$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft File: Nzj_PFuvGRGC66FLeMhIpa76TKo.mft (raw, json) Hash identifier: VgBELfeRbLG3FJ9Ypx3y404HWAutoMt3/8G5ptbjnG0= Subject key identifier: 84:41:B8:C9:37:3D:18:66:76:1F:D4:B6:64:F1:B6:A7:CC:97:47:7C Authority key identifier: 37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA Certificate issuer: /CN=A9135F07/serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft Manifest number: 42 Signing time: Sun 27 Apr 2025 06:16:22 +0000 Manifest this update: Sun 27 Apr 2025 06:16:22 +0000 Manifest next update: Sun 04 May 2025 06:16:22 +0000 Files and hashes: 1: Nzj_PFuvGRGC66FLeMhIpa76TKo.crl (hash: hzfgPIfwzbzM68jt8UAav1cBQKfYsh/IZ+stShUpmS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F07, serialNumber=3738FF3C5BAF191182EBA14B78C848A5AEFA4CAA Validity Not Before: Apr 27 06:16:22 2025 GMT Not After : May 4 06:16:22 2025 GMT Subject: CN=680dcbb6-80ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:5f:5e:1d:08:ca:6d:92:78:8d:51:b6:6d: c2:5f:74:c3:33:c3:62:4d:26:18:9a:53:7e:a8:68: 00:7a:c3:9a:d2:49:63:2e:79:dd:33:3b:2b:35:3e: 34:d9:32:e0:8d:34:d4:12:31:3d:ae:4a:0c:18:77: 0e:35:5f:a0:bb:87:17:0e:9a:23:79:6b:de:0f:e8: c7:24:8b:06:62:1f:0c:81:e3:fc:66:f1:1f:07:9d: c8:a1:55:3a:f5:5b:ca:dd:cb:eb:9c:35:a6:f6:00: f0:38:8a:17:75:55:e4:4d:62:58:d0:53:39:3f:4a: 42:ea:18:f0:d7:a6:f1:e4:c0:7a:ce:be:e2:fc:d8: a4:fb:d8:77:74:83:2b:bd:3b:5f:c2:3b:c5:1b:e3: 97:ed:37:f3:b1:fe:3e:52:31:a7:10:56:e4:f8:98: 77:fd:4e:43:a0:84:93:35:82:bf:32:c6:0a:6d:6c: a5:24:f8:60:14:4b:4c:78:46:35:fc:24:9f:d0:e6: 0f:55:df:7c:86:b4:9e:4c:78:8b:59:a6:25:4f:5e: 24:64:75:04:9a:de:c5:96:82:c2:4f:d2:8b:b7:d0: 32:f0:a4:2e:a7:70:cf:4c:09:85:2e:93:37:4c:21: 88:c9:79:0a:60:53:4b:6a:3d:6e:33:6f:9c:2e:7e: 4e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:41:B8:C9:37:3D:18:66:76:1F:D4:B6:64:F1:B6:A7:CC:97:47:7C X509v3 Authority Key Identifier: keyid:37:38:FF:3C:5B:AF:19:11:82:EB:A1:4B:78:C8:48:A5:AE:FA:4C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nzj_PFuvGRGC66FLeMhIpa76TKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F07/3737A2BCC35A11EF8314C43FC4F9AE02/Nzj_PFuvGRGC66FLeMhIpa76TKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:75:9a:33:c6:e7:ed:28:b3:61:c6:4d:a1:85:f9:ef:9c:f1: df:02:64:a5:b7:90:b6:d6:c3:df:00:96:b0:fe:86:c6:d7:b4: 9c:79:34:6f:a5:6e:64:fe:d8:b1:c1:2c:bc:02:ec:2e:8c:38: bb:cf:23:c9:96:f4:46:ac:5d:71:f9:ad:ba:ab:31:40:25:d0: db:b3:e1:80:9f:e4:fa:21:2a:1a:67:d8:ff:03:0b:e2:14:1d: d7:d9:46:4a:26:59:35:e8:9e:5a:1e:ea:55:4b:94:e9:49:eb: d7:a2:01:e5:43:4b:db:70:03:2d:5e:e8:6c:bb:8f:30:22:47: 37:99:fa:55:ed:1f:a1:c2:3c:5c:88:09:0f:4d:e8:d5:e7:4a: 39:87:45:9a:f9:24:59:1e:82:0a:44:f6:2e:df:cb:ec:7a:9d: 93:1a:3c:e9:2a:4d:06:22:6a:c1:79:b7:de:d5:09:98:81:4b: de:e9:bd:f7:10:2a:c7:66:a2:5d:58:f6:3b:8e:0b:96:a4:2a: 72:18:f2:c9:fc:17:c7:cf:ba:ee:6f:c6:04:cf:66:d0:23:94: 95:24:aa:ed:ca:db:75:00:d2:6f:64:74:18:c0:ce:61:4a:58: 94:01:ed:0f:07:e7:c2:5a:e5:a3:48:b7:8e:c7:6b:50:f1:82: 4e:af:f8:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUYwNzExMC8GA1UEBRMoMzczOEZGM0M1QkFGMTkxMTgyRUJBMTRCNzhDODQ4QTVB RUZBNENBQTAeFw0yNTA0MjcwNjE2MjJaFw0yNTA1MDQwNjE2MjJaMBgxFjAUBgNV BAMTDTY4MGRjYmI2LTgwYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa4V9eHQjKbZJ4jVG2bcJfdMMzw2JNJhiaU36oaAB6w5rSSWMued0zOys1PjTZ MuCNNNQSMT2uSgwYdw41X6C7hxcOmiN5a94P6MckiwZiHwyB4/xm8R8HncihVTr1 W8rdy+ucNab2APA4ihd1VeRNYljQUzk/SkLqGPDXpvHkwHrOvuL82KT72Hd0gyu9 O1/CO8Ub45ftN/Ox/j5SMacQVuT4mHf9TkOghJM1gr8yxgptbKUk+GAUS0x4RjX8 JJ/Q5g9V33yGtJ5MeItZpiVPXiRkdQSa3sWWgsJP0ou30DLwpC6ncM9MCYUukzdM IYjJeQpgU0tqPW4zb5wufk5XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhEG4yTc9 GGZ2H9S2ZPG2p8yXR3wwHwYDVR0jBBgwFoAUNzj/PFuvGRGC66FLeMhIpa76TKow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RjA3LzM3MzdBMkJDQzM1 QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JHQzY2RkxlTWhJcGE3NlRL by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTnpqX1BGdXZHUkdDNjZGTGVNaElwYTc2VEtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1 RjA3LzM3MzdBMkJDQzM1QTExRUY4MzE0QzQzRkM0RjlBRTAyL056al9QRnV2R1JH QzY2RkxlTWhJcGE3NlRLby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHJ1mjPG5+0os2HGTaGF+e+c8d8CZKW3kLbWw98AlrD+hsbXtJx5NG+l bmT+2LHBLLwC7C6MOLvPI8mW9EasXXH5rbqrMUAl0Nuz4YCf5PohKhpn2P8DC+IU HdfZRkomWTXonloe6lVLlOlJ69eiAeVDS9twAy1e6Gy7jzAiRzeZ+lXtH6HCPFyI CQ9N6NXnSjmHRZr5JFkeggpE9i7fy+x6nZMaPOkqTQYiasF5t97VCZiBS97pvfcQ Ksdmol1Y9juOC5akKnIY8sn8F8fPuu5vxgTPZtAjlJUkqu3K23UA0m9kdBjAzmFK WJQB7Q8H58Ja5aNIt47Ha1Dxgk6v+MQ= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net