$ rpki-client -vvf rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft File: NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft (raw, json) Hash identifier: vhGSSaXG7ScyFTh06KxqN8MyTl9MQTQcexN4ENjthI8= Subject key identifier: 4D:28:15:86:E4:7C:3F:7D:64:EF:E3:08:49:F7:01:A1:26:B4:92:BF Authority key identifier: 34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 Certificate issuer: /CN=A9148DB2/serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft Manifest number: 02A2 Signing time: Sun 27 Apr 2025 01:09:59 +0000 Manifest this update: Sun 27 Apr 2025 01:09:59 +0000 Manifest next update: Sun 04 May 2025 01:09:59 +0000 Files and hashes: 1: NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl (hash: xJfWXqTeAedpJnrMMytLiX8LxnKGeijobcn6MXXYeWg=) 2: F343C4ECF93911ECBD1E663DC4F9AE02.roa (hash: k5i1VxrRa6a+sKSG0LLgxBEmMPYmBZK6pl0sMM04Q2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:09:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148DB2, serialNumber=34ABEF846474BBDA0C556465DD7E9EC0FA674BB5 Validity Not Before: Apr 27 01:09:59 2025 GMT Not After : May 4 01:09:59 2025 GMT Subject: CN=680d83e7-1c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:95:4a:04:df:5d:f8:84:e0:c9:3c:2f:c1: 53:ca:a1:b0:8c:aa:b0:ca:e4:9a:7a:e8:db:d3:65: ee:af:64:ce:b4:f3:a6:b6:4d:c1:78:27:8c:7e:3a: 02:a4:87:93:2d:07:29:ee:93:36:a6:bd:a0:2d:20: 33:4f:a5:32:73:f2:5f:19:0a:b5:5b:d7:11:28:d1: 5c:d8:41:3d:9a:67:41:68:45:11:8d:ad:d6:19:69: 44:bb:a9:ba:e2:c4:52:f3:87:f7:16:71:a3:90:51: 9a:1d:21:76:d1:d8:d6:dc:04:d6:27:21:9a:42:d5: 1e:3c:0b:83:fb:f9:e6:00:78:01:54:83:70:46:1d: 14:5e:61:27:ad:83:04:1a:4e:45:09:b6:a2:ca:fb: 0c:c2:b9:d5:94:9f:d0:69:b2:12:64:07:d1:39:7a: 92:00:be:a9:df:6b:e4:ed:96:8c:23:3a:2e:b9:aa: ec:f1:70:74:3c:03:14:0e:7d:fb:9d:62:27:46:f8: 12:fd:9a:a0:15:a7:f5:2d:37:3d:e6:04:70:a1:90: fd:89:f6:ca:cc:41:04:a8:41:b8:2d:e3:cf:4c:fa: ba:ad:5c:57:a1:3b:a0:23:af:e4:00:02:74:4f:f7: 3d:cf:64:2d:fa:33:b1:55:34:e6:ea:5c:3a:12:76: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:28:15:86:E4:7C:3F:7D:64:EF:E3:08:49:F7:01:A1:26:B4:92:BF X509v3 Authority Key Identifier: keyid:34:AB:EF:84:64:74:BB:DA:0C:55:64:65:DD:7E:9E:C0:FA:67:4B:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKvvhGR0u9oMVWRl3X6ewPpnS7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148DB2/047DC388F93611EC921B810EC4F9AE02/NKvvhGR0u9oMVWRl3X6ewPpnS7U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:22:56:c9:13:56:98:9f:fc:27:37:b2:f8:5f:13:15:38:86: