$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft File: nssirN4JZ6BYN-WPxzHTV-N2N_g.mft (raw, json) Hash identifier: xaYzG1Np1EeH1g0vhy9lhCaB8in0T0Q46TmVGDszoRA= Subject key identifier: 04:46:1B:2A:4B:6F:0C:EC:56:D1:9E:40:93:64:20:50:8C:1B:7A:D3 Authority key identifier: 9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 Certificate issuer: /CN=A91C6B27/serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft Manifest number: 0B51 Signing time: Thu 24 Apr 2025 19:00:36 +0000 Manifest this update: Thu 24 Apr 2025 19:00:35 +0000 Manifest next update: Thu 01 May 2025 19:00:35 +0000 Files and hashes: 1: nssirN4JZ6BYN-WPxzHTV-N2N_g.crl (hash: 49T/qXRLqJsnlWB84ZmeAtsd+Ke+YPugsy0gtV0xxl4=) 2: 2B1D3BB2305811EA8D5B6479C4F9AE02.roa (hash: y28rLGPdPmm2RMeTHn7TROIYxoMrptjo0yzzyCvWoMs=) 3: E4BB99E2336E11EA94623E18C4F9AE02.roa (hash: dDWf0aYmxu05SE8QIKzfCcmUhn7e971nZnRqmk+LmCo=) 4: E5675F48336E11EA94623E18C4F9AE02.roa (hash: iPbzGQb+v1UtoJ+/xdLJYlI0s4JJe78IGCPidttsEfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6B27, serialNumber=9ECB22ACDE0967A05837E58FC731D357E37637F8 Validity Not Before: Apr 24 19:00:35 2025 GMT Not After : May 1 19:00:35 2025 GMT Subject: CN=680a8a54-8129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:41:a6:64:49:f3:dc:3c:bf:19:90:9e:97:91: 82:32:86:c4:93:b2:88:5b:15:d7:56:3c:39:29:74: 78:db:83:58:56:16:79:89:46:f9:30:a2:86:1d:7b: 91:a5:36:5c:13:42:d4:4e:1b:31:12:69:ff:77:45: 34:bf:38:94:f4:e7:e6:f9:56:3a:00:7a:2b:e9:a7: b8:c1:2d:ea:65:c0:6b:bc:eb:e0:fa:ad:1b:86:41: 0e:31:c8:bc:75:19:b9:70:7b:7e:70:bc:65:14:5d: 40:5c:12:34:a2:0b:a7:ed:56:5f:55:69:1d:17:64: 2b:28:96:58:91:a4:da:56:92:c4:0e:f9:9b:0c:a7: 4d:fe:29:cc:a9:3f:23:a5:09:7e:79:e8:e6:4d:b1: 0b:92:2d:d0:0e:aa:34:7e:58:5b:88:12:ef:81:64: 18:19:75:21:2c:d3:46:ae:48:9e:4a:4a:5e:6f:68: 77:8f:20:44:4d:19:8d:dc:d0:7e:a0:25:7f:52:8a: 3c:83:52:e6:18:1c:51:43:eb:d9:49:6a:64:43:49: 69:ff:71:55:e0:6a:4a:bd:bf:34:c2:b8:3f:9f:8b: ab:50:1e:d2:57:a9:ae:70:7c:21:8d:c6:89:16:0b: aa:e1:d9:e8:8b:73:ed:41:f5:26:d3:db:99:81:03: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:46:1B:2A:4B:6F:0C:EC:56:D1:9E:40:93:64:20:50:8C:1B:7A:D3 X509v3 Authority Key Identifier: keyid:9E:CB:22:AC:DE:09:67:A0:58:37:E5:8F:C7:31:D3:57:E3:76:37:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nssirN4JZ6BYN-WPxzHTV-N2N_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6B27/82BF2BF4305411EAAFC9116EC4F9AE02/nssirN4JZ6BYN-WPxzHTV-N2N_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a4:f7:08:a5:15:6c:12:c4:b0:ef:d8:1a:0f:dd:f6:53:a3: