$ rpki-client -vvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft File: NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json) Hash identifier: B2EPGc2IphdvFKBFs1zSoayixTJFzpZENiZAag74kY8= Subject key identifier: 9E:7D:95:31:03:06:6E:CD:1F:85:DF:6B:C7:DC:90:7A:DA:AA:30:EB Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB Certificate issuer: /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB Certificate serial: 0AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft Manifest number: 0AA7 Signing time: Mon 28 Apr 2025 19:52:45 +0000 Manifest this update: Mon 28 Apr 2025 19:52:45 +0000 Manifest next update: Mon 05 May 2025 19:52:45 +0000 Files and hashes: 1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: d42Kv6TKpMSOgeBTEBTd9YAhuHriazzV7XOLrhixUUc=) 2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: mXaDebpxI+8jgolliV5kV+yxtxKp5QcapX21gE2juPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:52:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2733 (0xaad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB Validity Not Before: Apr 28 19:52:45 2025 GMT Not After : May 5 19:52:45 2025 GMT Subject: CN=680fdc8d-40bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:17:a8:aa:79:a8:f6:1a:b4:97:33:3a:35: 36:70:ff:76:31:99:32:45:80:a7:e8:0d:fb:c1:63: 9e:48:f6:6d:92:90:f4:0a:c0:f8:c5:62:bd:98:ed: 1a:fe:ee:60:e4:0a:e2:d2:82:42:22:f4:32:44:ac: 87:34:51:f3:c4:17:19:10:e8:c7:de:59:b8:25:6b: 3c:12:13:04:29:91:10:56:72:c3:f1:49:05:13:71: 8c:e5:03:dd:24:a4:ee:6a:0e:d1:9d:fd:76:83:00: 1b:aa:57:1a:71:07:01:1a:b5:a2:18:41:5a:a0:4f: 4a:5d:ec:96:69:02:8d:6e:01:b5:49:d3:07:fe:1a: cc:b2:d5:c9:ae:56:f4:5d:8d:d4:d7:15:55:d9:5b: 4b:ae:87:45:8d:be:35:47:f2:b1:cf:b8:1f:9b:f2: 6c:e1:c9:16:3f:b6:5a:12:4e:ec:92:04:fd:b6:ba: eb:45:3a:ee:d7:46:bb:e5:32:cf:a7:8c:48:d5:cc: 9e:75:3c:9e:b0:07:d5:1e:95:cb:64:d4:e7:41:62: 93:10:0c:ce:c8:61:d8:42:ff:65:95:7b:6c:4e:09: d2:46:1c:b8:b5:ec:e2:03:55:1d:30:45:f7:b4:dd: 0d:da:df:ce:11:ce:87:83:ef:6d:31:0e:b3:a2:d8: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7D:95:31:03:06:6E:CD:1F:85:DF:6B:C7:DC:90:7A:DA:AA:30:EB X509v3 Authority Key Identifier: keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:7c:65:a7:74:d7:90:48:ca:9f:ca:e0:fe:8f:fe:6c:9c:d3: 6f:36:b6:02:c9:90:a5:35:75:0f:8c:fe:45:ca:80:90:58:47: 08:7c:74:4e:5b:58:f4:51:92:3b:06:58:99:b8:02:47:49:91: a6:7c:e2:64:de:f3:bb:f5:97:6d:80:82:95:67:e8:a2:bc:c4: c0:1d:3a:dd:03:74:12:31:a9:cd:04:a3:a2:b4:2d:ca:e2:71: 1a:a9:d8:12:49:23:75:1b:20:b5:63:b8:f5:15:bb:e9:88:3f: 4f:ee:26:e2:54:39:62:f3:da:38:78:89:bd:ff:e5:c2:4a:1f: a3:f8:fc:0f:c5:9d:45:d9:74:59:03:1f:05:c1:c4:4e:d8:f5: 53:e4:54:cd:db:4e:3a:1e:be:2b:78:61:3b:a1:fc:17:95:95: 29:86:0c:de:11:b9:a7:9b:86:b1:4b:de:46:10:b3:38:26:a1: 1c:d0:cd:5b:4c:20:96:d9:fe:7f:21:a6:f9:c3:87:6c:dd:38: a3:a1:a8:27:c9:fe:14:9c:b0:e5:03:51:13:4d:ff:0a:d5:c2: 90:65:76:ec:15:1f:a2:7d:f9:04:cf:2b:bc:39:40:d5:d7:af: 3e:8c:e3:96:ff:32:82:0d:e8:c5:ea:4c:38:c6:09:8b:90:5f: bb:d3:eb:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy ODcyMDczQkIwHhcNMjUwNDI4MTk1MjQ1WhcNMjUwNTA1MTk1MjQ1WjAYMRYwFAYD VQQDEw02ODBmZGM4ZC00MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvh4XqKp5qPYatJczOjU2cP92MZkyRYCn6A37wWOeSPZtkpD0CsD4xWK9mO0a /u5g5Ari0oJCIvQyRKyHNFHzxBcZEOjH3lm4JWs8EhMEKZEQVnLD8UkFE3GM5QPd JKTuag7Rnf12gwAbqlcacQcBGrWiGEFaoE9KXeyWaQKNbgG1SdMH/hrMstXJrlb0 XY3U1xVV2VtLrodFjb41R/Kxz7gfm/Js4ckWP7ZaEk7skgT9trrrRTru10a75TLP p4xI1cyedTyesAfVHpXLZNTnQWKTEAzOyGHYQv9llXtsTgnSRhy4teziA1UdMEX3 tN0N2t/OEc6Hg+9tMQ6zotif+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ59lTED Bm7NH4Xfa8fckHraqjDrMB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs bGh0NV9oSkdsQmNvY2djN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrfGWndNeQSMqfyuD+j/5snNNvNrYCyZClNXUPjP5FyoCQWEcIfHRO W1j0UZI7BliZuAJHSZGmfOJk3vO79ZdtgIKVZ+iivMTAHTrdA3QSManNBKOitC3K 4nEaqdgSSSN1GyC1Y7j1FbvpiD9P7ibiVDli89o4eIm9/+XCSh+j+PwPxZ1F2XRZ Ax8FwcRO2PVT5FTN2046Hr4reGE7ofwXlZUphgzeEbmnm4axS95GELM4JqEc0M1b TCCW2f5/Iab5w4ds3Tijoagnyf4UnLDlA1ETTf8K1cKQZXbsFR+iffkEzyu8OUDV 168+jOOW/zKCDejF6kw4xgmLkF+70+v5 -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:04 2025 by rpki-client on console.sobornost.net