$ rpki-client -vvf rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft File: Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft (raw, json) Hash identifier: RbCrevdog6J6G8TwA/wCG2BwFTLPVnFcbb6nb/6UVek= Subject key identifier: 7D:90:A7:F8:57:BE:FC:CE:77:04:E0:C1:5A:0E:E7:02:60:CB:8C:4B Authority key identifier: 36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B Certificate issuer: /CN=A9146251/serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft Manifest number: 33 Signing time: Sun 27 Apr 2025 06:27:37 +0000 Manifest this update: Sun 27 Apr 2025 06:27:36 +0000 Manifest next update: Sun 04 May 2025 06:27:36 +0000 Files and hashes: 1: Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl (hash: baIkfjesze/w7m/Ks+gvckJ8Jv43qyTOOlAEwi8z4Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146251, serialNumber=360C7C7B5C6C69A9069D825BF1C70AF208DA337B Validity Not Before: Apr 27 06:27:36 2025 GMT Not After : May 4 06:27:36 2025 GMT Subject: CN=680dce58-b288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:29:54:f3:7d:9f:66:43:52:08:c0:4c:c8: 09:09:da:8e:15:06:37:c8:b0:5d:ac:80:9c:02:17: 68:8d:86:ea:b2:63:19:2f:91:14:3a:41:45:30:1a: ea:d7:e1:5d:0b:88:aa:6c:ad:54:77:8f:59:cf:10: 14:db:10:04:c1:c2:84:f3:6b:74:69:01:85:13:86: 77:c4:f4:b6:e4:85:2d:ec:3b:7b:34:8e:1c:41:8e: 00:a2:71:70:1b:64:d4:55:a0:5b:d7:63:7a:2b:a3: a6:c5:97:53:87:e8:a0:4e:ef:a2:47:e2:3f:5a:1f: b7:cb:40:23:50:3e:4d:b2:90:92:dd:a1:82:1a:6b: e0:ba:ff:83:a7:97:91:33:f4:27:99:9e:f1:ec:2b: a9:bd:1e:29:41:55:6a:9e:6d:af:42:d7:64:33:10: 14:89:54:86:6f:f8:12:6c:f8:97:e2:4a:24:56:8a: c9:ee:a6:8c:7c:7f:24:7f:78:41:6b:b5:e0:44:47: 4d:37:4a:52:d2:35:04:d4:56:54:90:d3:7c:a5:55: 1e:91:6d:7c:60:a8:c7:29:87:5c:e7:4c:78:7b:45: d0:56:af:9e:e3:ad:1b:7f:f8:b4:0a:26:be:ab:2f: e1:87:3a:5f:f2:98:a3:d7:00:d9:ec:3f:35:4c:90: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:90:A7:F8:57:BE:FC:CE:77:04:E0:C1:5A:0E:E7:02:60:CB:8C:4B X509v3 Authority Key Identifier: keyid:36:0C:7C:7B:5C:6C:69:A9:06:9D:82:5B:F1:C7:0A:F2:08:DA:33:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ngx8e1xsaakGnYJb8ccK8gjaM3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146251/0B16EAA4D87111EF98C26075C4F9AE02/Ngx8e1xsaakGnYJb8ccK8gjaM3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f7:9a:7f:48:a9:a8:c6:95:e8:f6:9a:bf:3d:47:e7:22:a4: 68:a6:33:7c:a6:df:2c:8e:d8:aa:32:78:a2:25:55:b5:ea:42: 37:bb:e5:e6:97:1a:81:2b:02:20:71:71:55:eb:e0:41:34:b0: a8:99:f7:4a:a6:00:2f:5d:c8:35:52:29:60:08:51:80:d4:ec: bd:c6:58:08:f3:c2:3a:9c:98:75:70:60:1b:78:90:bd:31:53: 55:33:69:59:ea:a9:90:fe:0c:bd:7f:92:13:c9:1c:7c:46:1e: cc:b0:c6:6a:7c:f0:50:f3:9d:02:34:d6:e8:7d:d9:c9:89:e6: c6:1c:4f:92:63:08:d3:90:cb:b4:3f:a5:e2:b8:8c:d8:ca:18: c9:d4:34:48:de:47:0e:29:8f:ee:d5:37:c6:1d:18:36:ff:d3: d6:0a:fb:44:74:d6:05:09:70:86:b8:6e:23:5f:84:be:23:79: a6:79:e5:3f:3b:16:fb:6c:43:e9:96:fe:24:93:2c:06:9e:0f: 5d:38:88:88:dc:f2:2e:3e:43:1e:b7:ec:b5:bc:9b:0c:a3:23: 2f:3d:49:52:7a:f1:af:81:4d:45:78:b6:8a:a6:3f:81:c2:53: 75:5b:75:93:8f:cb:db:9d:9e:dd:f0:09:7b:f9:32:aa:2a:3a: ce:be:ba:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NjI1MTExMC8GA1UEBRMoMzYwQzdDN0I1QzZDNjlBOTA2OUQ4MjVCRjFDNzBBRjIw OERBMzM3QjAeFw0yNTA0MjcwNjI3MzZaFw0yNTA1MDQwNjI3MzZaMBgxFjAUBgNV BAMTDTY4MGRjZTU4LWIyODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDecClU832fZkNSCMBMyAkJ2o4VBjfIsF2sgJwCF2iNhuqyYxkvkRQ6QUUwGurX 4V0LiKpsrVR3j1nPEBTbEATBwoTza3RpAYUThnfE9LbkhS3sO3s0jhxBjgCicXAb ZNRVoFvXY3oro6bFl1OH6KBO76JH4j9aH7fLQCNQPk2ykJLdoYIaa+C6/4Onl5Ez 9CeZnvHsK6m9HilBVWqeba9C12QzEBSJVIZv+BJs+JfiSiRWisnupox8fyR/eEFr teBER003SlLSNQTUVlSQ03ylVR6RbXxgqMcph1znTHh7RdBWr57jrRt/+LQKJr6r L+GHOl/ymKPXANnsPzVMkGfLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfZCn+Fe+ /M53BODBWg7nAmDLjEswHwYDVR0jBBgwFoAUNgx8e1xsaakGnYJb8ccK8gjaM3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2MjUxLzBCMTZFQUE0RDg3 MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFrR25ZSmI4Y2NLOGdqYU0z cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvTmd4OGUxeHNhYWtHbllKYjhjY0s4Z2phTTNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 MjUxLzBCMTZFQUE0RDg3MTExRUY5OEMyNjA3NUM0RjlBRTAyL05neDhlMXhzYWFr R25ZSmI4Y2NLOGdqYU0zcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB33mn9IqajGlej2mr89R+cipGimM3ym3yyO2KoyeKIlVbXqQje75eaX GoErAiBxcVXr4EE0sKiZ90qmAC9dyDVSKWAIUYDU7L3GWAjzwjqcmHVwYBt4kL0x U1UzaVnqqZD+DL1/khPJHHxGHsywxmp88FDznQI01uh92cmJ5sYcT5JjCNOQy7Q/ peK4jNjKGMnUNEjeRw4pj+7VN8YdGDb/09YK+0R01gUJcIa4biNfhL4jeaZ55T87 FvtsQ+mW/iSTLAaeD104iIjc8i4+Qx637LW8mwyjIy89SVJ68a+BTUV4toqmP4HC U3VbdZOPy9udnt3wCXv5MqoqOs6+uls= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net