$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: wweqvaF9ISATn2JXawqkP5Y+bi1Dqd4deJaMaFJU1j4= Subject key identifier: D2:9B:E2:EF:23:0C:13:30:FA:37:48:D8:9D:C1:A1:65:17:D1:3D:31 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1913 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B17 Signing time: Thu 24 Apr 2025 15:24:13 +0000 Manifest this update: Thu 24 Apr 2025 15:24:13 +0000 Manifest next update: Thu 01 May 2025 15:24:13 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: 30fDqvBQillUhug+6TJRYrHHfFHv94keFfXOBkKr8l8=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: T2up6BLAo2bqeuWG4PUsHlE0/L5R2ojrPd9fvOrJMTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6419 (0x1913) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Apr 24 15:24:13 2025 GMT Not After : May 1 15:24:13 2025 GMT Subject: CN=680a579d-7744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d3:54:3c:a7:5a:ac:2b:31:57:e0:3e:19:23: d7:84:83:32:6e:fb:1b:a9:76:38:ff:f2:7e:ca:0e: d6:af:7b:d9:28:a7:00:ec:2a:80:82:56:b4:f3:22: e5:62:83:3a:89:21:a2:5b:76:75:07:60:ca:d0:9e: 74:83:4c:cc:e8:50:b4:04:7d:9c:f2:ac:08:01:9c: a3:09:d2:50:fa:63:05:25:2d:7e:6e:f4:75:23:d8: 8e:61:8a:fb:58:08:78:c5:65:53:61:ef:e0:08:38: 42:09:a1:b4:5e:1a:91:72:71:88:38:6c:1d:1f:74: bc:d6:e7:c1:ae:93:68:77:7d:92:c0:41:6f:27:06: 36:07:09:92:01:07:b7:2d:5f:78:38:56:18:89:59: a7:6f:6a:b0:2c:c0:bf:64:71:20:c4:15:3f:9a:0f: 30:7d:b8:46:4b:0b:fd:98:72:dd:83:4e:fe:25:7c: 01:4f:9c:e0:e1:c5:b2:8b:2c:37:07:ac:82:dd:15: 70:e3:80:ed:0e:d8:2f:65:ef:54:35:f3:dc:36:94: 3d:bf:7e:f9:d5:3a:25:84:de:f5:9c:b5:6a:47:25: fd:02:b8:fd:39:21:25:e5:b3:ab:6b:30:34:5e:5b: e2:38:20:8c:77:f2:b8:37:93:01:fb:01:61:70:3b: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9B:E2:EF:23:0C:13:30:FA:37:48:D8:9D:C1:A1:65:17:D1:3D:31 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:59:57:73:31:4b:9b:4f:62:31:32:51:f2:22:2c:7d:20:be: 94:6f:ba:39:18:f6:76:8c:ba:4b:5d:6e:8f:1c:99:32:35:bc: 7e:63:33:c9:be:d8:7b:bc:e9:cb:2b:be:1b:13:f9:ce:28:30: a6:b2:24:43:5d:cb:b4:ba:ac:59:14:8e:00:5c:4a:2d:fe:79: f9:f7:77:3c:f5:45:cb:bd:ca:8c:9e:04:04:dc:8e:4a:96:ba: 57:4c:39:e8:96:46:5f:98:0c:e1:af:f4:93:ed:19:61:3f:25: 25:ca:57:44:a8:a5:8c:3b:fc:19:f4:ad:1b:97:5a:e3:bd:73: 37:a3:21:23:91:06:03:3e:60:e9:dd:56:fd:f4:39:24:89:2d: 23:04:38:c3:48:39:00:1b:77:66:af:9d:ed:ab:e4:6e:72:3f: be:53:8e:36:d4:17:bb:0e:be:81:76:da:39:d6:c9:ca:23:09: 67:3c:3e:f4:f5:63:f6:ed:2a:73:f0:71:4b:9e:b2:9f:95:58: c0:29:18:0a:91:ee:50:3e:82:cc:11:d3:27:87:dd:c2:f4:ec: b9:c9:cc:e3:e9:fb:b4:12:0d:44:ac:37:96:91:32:a4:b2:a3: a6:5f:46:68:a9:b0:d8:c6:03:81:0a:fb:73:61:d4:88:8b:f9: 2b:3f:9b:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwNDI0MTUyNDEzWhcNMjUwNTAxMTUyNDEzWjAYMRYwFAYD VQQDEw02ODBhNTc5ZC03NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tNUPKdarCsxV+A+GSPXhIMybvsbqXY4//J+yg7Wr3vZKKcA7CqAgla08yLl YoM6iSGiW3Z1B2DK0J50g0zM6FC0BH2c8qwIAZyjCdJQ+mMFJS1+bvR1I9iOYYr7 WAh4xWVTYe/gCDhCCaG0XhqRcnGIOGwdH3S81ufBrpNod32SwEFvJwY2BwmSAQe3 LV94OFYYiVmnb2qwLMC/ZHEgxBU/mg8wfbhGSwv9mHLdg07+JXwBT5zg4cWyiyw3 B6yC3RVw44DtDtgvZe9UNfPcNpQ9v3751TolhN71nLVqRyX9Arj9OSEl5bOrazA0 XlviOCCMd/K4N5MB+wFhcDsPTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKb4u8j DBMw+jdI2J3BoWUX0T0xMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsWVdzMUubT2IxMlHyIix9IL6Ub7o5GPZ2jLpLXW6PHJkyNbx+YzPJ vth7vOnLK74bE/nOKDCmsiRDXcu0uqxZFI4AXEot/nn593c89UXLvcqMngQE3I5K lrpXTDnolkZfmAzhr/ST7RlhPyUlyldEqKWMO/wZ9K0bl1rjvXM3oyEjkQYDPmDp 3Vb99DkkiS0jBDjDSDkAG3dmr53tq+Rucj++U4421Be7Dr6Bdto51snKIwlnPD70 9WP27Spz8HFLnrKflVjAKRgKke5QPoLMEdMnh93C9Oy5yczj6fu0Eg1ErDeWkTKk sqOmX0ZoqbDYxgOBCvtzYdSIi/krP5tq -----END CERTIFICATE-----Generated at Thu Apr 24 18:08:27 2025 by rpki-client on console.sobornost.net