$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft File: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft (raw, json) Hash identifier: 1SRrXYpvFl3PGeC0GCPcsV+xLd2PX9gn/J+0Govff2s= Subject key identifier: B8:FA:C5:6B:BB:A0:3C:86:68:08:8D:B6:3E:AD:CA:7A:7B:3C:26:7E Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Certificate serial: 0C6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft Manifest number: 0C0B Signing time: Sat 26 Apr 2025 18:45:22 +0000 Manifest this update: Sat 26 Apr 2025 18:45:22 +0000 Manifest next update: Sat 03 May 2025 18:45:22 +0000 Files and hashes: 1: NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl (hash: fBmDj7Y2tK/q1vmsymFT/rn7AZpuK/4/7tLA/4ZONVY=) 2: D45F1712A8B311EFADA46649C4F9AE02.roa (hash: WVkxMnAPmYEx2pir9yJBj6S9Ri2HeWB84QrUcGBIgX0=) 3: 0592D90E02E111F0BFF53A15C4F9AE02.roa (hash: JKDdsewbmTds8DX8z5n44dixpiguXnj1mkHopckNnnI=) 4: 2F3FBD86F3E511EA871E451AC4F9AE02.roa (hash: yVyxrQ/XexxsyDCtzcGEooxv2C0cJKVEzNUoJUfFCpg=) 5: 30C3D4F81D8A11EA8ECDAA75C4F9AE02.roa (hash: mpanMW6E++IIJhwRfBokQkjYWR4BXeWQNkL+zlkPQk0=) 6: 31554CBC1D8A11EA8ECDAA75C4F9AE02.roa (hash: uM9esMnbJemVTDXSBi0eBdZiTFnt+Mq64Yuw7Vo5ff8=) 7: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (hash: EXrq9SaZzH6ZvSPXc9dAkv/CRi57VwFICygbDK3FbAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 18:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3180 (0xc6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88 Validity Not Before: Apr 26 18:45:22 2025 GMT Not After : May 3 18:45:22 2025 GMT Subject: CN=680d29c2-405a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:5d:f2:5a:28:0d:da:34:95:a5:2c:40:3e: b8:0c:73:6d:4a:76:10:14:84:2e:f1:3a:50:5e:8f: 87:7d:a7:f1:ea:d3:fd:dd:71:d5:64:15:0b:f3:03: 9c:d2:54:f6:75:33:4d:10:70:01:d0:d9:f6:77:4f: 21:b8:c9:89:36:aa:bb:5b:95:c2:85:65:37:85:d7: 37:dc:35:f6:cb:52:a0:8c:21:b0:76:06:d2:57:14: 71:8d:04:b8:92:a4:95:82:a5:28:10:1a:fa:f9:b6: 3d:dc:22:c0:02:be:fb:16:9e:0b:bd:0b:92:ca:ea: 68:7c:92:11:53:74:eb:df:93:08:82:fe:27:c9:a9: 28:28:18:0e:89:b8:97:fc:be:0a:da:d4:07:e9:a7: de:e3:a6:4e:a5:d1:92:78:f0:06:7c:c6:91:b1:16: 50:56:66:30:5c:39:59:23:72:0c:58:41:ad:a4:43: 7d:2a:0b:fa:96:da:a4:b1:9c:09:bb:33:8b:74:80: 5d:d3:a1:a3:ef:e0:db:7d:36:c2:47:c9:d6:74:57: 1a:6c:ad:e5:b9:2c:cd:31:11:fb:e6:da:43:76:1f: 5c:4e:b4:7f:1e:d7:cd:bc:31:d8:89:d6:15:65:f2: 5f:90:15:40:27:cc:cf:5a:38:65:45:d4:c5:b0:99: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FA:C5:6B:BB:A0:3C:86:68:08:8D:B6:3E:AD:CA:7A:7B:3C:26:7E