$ rpki-client -vvf rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft File: NfWNhhxBvf6ka4xykLGqxnDnzBs.mft (raw, json) Hash identifier: uflA0J8yZB0DCR8hc0sayCIS1W4V16rZr8IQKg424JU= Subject key identifier: 14:66:24:59:4A:AD:3D:FA:10:3A:B0:5A:24:0E:0A:E7:74:85:5A:B6 Authority key identifier: 35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B Certificate issuer: /CN=A91B35BB/serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Certificate serial: 0B26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft Manifest number: 0B19 Signing time: Mon 28 Apr 2025 19:33:59 +0000 Manifest this update: Mon 28 Apr 2025 19:33:59 +0000 Manifest next update: Mon 05 May 2025 19:33:59 +0000 Files and hashes: 1: NfWNhhxBvf6ka4xykLGqxnDnzBs.crl (hash: 2gwb5MIYlVT0zOhLh++lcad/LZsP+z5Uu8GKsIYEeno=) 2: 902F47663C0111EAB6CB9936C4F9AE02.roa (hash: acFvO9bu1rt0q/DWuZiDKhsK7ehrIUh6eT7Acr8ax4w=) 3: 8F9F2F823C0111EAB6CB9936C4F9AE02.roa (hash: mdWU9Nw7uLjUwxluWYPCfhZ2OHszlUXX70G/VFtrvgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2854 (0xb26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B35BB, serialNumber=35F58D861C41BDFEA46B8C7290B1AAC670E7CC1B Validity Not Before: Apr 28 19:33:59 2025 GMT Not After : May 5 19:33:59 2025 GMT Subject: CN=680fd827-7c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:ef:2b:14:45:95:d3:f5:97:06:8e:4f:52: 97:d9:32:35:4b:95:ac:40:61:b3:e8:e3:da:fb:59: 76:5c:75:2a:f4:45:f3:9a:4b:cc:d8:47:70:7f:1a: 4d:ac:72:8a:22:45:fe:7a:5c:20:55:6b:bb:7a:4f: 89:6b:2d:83:89:32:3f:e5:46:76:a5:31:62:02:51: 01:df:85:77:68:e0:4c:df:06:8f:15:6a:d5:c1:8c: a2:1a:ca:e4:99:4b:9e:f9:6b:71:8f:96:8a:6e:50: cf:8f:82:de:b6:d7:ed:bd:9f:78:72:45:31:7f:7d: b2:88:6d:16:d1:54:06:1c:2e:0f:1a:84:50:d4:17: a9:6a:c2:57:70:47:e2:6f:d7:5b:04:67:56:fb:16: 83:ee:3f:d7:4c:5f:77:6c:84:2e:5a:fc:5a:73:22: bd:ce:b3:35:e3:c3:e9:b4:1d:c1:c8:54:4d:be:90: 21:37:64:35:40:dd:83:84:1c:dd:d2:75:60:24:85: d0:a0:ed:da:ac:65:f9:e4:f4:e6:48:20:22:6f:c1: cb:8f:dd:30:c7:4a:7f:01:b0:25:52:d3:31:bd:fb: 79:87:3b:36:9a:f0:04:41:6e:24:10:98:24:98:08: 8a:c3:74:ee:b9:4e:df:6e:c9:88:e3:d4:0b:9f:ed: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:66:24:59:4A:AD:3D:FA:10:3A:B0:5A:24:0E:0A:E7:74:85:5A:B6 X509v3 Authority Key Identifier: keyid:35:F5:8D:86:1C:41:BD:FE:A4:6B:8C:72:90:B1:AA:C6:70:E7:CC:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NfWNhhxBvf6ka4xykLGqxnDnzBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B35BB/5789B1A43C0011EAB8179734C4F9AE02/NfWNhhxBvf6ka4xykLGqxnDnzBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d9:d2:35:f8:58:7f:c2:f2:a6:63:18:8f:10:8a:ee:a2:12: 