$ rpki-client -vvf rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft File: NwOTvGRg5S0PXgIdVS9YF0M-suc.mft (raw, json) Hash identifier: FqoMbDfwPAMJVkFpgbGHZHe+ABMVQfE8bEbm981Ve28= Subject key identifier: 99:52:02:A0:00:E8:44:A2:55:CD:F7:36:13:2C:98:3B:70:3C:62:8E Authority key identifier: 37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 Certificate issuer: /CN=A918D5CF/serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Certificate serial: 140C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft Manifest number: 1405 Signing time: Mon 28 Apr 2025 17:09:42 +0000 Manifest this update: Mon 28 Apr 2025 17:09:41 +0000 Manifest next update: Mon 05 May 2025 17:09:41 +0000 Files and hashes: 1: NwOTvGRg5S0PXgIdVS9YF0M-suc.crl (hash: AVgo0BRqjXp6x9y9cG9tqu/xgH4Iscwlr9PGxbUK0Zs=) 2: 0802DFC67B1C11E8BC732C17C4F9AE02.roa (hash: HvY8aLOLbIu6vAeI5+MTO3AgRFsW1gggDw/k0s0xJwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5132 (0x140c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D5CF, serialNumber=370393BC6460E52D0F5E021D552F5817433EB2E7 Validity Not Before: Apr 28 17:09:41 2025 GMT Not After : May 5 17:09:41 2025 GMT Subject: CN=680fb655-9399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:ab:76:48:5b:59:bf:ac:7d:f2:bc:21:65: 9a:06:2e:ef:b0:c1:b6:9b:31:39:67:7f:b5:3d:a9: b0:7c:48:47:5c:10:b3:c9:50:cd:10:f1:1a:3c:e1: 76:fd:f1:5d:e1:c0:1c:a0:1c:11:bc:eb:c1:50:51: b7:9d:ef:2a:49:a1:07:fb:48:73:fb:34:b8:3a:f7: 45:60:31:e6:83:9a:25:5f:89:bb:92:42:dc:79:44: 23:54:c2:96:66:e1:29:d0:af:4e:b5:b4:44:e8:ef: aa:7e:4d:49:10:49:8e:88:4c:bd:df:cf:e0:a1:c0: 03:31:31:0d:dc:14:0f:35:38:51:9f:22:03:1e:1f: 68:ba:f9:c4:ec:33:c2:37:83:64:74:57:73:8c:1a: ed:c7:aa:2b:93:c6:31:67:16:1e:f3:69:b8:59:8a: 3a:3e:f9:0b:d1:8d:b3:98:0e:7c:a3:f5:da:8c:e1: 07:4b:c7:67:11:c5:af:3f:c4:6f:6e:da:5b:fd:4a: fb:ec:01:29:68:34:2d:99:72:be:0d:12:cc:70:8e: 9d:9d:94:40:60:0a:50:7b:56:1d:87:10:af:6f:c4: ee:30:7c:37:ee:c8:7b:ca:c8:6f:a8:3f:77:df:9a: b5:7a:d6:60:5e:53:a8:5a:7a:24:29:ea:e3:65:f3: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:52:02:A0:00:E8:44:A2:55:CD:F7:36:13:2C:98:3B:70:3C:62:8E X509v3 Authority Key Identifier: keyid:37:03:93:BC:64:60:E5:2D:0F:5E:02:1D:55:2F:58:17:43:3E:B2:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NwOTvGRg5S0PXgIdVS9YF0M-suc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D5CF/98D0B4F87B1A11E88F3D0C14C4F9AE02/NwOTvGRg5S0PXgIdVS9YF0M-suc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:72:95:c5:b8:47:cb:0d:bc:52:16:11:89:c4:c8:24:b1:34: