$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft File: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft (raw, json) Hash identifier: f7O5GSD8eLNmQh7XUL5au8Y0daQOx7xwy/Xcvefav28= Subject key identifier: 42:F1:85:C1:43:6C:E8:FC:10:94:C5:57:1F:2E:88:3C:E1:78:DF:A8 Authority key identifier: 3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 Certificate issuer: /CN=A919F0DA/serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Certificate serial: 23D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft Manifest number: 5FD5 Signing time: Thu 24 Apr 2025 14:15:19 +0000 Manifest this update: Thu 24 Apr 2025 14:15:19 +0000 Manifest next update: Thu 01 May 2025 14:15:19 +0000 Files and hashes: 1: OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl (hash: qp8Mc8dWdJvpm5XChJB3GCXZx/KKqTtAn4hjXR8JHDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9174 (0x23d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=3A830D43F35944FFB28601D3333020AC3C319241 Validity Not Before: Apr 24 14:15:19 2025 GMT Not After : May 1 14:15:19 2025 GMT Subject: CN=680a4777-f325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:e2:27:46:82:2a:3e:cf:ae:6a:f1:e7:93: f7:e3:80:58:23:8a:3d:0c:98:85:5b:c8:6e:52:2d: eb:9d:6e:73:69:01:5e:3c:c9:f4:67:c5:bb:73:9e: 5d:95:ba:ab:ff:c0:17:a4:5b:ea:83:c2:17:18:7b: db:b9:3e:fd:dc:32:f3:d7:69:44:6f:5c:5b:e7:e8: 53:11:11:71:31:d7:ba:b5:43:ca:a7:19:e1:85:9c: cd:b8:9b:9e:19:c7:d5:d4:65:90:6c:f4:00:7d:fc: 04:ed:92:11:59:ce:8c:53:31:32:98:bd:02:0a:15: 3a:7d:3e:0f:eb:7f:25:9a:07:df:e1:ae:9b:96:16: 01:d2:8b:70:38:71:76:a5:7f:96:23:75:dc:03:6f: d4:e1:eb:c5:16:c4:df:51:9b:22:3c:28:c9:a8:3f: df:ce:c5:4a:a6:29:2a:c1:a6:51:38:45:41:4d:fb: 63:70:b9:41:a3:15:08:b9:8c:2f:d7:b3:1f:fa:51: 1b:57:ef:f0:00:54:ba:4d:b9:a9:3c:cb:9d:09:06: 4d:da:0a:d6:ac:6d:59:eb:b8:31:ab:ec:46:a9:59: 5e:21:ca:7b:e1:47:44:71:e7:d5:73:75:09:58:54: 47:52:5c:0b:f9:40:1f:d0:5a:05:a1:90:c5:de:75: 5c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F1:85:C1:43:6C:E8:FC:10:94:C5:57:1F:2E:88:3C:E1:78:DF:A8 X509v3 Authority Key Identifier: keyid:3A:83:0D:43:F3:59:44:FF:B2:86:01:D3:33:30:20:AC:3C:31:92:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/OoMNQ_NZRP-yhgHTMzAgrDwxkkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:9d:44:8a:d4:9d:e8:db:6d:d4:9c:d0:1e:32:77:b9:10:9e: 7a:0d:ba:4b:e9:0a:9d:19:03:19:11:35:42:b2:90:a2:4c:a2: 22:83:3a:7f:d7:22:44:91:71:c6:62:82:44:47:de:60:d6:2b: 32:aa:7b:54:83:1e:df:53:6c:5f:65:da:8e:31:11:7f:cf:33: 08:ed:21:1f:bf:a8:31:42:af:a5:db:16:2f:87:ef:29:e7:9f: cb:71:65:18:a7:92:5d:a0:6c:e8:7a:b5:1e:9b:d2:cb:bf:ed: b1:72:92:ea:fd:2b:ab:15:98:4d:d3:4e:91:af:2d:74:be:be: 41:89:2d:b8:64:71:a5:e5:87:a3:f4:b9:4b:68:d3:d4:29:c4: 82:19:b9:0c:3d:d2:21:51:1a:be:3e:27:35:a9:90:11:86:14: 88:95:33:d4:c2:42:60:33:af:93:ca:9f:b4:92:21:0c:9b:fb: 0f:f7:e1:80:e2:ed:f8:05:0e:dd:00:0a:33:d3:b8:a9:12:8d: 79:d5:d8:f4:1c:0e:89:1d:e5:1a:8d:3e:19:40:df:fe:3e:6b: 1e:38:de:17:36:a1:5f:92:71:25:61:3c:54:13:c0:79:e1:74: 35:78:14:c7:c1:d6:26:37:ae:46:de:55:fa:7d:2c:46:df:2f: d1:a6:2c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDNBODMwRDQzRjM1OTQ0RkZCMjg2MDFEMzMzMzAyMEFD M0MzMTkyNDEwHhcNMjUwNDI0MTQxNTE5WhcNMjUwNTAxMTQxNTE5WjAYMRYwFAYD VQQDEw02ODBhNDc3Ny1mMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugviJ0aCKj7Prmrx55P344BYI4o9DJiFW8huUi3rnW5zaQFePMn0Z8W7c55d lbqr/8AXpFvqg8IXGHvbuT793DLz12lEb1xb5+hTERFxMde6tUPKpxnhhZzNuJue GcfV1GWQbPQAffwE7ZIRWc6MUzEymL0CChU6fT4P638lmgff4a6blhYB0otwOHF2 pX+WI3XcA2/U4evFFsTfUZsiPCjJqD/fzsVKpikqwaZROEVBTftjcLlBoxUIuYwv 17Mf+lEbV+/wAFS6TbmpPMudCQZN2grWrG1Z67gxq+xGqVleIcp74UdEcefVc3UJ WFRHUlwL+UAf0FoFoZDF3nVcoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELxhcFD bOj8EJTFVx8uiDzheN+oMB8GA1UdIwQYMBaAFDqDDUPzWUT/soYB0zMwIKw8MZJB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQLXloZ0hUTXpBZ3JEd3hr a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09vTU5RX05aUlAteWhnSFRNekFnckR3eGtrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9Pb01OUV9OWlJQ LXloZ0hUTXpBZ3JEd3hra0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2nUSK1J3o223UnNAeMne5EJ56DbpL6QqdGQMZETVCspCiTKIigzp/ 1yJEkXHGYoJER95g1isyqntUgx7fU2xfZdqOMRF/zzMI7SEfv6gxQq+l2xYvh+8p 55/LcWUYp5JdoGzoerUem9LLv+2xcpLq/SurFZhN006Rry10vr5BiS24ZHGl5Yej 9LlLaNPUKcSCGbkMPdIhURq+Pic1qZARhhSIlTPUwkJgM6+Typ+0kiEMm/sP9+GA 4u34BQ7dAAoz07ipEo151dj0HA6JHeUajT4ZQN/+PmseON4XNqFfknElYTxUE8B5 4XQ1eBTHwdYmN65G3lX6fSxG3y/Rpixh -----END CERTIFICATE-----Generated at Thu Apr 24 15:52:51 2025 by rpki-client on console.sobornost.net