X509v3 Authority Key Identifier: keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:85:34:ba:82:26:2a:ea:80:8c:4a:36:39:a2:0f:dc:c8:82: 89:02:8c:81:e6:38:cd:cd:a9:d2:e9:81:40:dd:7f:4d:3c:c5: 40:4b:6d:2c:96:0a:43:e3:7a:9b:fa:0e:ba:8b:80:0d:52:2c: 6c:d4:b1:2b:3c:0f:93:fa:82:b6:bc:bc:94:1f:61:e6:03:d4: d3:42:0c:6a:03:3d:96:1d:0c:52:3c:d2:37:28:8f:0e:3c:1b: 9a:e8:87:64:58:1c:e5:82:fe:6e:fb:db:fc:e5:fa:70:74:d4: 7a:b1:a6:b6:fa:53:1b:65:c7:d0:9e:5d:a7:88:f7:e4:bc:1e: f5:8b:6c:7b:f5:d7:68:e3:42:e0:f6:bd:95:df:19:95:b6:38: 6c:31:50:b6:a3:83:44:16:a8:7d:d2:46:54:d2:b2:ca:a8:13: f0:d8:6f:20:fa:20:ac:0b:46:d9:27:27:80:99:3c:c2:e2:06: d6:18:04:d6:81:28:77:2c:bf:52:d7:a5:8d:11:d3:c8:d5:40: 06:0f:6a:9d:23:6e:e5:5e:9e:bb:ec:86:fd:d7:0e:14:b7:c0: 05:44:43:f5:7a:d9:46:52:0e:d7:25:de:eb:d8:4d:6e:b7:bf: 0d:52:14:e3:ac:2c:a7:7c:0f:28:38:89:19:73:69:25:58:95: f3:0c:e4:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMDgxMTAvBgNVBAUTKDM0REMyMDEyOUVBRDZGNDFBN0NBMkQ5OUM5QkQzRTdF NjAzM0NCODgwHhcNMjUwNDI2MTg0NTIyWhcNMjUwNTAzMTg0NTIyWjAYMRYwFAYD VQQDEw02ODBkMjljMi00MDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAFd8looDdo0laUsQD64DHNtSnYQFIQu8TpQXo+Hfafx6tP93XHVZBUL8wOc 0lT2dTNNEHAB0Nn2d08huMmJNqq7W5XChWU3hdc33DX2y1KgjCGwdgbSVxRxjQS4 kqSVgqUoEBr6+bY93CLAAr77Fp4LvQuSyupofJIRU3Tr35MIgv4nyakoKBgOibiX /L4K2tQH6afe46ZOpdGSePAGfMaRsRZQVmYwXDlZI3IMWEGtpEN9Kgv6ltqksZwJ uzOLdIBd06Gj7+DbfTbCR8nWdFcabK3luSzNMRH75tpDdh9cTrR/HtfNvDHYidYV ZfJfkBVAJ8zPWjhlRdTFsJmFwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj6xWu7 oDyGaAiNtj6tynp7PCZ+MB8GA1UdIwQYMBaAFDTcIBKerW9Bp8otmcm9Pn5gM8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQwOC9GOUMzMzM5MjFE ODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIwR255aTJaeWIwLWZtQXp5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05Od2dFcDZ0YjBHbnlpMlp5YjAtZm1Benk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQwOC9GOUMzMzM5MjFEODcxMUVBQTlDNUIxNzBDNEY5QUUwMi9OTndnRXA2dGIw R255aTJaeWIwLWZtQXp5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuhTS6giYq6oCMSjY5og/cyIKJAoyB5jjNzanS6YFA3X9NPMVAS20s lgpD43qb+g66i4ANUixs1LErPA+T+oK2vLyUH2HmA9TTQgxqAz2WHQxSPNI3KI8O PBua6IdkWBzlgv5u+9v85fpwdNR6saa2+lMbZcfQnl2niPfkvB71i2x79ddo40Lg 9r2V3xmVtjhsMVC2o4NEFqh90kZU0rLKqBPw2G8g+iCsC0bZJyeAmTzC4gbWGATW gSh3LL9S16WNEdPI1UAGD2qdI27lXp677Ib91w4Ut8AFREP1etlGUg7XJd7r2E1u t78NUhTjrCynfA8oOIkZc2klWJXzDOTz -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:52 2025 by rpki-client on console.sobornost.net