$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft File: nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json) Hash identifier: /71+yaniBdqQMVKt8YrYKaN0RytTMUslIKwzUk+71yI= Subject key identifier: 18:66:ED:BE:6F:10:FD:B5:5D:CE:D0:5C:82:73:33:5C:43:34:FA:C3 Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 Certificate issuer: /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft Manifest number: 83 Signing time: Sun 27 Apr 2025 05:40:21 +0000 Manifest this update: Sun 27 Apr 2025 05:40:21 +0000 Manifest next update: Sun 04 May 2025 05:40:21 +0000 Files and hashes: 1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: pMLF9jAHx6lgSnbZcVx9R1AaAUir8XIR0r99mcncS78=) 2: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: NENKWBR9x0FYQGSayxsc772B6xcKqdDax7O0tt16MtA=) 3: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: HhvN0QQ/t1aifshxGL31iNmJ/1oYowbGlAhBK1OxOCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65 Validity Not Before: Apr 27 05:40:21 2025 GMT Not After : May 4 05:40:21 2025 GMT Subject: CN=680dc345-ed49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:fd:b7:20:74:f3:69:13:9e:7d:97:f2:4a: d9:5c:d6:08:b2:4d:bb:b7:89:f9:03:10:47:a5:a2: fd:28:e7:7f:e6:3e:01:d2:55:68:13:bd:99:ba:f3: 40:64:6a:58:84:10:7c:0a:f8:63:b9:4b:cc:b7:8b: 32:7b:2c:29:15:ae:09:6b:e6:30:2b:60:38:3b:3f: 10:47:75:8a:59:3d:a2:ab:21:31:d0:48:27:f0:c9: a6:a2:8b:d9:c7:d4:b0:e8:f9:d4:19:a1:2b:1a:c3: 7d:1d:e2:61:c1:1d:56:9a:d2:f7:28:3b:90:29:da: 39:bd:d5:0d:9a:5d:4b:17:35:a0:8f:4d:2e:52:2f: 36:2e:01:6b:cf:8c:87:ec:73:a5:57:c2:f0:7b:42: 86:6f:e8:39:0f:69:a7:99:e4:24:d0:72:10:12:d7: a9:09:94:ff:a1:2b:15:26:55:1a:f1:99:4a:e6:df: f7:29:19:d0:59:34:da:d3:3a:88:c2:56:00:7e:9a: 7a:9a:5f:12:b8:27:9f:9a:b0:73:2c:1e:75:9d:be: ec:ee:10:cb:42:cf:f1:8d:65:6d:67:b7:c3:e8:26: 7d:be:7a:e4:69:af:74:2a:36:77:71:8f:42:8f:65: 73:f1:cf:46:1a:1d:2e:e2:18:a8:67:fc:81:21:10: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:ED:BE:6F:10:FD:B5:5D:CE:D0:5C:82:73:33:5C:43:34:FA:C3 X509v3 Authority Key Identifier: keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:da:17:54:04:19:34:c1:85:80:85:15:a0:18:b2:e0:8c:8a: 9e:31:a6:32:70:82:9f:eb:c6:b3:e0:c3:41:f8:00:75:da:bb: 91:e7:2b:98:99:d5:ed:cc:c9:db:d0:9a:c3:9a:48:7d:91:41: ce:d7:96:14:e0:98:89:bf:19:b8:bd:50:e5:7d:93:6b:e3:8f: 86:23:7c:98:ee:0c:8f:89:6b:1d:62:42:88:db:78:f8:0a:2c: 9e:ce:24:37:ed:66:7d:32:5a:31:8d:80:25:af:32:bb:27:c9: 8f:58:92:42:cb:a5:77:30:af:38:c1:3d:2f:5b:b9:03:a6:e3: 1f:12:20:50:ec:65:03:4b:39:eb:44:f7:7a:31:e3:67:87:42: 8c:3e:94:6b:a3:0f:f8:3e:fb:3c:f9:c2:23:ad:f0:27:56:37: 52:15:4a:07:43:bf:84:12:b1:d4:b9:03:5a:0e:68:e2:22:bc: 5c:a0:52:a6:5f:65:2c:21:bf:b5:63:04:56:19:e5:7d:aa:2d: 06:36:25:e0:8b:23:72:10:c1:e9:4f:13:3d:95:07:5b:48:08: 5e:91:f9:55:d3:75:1c:54:8c:94:95:0c:88:b7:97:f2:77:b1: 62:79:59:af:8f:04:88:2d:ba:38:10:05:1c:1d:86:0c:94:c8: 21:b0:56:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5OEExMTAvBgNVBAUTKDlDMDcxRTgxNEQ4MEIxMEUyQ0ExRjcxRTlCMkU1MzVD MzkwNUNCNjUwHhcNMjUwNDI3MDU0MDIxWhcNMjUwNTA0MDU0MDIxWjAYMRYwFAYD VQQDEw02ODBkYzM0NS1lZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqET9tyB082kTnn2X8krZXNYIsk27t4n5AxBHpaL9KOd/5j4B0lVoE72ZuvNA ZGpYhBB8CvhjuUvMt4syeywpFa4Ja+YwK2A4Oz8QR3WKWT2iqyEx0Egn8MmmoovZ x9Sw6PnUGaErGsN9HeJhwR1WmtL3KDuQKdo5vdUNml1LFzWgj00uUi82LgFrz4yH 7HOlV8Lwe0KGb+g5D2mnmeQk0HIQEtepCZT/oSsVJlUa8ZlK5t/3KRnQWTTa0zqI wlYAfpp6ml8SuCefmrBzLB51nb7s7hDLQs/xjWVtZ7fD6CZ9vnrkaa90KjZ3cY9C j2Vz8c9GGh0u4hioZ/yBIRAwuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhm7b5v EP21Xc7QXIJzM1xDNPrDMB8GA1UdIwQYMBaAFJwHHoFNgLEOLKH3HpsuU1w5Bctl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTk4QS81MjJDQjczNDdB RTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNRNHNvZmNlbXk1VFhEa0Z5 MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BY2VnVTJBc1E0c29mY2VteTVUWERrRnkyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTk4QS81MjJDQjczNDdBRTgxMUVGOUE0QTQ3MzdDNEY5QUUwMi9uQWNlZ1UyQXNR NHNvZmNlbXk1VFhEa0Z5MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp2hdUBBk0wYWAhRWgGLLgjIqeMaYycIKf68az4MNB+AB12ruR5yuY mdXtzMnb0JrDmkh9kUHO15YU4JiJvxm4vVDlfZNr44+GI3yY7gyPiWsdYkKI23j4 CiyeziQ37WZ9MloxjYAlrzK7J8mPWJJCy6V3MK84wT0vW7kDpuMfEiBQ7GUDSznr RPd6MeNnh0KMPpRrow/4Pvs8+cIjrfAnVjdSFUoHQ7+EErHUuQNaDmjiIrxcoFKm X2UsIb+1YwRWGeV9qi0GNiXgiyNyEMHpTxM9lQdbSAhekflV03UcVIyUlQyIt5fy d7FieVmvjwSILbo4EAUcHYYMlMghsFYM -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:53 2025 by rpki-client on console.sobornost.net