ff:a4:c0:ec:ad:8c:a5:4b:7b:f8:47:1a:ba:e8:5d:69:cf:da: de:27:f1:3d:30:5d:4e:c1:d2:b5:27:35:53:8b:7f:c9:12:67: e9:69:d0:2f:b1:4c:b4:3b:1d:78:9c:6c:c3:57:b8:f7:83:65: 39:dd:d4:cb:e8:a7:e2:ff:54:20:67:f0:98:da:18:9c:d8:0f: 7f:4e:7a:7d:42:bb:cb:92:39:3a:c0:3a:10:c8:3d:5d:ba:12: 0c:aa:ec:c4:f2:e3:63:60:8e:9c:30:64:61:71:1f:c9:ae:f9: 34:06:ce:c8:d2:c7:3a:f4:0b:08:ec:3b:a6:15:b5:02:4f:82: 7c:bc:39:a8:76:ad:31:0f:96:6f:57:21:0a:41:cc:0a:93:cd: ef:83:40:59:ad:43:63:b1:f3:b4:ad:af:f3:58:ac:89:6a:cd: 68:41:12:e4:3e:84:a3:72:cf:8e:e8:c3:10:26:b6:c3:32:20: 8d:ad:1d:c8:1b:01:16:65:b1:6f:be:0e:ef:b2:9f:3d:d9:4e: 0a:a0:f1:f1:77:6f:b3:d0:07:06:40:d8:94:f2:e2:26:19:e9: 59:c9:59:b9:d9:e1:a3:71:b4:8c:7d:3d:ca:a2:b6:6a:08:12: ce:d2:b6:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ1Q0YxMTAvBgNVBAUTKDM3MDM5M0JDNjQ2MEU1MkQwRjVFMDIxRDU1MkY1ODE3 NDMzRUIyRTcwHhcNMjUwNDI4MTcwOTQxWhcNMjUwNTA1MTcwOTQxWjAYMRYwFAYD VQQDEw02ODBmYjY1NS05Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC6rdkhbWb+sffK8IWWaBi7vsMG2mzE5Z3+1PamwfEhHXBCzyVDNEPEaPOF2 /fFd4cAcoBwRvOvBUFG3ne8qSaEH+0hz+zS4OvdFYDHmg5olX4m7kkLceUQjVMKW ZuEp0K9OtbRE6O+qfk1JEEmOiEy938/gocADMTEN3BQPNThRnyIDHh9ouvnE7DPC N4NkdFdzjBrtx6ork8YxZxYe82m4WYo6PvkL0Y2zmA58o/XajOEHS8dnEcWvP8Rv btpb/Ur77AEpaDQtmXK+DRLMcI6dnZRAYApQe1YdhxCvb8TuMHw37sh7yshvqD93 35q1etZgXlOoWnokKerjZfOydQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlSAqAA 6ESiVc33NhMsmDtwPGKOMB8GA1UdIwQYMBaAFDcDk7xkYOUtD14CHVUvWBdDPrLn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDVDRi85OEQwQjRGODdC MUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVTMFBYZ0lkVlM5WUYwTS1z dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL053T1R2R1JnNVMwUFhnSWRWUzlZRjBNLXN1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDVDRi85OEQwQjRGODdCMUExMUU4OEYzRDBDMTRDNEY5QUUwMi9Od09UdkdSZzVT MFBYZ0lkVlM5WUYwTS1zdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMcpXFuEfLDbxSFhGJxMgksTT/pMDsrYylS3v4Rxq66F1pz9reJ/E9 MF1OwdK1JzVTi3/JEmfpadAvsUy0Ox14nGzDV7j3g2U53dTL6Kfi/1QgZ/CY2hic 2A9/Tnp9QrvLkjk6wDoQyD1duhIMquzE8uNjYI6cMGRhcR/Jrvk0Bs7I0sc69AsI 7DumFbUCT4J8vDmodq0xD5ZvVyEKQcwKk83vg0BZrUNjsfO0ra/zWKyJas1oQRLk PoSjcs+O6MMQJrbDMiCNrR3IGwEWZbFvvg7vsp892U4KoPHxd2+z0AcGQNiU8uIm GelZyVm52eGjcbSMfT3KorZqCBLO0rYS -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:46 2025 by rpki-client on console.sobornost.net