$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft File: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json) Hash identifier: qO/6ggZQ+E6AG8ANbUVDnswKVKECjrkrfypf5K6ULwI= Subject key identifier: CD:B1:31:AF:74:38:9E:75:11:EC:DB:1F:1D:0D:45:99:16:A5:CA:4E Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Certificate serial: 1113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft Manifest number: 0FB5 Signing time: Mon 28 Apr 2025 17:55:33 +0000 Manifest this update: Mon 28 Apr 2025 17:55:32 +0000 Manifest next update: Mon 05 May 2025 17:55:32 +0000 Files and hashes: 1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: vHkaqz6Xyh6GfK8ueBABerHkKw5FtccZVngQnq5pWHU=) 2: A2745BFEC18411ECBE051C5CC4F9AE02.roa (hash: PrswZfri3dHxcodWDLz5zdIU9mo1iJZykEdVfIHeBvM=) 3: 4CF19A6EAEDC11EF99753F71C4F9AE02.roa (hash: Qn6g14AUkLu1btr8Er+hiQxzqayU2xntHB3orOLLw9E=) 4: ED397A542A1211EFBF48A87FC4F9AE02.roa (hash: tNirD4O5n/APlr4VXtRqMXUQrZa9HBGyAXXcJdhkx8g=) 5: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: 9vj0wFDRg2m924YSQRU+53hKJgFYHI/k3yYJ69FV68c=) 6: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: IEsW3GuxCVGYRu/1hhIjcdekM36PkMj/h8FdT1+soSo=) 7: EE0AC1B82A1211EFBF48A87FC4F9AE02.roa (hash: rO7clzQPDfrbQiofxJnNNd8hLM/5/riPsot/0I2BTXI=) 8: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: WDmBDJ69igHtzeCqQyvNDcFOZ8jROHQ7B6krkg7kRGE=) 9: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: aiooAIoivVql5FC+SCyKWbhdV5nV3qmBQRAodXfPFtU=) 10: 721709C63F6711EF879C2E11C4F9AE02.roa (hash: OxPA4uUHLc7fRUiKLbuvR0L7g6mPMW1qhFDN6e351sc=) 11: BB54CFD0B94411EBA1CDCA45C4F9AE02.roa (hash: JBQ6069Irn+Fo63UGqCMQV8Nmj1Wx+/dKLn5g7bFNNU=) 12: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: b/LbIzPAU9coJXjT3umWz8BMDzmOcTsQApiNrqEbUbM=) 13: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: Pqc1nBcb+JFkJlWub2Tew10ajFK81balankJIjxH0u0=) 14: C2356A948FE811E98B967A66C4F9AE02.roa (hash: lh6cNUm2NUCxz6vyJ9O8vhiCdo9/t7r94k2HgugqWk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4371 (0x1113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60 Validity Not Before: Apr 28 17:55:32 2025 GMT Not After : May 5 17:55:32 2025 GMT Subject: CN=680fc114-a43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:85:9b:fa:8c:56:a2:c6:bf:22:1d:bc:dc:a3: f0:8c:b3:c8:3b:40:d0:b7:3b:19:40:3f:0f:72:b1: 20:f9:76:29:43:bb:5e:0a:82:47:cd:a2:15:3f:af: 44:90:60:59:c6:cf:5e:99:5a:8f:73:99:9e:ce:57: 14:15:ab:66:61:ff:ab:8b:6e:ef:c4:ab:17:e9:36: 3e:58:21:ac:f5:58:f3:51:24:60:bd:36:3d:f3:fe: cc:bc:1e:f4:89:52:1d:e0:72:94:21:4b:df:c5:66: 0f:85:2d:13:a0:70:0b:6e:a0:9c:8f:ef:21:66:c3: 31:f0:2d:9c:ec:15:50:d5:8c:c6:f5:7a:53:d9:68: 