$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft File: NHTJTDbo-aDToNIuHdoQjNNAqyg.mft (raw, json) Hash identifier: 6lgqumGbAoHEzZW9i+vWdyTmeqrGBs1YKV6OlJ/opT0= Subject key identifier: 18:9C:6C:62:9F:AF:39:FF:D2:C1:C7:26:77:BE:7E:A4:CF:28:96:F3 Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Certificate serial: 0F92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft Manifest number: 0F69 Signing time: Sat 26 Apr 2025 17:28:36 +0000 Manifest this update: Sat 26 Apr 2025 17:28:36 +0000 Manifest next update: Sat 03 May 2025 17:28:36 +0000 Files and hashes: 1: NHTJTDbo-aDToNIuHdoQjNNAqyg.crl (hash: a2TMIeG2tVl4Fm0Xm5Uo4I3dkmLsZyJSlvylfrQYq8A=) 2: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (hash: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=) 3: B3682FEC21D711EB9CFAC46EC4F9AE02.roa (hash: 77t9c6veUMOt4XPOFIwWe8FztnDBdg3DuRHonRmM4pA=) 4: A7BDC50C7A4811EBA907BB5BC4F9AE02.roa (hash: 0RWvLgLQMfYKcMt6aIpCTG3MXhhitrR5pPiP2zQ4NcY=) 5: B47C278021D711EB9CFAC46EC4F9AE02.roa (hash: kt6+dcMSnt8HtFoNHoxve7SwNMn6XsQ5fmhhFuEOZOM=) 6: 5E0253B6232111EB9896B783C4F9AE02.roa (hash: S7XAN9hoPkMQD1dwIo9UheEK0CbHpWptDyxJHPNt49g=) 7: 08CD1510027011EB98FEC44BC4F9AE02.roa (hash: KmlW5cxQJtlnajXFs7j5PHn6wJjQG7ZZKRzUGo5l5KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28 Validity Not Before: Apr 26 17:28:36 2025 GMT Not After : May 3 17:28:36 2025 GMT Subject: CN=680d17c4-337b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:53:e2:dd:53:a8:ef:5b:5b:5a:97:f2:c9:88: 80:e0:96:1e:41:c6:26:47:70:5e:1e:38:d4:4b:75: 9d:83:b4:f6:cf:3e:68:46:4d:54:be:37:50:31:65: 13:26:31:75:c5:14:30:a6:c9:b3:e2:48:f5:9d:dc: 77:d3:f8:d3:05:e9:2a:1c:56:fb:4d:e8:3d:26:8c: b4:3f:8d:68:18:ef:2c:31:63:f1:73:43:cc:90:12: f5:2a:45:c6:74:76:f0:66:a0:88:ec:e4:9c:fd:e6: 77:46:18:d8:41:5a:5a:bf:49:77:af:29:c4:64:38: a0:a2:de:50:87:09:a6:a6:14:61:b5:ee:0c:c1:d7: 20:e0:fb:34:be:58:84:cf:41:c9:c6:11:36:48:f0: 61:3b:d3:cb:3c:6d:77:45:de:98:13:95:3c:68:00: f8:87:19:81:cf:3f:c6:19:ff:b6:57:6b:2f:07:44: 52:3b:d7:4a:9e:33:41:90:87:d3:8a:a7:22:5b:d5: ba:c1:61:9b:39:b5:b3:42:1a:2c:78:31:ea:76:f2: a8:80:63:e1:7d:dd:82:41:13:eb:2f:ef:39:dd:ff: 10:d0:7f:80:37:1c:a3:30:70:68:f2:37:d6:bf:45: f3:7c:69:3c:8d:07:2a:83:bc:64:d3:c6:53:c0:32: ff:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9C:6C:62:9F:AF:39:FF:D2:C1:C7:26:77:BE:7E:A4:CF:28:96:F3 X509v3 Authority Key Identifier: keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ba:e6:dc:b6:22:70:49:b3:ad:fb:4c:cb:5f:29:5e:ea:ed: a4:3f:33:d3:e2:27:c3:be:a9:e2:70:19:f5:3d:ac:3c:50:17: fe:4a:80:1c:0a:96:ed:49:b5:01:8c:d2:63:9b:23:db:70:05: b9:ed:32:c1:cc:f4:fa:4c:bc:81:67:7a:25:af:91:b0:eb:be: fc:0f:db:a1:50:b7:67:52:0b:31:ba:fe:9c:67:a7:1f:f7:89: de:81:c5:29:d6:2d:b1:da:ab:9e:d9:4f:ce:de:12:f9:10:f9: 39:90:6c:be:2b:e8:ca:5c:1f:69:fc:3c:ed:91:70:34:1c:83: 0c:97:01:77:44:f3:a8:d3:a5:aa:44:96:6e:21:63:43:db:22: 74:fa:74:db:ac:4e:47:1f:3c:e6:f4:59:c0:03:bd:c6:54:07: 02:13:93:2e:af:d1:a4:ed:09:b6:2b:56:4b:35:87:97:0b:a7: 40:39:cd:4d:86:e5:6f:3b:67:5b:cd:9c:b6:5f:85:e3:fa:d3: f3:92:b2:ef:5b:74:73:70:d9:9c:4a:ed:72:15:79:43:ea:16: 3c:f3:d2:13:08:4f:2f:5a:9e:5b:53:e3:2a:0d:d0:6f:06:47: f6:87:b6:76:99:ac:db:05:1b:0c:73:ca:d4:89:2d:4c:8b:7f: eb:ee:2a:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD RDM0MEFCMjgwHhcNMjUwNDI2MTcyODM2WhcNMjUwNTAzMTcyODM2WjAYMRYwFAYD VQQDEw02ODBkMTdjNC0zMzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVPi3VOo71tbWpfyyYiA4JYeQcYmR3BeHjjUS3Wdg7T2zz5oRk1UvjdQMWUT JjF1xRQwpsmz4kj1ndx30/jTBekqHFb7Teg9Joy0P41oGO8sMWPxc0PMkBL1KkXG dHbwZqCI7OSc/eZ3RhjYQVpav0l3rynEZDigot5QhwmmphRhte4Mwdcg4Ps0vliE z0HJxhE2SPBhO9PLPG13Rd6YE5U8aAD4hxmBzz/GGf+2V2svB0RSO9dKnjNBkIfT iqciW9W6wWGbObWzQhoseDHqdvKogGPhfd2CQRPrL+853f8Q0H+ANxyjMHBo8jfW v0XzfGk8jQcqg7xk08ZTwDL/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBicbGKf rzn/0sHHJne+fqTPKJbzMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY5MC8xNUI0MUI4ODYzRjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1h RFRvTkl1SGRvUWpOTkFxeWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsuubctiJwSbOt+0zLXyle6u2kPzPT4ifDvqnicBn1Paw8UBf+SoAc CpbtSbUBjNJjmyPbcAW57TLBzPT6TLyBZ3olr5Gw6778D9uhULdnUgsxuv6cZ6cf 94negcUp1i2x2que2U/O3hL5EPk5kGy+K+jKXB9p/DztkXA0HIMMlwF3RPOo06Wq RJZuIWND2yJ0+nTbrE5HHzzm9FnAA73GVAcCE5Mur9Gk7Qm2K1ZLNYeXC6dAOc1N huVvO2dbzZy2X4Xj+tPzkrLvW3RzcNmcSu1yFXlD6hY889ITCE8vWp5bU+MqDdBv Bkf2h7Z2mazbBRsMc8rUiS1Mi3/r7ioY -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:50 2025 by rpki-client on console.sobornost.net