$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft File: nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json) Hash identifier: 1fjwlY6p3jenrZFzstdOeEkr6O0ygUHL4TdaaESlXPo= Subject key identifier: 92:D8:6A:BC:93:B6:6D:42:7B:1E:D0:00:EC:72:5F:8E:41:C3:17:02 Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C Certificate issuer: /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft Manifest number: 348A Signing time: Mon 28 Apr 2025 14:49:22 +0000 Manifest this update: Mon 28 Apr 2025 14:49:22 +0000 Manifest next update: Mon 05 May 2025 14:49:22 +0000 Files and hashes: 1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: mUxP7s22V70ukTJSlfbnTDLw+ejFnKVXYJqRYLrggpM=) 2: 2251B910AC7411EBBE196180C4F9AE02.roa (hash: 0oRyzqVuAdePO5EPsN2BuW/GIZU57nKR40ge4zIrFQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C Validity Not Before: Apr 28 14:49:22 2025 GMT Not After : May 5 14:49:22 2025 GMT Subject: CN=680f9572-fd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:09:84:5e:92:5e:f6:1a:53:ce:3d:38:3a: 86:1b:97:3c:e9:38:cf:fc:3c:c0:32:3a:77:28:52: bd:3a:77:19:fe:6b:8c:81:ae:8d:b9:c4:60:0b:e3: 5c:50:fb:fd:59:4a:d4:65:cf:c4:e9:89:a1:97:7a: 62:c4:50:f4:8e:67:9c:71:f5:a5:e9:82:8f:9a:72: c0:d9:ac:31:37:1a:93:b0:3f:2a:82:62:68:d5:b1: a3:43:f9:51:27:1d:fa:17:12:b4:51:89:5a:22:98: 12:e3:50:2a:e4:1f:20:da:01:34:03:a2:00:2b:16: 42:07:ae:4a:8f:d4:e2:ab:59:07:60:32:37:59:0d: fd:28:87:0c:8d:19:fa:12:87:a5:a0:35:70:4a:54: b4:f1:f7:5e:b1:6b:80:9e:44:20:0d:d7:0b:6e:db: c8:77:ca:36:36:da:bb:77:2d:7d:d5:e6:19:5c:2f: ad:b8:85:3a:12:83:9c:ad:b2:fd:76:51:09:01:3e: 8c:36:03:aa:bb:4e:2c:8c:a9:17:a9:41:46:e5:ee: ef:58:e0:09:de:86:56:5e:1a:f2:6d:1c:b6:a6:a0: e1:09:f2:a2:05:04:b5:14:49:05:a6:05:e8:a8:24: 97:4a:25:71:4d:26:dc:05:a6:34:ad:d4:47:17:2f: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D8:6A:BC:93:B6:6D:42:7B:1E:D0:00:EC:72:5F:8E:41:C3:17:02 X509v3 Authority Key Identifier: keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:97:73:0c:2d:cf:8b:e5:9f:71:67:f9:9c:9c:ae:8d:78:b9: 88:c2:86:23:66:d6:02:8a:f1:28:b3:2f:13:a0:52:40:a4:44: 5d:6f:a3:34:81:d5:c9:38:87:85:28:bc:a6:40:30:58:db:3a: 6e:21:99:3c:b3:f7:ab:b5:c2:8f:5c:d0:77:bf:00:46:37:05: a6:d8:fe:25:b1:94:af:c3:f1:15:aa:b9:70:24:6b:35:0b:b2: 18:d6:bd:88:de:29:d2:d2:24:19:82:1f:3d:22:9e:b3:65:c8: bb:9d:d5:50:bc:df:0e:15:4e:d9:20:20:52:79:1c:c5:7f:dd: a1:73:0e:92:11:c9:f9:ad:2b:9c:08:0a:4f:bf:29:b4:76:5a: 0e:27:d7:11:00:e4:fa:3f:04:67:45:85:88:2e:f3:54:e3:03: 84:92:79:fd:ed:64:c3:9e:aa:4c:38:ab:9c:de:88:d5:a2:bb: af:de:6d:73:a3:c5:c6:15:9d:be:23:08:ac:28:61:17:95:83: e9:43:a1:b2:86:5a:24:3e:fa:00:08:24:30:f9:0e:d5:7b:3d: ee:cc:ef:70:13:2a:ce:be:d8:b8:e7:59:90:4b:b8:72:dd:7d: 96:19:3a:35:d3:8a:9d:75:9f:8f:b6:c6:64:69:b2:98:32:f5: a7:b4:3d:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxNjgxMTAvBgNVBAUTKDlEMzQ2RTZEQjM5QzNEMzMwQzFBRkY5NDA2MEUxNTA1 NUZGNEVEMUMwHhcNMjUwNDI4MTQ0OTIyWhcNMjUwNTA1MTQ0OTIyWjAYMRYwFAYD VQQDEw02ODBmOTU3Mi1mZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI0JhF6SXvYaU849ODqGG5c86TjP/DzAMjp3KFK9OncZ/muMga6NucRgC+Nc UPv9WUrUZc/E6Ymhl3pixFD0jmeccfWl6YKPmnLA2awxNxqTsD8qgmJo1bGjQ/lR Jx36FxK0UYlaIpgS41Aq5B8g2gE0A6IAKxZCB65Kj9Tiq1kHYDI3WQ39KIcMjRn6 EoeloDVwSlS08fdesWuAnkQgDdcLbtvId8o2Ntq7dy191eYZXC+tuIU6EoOcrbL9 dlEJAT6MNgOqu04sjKkXqUFG5e7vWOAJ3oZWXhrybRy2pqDhCfKiBQS1FEkFpgXo qCSXSiVxTSbcBaY0rdRHFy9x2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLYaryT tm1Cex7QAOxyX45BwxcCMB8GA1UdIwQYMBaAFJ00bm2znD0zDBr/lAYOFQVf9O0c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjE2OC8yNEM2MkMwNjFE OTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BUTU1Hdi1VQmc0VkJWXzA3 UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUnViYk9jUFRNTUd2LVVCZzRWQlZfMDdSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjE2OC8yNEM2MkMwNjFEOTExMUUyOTI0NDMwRjMwOEIwMkNEMi9uVFJ1YmJPY1BU TU1Hdi1VQmc0VkJWXzA3UncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVl3MMLc+L5Z9xZ/mcnK6NeLmIwoYjZtYCivEosy8ToFJApERdb6M0 gdXJOIeFKLymQDBY2zpuIZk8s/ertcKPXNB3vwBGNwWm2P4lsZSvw/EVqrlwJGs1 C7IY1r2I3inS0iQZgh89Ip6zZci7ndVQvN8OFU7ZICBSeRzFf92hcw6SEcn5rSuc CApPvym0dloOJ9cRAOT6PwRnRYWILvNU4wOEknn97WTDnqpMOKuc3ojVoruv3m1z o8XGFZ2+IwisKGEXlYPpQ6GyhlokPvoACCQw+Q7Vez3uzO9wEyrOvti451mQS7hy 3X2WGTo104qddZ+PtsZkabKYMvWntD1I -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:02 2025 by rpki-client on console.sobornost.net