$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: KsVlRX8PNJX7yQz3FdTHhS8yhqbHsgaSjbUiu++WX5g= Subject key identifier: 6B:88:F0:77:B5:AA:86:11:C9:9F:D9:30:B1:4D:7F:62:A8:E1:5C:24 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: A9 Signing time: Sun 27 Apr 2025 04:57:31 +0000 Manifest this update: Sun 27 Apr 2025 04:57:30 +0000 Manifest next update: Sun 04 May 2025 04:57:30 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: 5i50g7I5SR5XIUYo/rfg0C9da3DUzUnHkL7hx1ETK/M=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: aCxLNGUfAZ6CNYlr7962E8YpM0oFXazWi/2qqzUqx5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Apr 27 04:57:30 2025 GMT Not After : May 4 04:57:30 2025 GMT Subject: CN=680db93b-df7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:b5:8e:a1:ec:17:f0:aa:20:eb:59:d4:bc: ce:2d:d1:de:5b:bd:32:69:0c:b3:74:65:4c:73:13: 0f:6f:36:f2:de:3b:b3:dd:c5:ba:86:e4:bf:11:07: 74:15:0e:4e:1c:dc:dc:7f:0a:11:78:21:b5:f7:39: b2:e7:cd:3c:f8:63:67:77:22:13:7b:68:82:1a:7e: d1:e5:f8:85:ed:b5:12:b0:d8:34:7f:8c:a0:a2:ab: ce:6b:3b:5a:1f:9e:0b:b4:82:40:f1:49:15:30:ea: 86:c8:eb:26:de:35:1e:a9:91:a1:e5:47:09:54:20: ac:2a:4c:9f:c0:c0:d3:ae:5b:9a:29:64:c1:f3:bf: 2d:11:12:78:b1:4b:bd:7f:62:e9:ef:f0:c5:8c:b4: d9:73:3a:ee:52:c4:e7:24:bd:e9:3b:c3:54:3b:20: b8:46:35:50:d8:af:b1:4b:73:a3:88:57:53:28:64: ff:53:54:80:e5:27:72:60:57:f8:d9:c1:6b:a0:cf: 04:51:28:3c:ef:bb:0f:13:43:d5:c8:02:55:35:b3: d8:e8:b5:51:58:23:af:35:6d:b7:60:c5:ee:6b:7b: a9:03:c2:e3:be:9e:62:5c:4b:5d:3b:cf:0a:34:fb: 58:95:67:85:50:6b:9c:3b:a2:2f:e8:67:23:d5:fb: 82:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:88:F0:77:B5:AA:86:11:C9:9F:D9:30:B1:4D:7F:62:A8:E1:5C:24 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:61:9b:94:dc:42:e7:19:5c:22:fe:9e:16:5f:45:25:6a:2f: 1a:3b:49:67:64:ad:1c:35:e4:42:6c:1b:75:07:2b:72:1c:d8: 26:c3:8a:3a:36:aa:e9:e3:d0:94:92:7c:a4:a4:67:54:e3:7e: 4c:f8:be:c1:59:8b:38:10:4b:99:2d:ba:ae:1a:fa:fa:d2:fa: d2:9d:80:dd:61:98:95:e7:9c:d4:6f:f0:c8:6d:c6:a0:c0:b0: 14:1e:eb:8f:78:47:df:ce:53:4e:eb:6e:99:42:68:de:80:c5: ef:25:1d:71:69:6f:a2:8f:da:ac:a9:ba:46:41:57:a3:a4:5d: c6:29:78:00:17:81:0b:2d:13:55:cb:38:b7:28:35:ca:50:a8: f4:60:62:39:71:2d:81:60:86:1a:d0:10:06:dd:d5:25:d2:8f: d2:53:57:0a:2c:87:c2:43:77:31:fd:1f:7f:05:9a:51:03:0a: fb:26:bd:9e:22:81:f0:c3:7b:67:b1:cb:d1:ee:80:8f:55:5e: d7:a5:58:61:32:6d:8c:ea:74:70:f2:12:c4:ae:4e:d8:c1:ac: 4b:65:8f:a6:1c:18:45:06:9b:83:44:ab:c1:86:83:2f:2c:8e: a9:f5:43:f8:e6:2d:54:fe:fd:6e:4f:0e:16:90:b7:51:5e:f4: 99:04:8c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwNDI3MDQ1NzMwWhcNMjUwNTA0MDQ1NzMwWjAYMRYwFAYD VQQDEw02ODBkYjkzYi1kZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDS1jqHsF/CqIOtZ1LzOLdHeW70yaQyzdGVMcxMPbzby3juz3cW6huS/EQd0 FQ5OHNzcfwoReCG19zmy5808+GNndyITe2iCGn7R5fiF7bUSsNg0f4ygoqvOazta H54LtIJA8UkVMOqGyOsm3jUeqZGh5UcJVCCsKkyfwMDTrluaKWTB878tERJ4sUu9 f2Lp7/DFjLTZczruUsTnJL3pO8NUOyC4RjVQ2K+xS3OjiFdTKGT/U1SA5SdyYFf4 2cFroM8EUSg877sPE0PVyAJVNbPY6LVRWCOvNW23YMXua3upA8Ljvp5iXEtdO88K NPtYlWeFUGucO6Iv6Gcj1fuCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuI8He1 qoYRyZ/ZMLFNf2Ko4VwkMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASYZuU3ELnGVwi/p4WX0Ulai8aO0lnZK0cNeRCbBt1BytyHNgmw4o6 Nqrp49CUknykpGdU435M+L7BWYs4EEuZLbquGvr60vrSnYDdYZiV55zUb/DIbcag wLAUHuuPeEffzlNO626ZQmjegMXvJR1xaW+ij9qsqbpGQVejpF3GKXgAF4ELLRNV yzi3KDXKUKj0YGI5cS2BYIYa0BAG3dUl0o/SU1cKLIfCQ3cx/R9/BZpRAwr7Jr2e IoHww3tnscvR7oCPVV7XpVhhMm2M6nRw8hLErk7YwaxLZY+mHBhFBpuDRKvBhoMv LI6p9UP45i1U/v1uTw4WkLdRXvSZBIy9 -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net