$ rpki-client -vvf rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft File: NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft (raw, json) Hash identifier: Ct9Z6leXUdLRfvsN+HLD21tRAtGU3WDhPsQEkOxJA50= Subject key identifier: 74:3D:DE:4A:6C:B3:08:51:9A:51:74:4F:21:55:A5:8A:8E:43:60:68 Authority key identifier: 34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 Certificate issuer: /CN=A9153646/serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft Manifest number: 0C7D Signing time: Mon 28 Apr 2025 18:34:46 +0000 Manifest this update: Mon 28 Apr 2025 18:34:46 +0000 Manifest next update: Mon 05 May 2025 18:34:46 +0000 Files and hashes: 1: NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl (hash: oYKKxTW3RgOgeyeMFBIZUpca2IuBvJt1kYg0AG7h+sk=) 2: 0C77B118353C11EFB0FA2527C4F9AE02.roa (hash: DUbgXXzqpapSxP1SYmetX0pcnJaOWrBmkI9YsNCICSA=) 3: 6C061360105911F08BC6692CC4F9AE02.roa (hash: fxnKQH+hbVYix2vpYNlA4ryJmehEVWmxPALPrY6fkNI=) 4: 9E1A4B86526511EE869BEC82C4F9AE02.roa (hash: lOrA6k7sYmhjZNB1ZlbvSFLY4z9Dna+Fs7CLS+wxvaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153646, serialNumber=3492EFFE9622B1FFF881597003763C1BA24A1E06 Validity Not Before: Apr 28 18:34:46 2025 GMT Not After : May 5 18:34:46 2025 GMT Subject: CN=680fca46-40d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9c:b3:47:a3:69:89:5d:07:9b:11:8d:07:94: 93:4f:4e:14:94:2d:19:43:a0:63:b1:2b:7c:50:f7: 40:b1:fe:03:b3:7f:9e:36:00:57:4b:58:5f:53:c2: 11:1a:e1:82:4f:2d:a2:72:35:5b:56:52:97:52:27: fa:dc:e9:fe:b9:88:2b:90:06:13:0f:e2:8c:82:b7: 4b:9b:13:10:70:68:b4:3c:39:8c:67:65:50:65:33: 09:67:13:7d:02:79:e7:94:bf:8f:de:1a:c6:2b:eb: a0:e2:b7:9b:5f:5a:c0:ae:8d:77:c1:dc:d5:40:cf: 26:ba:6d:bc:4f:3c:c5:48:c0:e1:83:0f:71:8a:f9: 12:0d:24:f0:88:23:f5:04:81:1f:ee:1e:7a:7a:03: f5:f6:34:78:84:bf:41:e9:68:a6:f8:1d:7e:64:62: 15:60:f3:4d:b0:79:74:a8:3e:75:10:54:7b:0a:39: d3:4f:50:28:c4:a6:55:65:9c:19:c5:c5:2a:73:16: 72:de:41:25:a9:16:69:cf:a7:1b:57:48:34:02:79: b8:3f:8a:74:19:20:1f:55:82:cd:bb:38:03:89:d8: bb:37:9d:fe:e5:ed:65:e6:d5:3c:a4:fb:c7:d3:c9: 17:d2:6e:98:92:63:87:56:e7:99:49:fb:2f:b8:f0: 6c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3D:DE:4A:6C:B3:08:51:9A:51:74:4F:21:55:A5:8A:8E:43:60:68 X509v3 Authority Key Identifier: keyid:34:92:EF:FE:96:22:B1:FF:F8:81:59:70:03:76:3C:1B:A2:4A:1E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NJLv_pYisf_4gVlwA3Y8G6JKHgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153646/6B8EFA5AFF9811E987C80A6AC4F9AE02/NJLv_pYisf_4gVlwA3Y8G6JKHgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:12:24:3b:f2:e3:65:0a:3f:2b:5a:e9:26:b5:3d:a1:fd:61: 