$ rpki-client -vvf rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft File: NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft (raw, json) Hash identifier: Au7zd3G7JvOmbU0szuWIWCN5iwp78qfXxQqBz0icN1E= Subject key identifier: 52:98:8E:F2:1D:32:CF:98:5F:5B:06:2D:6B:9C:B9:D1:A1:FA:E7:C2 Authority key identifier: 34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 Certificate issuer: /CN=A911408F/serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft Manifest number: 0C3D Signing time: Mon 28 Apr 2025 18:50:45 +0000 Manifest this update: Mon 28 Apr 2025 18:50:44 +0000 Manifest next update: Mon 05 May 2025 18:50:44 +0000 Files and hashes: 1: NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl (hash: hdgdh2A0Q8ul1dFGep6ZwR0Rw6VAEWBepQZfH6jIyDY=) 2: 8186EA3008A211EA83441161C4F9AE02.roa (hash: EaF6+NcOizXvwczdPzpRgDNyRvgLSS+QrNc16c+K0fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911408F, serialNumber=340890FA2027C5469DA0C5FD83748F66A8892EB7 Validity Not Before: Apr 28 18:50:44 2025 GMT Not After : May 5 18:50:44 2025 GMT Subject: CN=680fce04-d348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:00:73:8b:d9:a6:ca:ae:ac:75:1f:4c:aa: e0:af:86:5f:8c:ca:19:c1:76:df:75:8c:11:e6:37: fd:d4:69:28:bf:8b:db:4b:d6:c3:3a:9d:4e:d2:66: 7c:c0:d2:de:41:fa:e7:64:da:50:fb:07:bf:93:9b: f9:4a:f9:ae:78:3c:8f:4a:09:e9:80:e3:ff:33:24: a3:6d:1a:75:83:b6:2b:15:99:91:95:ab:2d:58:d3: cd:bc:dd:5c:81:36:27:91:1a:02:7a:62:b2:52:bd: 24:db:9f:a6:f4:08:af:05:68:03:bc:53:3a:a1:9e: d0:bb:a2:e7:35:d2:9d:b4:07:8e:ae:9d:58:78:4b: 35:ea:fb:3d:e0:01:ad:40:6d:0d:88:76:d7:85:57: 40:e6:3b:8a:55:b3:3f:97:85:b5:e9:20:ca:5d:e9: ea:cb:21:d6:c4:ca:91:3f:4b:87:04:42:be:22:63: ef:8a:cf:36:dc:14:04:2d:06:74:d9:2d:d5:c5:5d: 1a:24:11:2c:d0:32:d8:63:1d:f7:b6:98:51:d8:c7: 7b:66:ac:01:71:0d:80:13:b3:b5:cb:0e:e7:ef:fd: 7f:91:05:5f:f9:e8:47:fb:4d:ac:19:4d:05:e3:d0: 5c:ae:be:c2:5e:70:00:47:44:c5:69:67:b5:4a:c3: 0f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:98:8E:F2:1D:32:CF:98:5F:5B:06:2D:6B:9C:B9:D1:A1:FA:E7:C2 X509v3 Authority Key Identifier: keyid:34:08:90:FA:20:27:C5:46:9D:A0:C5:FD:83:74:8F:66:A8:89:2E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAiQ-iAnxUadoMX9g3SPZqiJLrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911408F/AA604D4A08A011EA9C4AED5DC4F9AE02/NAiQ-iAnxUadoMX9g3SPZqiJLrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:fd:41:e6:ab:3c:40:cc:73:06:c1:88:61:c3:fa:15:d6:17: c9:d5:30:84:e9:a1:37:d0:45:9d:e0:5f:ff:56:22:15:2a:48: 23:76:3f:9f:14:3e:07:83:d6:7e:b5:83:bb:7c:14:f0:34:2b: 8c:c2:c8:ff:60:b1:69:13:1a:97:b2:66:14:cf:a2:47:6c:3b: 25:07:4f:ac:27:5a:fa:70:c2:65:c9:66:ae:06:b0:db:d3:c0: 11:3a:2f:ce:be:04:78:f9:7a:d3:f1:be:8d:00:8f:31:d9:75: 8a:56:15:24:53:d0:5c:cd:6c:3a:3b:00:4d:67:c4:c1:64:4d: 91:96:af:15:ae:ae:2e:99:1d:be:e6:e1:6d:d0:a5:ef:1d:e5: 68:68:80:77:cc:f1:8b:52:91:e6:cb:a3:d8:0b:07:c2:a5:90: c1:b2:fe:ed:b0:43:1f:7e:d8:24:e1:ff:d4:47:ce:83:e5:fc: 59:5b:2b:2d:e4:ef:43:2e:15:33:98:b9:0c:b1:b5:eb:e5:2e: 61:d9:ea:f8:2d:fa:19:dd:75:07:5c:1d:d1:36:99:b4:0d:e1: 65:3e:fc:51:46:39:4b:0f:52:54:86:93:25:89:55:37:20:1c: 3d:f9:da:cc:99:6f:c0:f4:82:83:13:af:ca:5f:cd:d2:46:5c: 10:3c:d9:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQwOEYxMTAvBgNVBAUTKDM0MDg5MEZBMjAyN0M1NDY5REEwQzVGRDgzNzQ4RjY2 QTg4OTJFQjcwHhcNMjUwNDI4MTg1MDQ0WhcNMjUwNTA1MTg1MDQ0WjAYMRYwFAYD VQQDEw02ODBmY2UwNC1kMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPUAc4vZpsqurHUfTKrgr4ZfjMoZwXbfdYwR5jf91Gkov4vbS9bDOp1O0mZ8 wNLeQfrnZNpQ+we/k5v5SvmueDyPSgnpgOP/MySjbRp1g7YrFZmRlastWNPNvN1c gTYnkRoCemKyUr0k25+m9AivBWgDvFM6oZ7Qu6LnNdKdtAeOrp1YeEs16vs94AGt QG0NiHbXhVdA5juKVbM/l4W16SDKXenqyyHWxMqRP0uHBEK+ImPvis823BQELQZ0 2S3VxV0aJBEs0DLYYx33tphR2Md7ZqwBcQ2AE7O1yw7n7/1/kQVf+ehH+02sGU0F 49Bcrr7CXnAAR0TFaWe1SsMPHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKYjvId Ms+YX1sGLWucudGh+ufCMB8GA1UdIwQYMBaAFDQIkPogJ8VGnaDF/YN0j2aoiS63 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDA4Ri9BQTYwNEQ0QTA4 QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhVYWRvTVg5ZzNTUFpxaUpM cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BaVEtaUFueFVhZG9NWDlnM1NQWnFpSkxyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDA4Ri9BQTYwNEQ0QTA4QTAxMUVBOUM0QUVENURDNEY5QUUwMi9OQWlRLWlBbnhV YWRvTVg5ZzNTUFpxaUpMcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX/UHmqzxAzHMGwYhhw/oV1hfJ1TCE6aE30EWd4F//ViIVKkgjdj+f FD4Hg9Z+tYO7fBTwNCuMwsj/YLFpExqXsmYUz6JHbDslB0+sJ1r6cMJlyWauBrDb 08AROi/OvgR4+XrT8b6NAI8x2XWKVhUkU9BczWw6OwBNZ8TBZE2Rlq8Vrq4umR2+ 5uFt0KXvHeVoaIB3zPGLUpHmy6PYCwfCpZDBsv7tsEMfftgk4f/UR86D5fxZWyst 5O9DLhUzmLkMsbXr5S5h2er4LfoZ3XUHXB3RNpm0DeFlPvxRRjlLD1JUhpMliVU3 IBw9+drMmW/A9IKDE6/KX83SRlwQPNka -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:47 2025 by rpki-client on console.sobornost.net