$ rpki-client -vvf rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft File: nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft (raw, json) Hash identifier: PneBaaV0Zf1YnRcQyiXxHVdBNcd+8r5uRacyvuSIzAE= Subject key identifier: BD:55:89:C3:84:62:89:99:FA:92:79:6D:EC:DD:9A:A3:58:25:02:95 Authority key identifier: 9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 Certificate issuer: /CN=A9175906/serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft Manifest number: 03BE Signing time: Thu 03 Apr 2025 00:40:29 +0000 Manifest this update: Thu 03 Apr 2025 00:40:29 +0000 Manifest next update: Thu 10 Apr 2025 00:40:29 +0000 Files and hashes: 1: nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl (hash: b/uR1uPJgfc7hWpXnOZSRC7goMJIKC56Boxe+xjxWOg=) 2: 27A6D5CAAF1C11EC94FF9534C4F9AE02.roa (hash: tuiOvz0EtN5gYIcDBljazRXB+32WdpyvWw0LqnkHLT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175906 Validity Not Before: Apr 3 00:40:29 2025 GMT Not After : Apr 10 00:40:29 2025 GMT Subject: CN=67edd8fd-658b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:2a:56:4e:c7:aa:ac:19:fc:57:e8:ff:33: 22:39:4a:b9:8f:e5:f8:71:e6:37:d8:20:75:1a:d4: 4f:7a:c7:88:d1:30:fa:ee:8b:40:71:06:7e:66:65: 1b:9c:8f:1c:2f:2c:7c:ef:55:5e:ff:e7:da:ef:b1: ff:68:1b:8c:bd:df:68:f9:0c:5a:df:59:07:ac:cf: 68:ce:22:41:9f:34:24:f0:51:be:b5:51:97:8a:49: d5:30:44:b3:e3:a5:0b:f9:f0:a6:c5:47:28:0d:9f: 81:0c:0b:33:02:a1:47:b0:97:d9:21:ae:e5:4d:3c: 0e:48:2d:71:6b:30:be:4e:d4:5d:90:1f:b1:8b:5b: 39:75:20:2f:b8:ae:75:6e:9b:34:00:76:81:85:fd: 5a:35:6e:ec:4d:05:77:ff:57:c6:1a:88:2a:03:85: 2c:55:84:8b:32:99:35:3b:0a:b8:2d:ab:6e:f5:6b: 29:2b:e9:56:f4:e0:15:e6:32:05:2d:fc:76:9b:5f: 23:d2:2c:b4:04:15:97:78:ac:fa:68:18:4c:c8:bd: 69:5c:08:eb:5d:1a:76:db:e2:26:f9:8f:55:2d:ea: cb:ce:52:36:99:55:7f:03:9a:77:80:64:15:2c:31: 1e:72:2b:a2:39:e2:26:20:d5:79:51:98:38:53:47: b3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:55:89:C3:84:62:89:99:FA:92:79:6D:EC:DD:9A:A3:58:25:02:95 X509v3 Authority Key Identifier: keyid:9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:15:52:7f:68:72:98:4a:f9:69:fa:73:1a:aa:f9:72:cf:08: 4a:dc:40:55:a4:d2:91:5a:82:c7:e0:0a:e6:46:63:40:79:92: 94:c9:ea:0c:da:ad:b4:0d:8d:02:2a:24:14:a4:46:da:26:5e: 06:ed:13:77:5a:65:bb:7a:c1:e1:ec:9e:cf:13:3d:90:8d:6d: b1:f6:c8:59:9e:6f:fb:a8:e6:4c:1c:01:1d:54:d3:a4:28:a4: f8:cf:6e:ce:91:a1:de:34:ab:d2:5b:1d:c9:a1:e7:b3:6e:11: 65:d7:fe:16:35:ac:f5:a7:f2:7d:78:10:55:01:ce:c1:ca:d6: e5:3a:a9:84:ca:af:2d:de:16:25:fb:a0:e0:8e:6e:fa:f1:99: f1:70:78:a6:03:31:20:79:4a:42:85:de:95:44:0f:b1:5b:2e: d6:38:d1:7a:a3:88:f9:c3:40:a2:ab:2d:35:ab:06:fd:01:50: 7c:d3:8d:1d:0c:b9:f1:79:f3:86:c4:c1:e2:40:92:aa:a3:aa: 83:5b:81:43:93:f2:ba:ee:4c:32:a6:70:28:98:ed:60:ce:d1: a0:d8:56:f5:e5:49:7c:18:24:90:c2:b4:65:56:c3:db:d5:50: db:48:8f:fa:9d:66:17:f8:7a:a4:c4:0f:a4:cc:84:84:9c:98: 8f:84:ce:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MDYxMTAvBgNVBAUTKDlEMUJBQ0Q0MEE4MjU5OTI0Q0QyQzU2OTUxQTQzRTBC Rjg3MkQ2ODYwHhcNMjUwNDAzMDA0MDI5WhcNMjUwNDEwMDA0MDI5WjAYMRYwFAYD VQQDEw02N2VkZDhmZC02NThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM4qVk7HqqwZ/Ffo/zMiOUq5j+X4ceY32CB1GtRPeseI0TD67otAcQZ+ZmUb nI8cLyx871Ve/+fa77H/aBuMvd9o+Qxa31kHrM9oziJBnzQk8FG+tVGXiknVMESz 46UL+fCmxUcoDZ+BDAszAqFHsJfZIa7lTTwOSC1xazC+TtRdkB+xi1s5dSAvuK51 bps0AHaBhf1aNW7sTQV3/1fGGogqA4UsVYSLMpk1Owq4Latu9WspK+lW9OAV5jIF Lfx2m18j0iy0BBWXeKz6aBhMyL1pXAjrXRp22+Im+Y9VLerLzlI2mVV/A5p3gGQV LDEeciuiOeImINV5UZg4U0ezWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1VicOE YomZ+pJ5bezdmqNYJQKVMB8GA1UdIwQYMBaAFJ0brNQKglmSTNLFaVGkPgv4ctaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkwNi84Q0NDQ0JBNDgz RTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1daSk0wc1ZwVWFRLUNfaHkx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SdXMxQXFDV1pKTTBzVnBVYVEtQ19oeTFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkwNi84Q0NDQ0JBNDgzRTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1da Sk0wc1ZwVWFRLUNfaHkxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNFVJ/aHKYSvlp+nMaqvlyzwhK3EBVpNKRWoLH4ArmRmNAeZKUyeoM 2q20DY0CKiQUpEbaJl4G7RN3WmW7esHh7J7PEz2QjW2x9shZnm/7qOZMHAEdVNOk KKT4z27OkaHeNKvSWx3JoeezbhFl1/4WNaz1p/J9eBBVAc7BytblOqmEyq8t3hYl +6Dgjm768ZnxcHimAzEgeUpChd6VRA+xWy7WONF6o4j5w0Ciqy01qwb9AVB8040d DLnxefOGxMHiQJKqo6qDW4FDk/K67kwypnAomO1gztGg2Fb15Ul8GCSQwrRlVsPb 1VDbSI/6nWYX+HqkxA+kzISEnJiPhM4w -----END CERTIFICATE-----Generated at Fri Apr 4 22:01:43 2025 by rpki-client