$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft File: nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft (raw, json) Hash identifier: 5DHJL3jf9Qh3oUvDT9Ed49e1aBG1YXcVLA5MT5fnTTo= Subject key identifier: F1:AB:C9:A6:EB:A8:DF:F2:B9:6F:85:B6:BD:A2:74:E0:15:AB:17:A1 Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft Manifest number: FA Signing time: Sun 27 Apr 2025 04:12:42 +0000 Manifest this update: Sun 27 Apr 2025 04:12:42 +0000 Manifest next update: Sun 04 May 2025 04:12:42 +0000 Files and hashes: 1: nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl (hash: 6Dykxn1K4nke9GOChriNYmFBPtZC29cqm7ZHrgy953s=) 2: 09E42D1E921B11EF829E0041C4F9AE02.roa (hash: B4bx9kA0p4n5ASz52WYMBOS7rU+I5DT2fmWjDq/qssM=) 3: 51E59058921B11EFB656CB41C4F9AE02.roa (hash: ZDrCMxxOwwuqNF0Q4xD3EvKSvIiYcNvuSOn5SbIs2mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9 Validity Not Before: Apr 27 04:12:42 2025 GMT Not After : May 4 04:12:42 2025 GMT Subject: CN=680daeba-3878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:3d:89:f4:e5:0f:ec:dd:94:77:07:9e:61: 58:11:5f:aa:d5:0c:c4:36:83:aa:88:dd:b6:06:ca: fc:ea:53:58:7e:e8:3b:ac:3f:60:31:22:20:59:29: a2:3e:1d:d5:66:ca:0e:b8:62:2b:f3:a8:00:0c:ac: f7:3b:47:93:61:0a:c9:ee:d2:06:d2:07:aa:f6:95: e2:e8:ce:70:c9:66:38:ad:fc:2c:2f:ec:53:45:57: 9c:c4:30:6f:cb:aa:6d:03:95:c1:85:b4:ad:a9:38: 19:3f:c1:f9:35:90:65:85:69:c4:7e:f1:77:84:43: b1:c0:51:3d:28:40:fc:84:cf:1a:5c:09:aa:a9:a2: ce:5b:2f:2b:f5:d7:04:10:c6:3c:4a:59:04:38:30: 65:b6:30:0f:fe:1c:9f:32:54:c4:68:5c:d2:dc:ab: 18:b0:98:c8:86:d0:3d:39:39:7c:25:55:52:73:90: 12:99:c6:dc:e1:83:7f:b4:b5:c0:06:40:b1:6b:17: aa:30:f9:53:f6:29:29:95:c0:44:59:f4:69:c0:bb: 16:95:91:d4:ab:e8:8f:c5:9c:30:69:6c:1f:8a:ad: a1:da:37:23:9a:70:3f:fe:8c:d0:4f:19:75:82:76: a6:35:e1:2d:b2:ef:5f:11:15:c1:67:ae:6a:0f:63: a8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AB:C9:A6:EB:A8:DF:F2:B9:6F:85:B6:BD:A2:74:E0:15:AB:17:A1 X509v3 Authority Key Identifier: keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:c5:2f:7a:da:ee:30:a7:b9:ec:c9:4b:5e:10:3a:39:b9:01: f6:73:0c:07:4e:b9:6b:29:25:d9:bc:38:21:a1:8d:17:8c:d7: 19:c6:4f:8d:34:88:d6:48:b0:ed:43:d5:58:25:1f:f2:66:da: d9:0e:bf:4a:e9:1f:3a:08:dd:7c:54:8e:8c:0a:05:fd:ec:e4: 14:45:0e:ed:9e:39:cf:d7:1c:6e:85:d9:42:0e:ea:72:25:f3: 4a:0f:e4:d0:b1:5a:56:70:be:66:36:65:fc:7b:55:c3:b9:9a: 0d:41:3d:30:c2:15:f4:37:8f:21:bf:47:7d:a7:eb:15:2a:47: f1:de:a2:2d:05:45:b5:8b:23:2c:b2:ba:05:c4:22:46:7b:18: b3:ab:65:bd:f8:56:1e:14:41:d9:61:5f:ed:a8:9e:d0:9c:33: ce:c6:7b:f9:38:8c:53:35:ba:35:01:6a:6b:58:d0:6e:e1:c3: ab:d0:68:f1:a0:e0:6c:af:d7:1e:c4:0d:2b:c6:ba:fa:5c:5d: eb:9f:87:f3:67:a3:fc:91:a1:26:fa:96:c3:dd:3f:9f:42:70: 58:fc:04:f2:4a:f9:14:a8:94:25:a5:54:d5:a9:a1:2e:6e:57: c1:c8:bb:28:d4:af:e4:43:b8:3a:ac:ff:41:db:5c:9b:cd:ed: a3:d3:a2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDQUYxMTAvBgNVBAUTKDlGMDJEQTNBQjVGQjQ1MzE3NTA3QzQ4MDIxQ0UwQThC OTM3MjU1QzkwHhcNMjUwNDI3MDQxMjQyWhcNMjUwNTA0MDQxMjQyWjAYMRYwFAYD VQQDEw02ODBkYWViYS0zODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8s9ifTlD+zdlHcHnmFYEV+q1QzENoOqiN22Bsr86lNYfug7rD9gMSIgWSmi Ph3VZsoOuGIr86gADKz3O0eTYQrJ7tIG0geq9pXi6M5wyWY4rfwsL+xTRVecxDBv y6ptA5XBhbStqTgZP8H5NZBlhWnEfvF3hEOxwFE9KED8hM8aXAmqqaLOWy8r9dcE EMY8SlkEODBltjAP/hyfMlTEaFzS3KsYsJjIhtA9OTl8JVVSc5ASmcbc4YN/tLXA BkCxaxeqMPlT9ikplcBEWfRpwLsWlZHUq+iPxZwwaWwfiq2h2jcjmnA//ozQTxl1 gnamNeEtsu9fERXBZ65qD2OoeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGryabr qN/yuW+Ftr2idOAVqxehMB8GA1UdIwQYMBaAFJ8C2jq1+0UxdQfEgCHOCouTclXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkNBRi9GM0UwRkFFNEI2 RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JURjFCOFNBSWM0S2k1TnlW Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL253TGFPclg3UlRGMUI4U0FJYzRLaTVOeVZjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkNBRi9GM0UwRkFFNEI2RjQxMUVFQUMyMDM4MTBDNEY5QUUwMi9ud0xhT3JYN1JU RjFCOFNBSWM0S2k1TnlWY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlxS962u4wp7nsyUteEDo5uQH2cwwHTrlrKSXZvDghoY0XjNcZxk+N NIjWSLDtQ9VYJR/yZtrZDr9K6R86CN18VI6MCgX97OQURQ7tnjnP1xxuhdlCDupy JfNKD+TQsVpWcL5mNmX8e1XDuZoNQT0wwhX0N48hv0d9p+sVKkfx3qItBUW1iyMs sroFxCJGexizq2W9+FYeFEHZYV/tqJ7QnDPOxnv5OIxTNbo1AWprWNBu4cOr0Gjx oOBsr9cexA0rxrr6XF3rn4fzZ6P8kaEm+pbD3T+fQnBY/ATySvkUqJQlpVTVqaEu blfByLso1K/kQ7g6rP9B21ybze2j06LJ -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net