$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft File: nUVn--JSxmFkKqM-eASKhxf6fLM.mft (raw, json) Hash identifier: hKdNd/OvuA048tMvm4PJJGnNV6jVryvYOtVSbE2ZAD0= Subject key identifier: CB:75:E0:6A:94:F6:7B:8B:A6:76:2E:A0:28:A9:D4:75:EA:D8:44:E9 Authority key identifier: 9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3 Certificate issuer: /CN=A9173FAC/serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft Manifest number: 0E Signing time: Sun 27 Apr 2025 06:54:16 +0000 Manifest this update: Sun 27 Apr 2025 06:54:16 +0000 Manifest next update: Sun 04 May 2025 06:54:16 +0000 Files and hashes: 1: nUVn--JSxmFkKqM-eASKhxf6fLM.crl (hash: ltIpNgEv5CVZ5or5cTS/ifQzmSqj6OiGSBn3BVrhOxw=) 2: AF75682A101911F09363D44DC4F9AE02.roa (hash: /DitzvGpGkwCd2xAbI8HPUNETw+T64yJeC7XoZd/K/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173FAC, serialNumber=9D4567FBE252C661642AA33E78048A8717FA7CB3 Validity Not Before: Apr 27 06:54:16 2025 GMT Not After : May 4 06:54:16 2025 GMT Subject: CN=680dd498-bbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:e6:9b:2e:2a:be:e8:4e:be:c5:25:f0:bd: c0:a7:33:b1:e4:38:4f:1b:87:ed:81:e1:1d:a7:61: 0d:f0:2a:8d:05:cc:e4:ce:8b:38:b3:43:ba:1d:72: b0:64:2a:69:24:0a:57:ab:81:5f:2b:91:4c:05:61: 16:9b:b3:b2:c5:6c:ac:77:2e:c5:ba:0b:76:77:12: 4b:74:e9:10:d7:45:68:54:53:6b:73:20:c4:aa:86: cd:a4:55:d7:7f:1c:6f:d2:d6:d0:cf:af:d1:ba:cc: 26:5b:39:d4:27:2c:60:23:41:34:f9:41:29:71:82: 8b:e0:03:2f:cd:0f:3f:21:ca:06:ae:17:aa:33:94: 78:24:d1:80:94:2a:ad:0b:a5:b4:9d:c2:1a:5a:c7: 45:73:6d:5a:fe:78:f0:ce:c3:cf:e9:e7:f8:80:42: f3:33:57:06:83:a8:d9:48:7f:48:9b:06:f6:29:26: 3b:71:27:93:62:5b:b9:87:2f:6a:cf:9a:8f:e6:45: 68:de:0e:82:24:0b:5f:61:9d:a6:c9:26:82:29:3d: 7a:3b:8c:22:59:b3:ac:bd:6a:81:f6:44:bd:25:ae: 21:d9:7b:2b:9b:c7:39:af:93:9e:00:54:90:1e:a1: 57:c4:78:8e:64:a6:03:30:93:79:7c:ae:71:48:ac: 79:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:75:E0:6A:94:F6:7B:8B:A6:76:2E:A0:28:A9:D4:75:EA:D8:44:E9 X509v3 Authority Key Identifier: keyid:9D:45:67:FB:E2:52:C6:61:64:2A:A3:3E:78:04:8A:87:17:FA:7C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nUVn--JSxmFkKqM-eASKhxf6fLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/AFF563E6101811F080BCC348C4F9AE02/nUVn--JSxmFkKqM-eASKhxf6fLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:12:65:72:68:5e:b6:e8:c4:07:34:4e:80:83:40:ed:99:3a: 