$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft File: nhw1MdAEXqOJtoz_koagj7y72L0.mft (raw, json) Hash identifier: iDtctJ02LjihfcpQMHe1UAarhnwVgAFpuI0t8oBzVU8= Subject key identifier: 9E:F9:2D:D5:A5:DA:19:94:D3:3C:10:E0:9D:66:29:87:72:E8:DC:AC Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1EC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft Manifest number: 1DF7 Signing time: Mon 28 Apr 2025 16:14:46 +0000 Manifest this update: Mon 28 Apr 2025 16:14:46 +0000 Manifest next update: Mon 05 May 2025 16:14:46 +0000 Files and hashes: 1: nhw1MdAEXqOJtoz_koagj7y72L0.crl (hash: oWJBL/NSFDwF0IKowu6SY/IoDGC6rcK94oZRcqyfPhw=) 2: EE375CF036BD11E7B9B7251EC4F9AE02.roa (hash: WQm0NEP8l4u4Yk4c6maTYK0oUZXH3BQgntJOjnk6iyg=) 3: 36D3DC38AA9311ECB5C88036C4F9AE02.roa (hash: 6AyDnzx5A4AjZFDON1usGiiqlcfarAtQyPrblWg9aSI=) 4: C81AC00EB14111EB959D4D3CC4F9AE02.roa (hash: PPz+jo2ZglJLUOgv0BMC7+AH2ZHmEK5hCIx98WW3CQI=) 5: 192418F6AA1811EA97BC574CC4F9AE02.roa (hash: 2NrY7syTQnT2b3fwQCo+pNk5LqubHVwUAREOnAdGVSc=) 6: AB549D62125711EF94D14874C4F9AE02.roa (hash: Q15x41gulDIattvR5E6BjIkzM60ANGTWvCg3RJWxG8c=) 7: FA4555AA93DC11EEB00AF628C4F9AE02.roa (hash: B0CVo9ry++sVZy/2rBP2AlbhG4hjHy12hERvlOOeEZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7872 (0x1ec0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Apr 28 16:14:46 2025 GMT Not After : May 5 16:14:46 2025 GMT Subject: CN=680fa976-5020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bb:01:5e:58:9c:60:73:4a:da:5d:c0:45:e9: 32:42:d7:38:9d:38:de:92:41:8e:ee:f8:07:01:df: 9d:cc:3d:84:28:ec:29:db:b4:5a:cc:56:27:ba:57: ab:b3:2e:06:0b:b9:ad:25:a6:61:96:44:56:2e:33: 86:07:02:e4:2d:4f:0f:0e:56:22:79:fa:8f:bf:86: dc:a2:53:0a:f2:89:09:5d:58:98:90:3c:fb:20:8a: ec:b9:d2:16:61:2d:fc:7f:d9:4a:6a:cf:71:e1:25: 33:61:a8:e1:a9:58:11:f1:bf:be:77:63:9f:8c:de: 3a:ae:3e:53:44:7e:88:5a:03:92:30:68:ff:ec:96: 8d:0f:7f:12:11:70:6a:33:a7:25:a4:50:d6:78:48: cb:56:63:c8:5c:31:4d:98:2f:41:71:ba:a9:d7:fe: 23:47:d1:62:5d:a5:e5:71:34:38:d2:b8:ce:25:26: a7:10:02:1c:4e:b5:b2:66:8d:41:a2:30:1e:bb:ee: 57:90:1e:70:05:ac:40:97:1b:85:fb:8c:18:0f:69: b9:71:f8:0d:f6:0d:07:20:bf:16:51:f7:76:ad:0f: 0c:ed:1f:11:69:b1:d4:bf:36:7e:e1:ff:ee:69:92: 31:5e:36:1c:83:a3:17:c2:0a:68:fe:1f:6b:f2:3e: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F9:2D:D5:A5:DA:19:94:D3:3C:10:E0:9D:66:29:87:72:E8:DC:AC X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c8:b9:4a:24:5e:8c:f9:78:42:68:a1:8b:98:60:b5:d6:e7: bc:41:ee:30:0c:ea:48:f8:64:fb:fe:c2:17:9f:a5:8d:9f:e0: 5b:3b:fb:d9:6c:8d:90:91:83:63:6c:5f:91:38:75:d3:88:18: 94:2c:81:49:03:d3:a6:06:de:0d:8b:d6:75:2c:31:70:18:01: 50:24:58:72:5c:18:d4:ee:dc:20:ca:a0:76:49:b0:33:b7:41: 5e:d7:89:b2:04:e8:8a:40:fa:e3:eb:ff:67:9a:6d:8e:04:d2: 73:c8:c5:4a:1d:ee:52:ad:19:f5:69:b1:e5:64:7a:22:29:dd: 7d:30:63:d1:61:b9:a5:2f:de:53:1f:50:55:e2:00:86:f9:29: 8a:f8:c6:9c:fd:f5:ec:b6:b0:1c:4a:9f:4c:e6:39:1c:e9:86: 3a:45:2b:03:29:48:8e:4a:23:2e:b0:14:b5:95:2a:a8:98:4e: 19:f0:ca:e1:0f:b5:f1:fb:b8:c8:e2:3a:0d:b6:c1:9a:6f:4b: c2:21:e3:cf:9a:15:46:51:d6:47:dd:d2:23:42:dd:13:a0:16: 17:75:97:e8:9e:c0:da:b7:09:16:57:0d:02:b9:79:f0:b2:02: 19:db:07:1a:a0:7e:a0:24:6d:67:cd:e6:49:9d:b3:e8:52:29: 71:c7:f6:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjUwNDI4MTYxNDQ2WhcNMjUwNTA1MTYxNDQ2WjAYMRYwFAYD VQQDEw02ODBmYTk3Ni01MDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7LsBXlicYHNK2l3ARekyQtc4nTjekkGO7vgHAd+dzD2EKOwp27RazFYnuler sy4GC7mtJaZhlkRWLjOGBwLkLU8PDlYiefqPv4bcolMK8okJXViYkDz7IIrsudIW YS38f9lKas9x4SUzYajhqVgR8b++d2OfjN46rj5TRH6IWgOSMGj/7JaND38SEXBq M6clpFDWeEjLVmPIXDFNmC9Bcbqp1/4jR9FiXaXlcTQ40rjOJSanEAIcTrWyZo1B ojAeu+5XkB5wBaxAlxuF+4wYD2m5cfgN9g0HIL8WUfd2rQ8M7R8RabHUvzZ+4f/u aZIxXjYcg6MXwgpo/h9r8j7vswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ75LdWl 2hmU0zwQ4J1mKYdy6NysMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTE5OC85OTNGMjA5MEFCQzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhx T0p0b3pfa29hZ2o3eTcyTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5yLlKJF6M+XhCaKGLmGC11ue8Qe4wDOpI+GT7/sIXn6WNn+BbO/vZ bI2QkYNjbF+ROHXTiBiULIFJA9OmBt4Ni9Z1LDFwGAFQJFhyXBjU7twgyqB2SbAz t0Fe14myBOiKQPrj6/9nmm2OBNJzyMVKHe5SrRn1abHlZHoiKd19MGPRYbmlL95T H1BV4gCG+SmK+Mac/fXstrAcSp9M5jkc6YY6RSsDKUiOSiMusBS1lSqomE4Z8Mrh D7Xx+7jI4joNtsGab0vCIePPmhVGUdZH3dIjQt0ToBYXdZfonsDatwkWVw0CuXnw sgIZ2wcaoH6gJG1nzeZJnbPoUilxx/bf -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:13 2025 by rpki-client on console.sobornost.net