c:0d:3a:b5:36:b6:03:a8:96:3d:8a:7a:d4:90: 4c:23:b5:00:43:9a:af:73:f5:8d:bf:00:1a:d8:44:14:d3:a6: 60:c4:24:c6:cb:42:3c:c5:7d:3f:88:80:cc:66:a9:62:0f:b9: 07:96:3e:32:c7:1c:7c:16:9d:6b:88:0e:e1:35:a9:8d:f7:69: 00:36:9e:c3:89:b5:50:d5:3f:3c:75:15:bb:85:25:2a:05:ea: ce:77:41:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDZFM0Y2QTRDQkQyQzc2NTFCNDkwRUI2NDkwNEJCRkYx RjQ2MjAxRDUwHhcNMjUwNDI0MjAxMzM5WhcNMjUwNTAxMjAxMzM5WjAYMRYwFAYD VQQDEw02ODBhOWI3My02NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwpsblg/DIGv5uWpJwRvNxq9sKo/KEXLch00ZoGts6DtNRUYmQ3j/9EtTqqc iUFSOd8LF7HlDxq85FEZoSSSXS2YIOLzGbaJD9Dn5h4cMNce+pR8G8M1PkNjV4OV U0bN8ddKYYyLBdZXW5Ck+rm4L9CxU/ICiLu7p9B4s4D6OCHSfTxs4qpUBWhB+/Mx +IL7GcZ/d2mJgd+bKnCaD61TbPguy+NJyKJwz2RxZfs3xqaWgXYCLRmP9O+qopuV ReW/knpz9m3lG3EGpWkFOv2syOpcrAeRIgjvOfqB/oX5tJpXrbdEQ/GXyRTjPBIF r9jmfDNYPZ09wH850dij4myjJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJK3545M Vwss4oaagWPMhBW3Q/1yMB8GA1UdIwQYMBaAFG4/aky9LHZRtJDrZJBLv/H0YgHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8zQzk1MzE5QzhE NTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2RsRzBrT3Rra0V1XzhmUmlB ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JqOXFUTDBzZGxHMGtPdGtrRXVfOGZSaUFkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8zQzk1MzE5QzhENTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2Rs RzBrT3Rra0V1XzhmUmlBZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4K78JoFl66AuwMyCe0WNLIvxAoOEgZV9aH1kQWSvmQWBojuifgCPJ AmMYlkPYuQU2ti1Y8F2/WHqwOxzPXIp5vKebHf6BYtukmc8rURx2FnEQOBwVmtoT cFdY2vaZQTJfISjR/SibLPaqWNX9/G2Tcs9nbQYcc1+eLLdiA6yKo4yXcJcpMWhr i4b1B1h94fhm1mTYeSNran1CbiE20Ld/Udyo8Sb3jA06tTa2A6iWPYp61JBMI7UA Q5qvc/WNvwAa2EQU06ZgxCTGy0I8xX0/iIDMZqliD7kHlj4yxxx8Fp1riA7hNamN 92kANp7DibVQ1T88dRW7hSUqBerOd0HK -----END CERTIFICATE-----Generated at Fri Apr 25 00:08:32 2025 by rpki-client on console.sobornost.net