$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft File: nEKLhAc-vngu7TP5LkDdc2GgnKo.mft (raw, json) Hash identifier: XqxmWtFK++z1gXvGG0qT+Xbx6U90AvVSMFCfvTJzyUc= Subject key identifier: 7C:B5:8A:C3:FA:5A:1A:AE:34:9B:2C:8E:09:2E:10:FD:4C:37:5A:2E Authority key identifier: 9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA Certificate issuer: /CN=A91D8B6F/serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft Manifest number: 0857 Signing time: Sat 26 Apr 2025 20:27:06 +0000 Manifest this update: Sat 26 Apr 2025 20:27:05 +0000 Manifest next update: Sat 03 May 2025 20:27:05 +0000 Files and hashes: 1: nEKLhAc-vngu7TP5LkDdc2GgnKo.crl (hash: p00SL9pMiTqRvcCCgascU0AdUo0RtpiTqX6XXo/XQ2U=) 2: FE60ECB0879311EB84047577C4F9AE02.roa (hash: 7JqfyMrbJ4CL7Io5TdtHAHWsu8lXWZvGXH4eXClkDWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8B6F, serialNumber=9C428B84073EBE782EED33F92E40DD7361A09CAA Validity Not Before: Apr 26 20:27:05 2025 GMT Not After : May 3 20:27:05 2025 GMT Subject: CN=680d4199-8899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e5:24:ab:d3:61:b5:18:31:aa:f6:23:17:8a: 45:c5:b1:20:d6:01:63:fb:9b:26:93:a1:53:37:f7: f4:38:b6:17:fc:7f:77:d6:d6:7a:94:d8:7c:24:c7: be:18:88:14:4d:3b:26:38:de:1b:4d:57:30:df:45: 74:e1:c9:fb:be:11:9b:2d:f6:1b:6d:f5:b1:93:45: d7:48:d4:31:ca:b8:e3:41:a8:0b:48:37:93:e4:36: 0c:8e:26:f9:2a:40:46:d9:ee:6f:84:b0:3b:4f:5f: 2a:69:eb:f4:57:96:65:9b:ea:ee:ad:5c:b7:4b:5f: 30:f9:c1:ad:7b:89:54:e0:4f:3c:aa:cc:4b:ac:02: 31:02:7c:14:ee:42:ec:8b:5b:76:b3:a8:92:ae:f0: 98:63:99:63:07:37:c0:9b:d5:e6:62:c7:5a:c0:b5: 35:80:bb:6d:38:ac:b1:c5:a3:8b:6e:96:20:f5:1c: 1b:da:6c:1a:58:36:e3:c2:1d:4a:a9:1c:b3:a2:f4: f5:5a:08:b8:d2:ab:ef:20:81:18:30:eb:42:25:b2: 4e:9d:dc:24:ad:60:93:44:dd:54:34:c1:aa:72:92: af:c9:1d:a9:49:9c:39:70:7a:8f:c7:6a:32:e6:85: c3:34:9a:c9:2d:f2:ab:f2:74:83:ba:35:2a:9d:55: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B5:8A:C3:FA:5A:1A:AE:34:9B:2C:8E:09:2E:10:FD:4C:37:5A:2E X509v3 Authority Key Identifier: keyid:9C:42:8B:84:07:3E:BE:78:2E:ED:33:F9:2E:40:DD:73:61:A0:9C:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nEKLhAc-vngu7TP5LkDdc2GgnKo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8B6F/E448BF18C4EF11EA87F43810C4F9AE02/nEKLhAc-vngu7TP5LkDdc2GgnKo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:35:96:55:28:9e:8f:b8:b7:a4:2b:c7:7d:a8:3a:49:71:fb: 