$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft File: NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft (raw, json) Hash identifier: /c5Q8RYyjU0tptYf+YOVT/Na7g7ppf5TKtNnhALkgng= Subject key identifier: 91:C1:7A:D2:AA:0A:C8:E6:5D:5F:E5:3E:80:CB:C2:81:10:CF:D5:9C Authority key identifier: 36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 Certificate issuer: /CN=A91CFC1C/serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft Manifest number: 012E Signing time: Sun 27 Apr 2025 03:30:21 +0000 Manifest this update: Sun 27 Apr 2025 03:30:20 +0000 Manifest next update: Sun 04 May 2025 03:30:20 +0000 Files and hashes: 1: NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl (hash: RJhVUT891nMTxrd4Khzkp12XfkUDuwYHWhZZkquwp70=) 2: E69E92582C4A11EF91F6202DC4F9AE02.roa (hash: uDYRjWDNbbuer7nADrVfw+s2rVnYHfiATUhAxlq32S0=) 3: B390F78E5CB611EE97D70B78C4F9AE02.roa (hash: LoclVr/421CJQL/D+2O/iwx9gXkx3/NwzPPfEEt2ocM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFC1C, serialNumber=3645CD90E3F43C012DAB3BF3972E86BC94DDD454 Validity Not Before: Apr 27 03:30:20 2025 GMT Not After : May 4 03:30:20 2025 GMT Subject: CN=680da4cd-081b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:74:5a:d5:db:8b:70:4b:18:fa:9a:93:c6: ab:3a:e5:12:92:01:bb:bc:04:5d:fd:11:da:a5:5c: af:50:d9:61:50:27:07:4a:28:ef:4b:3d:40:72:fe: 4e:91:3a:a9:01:17:4e:18:10:1b:7b:c0:ea:fd:94: e3:ab:4e:33:00:c9:d1:60:50:48:26:c7:99:6d:6d: 6c:30:dd:d7:44:4d:65:ee:d0:13:92:5b:ea:6d:4b: 35:54:49:33:3e:72:70:d8:66:6e:6e:58:90:61:47: 9b:c5:7c:cc:65:7e:5b:5f:64:c2:81:e6:c5:1f:d7: 8a:a7:2e:48:b8:dd:7c:9b:6e:e1:6d:7d:d5:bb:79: 3e:5d:8b:73:43:9a:e1:91:e1:83:7b:f7:99:8f:cf: e8:db:22:0b:56:8d:ca:88:42:fe:1e:cc:e6:e1:12: 2c:c3:bd:5f:02:f0:1a:b3:e2:15:1c:14:e6:4e:5d: 9e:15:16:a1:85:01:34:40:30:c5:59:03:0e:2e:c6: c9:bd:19:96:0e:21:03:f7:ae:11:2b:c9:68:72:81: 4c:ff:17:c4:b6:5e:8e:2d:bf:f2:e5:70:7a:d3:72: 38:07:b7:f3:4a:40:ff:7f:5f:e3:79:92:38:51:c7: 99:81:3a:e5:cc:ab:7c:f5:cf:02:39:72:53:a0:77: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C1:7A:D2:AA:0A:C8:E6:5D:5F:E5:3E:80:CB:C2:81:10:CF:D5:9C X509v3 Authority Key Identifier: keyid:36:45:CD:90:E3:F4:3C:01:2D:AB:3B:F3:97:2E:86:BC:94:DD:D4:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkXNkOP0PAEtqzvzly6GvJTd1FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFC1C/3C142B1657FE11EEAA553060C4F9AE02/NkXNkOP0PAEtqzvzly6GvJTd1FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:77:c9:9b:45:5b:96:9b:24:e5:50:75:9e:a6:1e:5e:5f:e6: 