d2:f0:93:ba:f9:a0:d7:0e:79:97:2a:7b:13:31:da:26:39:cc: 25:58:b1:68:54:6f:2f:42:44:7c:92:5f:81:3f:88:3e:2f:98: 52:a5:64:de:4a:63:3a:8f:06:64:fb:61:26:20:8c:b3:72:f1: df:f9:64:f4:49:cc:03:7b:b8:cf:90:2e:06:43:56:ac:13:5a: 73:bb:05:54:a3:76:ed:a9:5d:bd:8b:db:89:cf:64:0f:95:85: 89:25:bb:65:50:14:fb:09:87:0d:be:d6:7d:c3:4f:b0:74:1d: cc:79:2a:cd:c0:57:32:f0:c8:dc:43:e1:56:d8:ad:23:62:b0: 8c:9e:77:ad:4e:e1:6b:1e:e2:f9:4f:81:b1:b2:58:88:24:08: 0d:7d:d2:5c:14:30:6d:93:11:72:30:39:38:a5:11:31:7d:03: 14:27:e3:09:11:cd:ac:b1:2c:6b:da:e8:c5:f5:7c:ac:91:08: 0b:7d:9c:58:80:ce:c1:f6:ac:8c:d3:0d:48:75:44:1b:1a:f5: f3:e6:ca:af:79:c3:fa:db:d9:ae:f8:26:be:59:cd:c9:76:29: cb:71:1a:b0:ff:60:3c:23:94:59:c2:bb:1a:8d:09:20:fd:cc: 91:bf:2d:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhEQjIxMTAvBgNVBAUTKDM0QUJFRjg0NjQ3NEJCREEwQzU1NjQ2NUREN0U5RUMw RkE2NzRCQjUwHhcNMjUwNDI3MDEwOTU5WhcNMjUwNTA0MDEwOTU5WjAYMRYwFAYD VQQDEw02ODBkODNlNy0xYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusCVSgTfXfiE4Mk8L8FTyqGwjKqwyuSaeujb02Xur2TOtPOmtk3BeCeMfjoC pIeTLQcp7pM2pr2gLSAzT6Uyc/JfGQq1W9cRKNFc2EE9mmdBaEURja3WGWlEu6m6 4sRS84f3FnGjkFGaHSF20djW3ATWJyGaQtUePAuD+/nmAHgBVINwRh0UXmEnrYME Gk5FCbaiyvsMwrnVlJ/QabISZAfROXqSAL6p32vk7ZaMIzouuars8XB0PAMUDn37 nWInRvgS/ZqgFaf1LTc95gRwoZD9ifbKzEEEqEG4LePPTPq6rVxXoTugI6/kAAJ0 T/c9z2Qt+jOxVTTm6lw6EnYGlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0oFYbk fD99ZO/jCEn3AaEmtJK/MB8GA1UdIwQYMBaAFDSr74RkdLvaDFVkZd1+nsD6Z0u1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OERCMi8wNDdEQzM4OEY5 MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5b01WV1JsM1g2ZXdQcG5T N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LdnZoR1IwdTlvTVZXUmwzWDZld1BwblM3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OERCMi8wNDdEQzM4OEY5MzYxMUVDOTIxQjgxMEVDNEY5QUUwMi9OS3Z2aEdSMHU5 b01WV1JsM1g2ZXdQcG5TN1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApIlbJE1aYn/wnN7L4XxMVOIbS8JO6+aDXDnmXKnsTMdomOcwlWLFo VG8vQkR8kl+BP4g+L5hSpWTeSmM6jwZk+2EmIIyzcvHf+WT0ScwDe7jPkC4GQ1as E1pzuwVUo3btqV29i9uJz2QPlYWJJbtlUBT7CYcNvtZ9w0+wdB3MeSrNwFcy8Mjc Q+FW2K0jYrCMnnetTuFrHuL5T4GxsliIJAgNfdJcFDBtkxFyMDk4pRExfQMUJ+MJ Ec2ssSxr2ujF9XyskQgLfZxYgM7B9qyM0w1IdUQbGvXz5sqvecP629mu+Ca+Wc3J dinLcRqw/2A8I5RZwrsajQkg/cyRvy1q -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:40 2025 by rpki-client on console.sobornost.net