4a:c1:a2:6d:b9:1e:8f:3d:ef:e1:16:b9:54:e0:0c:83:e5:e5: 6f:4e:18:83:2f:ca:14:d8:de:09:41:85:d4:09:fc:41:99:0b: b4:60:0b:3f:32:5e:61:9d:4d:3d:25:8b:a1:ef:61:e3:49:6c: 15:68:fb:a7:05:65:a9:02:88:ed:f3:ed:c2:48:84:70:53:70: 84:3a:9a:05:cf:e7:5f:ac:d4:59:50:4f:43:eb:b4:ab:40:1b: bb:30:5b:26:31:06:ec:c0:ff:dd:95:2a:c0:1d:8a:68:b5:57: cc:6b:24:d2:76:bc:64:c6:1d:86:b8:a2:4e:96:9b:a3:4e:6a: 67:fa:5f:af:95:ae:04:1b:3c:6d:38:ae:21:96:63:e7:65:8c: d2:74:78:8a:d1:8e:53:72:1d:2b:92:6b:72:94:43:ef:fa:e0: 6b:b3:31:00:ae:2a:c0:32:c5:f6:bc:35:4f:0c:32:6d:9e:61: e3:b4:7c:df:78:fc:0d:f3:59:80:76:5d:5f:e3:0e:49:89:2c: 21:0f:31:8b:64:a0:90:00:d2:db:e9:73:3d:ca:33:ae:2c:0f: 6e:8f:a1:11:75:3f:e2:36:7d:e8:70:1f:ca:36:1c:6b:b2:0c: fe:ab:ea:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCNkYxMTAvBgNVBAUTKDlDNDI4Qjg0MDczRUJFNzgyRUVEMzNGOTJFNDBERDcz NjFBMDlDQUEwHhcNMjUwNDI2MjAyNzA1WhcNMjUwNTAzMjAyNzA1WjAYMRYwFAYD VQQDEw02ODBkNDE5OS04ODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkuUkq9NhtRgxqvYjF4pFxbEg1gFj+5smk6FTN/f0OLYX/H931tZ6lNh8JMe+ GIgUTTsmON4bTVcw30V04cn7vhGbLfYbbfWxk0XXSNQxyrjjQagLSDeT5DYMjib5 KkBG2e5vhLA7T18qaev0V5Zlm+rurVy3S18w+cGte4lU4E88qsxLrAIxAnwU7kLs i1t2s6iSrvCYY5ljBzfAm9XmYsdawLU1gLttOKyxxaOLbpYg9Rwb2mwaWDbjwh1K qRyzovT1Wgi40qvvIIEYMOtCJbJOndwkrWCTRN1UNMGqcpKvyR2pSZw5cHqPx2oy 5oXDNJrJLfKr8nSDujUqnVW2BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy1isP6 WhquNJssjgkuEP1MN1ouMB8GA1UdIwQYMBaAFJxCi4QHPr54Lu0z+S5A3XNhoJyq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEI2Ri9FNDQ4QkYxOEM0 RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZuZ3U3VFA1TGtEZGMyR2du S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25FS0xoQWMtdm5ndTdUUDVMa0RkYzJHZ25Lby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEI2Ri9FNDQ4QkYxOEM0RUYxMUVBODdGNDM4MTBDNEY5QUUwMi9uRUtMaEFjLXZu Z3U3VFA1TGtEZGMyR2duS28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2NZZVKJ6PuLekK8d9qDpJcftKwaJtuR6PPe/hFrlU4AyD5eVvThiD L8oU2N4JQYXUCfxBmQu0YAs/Ml5hnU09JYuh72HjSWwVaPunBWWpAojt8+3CSIRw U3CEOpoFz+dfrNRZUE9D67SrQBu7MFsmMQbswP/dlSrAHYpotVfMayTSdrxkxh2G uKJOlpujTmpn+l+vla4EGzxtOK4hlmPnZYzSdHiK0Y5Tch0rkmtylEPv+uBrszEA rirAMsX2vDVPDDJtnmHjtHzfePwN81mAdl1f4w5JiSwhDzGLZKCQANLb6XM9yjOu LA9uj6ERdT/iNn3ocB/KNhxrsgz+q+q8 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:11 2025 by rpki-client on console.sobornost.net