$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft File: nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft (raw, json) Hash identifier: 3E8IaB1yXqI0ickbMrGhBjuSBNeu/tnjBEc3BiORt1Y= Subject key identifier: 27:0D:51:6D:A8:A0:35:B1:72:D9:26:2C:89:D1:AF:1A:41:F0:0D:18 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 29F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft Manifest number: 29ED Signing time: Mon 28 Apr 2025 14:24:26 +0000 Manifest this update: Mon 28 Apr 2025 14:24:26 +0000 Manifest next update: Mon 05 May 2025 14:24:26 +0000 Files and hashes: 1: nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl (hash: oYMykcVSiqqbiowPg5RekwJhGh/YNin0xi1N2LBrN5A=) 2: F9722F8255C411E9A0FEF781C4F9AE02.roa (hash: 7nXeTuR6Lk+Z8nTiU9kBUgYIuWYLSQwBB8CP9oDRsnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10743 (0x29f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Apr 28 14:24:26 2025 GMT Not After : May 5 14:24:26 2025 GMT Subject: CN=680f8f9a-1a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:46:8a:42:52:75:2c:30:ca:94:3f:4d:54: 4a:3d:c2:38:93:c9:88:34:bd:be:a9:43:b4:dd:15: c0:e6:16:71:94:c2:9e:d8:99:19:8e:d6:11:1e:7f: 93:6e:21:db:3f:94:9c:3a:09:e6:7b:6a:b0:4c:f8: ac:3e:24:74:99:2f:37:a7:84:99:3e:3b:2b:62:df: 5f:26:cb:dc:e9:63:01:de:12:6f:88:75:76:2d:93: bf:25:f2:6e:8a:6f:31:ab:2a:4b:d5:f6:05:7b:b8: ec:75:bf:da:8a:04:56:1b:b2:4a:66:1e:2a:e8:76: 47:40:3b:57:a0:12:10:4f:ab:68:55:2c:a2:10:96: a0:1f:0b:c4:b1:c8:69:52:e9:22:a6:d1:c1:41:00: 54:16:b5:65:e4:0e:28:53:80:ee:28:56:39:96:c0: 4b:44:cd:5d:57:f2:20:94:ba:6d:c2:49:18:09:09: c9:1c:2d:0f:07:9c:69:39:fa:2a:b9:8a:90:a1:44: 55:eb:24:4c:bd:75:7a:98:a4:95:9b:89:fb:a9:39: 61:0d:e1:2f:de:36:22:18:7f:00:74:65:4a:70:31: 0a:a7:85:b8:de:bb:a3:88:df:fa:f0:03:ba:c9:ed: 0a:82:d6:8e:2b:de:52:dc:47:71:46:49:71:8f:3d: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0D:51:6D:A8:A0:35:B1:72:D9:26:2C:89:D1:AF:1A:41:F0:0D:18 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:bc:b9:86:12:56:42:cb:24:26:57:c6:c3:e5:10:de:72:6b: 26:b6:8b:82:b8:24:a8:cb:50:d1:f2:76:97:26:1e:67:68:fc: 85:97:78:3d:e5:86:72:a8:0e:92:c7:a5:65:ff:ba:7d:ed:92: 1e:81:be:21:c7:2f:1c:0f:f8:a6:fc:a6:24:f2:91:7d:c5:8f: 6c:ba:d6:98:bb:bf:88:f9:7c:49:5f:49:97:39:5d:e7:7b:e0: c0:01:74:5a:0c:44:a7:4e:05:77:19:86:f7:cf:77:15:9b:9a: 3e:af:96:d5:5a:1a:3d:32:42:16:ac:f9:09:4b:02:65:0a:5c: 55:98:ea:9d:57:39:16:6c:03:f1:de:bd:db:1b:9e:c3:ef:82: ff:8d:c5:40:27:50:36:c5:e5:38:fb:21:6d:f5:7b:26:34:3c: 6c:b4:a4:c1:82:0a:b0:a4:b2:46:dd:8a:22:c0:e5:75:9e:24: b2:0f:e4:0d:6f:cb:91:9c:76:d7:d0:f9:16:31:68:e7:20:ba: b3:c1:50:a4:4f:59:32:58:25:f4:23:31:1d:aa:33:36:c0:2f: f5:c5:f4:ab:08:c9:7e:a2:1e:f0:c7:e9:56:6a:37:f7:22:5b: 02:2d:4d:57:f4:af:b7:68:ac:19:5c:d5:c7:13:5a:71:98:30: ab:34:8d:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjUwNDI4MTQyNDI2WhcNMjUwNTA1MTQyNDI2WjAYMRYwFAYD VQQDEw02ODBmOGY5YS0xYTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy85GikJSdSwwypQ/TVRKPcI4k8mINL2+qUO03RXA5hZxlMKe2JkZjtYRHn+T biHbP5ScOgnme2qwTPisPiR0mS83p4SZPjsrYt9fJsvc6WMB3hJviHV2LZO/JfJu im8xqypL1fYFe7jsdb/aigRWG7JKZh4q6HZHQDtXoBIQT6toVSyiEJagHwvEschp UukiptHBQQBUFrVl5A4oU4DuKFY5lsBLRM1dV/IglLptwkkYCQnJHC0PB5xpOfoq uYqQoURV6yRMvXV6mKSVm4n7qTlhDeEv3jYiGH8AdGVKcDEKp4W43rujiN/68AO6 ye0KgtaOK95S3EdxRklxjz12hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcNUW2o oDWxctkmLInRrxpB8A0YMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE5RS9BOTNFOTkzRTM0MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4 N1NQdkx0cXhub1ZEam44SW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCivLmGElZCyyQmV8bD5RDecmsmtouCuCSoy1DR8naXJh5naPyFl3g9 5YZyqA6Sx6Vl/7p97ZIegb4hxy8cD/im/KYk8pF9xY9sutaYu7+I+XxJX0mXOV3n e+DAAXRaDESnTgV3GYb3z3cVm5o+r5bVWho9MkIWrPkJSwJlClxVmOqdVzkWbAPx 3r3bG57D74L/jcVAJ1A2xeU4+yFt9XsmNDxstKTBggqwpLJG3YoiwOV1niSyD+QN b8uRnHbX0PkWMWjnILqzwVCkT1kyWCX0IzEdqjM2wC/1xfSrCMl+oh7wx+lWajf3 IlsCLU1X9K+3aKwZXNXHE1pxmDCrNI2r -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:07 2025 by rpki-client on console.sobornost.net