$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft File: nZwAihKi96YP7_liJmsFAqHKC6I.mft (raw, json) Hash identifier: VhxD9do/J044BPxBoXLh1xzaIBMi9ZooxupN3MvMAtw= Subject key identifier: BB:63:D3:E5:DC:92:45:9A:88:8B:91:BA:5C:AF:68:05:F9:7B:AF:94 Authority key identifier: 9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 Certificate issuer: /CN=A91AB85A/serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft Manifest number: 0507 Signing time: Sat 26 Apr 2025 23:18:06 +0000 Manifest this update: Sat 26 Apr 2025 23:18:06 +0000 Manifest next update: Sat 03 May 2025 23:18:06 +0000 Files and hashes: 1: nZwAihKi96YP7_liJmsFAqHKC6I.crl (hash: OvbxNBnAXQ9LULQMuVCb+Ear841VaNEpiXrKUXh8h48=) 2: 46A2104603CF11ECA480B07CC4F9AE02.roa (hash: X8TS/dUIvy3XOI0UnJtA1d7RV1bb4SxZ7U2o6VOp3BA=) 3: 460AA4AE03CF11ECA480B07CC4F9AE02.roa (hash: Gk9zFIrI4hfeJ0HReT17DaXTFk6xr6upAecBQ6JDnHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 23:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB85A, serialNumber=9D9C008A12A2F7A60FEFF962266B0502A1CA0BA2 Validity Not Before: Apr 26 23:18:06 2025 GMT Not After : May 3 23:18:06 2025 GMT Subject: CN=680d69ae-ec87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:37:dc:2d:99:bf:76:9d:3b:2b:db:df:01:2a: 02:74:9a:24:07:07:cc:7e:ab:55:22:e7:f0:a0:5d: 7c:3d:ca:91:b5:f8:83:f1:26:34:1d:54:b8:09:b6: 2f:79:cb:bf:33:b2:73:d9:4a:69:41:c5:13:68:38: 5b:04:b0:af:cf:4e:2a:58:73:9d:a4:54:4a:21:9e: 9e:87:05:89:90:8a:e3:e2:51:7f:8f:eb:ff:3d:1d: d7:87:91:94:da:d8:ed:9a:47:5f:49:43:79:cb:80: 51:cd:da:53:ba:b3:77:1d:d3:25:3c:17:cd:e7:ff: 5d:16:0c:59:1f:5a:b5:69:20:a8:f2:41:a8:2d:16: 43:5f:8c:a8:55:a3:bd:53:0a:d6:af:29:4a:a1:43: 90:06:cd:43:58:e8:af:fd:75:2b:a8:91:17:f9:80: 8c:5a:04:5a:18:78:af:70:7b:df:e9:3d:1f:76:88: 91:de:26:fd:39:0e:3d:86:b0:6e:15:93:36:0d:18: 0e:b2:f6:37:20:bc:1f:4c:1b:bb:71:09:82:29:bd: 6c:93:38:dd:8f:45:ef:ee:e4:35:b5:95:7a:b4:bb: 46:5a:40:82:57:46:22:ef:88:c5:77:5e:e7:dd:56: 36:8b:4f:7b:bc:6f:f0:a1:db:a0:5e:86:0c:89:aa: b6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:63:D3:E5:DC:92:45:9A:88:8B:91:BA:5C:AF:68:05:F9:7B:AF:94 X509v3 Authority Key Identifier: keyid:9D:9C:00:8A:12:A2:F7:A6:0F:EF:F9:62:26:6B:05:02:A1:CA:0B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nZwAihKi96YP7_liJmsFAqHKC6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB85A/185C39B603CD11ECABCE697BC4F9AE02/nZwAihKi96YP7_liJmsFAqHKC6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:f9:fb:e3:cb:7e:21:ce:af:15:8f:8a:d5:33:3c:0b:f4:c4: 