77:29:ed:21:3b:87:55:70:1b:77:40:5c:99:13:3b:b6:33:c1: 1d:dd:7c:6b:8c:f8:86:fa:59:5f:4e:1f:52:d7:0b:ce:0c:54: 5f:29:ee:79:fd:83:92:10:fb:38:6c:ac:7c:c2:b4:01:d6:03: cb:27:c6:2f:b6:08:da:41:a2:21:03:76:3d:85:2e:af:4f:7e: 47:dc:da:69:f2:10:5d:69:b7:d1:62:71:ec:c3:aa:eb:6d:98: 39:b4:7a:e6:e5:58:b6:a6:15:d4:c4:c9:5f:e6:4c:76:b2:64: 6f:94:f6:f7:12:6f:ad:72:50:bd:30:a1:c5:f3:7f:39:a9:87: 67:b1:bf:b2:4a:5a:6b:b4:16:16:05:28:49:21:be:e9:8b:f1: bd:b7:01:70:8d:26:02:0b:f4:62:60:e2:5f:83:2c:b1:b0:ec: d4:08:48:71:20:14:a5:d3:7e:32:9a:ec:8d:d1:6f:9c:f2:cc: d1:59:9f:65:1e:51:23:05:d8:91:69:21:69:a7:62:ef:6b:46: f1:58:90:4e:0a:4f:2d:67:07:6a:2a:38:d2:65:84:54:15:ec: 00:f3:ed:3d:10:a1:e0:8e:85:29:98:4a:fa:f0:c2:fd:88:ca: 0b:13:8b:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDMUMxMTAvBgNVBAUTKDM2NDVDRDkwRTNGNDNDMDEyREFCM0JGMzk3MkU4NkJD OTREREQ0NTQwHhcNMjUwNDI3MDMzMDIwWhcNMjUwNTA0MDMzMDIwWjAYMRYwFAYD VQQDEw02ODBkYTRjZC0wODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv750WtXbi3BLGPqak8arOuUSkgG7vARd/RHapVyvUNlhUCcHSijvSz1Acv5O kTqpARdOGBAbe8Dq/ZTjq04zAMnRYFBIJseZbW1sMN3XRE1l7tATklvqbUs1VEkz PnJw2GZubliQYUebxXzMZX5bX2TCgebFH9eKpy5IuN18m27hbX3Vu3k+XYtzQ5rh keGDe/eZj8/o2yILVo3KiEL+Hszm4RIsw71fAvAas+IVHBTmTl2eFRahhQE0QDDF WQMOLsbJvRmWDiED964RK8locoFM/xfEtl6OLb/y5XB603I4B7fzSkD/f1/jeZI4 UceZgTrlzKt89c8COXJToHeU2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHBetKq CsjmXV/lPoDLwoEQz9WcMB8GA1UdIwQYMBaAFDZFzZDj9DwBLas785cuhryU3dRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkMxQy8zQzE0MkIxNjU3 RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBBRXRxenZ6bHk2R3ZKVGQx RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05rWE5rT1AwUEFFdHF6dnpseTZHdkpUZDFGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkMxQy8zQzE0MkIxNjU3RkUxMUVFQUE1NTMwNjBDNEY5QUUwMi9Oa1hOa09QMFBB RXRxenZ6bHk2R3ZKVGQxRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3d8mbRVuWmyTlUHWeph5eX+Z3Ke0hO4dVcBt3QFyZEzu2M8Ed3Xxr jPiG+llfTh9S1wvODFRfKe55/YOSEPs4bKx8wrQB1gPLJ8YvtgjaQaIhA3Y9hS6v T35H3Npp8hBdabfRYnHsw6rrbZg5tHrm5Vi2phXUxMlf5kx2smRvlPb3Em+tclC9 MKHF8385qYdnsb+ySlprtBYWBShJIb7pi/G9twFwjSYCC/RiYOJfgyyxsOzUCEhx IBSl034ymuyN0W+c8szRWZ9lHlEjBdiRaSFpp2Lva0bxWJBOCk8tZwdqKjjSZYRU FewA8+09EKHgjoUpmEr68ML9iMoLE4tK -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:12 2025 by rpki-client on console.sobornost.net