6b:20:3e:88:16:f5:e6:c3:e6:b3:04:33:b8:ff:42:5b:33:61: ec:35:54:b9:05:8e:c1:09:65:c1:e5:b1:87:9c:e8:17:91:dc: 19:e5:2c:3b:1f:72:33:7e:92:f2:84:b8:0b:10:8a:f6:f2:74: 45:f9:61:ad:10:d9:3e:c9:eb:01:dc:34:8e:62:13:42:fe:fd: fe:cb:ee:cd:c6:9d:81:60:bb:68:a5:21:07:46:f4:d7:e0:f3: 3b:29:82:f2:00:a6:57:12:56:07:0f:58:bf:fb:6a:67:34:f4: 04:7f:4f:9d:92:e2:0f:40:9a:01:36:44:b3:8a:20:e0:98:ba: 96:db:99:ae:23:6b:8f:8e:ea:39:0c:5b:09:2d:75:9e:5d:e8: b4:19:b3:52:ba:b2:20:6c:01:8a:48:1d:ec:78:6f:28:53:05: 23:bd:a8:9e:45:41:46:65:fb:73:85:19:ea:2e:8a:f0:94:49: 0c:4b:ca:9a:e9:3f:a3:7d:4e:8b:fa:52:4e:a9:ad:dc:c9:e1: 3d:f0:25:6d:3f:c1:8c:30:09:4b:79:04:f3:15:69:c5:ec:7e: 9d:58:e8:43:7e:f1:a5:b3:d4:67:b2:fc:7a:2c:55:61:3a:3b: 1c:cf:c4:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM2NDYxMTAvBgNVBAUTKDM0OTJFRkZFOTYyMkIxRkZGODgxNTk3MDAzNzYzQzFC QTI0QTFFMDYwHhcNMjUwNDI4MTgzNDQ2WhcNMjUwNTA1MTgzNDQ2WjAYMRYwFAYD VQQDEw02ODBmY2E0Ni00MGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25yzR6NpiV0HmxGNB5STT04UlC0ZQ6BjsSt8UPdAsf4Ds3+eNgBXS1hfU8IR GuGCTy2icjVbVlKXUif63On+uYgrkAYTD+KMgrdLmxMQcGi0PDmMZ2VQZTMJZxN9 AnnnlL+P3hrGK+ug4rebX1rAro13wdzVQM8mum28TzzFSMDhgw9xivkSDSTwiCP1 BIEf7h56egP19jR4hL9B6Wim+B1+ZGIVYPNNsHl0qD51EFR7CjnTT1AoxKZVZZwZ xcUqcxZy3kElqRZpz6cbV0g0Anm4P4p0GSAfVYLNuzgDidi7N53+5e1l5tU8pPvH 08kX0m6YkmOHVueZSfsvuPBsiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQ93kps swhRmlF0TyFVpYqOQ2BoMB8GA1UdIwQYMBaAFDSS7/6WIrH/+IFZcAN2PBuiSh4G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzY0Ni82QjhFRkE1QUZG OTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNmXzRnVmx3QTNZOEc2SktI Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05KTHZfcFlpc2ZfNGdWbHdBM1k4RzZKS0hnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzY0Ni82QjhFRkE1QUZGOTgxMUU5ODdDODBBNkFDNEY5QUUwMi9OSkx2X3BZaXNm XzRnVmx3QTNZOEc2SktIZ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsEiQ78uNlCj8rWukmtT2h/WFrID6IFvXmw+azBDO4/0JbM2HsNVS5 BY7BCWXB5bGHnOgXkdwZ5Sw7H3IzfpLyhLgLEIr28nRF+WGtENk+yesB3DSOYhNC /v3+y+7Nxp2BYLtopSEHRvTX4PM7KYLyAKZXElYHD1i/+2pnNPQEf0+dkuIPQJoB NkSziiDgmLqW25muI2uPjuo5DFsJLXWeXei0GbNSurIgbAGKSB3seG8oUwUjvaie RUFGZftzhRnqLorwlEkMS8qa6T+jfU6L+lJOqa3cyeE98CVtP8GMMAlLeQTzFWnF 7H6dWOhDfvGls9Rnsvx6LFVhOjscz8TS -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:34 2025 by rpki-client on console.sobornost.net