32:b5:1f:64:c0:1f:c2:1f:d9:bd:f6:21:67:5e:2d:6a:cf:9c: 16:7a:db:4f:28:54:68:1c:1a:65:b4:15:53:23:d2:2a:ed:3b: 80:d0:94:7f:2e:2b:46:b5:b3:ac:a9:b1:d6:c8:d9:84:21:2f: 95:f7:6e:d8:87:94:4f:6e:5d:59:20:b7:80:d3:3e:93:1f:f6: 08:be:7c:89:13:1b:d1:33:63:1e:96:81:52:34:38:57:bf:7a: ad:97:2d:49:37:df:a6:50:56:0a:f3:8b:63:ba:23:b7:1f:9c: 86:1f:46:97:e0:50:49:89:67:42:1e:b2:bb:2f:4d:2f:cb:a9: 49:cf:97:75:f0:8c:06:78:47:b3:d3:86:7f:99:9d:05:3f:87: 4d:47:33:94:da:3d:53:59:c5:16:88:07:34:b6:15:5b:ad:08: fc:72:83:61:c5:0c:47:64:1d:e7:be:f7:84:59:5e:b0:2c:c2: 3b:bd:1a:3c:b9:70:84:2e:5e:1e:33:72:b2:56:e8:6b:98:20: aa:d3:73:0a:90:37:0e:6b:6a:20:00:5a:9a:df:7f:73:07:00: 8c:8b:60:9d:1a:5c:95:2b:8f:da:26:d2:f6:8c:3f:24:39:c3: c0:66:ab:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI4NUExMTAvBgNVBAUTKDlEOUMwMDhBMTJBMkY3QTYwRkVGRjk2MjI2NkIwNTAy QTFDQTBCQTIwHhcNMjUwNDI2MjMxODA2WhcNMjUwNTAzMjMxODA2WjAYMRYwFAYD VQQDEw02ODBkNjlhZS1lYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjfcLZm/dp07K9vfASoCdJokBwfMfqtVIufwoF18PcqRtfiD8SY0HVS4CbYv ecu/M7Jz2UppQcUTaDhbBLCvz04qWHOdpFRKIZ6ehwWJkIrj4lF/j+v/PR3Xh5GU 2tjtmkdfSUN5y4BRzdpTurN3HdMlPBfN5/9dFgxZH1q1aSCo8kGoLRZDX4yoVaO9 UwrWrylKoUOQBs1DWOiv/XUrqJEX+YCMWgRaGHivcHvf6T0fdoiR3ib9OQ49hrBu FZM2DRgOsvY3ILwfTBu7cQmCKb1skzjdj0Xv7uQ1tZV6tLtGWkCCV0Yi74jFd17n 3VY2i097vG/wodugXoYMiaq20QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtj0+Xc kkWaiIuRulyvaAX5e6+UMB8GA1UdIwQYMBaAFJ2cAIoSovemD+/5YiZrBQKhygui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjg1QS8xODVDMzlCNjAz Q0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2WVA3X2xpSm1zRkFxSEtD NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25ad0FpaEtpOTZZUDdfbGlKbXNGQXFIS0M2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjg1QS8xODVDMzlCNjAzQ0QxMUVDQUJDRTY5N0JDNEY5QUUwMi9uWndBaWhLaTk2 WVA3X2xpSm1zRkFxSEtDNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4+fvjy34hzq8Vj4rVMzwL9MQytR9kwB/CH9m99iFnXi1qz5wWettP KFRoHBpltBVTI9Iq7TuA0JR/LitGtbOsqbHWyNmEIS+V927Yh5RPbl1ZILeA0z6T H/YIvnyJExvRM2MeloFSNDhXv3qtly1JN9+mUFYK84tjuiO3H5yGH0aX4FBJiWdC HrK7L00vy6lJz5d18IwGeEez04Z/mZ0FP4dNRzOU2j1TWcUWiAc0thVbrQj8coNh xQxHZB3nvveEWV6wLMI7vRo8uXCELl4eM3KyVuhrmCCq03MKkDcOa2ogAFqa339z BwCMi2CdGlyVK4/aJtL2jD8kOcPAZqtH -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:06 2025 by rpki-client on console.sobornost.net