0d:ce:53:ab:9b:72:41:fc:5b:55:af:00:38:6a:7e:13:0b:ab: 95:18:35:2c:eb:f1:25:39:d6:ad:47:05:e8:8b:53:1a:85:3a: 93:9a:43:5e:d8:bf:c4:6e:22:16:54:85:3b:e1:d5:55:7c:58: 20:3e:34:a4:96:7f:cc:79:26:1a:05:24:14:df:93:f9:bd:7e: 27:8e:be:b9:b7:c7:b3:6a:46:d7:47:56:b4:cf:3e:55:ca:4f: c5:07:f9:af:ce:3f:b6:35:2e:da:51:f0:bd:76:4b:00:03:fd: 0a:a2:f1:69:6c:53:84:ab:8c:c7:2f:a2:cb:3b:94:1a:3e:32: df:c7:46:08:2d:ae:eb:07:23:10:7f:f6:26:47:f8:6a:e1:9c: 3c:a1:94:f5:f1:58:75:2e:aa:d5:3d:03:aa:3b:b3:1a:be:91: 7f:6b:55:91:9a:03:43:b0:d8:70:47:3c:5a:0c:70:d0:00:cc: a1:e3:13:66:78:0b:d5:9c:bc:10:c7:ec:17:9a:89:2b:b9:6f: cb:f1:b7:f4:43:1d:b7:58:5a:c3:33:c9:d6:71:0a:e1:36:56: fc:4d:45:1e:aa:f3:be:11:93:3c:cd:bc:a1:02:b9:71:b8:9e: 4c:b0:9f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM1QkIxMTAvBgNVBAUTKDM1RjU4RDg2MUM0MUJERkVBNDZCOEM3MjkwQjFBQUM2 NzBFN0NDMUIwHhcNMjUwNDI4MTkzMzU5WhcNMjUwNTA1MTkzMzU5WjAYMRYwFAYD VQQDEw02ODBmZDgyNy03YzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaXvKxRFldP1lwaOT1KX2TI1S5WsQGGz6OPa+1l2XHUq9EXzmkvM2EdwfxpN rHKKIkX+elwgVWu7ek+Jay2DiTI/5UZ2pTFiAlEB34V3aOBM3waPFWrVwYyiGsrk mUue+Wtxj5aKblDPj4LettftvZ94ckUxf32yiG0W0VQGHC4PGoRQ1BepasJXcEfi b9dbBGdW+xaD7j/XTF93bIQuWvxacyK9zrM148PptB3ByFRNvpAhN2Q1QN2DhBzd 0nVgJIXQoO3arGX55PTmSCAib8HLj90wx0p/AbAlUtMxvft5hzs2mvAEQW4kEJgk mAiKw3TuuU7fbsmI49QLn+2NmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRmJFlK rT36EDqwWiQOCud0hVq2MB8GA1UdIwQYMBaAFDX1jYYcQb3+pGuMcpCxqsZw58wb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzVCQi81Nzg5QjFBNDND MDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZmNmthNHh5a0xHcXhuRG56 QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05mV05oaHhCdmY2a2E0eHlrTEdxeG5EbnpCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzVCQi81Nzg5QjFBNDNDMDAxMUVBQjgxNzk3MzRDNEY5QUUwMi9OZldOaGh4QnZm NmthNHh5a0xHcXhuRG56QnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT2dI1+Fh/wvKmYxiPEIruohINzlOrm3JB/FtVrwA4an4TC6uVGDUs 6/ElOdatRwXoi1MahTqTmkNe2L/EbiIWVIU74dVVfFggPjSkln/MeSYaBSQU35P5 vX4njr65t8ezakbXR1a0zz5Vyk/FB/mvzj+2NS7aUfC9dksAA/0KovFpbFOEq4zH L6LLO5QaPjLfx0YILa7rByMQf/YmR/hq4Zw8oZT18Vh1LqrVPQOqO7MavpF/a1WR mgNDsNhwRzxaDHDQAMyh4xNmeAvVnLwQx+wXmokruW/L8bf0Qx23WFrDM8nWcQrh Nlb8TUUeqvO+EZM8zbyhArlxuJ5MsJ8f -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:48 2025 by rpki-client on console.sobornost.net