$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft File: nbJYwXCyMilNhj9g0twBI82q54k.mft (raw, json) Hash identifier: TrsI+dOd4GObGqlh2SlSaB4AGJsPtY86sA+kmWujNg8= Subject key identifier: CD:D1:F0:07:58:78:E3:EE:43:7F:32:D3:EC:8C:E5:6F:30:95:DA:28 Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 Certificate issuer: /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft Manifest number: 06 Signing time: Wed 23 Apr 2025 07:16:32 +0000 Manifest this update: Wed 23 Apr 2025 07:16:32 +0000 Manifest next update: Wed 30 Apr 2025 07:16:32 +0000 Files and hashes: 1: nbJYwXCyMilNhj9g0twBI82q54k.crl (hash: 0kb85XMxJZngLzcMVJ+V16rtELvULRoomUanHk2g8yc=) 2: 13EB65D41AB511F0A1F0A34BC4F9AE02.roa (hash: iKgDiBxh8hSyzd66755SfVRSPJ3sBmQyaloJnZ/1JF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 06:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789 Validity Not Before: Apr 23 07:16:32 2025 GMT Not After : Apr 30 07:16:32 2025 GMT Subject: CN=680893d0-7d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:70:50:fd:c7:8f:42:71:cf:26:41:1a:e2: 05:b1:90:89:a8:ab:f8:f2:7c:af:a4:04:d2:56:25: 2b:83:66:28:d0:eb:fe:2d:6f:75:f6:8b:7c:d2:4d: 28:a8:ec:a3:95:c3:0d:bb:08:6a:aa:a1:79:2f:7a: d0:2f:02:18:3e:67:2e:67:bf:5a:28:22:a5:c6:0d: 85:1c:59:25:08:f8:2b:15:b5:0d:42:18:3c:b5:80: 76:20:ae:2d:22:43:f6:39:52:c1:10:ad:2f:9a:a3: 2a:bb:25:ce:3f:b7:63:a6:a5:61:81:2a:53:67:1f: 46:a2:e3:9c:a0:ab:db:5b:36:f8:18:ea:24:e8:b5: af:ff:af:a0:f0:73:cd:7a:79:30:c7:c1:b6:91:e9: 2c:72:45:31:85:9a:f9:3b:23:78:e3:fd:76:6b:41: 3a:48:61:05:23:c2:d0:17:a9:76:0e:b1:88:15:5e: 2b:e5:1e:be:02:6d:30:c6:55:be:c1:de:cd:b5:28: df:2b:56:aa:00:97:2c:ca:ac:c7:9c:cf:28:33:32: 41:5a:66:4e:ca:07:cb:8b:ee:42:5a:9a:d8:b1:d1: 22:8c:ee:fd:ca:83:36:ca:63:2d:d8:53:13:9d:10: 15:60:20:c1:d0:b7:35:f1:5c:ad:27:88:cc:a8:ad: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D1:F0:07:58:78:E3:EE:43:7F:32:D3:EC:8C:E5:6F:30:95:DA:28 X509v3 Authority Key Identifier: keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:3f:f8:d1:c9:ee:2f:71:f1:09:78:de:1d:1c:01:23:8f:0a: 3b:37:54:6a:cd:62:b0:a4:04:7a:a4:c0:05:c8:d6:a7:33:c6: 24:c4:30:94:83:06:8a:13:54:40:f5:67:bb:8f:d3:0e:04:c5: 14:a3:7e:32:b6:2c:e2:b3:8b:41:f5:5b:f0:fe:3e:d9:74:aa: ba:76:39:a2:45:b0:49:83:1e:a2:1c:af:1d:a7:ef:d6:45:a3: 30:5e:b6:ba:d8:e6:3b:8a:c9:3f:69:fc:eb:3f:5d:70:d0:d8: 91:87:6b:01:95:b9:d2:ae:03:2a:ba:c8:29:5a:cb:20:3e:e9: 6b:fe:d0:a4:3f:fd:92:64:c6:91:89:99:c6:63:1c:d4:7a:ee: b3:c5:09:c3:45:50:5c:5e:49:8d:da:6d:87:7b:e4:42:00:a9: dd:23:e6:69:ca:26:ea:c2:75:5d:bb:7c:1e:b6:72:d1:8e:ec: cb:82:52:5e:63:79:e8:96:4d:e1:7a:f9:f4:45:25:34:62:8c: b0:dd:af:91:bc:aa:ee:cf:6b:f2:78:a2:51:da:fb:5c:75:0b: 28:4d:48:8a:7b:96:ff:99:bd:6f:41:d3:ae:73:e9:2c:af:1a: 65:ec:9f:bb:de:8b:12:d0:7c:4f:10:17:5d:f0:bb:a8:9a:01: 74:84:c6:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MkVERTExMC8GA1UEBRMoOURCMjU4QzE3MEIyMzIyOTREODYzRjYwRDJEQzAxMjND REFBRTc4OTAeFw0yNTA0MjMwNzE2MzJaFw0yNTA0MzAwNzE2MzJaMBgxFjAUBgNV BAMTDTY4MDg5M2QwLTdkOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XnBQ/cePQnHPJkEa4gWxkImoq/jyfK+kBNJWJSuDZijQ6/4tb3X2i3zSTSio 7KOVww27CGqqoXkvetAvAhg+Zy5nv1ooIqXGDYUcWSUI+CsVtQ1CGDy1gHYgri0i Q/Y5UsEQrS+aoyq7Jc4/t2OmpWGBKlNnH0ai45ygq9tbNvgY6iTota//r6Dwc816 eTDHwbaR6SxyRTGFmvk7I3jj/XZrQTpIYQUjwtAXqXYOsYgVXivlHr4CbTDGVb7B 3s21KN8rVqoAlyzKrMeczygzMkFaZk7KB8uL7kJamtix0SKM7v3KgzbKYy3YUxOd EBVgIMHQtzXxXK0niMyorXkjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzdHwB1h4 4+5DfzLT7IzlbzCV2igwHwYDVR0jBBgwFoAUnbJYwXCyMilNhj9g0twBI82q54kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRURFLzU1Q0IyRTA0MUFC NDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWlsTmhqOWcwdHdCSTgycTU0 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbmJKWXdYQ3lNaWxOaGo5ZzB0d0JJODJxNTRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy RURFLzU1Q0IyRTA0MUFCNDExRjA4NURENjk0QUM0RjlBRTAyL25iSll3WEN5TWls TmhqOWcwdHdCSTgycTU0ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKM/+NHJ7i9x8Ql43h0cASOPCjs3VGrNYrCkBHqkwAXI1qczxiTEMJSD BooTVED1Z7uP0w4ExRSjfjK2LOKzi0H1W/D+Ptl0qrp2OaJFsEmDHqIcrx2n79ZF ozBetrrY5juKyT9p/Os/XXDQ2JGHawGVudKuAyq6yClayyA+6Wv+0KQ//ZJkxpGJ mcZjHNR67rPFCcNFUFxeSY3abYd75EIAqd0j5mnKJurCdV27fB62ctGO7MuCUl5j eeiWTeF6+fRFJTRijLDdr5G8qu7Pa/J4olHa+1x1CyhNSIp7lv+ZvW9B065z6Syv GmXsn7veixLQfE8QF13wu6iaAXSExgs= -----END CERTIFICATE-----Generated at Wed Apr 23 09:03:17 2025 by rpki-client on console.sobornost.net