3e:d2:e1:5c:05:fb:32:65:92:97:54:91:5e:ff:d1: 8a:b3:53:03:fc:3c:b5:c2:7e:9f:6d:64:2c:97:67: 59:6f:54:fa:95:18:8b:90:f1:04:56:0e:4b:10:55: 94:4b:ad:90:1a:94:25:3e:c8:c8:90:a0:fa:56:8b: d6:39:27:1a:64:f0:ee:4b:a0:26:98:91:83:17:44: 67:d4:6f:a5:02:12:92:36:86:5f:19:15:99:de:d1: 92:78:1e:71:4a:29:9a:6a:b2:5a:c9:b3:74:27:a1: 28:05:ad:d3:c8:41:e6:07:41:db:c4:2c:54:31:50: 38:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B1:31:AF:74:38:9E:75:11:EC:DB:1F:1D:0D:45:99:16:A5:CA:4E X509v3 Authority Key Identifier: keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8b:50:2c:6b:6c:c2:da:79:90:00:98:26:88:71:33:28:61: 0e:24:a0:c7:86:36:f8:70:eb:93:25:9a:f9:fd:87:c7:c9:48: f8:ae:da:d2:30:c6:f6:89:c0:55:58:5f:62:25:36:67:d9:a3: 02:1f:b2:ac:1f:71:08:90:14:73:7c:7d:2a:c3:c3:80:e7:5a: ba:5a:1f:9c:cf:70:93:2a:ae:c2:bf:b4:73:12:1c:b7:8f:4a: 5d:df:29:e2:ce:64:11:0b:8c:9b:4c:04:69:74:4d:4d:ae:b4: e3:7c:98:69:ba:ac:fe:35:55:35:a7:1a:c3:8f:f2:56:37:ee: 46:8e:83:6b:48:8f:64:71:ef:f1:4b:a1:51:67:c6:ed:d0:c5: b0:d3:ef:32:e8:d8:03:de:be:06:b3:5f:a1:86:41:3f:e5:e2: fe:3c:67:33:92:ee:8b:4d:4d:3d:b6:a6:16:e3:e4:16:c1:c2: f6:45:8e:04:dc:43:9d:8d:c6:c8:51:eb:27:6a:da:65:05:ba: d9:55:fc:be:73:7e:b2:74:59:71:b7:67:68:0c:b2:3d:be:88: 2c:0c:d5:26:dc:bb:63:8f:76:79:53:48:56:f7:9d:6a:51:4b: 98:f3:73:2b:2e:75:15:cf:f5:4f:b5:22:fa:ef:71:e2:c4:77: 4f:18:59:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICERMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5 RDNGRDdCNjAwHhcNMjUwNDI4MTc1NTMyWhcNMjUwNTA1MTc1NTMyWjAYMRYwFAYD VQQDEw02ODBmYzExNC1hNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Wb+oxWosa/Ih283KPwjLPIO0DQtzsZQD8PcrEg+XYpQ7teCoJHzaIVP69E kGBZxs9emVqPc5mezlcUFatmYf+ri27vxKsX6TY+WCGs9VjzUSRgvTY98/7MvB70 iVId4HKUIUvfxWYPhS0ToHALbqCcj+8hZsMx8C2c7BVQ1YzG9XpT2Wg+0uFcBfsy ZZKXVJFe/9GKs1MD/Dy1wn6fbWQsl2dZb1T6lRiLkPEEVg5LEFWUS62QGpQlPsjI kKD6VovWOScaZPDuS6AmmJGDF0Rn1G+lAhKSNoZfGRWZ3tGSeB5xSimaarJaybN0 J6EoBa3TyEHmB0HbxCxUMVA4AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2xMa90 OJ51EezbHx0NRZkWpcpOMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNEQi8wREMzNUQzRThERDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0 Q0ZyNkJzQ1Q1VXFkUDllMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8i1Asa2zC2nmQAJgmiHEzKGEOJKDHhjb4cOuTJZr5/YfHyUj4rtrS MMb2icBVWF9iJTZn2aMCH7KsH3EIkBRzfH0qw8OA51q6Wh+cz3CTKq7Cv7RzEhy3 j0pd3ynizmQRC4ybTARpdE1NrrTjfJhpuqz+NVU1pxrDj/JWN+5GjoNrSI9kce/x S6FRZ8bt0MWw0+8y6NgD3r4Gs1+hhkE/5eL+PGczku6LTU09tqYW4+QWwcL2RY4E 3EOdjcbIUesnatplBbrZVfy+c36ydFlxt2doDLI9vogsDNUm3Ltjj3Z5U0hW951q UUuY83MrLnUVz/VPtSL673HixHdPGFl6 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:44 2025 by rpki-client on console.sobornost.net