fa:06:23:4e:53:c6:27:df:c0:af:62:aa:60:ef:fa:a4:56:93: cf:db:a0:6d:1e:92:2f:13:5e:12:b0:96:93:b7:5a:b9:3c:1f: a8:02:1f:d5:73:56:f6:35:47:2c:86:e5:2d:1f:f3:f2:6f:94: 8d:5c:74:3a:64:4d:95:e5:30:a9:41:a3:d6:d2:13:ae:0a:6b: bf:dd:be:ca:88:df:b7:df:c7:2c:9d:d5:4d:d9:65:5b:ac:69: 3b:47:86:7c:4f:1b:51:f8:58:ec:d4:98:9e:f1:fa:2c:f5:e0: 99:3b:de:7b:c7:1f:47:52:37:1f:bd:f9:a5:21:12:26:d9:53: 86:4a:76:d3:da:a8:cb:ae:3f:fb:91:c1:02:d7:78:e5:7f:94: 17:85:9c:ce:1f:ba:d7:af:83:0c:ec:12:bf:d5:d6:24:c9:48: b0:e7:85:7e:07:f2:a7:a4:e0:fd:cc:53:67:65:15:96:ac:71: 7a:58:63:e3:a7:c0:b1:9d:ef:2a:bc:ea:06:98:7c:82:0f:5c: f1:4f:26:95:e6:b0:e6:79:37:82:82:a0:18:9b:d6:88:50:62: b8:52:5e:0d:2c:50:a2:3d:0f:06:42:76:48:6c:28:0f:83:08: 24:c8:c5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCMjcxMTAvBgNVBAUTKDlFQ0IyMkFDREUwOTY3QTA1ODM3RTU4RkM3MzFEMzU3 RTM3NjM3RjgwHhcNMjUwNDI0MTkwMDM1WhcNMjUwNTAxMTkwMDM1WjAYMRYwFAYD VQQDEw02ODBhOGE1NC04MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60GmZEnz3Dy/GZCel5GCMobEk7KIWxXXVjw5KXR424NYVhZ5iUb5MKKGHXuR pTZcE0LUThsxEmn/d0U0vziU9Ofm+VY6AHor6ae4wS3qZcBrvOvg+q0bhkEOMci8 dRm5cHt+cLxlFF1AXBI0ogun7VZfVWkdF2QrKJZYkaTaVpLEDvmbDKdN/inMqT8j pQl+eejmTbELki3QDqo0flhbiBLvgWQYGXUhLNNGrkieSkpeb2h3jyBETRmN3NB+ oCV/Uoo8g1LmGBxRQ+vZSWpkQ0lp/3FV4GpKvb80wrg/n4urUB7SV6mucHwhjcaJ Fguq4dnoi3PtQfUm09uZgQMHTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARGGypL bwzsVtGeQJNkIFCMG3rTMB8GA1UdIwQYMBaAFJ7LIqzeCWegWDflj8cx01fjdjf4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkIyNy84MkJGMkJGNDMw NTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2QllOLVdQeHpIVFYtTjJO X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25zc2lyTjRKWjZCWU4tV1B4ekhUVi1OMk5fZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkIyNy84MkJGMkJGNDMwNTQxMUVBQUZDOTExNkVDNEY5QUUwMi9uc3Npck40Slo2 QllOLVdQeHpIVFYtTjJOX2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2pPcIpRVsEsSw79gaD932U6P6BiNOU8Yn38CvYqpg7/qkVpPP26Bt HpIvE14SsJaTt1q5PB+oAh/Vc1b2NUcshuUtH/Pyb5SNXHQ6ZE2V5TCpQaPW0hOu Cmu/3b7KiN+338csndVN2WVbrGk7R4Z8TxtR+Fjs1Jie8fos9eCZO957xx9HUjcf vfmlIRIm2VOGSnbT2qjLrj/7kcEC13jlf5QXhZzOH7rXr4MM7BK/1dYkyUiw54V+ B/KnpOD9zFNnZRWWrHF6WGPjp8Cxne8qvOoGmHyCD1zxTyaV5rDmeTeCgqAYm9aI UGK4Ul4NLFCiPQ8GQnZIbCgPgwgkyMV0 -----END CERTIFICATE-----Generated at Thu Apr 24 20:39:20 2025 by rpki-client on console.sobornost.net