3c:5a:87:f1:1a:4c:69:aa:9e:38:97:f6:f7:ed:30:e2:79:cb: 7e:6f:a1:78:86:b8:89:93:ca:39:d5:de:ad:6f:f8:d3:5c:87: c6:ab:00:e2:74:b3:fc:9a:e5:71:26:ad:96:ea:1f:da:ce:fc: 45:ee:9c:a9:51:06:69:a5:d2:1d:4d:cb:3b:da:fa:1c:54:82: d5:5f:5c:bd:c0:b7:a6:85:20:59:c1:34:7b:39:4c:d9:3d:d0: 26:6b:8e:13:cc:98:98:26:44:75:68:36:11:2b:a8:9e:7f:22: a9:0b:58:b3:5c:8c:f1:8f:ec:b8:d4:48:ae:a1:c6:f2:7c:1f: ef:08:71:fb:13:42:27:35:6e:78:2e:58:b0:25:f1:52:75:87: 43:f2:34:3f:88:b1:18:42:38:eb:60:92:e4:c4:c8:59:5d:05: 05:04:66:87:f1:fc:09:b6:24:86:41:de:f6:3b:06:af:44:3e: 33:a1:1d:25:d9:71:53:2c:1b:46:e7:f4:f0:d3:8e:ab:1f:c8: 7e:1d:33:9d:1b:f5:f5:e7:ff:e6:2a:4b:e7:3d:01:cf:ac:de: ea:2a:7c:c2:82:02:f4:bc:a7:cc:be:c2:fa:cc:a2:22:33:b4: 80:b5:10:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0ZBQzExMC8GA1UEBRMoOUQ0NTY3RkJFMjUyQzY2MTY0MkFBMzNFNzgwNDhBODcx N0ZBN0NCMzAeFw0yNTA0MjcwNjU0MTZaFw0yNTA1MDQwNjU0MTZaMBgxFjAUBgNV BAMTDTY4MGRkNDk4LWJiZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCtOabLiq+6E6+xSXwvcCnM7HkOE8bh+2B4R2nYQ3wKo0FzOTOizizQ7odcrBk KmkkClergV8rkUwFYRabs7LFbKx3LsW6C3Z3Ekt06RDXRWhUU2tzIMSqhs2kVdd/ HG/S1tDPr9G6zCZbOdQnLGAjQTT5QSlxgovgAy/NDz8hygauF6ozlHgk0YCUKq0L pbSdwhpax0VzbVr+ePDOw8/p5/iAQvMzVwaDqNlIf0ibBvYpJjtxJ5NiW7mHL2rP mo/mRWjeDoIkC19hnabJJoIpPXo7jCJZs6y9aoH2RL0lriHZeyubxzmvk54AVJAe oVfEeI5kpgMwk3l8rnFIrHmvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy3XgapT2 e4umdi6gKKnUderYROkwHwYDVR0jBBgwFoAUnUVn++JSxmFkKqM+eASKhxf6fLMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRkFDL0FGRjU2M0U2MTAx ODExRjA4MEJDQzM0OEM0RjlBRTAyL25VVm4tLUpTeG1Ga0txTS1lQVNLaHhmNmZM TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvblVWbi0tSlN4bUZrS3FNLWVBU0toeGY2ZkxNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RkFDL0FGRjU2M0U2MTAxODExRjA4MEJDQzM0OEM0RjlBRTAyL25VVm4tLUpTeG1G a0txTS1lQVNLaHhmNmZMTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEMSZXJoXrboxAc0ToCDQO2ZOjxah/EaTGmqnjiX9vftMOJ5y35voXiG uImTyjnV3q1v+NNch8arAOJ0s/ya5XEmrZbqH9rO/EXunKlRBmml0h1Nyzva+hxU gtVfXL3At6aFIFnBNHs5TNk90CZrjhPMmJgmRHVoNhErqJ5/IqkLWLNcjPGP7LjU SK6hxvJ8H+8IcfsTQic1bnguWLAl8VJ1h0PyND+IsRhCOOtgkuTEyFldBQUEZofx /Am2JIZB3vY7Bq9EPjOhHSXZcVMsG0bn9PDTjqsfyH4dM50b9fXn/+YqS+c9Ac+s 3uoqfMKCAvS8p8y+wvrMoiIztIC1ENY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:18 2025 by rpki-client on console.sobornost.net