$ rpki-client -vvf rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft File: nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft (raw, json) Hash identifier: mOJYI6/9HxQ0Lz3j4zntkty/bUGauMPzeNcmVGnz1BU= Subject key identifier: 4D:BA:C5:C8:73:1B:4F:6E:3A:17:F4:68:BE:A0:57:C7:A3:9D:C1:4F Authority key identifier: 9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 Certificate issuer: /CN=A9175906/serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft Manifest number: 0429 Signing time: Mon 03 Nov 2025 00:17:42 +0000 Manifest this update: Mon 03 Nov 2025 00:17:42 +0000 Manifest next update: Mon 10 Nov 2025 00:17:42 +0000 Files and hashes: 1: nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl (hash: 9D/jdJJKlxBKf1xj+0dVAHstxrMb+L6V37xTwJuk+h0=) 2: 27A6D5CAAF1C11EC94FF9534C4F9AE02.roa (hash: tuiOvz0EtN5gYIcDBljazRXB+32WdpyvWw0LqnkHLT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175906, serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686 Validity Not Before: Nov 3 00:17:42 2025 GMT Not After : Nov 10 00:17:42 2025 GMT Subject: CN=6907f4a6-ae63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:50:b0:39:da:09:f7:57:47:a0:88:ca:6c: fd:c2:76:4c:12:30:e1:19:55:90:b3:d9:b9:40:29: b9:e2:61:41:ef:f4:59:ea:66:3c:96:54:08:41:a2: 5a:12:b9:38:d0:dd:1b:f1:35:02:62:25:6d:61:53: e6:0c:f8:3c:0e:94:79:09:cc:b5:8e:3f:d9:2d:fa: 91:d0:9b:b3:52:8c:37:8c:75:1e:77:d6:42:61:6b: 7a:e9:5c:9c:29:60:86:42:bb:52:41:b2:44:9b:d8: ce:32:c9:a4:34:ef:7a:f1:3f:08:7d:99:bf:82:0b: 41:d7:53:18:c6:9b:23:b8:0d:1a:c0:a4:0d:e9:e5: 25:e9:7e:a3:47:d0:af:51:79:de:38:c6:6c:c0:b9: ca:c3:18:1e:36:b4:51:64:b5:24:a6:75:0c:41:d2: ab:41:31:3a:c5:f7:4e:21:57:64:87:8d:ed:c8:01: 2f:f0:7a:e6:19:e1:8b:26:a6:10:0e:44:11:aa:70: 23:ea:95:50:5c:90:f5:0c:32:f7:1e:a9:9d:0e:8b: 83:6f:50:00:fa:9b:fc:e7:92:a7:f2:7e:b7:09:3f: 94:e2:14:64:14:ea:e3:1c:23:f7:3c:cf:bf:ec:8b: 0f:be:a3:3e:7e:a1:2a:da:71:26:66:2b:03:ed:63: 5a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:BA:C5:C8:73:1B:4F:6E:3A:17:F4:68:BE:A0:57:C7:A3:9D:C1:4F X509v3 Authority Key Identifier: keyid:9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:58:94:09:30:17:4e:4a:03:69:0b:3a:42:89:72:5a:c0:8a: ec:17:0c:13:5e:86:6e:fc:ac:07:13:13:ba:d2:1e:34:0b:06: b4:4f:b0:e0:b7:98:d8:8e:ce:44:23:ea:96:e0:99:f4:3d:c4: 65:02:82:ff:f8:89:5a:0b:cb:f5:46:b8:20:a5:a4:1e:9d:ca: a7:c5:cf:b9:da:80:5a:4a:61:3b:bc:20:06:72:e3:f4:2b:08: 8b:85:15:49:25:3b:7f:9b:2d:66:66:61:16:15:f5:a7:14:74: c0:14:b2:3f:aa:e0:a3:bf:49:3d:54:66:70:31:9d:30:4e:51: ed:71:da:5e:5e:ad:ea:2f:87:19:1a:cc:5a:d2:db:ce:9e:d5: 98:65:0a:7e:0d:c5:fc:56:05:8d:a6:d9:44:b3:dd:32:2e:ce: 19:93:cb:a6:69:2a:70:46:e1:8a:eb:36:78:c1:ec:41:a4:74: ff:82:4b:c5:41:7b:68:03:9f:d7:08:9a:9b:82:0c:b3:ad:33: 25:b7:74:1d:19:c7:a5:cc:b2:1f:6f:5f:ca:dd:f3:3b:ff:35: 59:58:35:64:ca:6f:ff:30:cd:f4:04:d3:74:5c:bb:68:6d:02: de:5c:b8:88:9a:9b:45:bb:d5:07:8e:81:0b:2b:84:2f:7b:3f: 4f:20:27:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MDYxMTAvBgNVBAUTKDlEMUJBQ0Q0MEE4MjU5OTI0Q0QyQzU2OTUxQTQzRTBC Rjg3MkQ2ODYwHhcNMjUxMTAzMDAxNzQyWhcNMjUxMTEwMDAxNzQyWjAYMRYwFAYD VQQDEw02OTA3ZjRhNi1hZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKlQsDnaCfdXR6CIymz9wnZMEjDhGVWQs9m5QCm54mFB7/RZ6mY8llQIQaJa Erk40N0b8TUCYiVtYVPmDPg8DpR5Ccy1jj/ZLfqR0JuzUow3jHUed9ZCYWt66Vyc KWCGQrtSQbJEm9jOMsmkNO968T8IfZm/ggtB11MYxpsjuA0awKQN6eUl6X6jR9Cv UXneOMZswLnKwxgeNrRRZLUkpnUMQdKrQTE6xfdOIVdkh43tyAEv8HrmGeGLJqYQ DkQRqnAj6pVQXJD1DDL3HqmdDouDb1AA+pv855Kn8n63CT+U4hRkFOrjHCP3PM+/ 7IsPvqM+fqEq2nEmZisD7WNazwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE26xchz G09uOhf0aL6gV8ejncFPMB8GA1UdIwQYMBaAFJ0brNQKglmSTNLFaVGkPgv4ctaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkwNi84Q0NDQ0JBNDgz RTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1daSk0wc1ZwVWFRLUNfaHkx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SdXMxQXFDV1pKTTBzVnBVYVEtQ19oeTFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkwNi84Q0NDQ0JBNDgzRTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1da Sk0wc1ZwVWFRLUNfaHkxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjWJQJMBdOSgNpCzpCiXJawIrsFwwTXoZu/KwHExO60h40Cwa0T7Dg t5jYjs5EI+qW4Jn0PcRlAoL/+IlaC8v1RrggpaQencqnxc+52oBaSmE7vCAGcuP0 KwiLhRVJJTt/my1mZmEWFfWnFHTAFLI/quCjv0k9VGZwMZ0wTlHtcdpeXq3qL4cZ Gsxa0tvOntWYZQp+DcX8VgWNptlEs90yLs4Zk8umaSpwRuGK6zZ4wexBpHT/gkvF QXtoA5/XCJqbggyzrTMlt3QdGcelzLIfb1/K3fM7/zVZWDVkym//MM30BNN0XLto bQLeXLiImptFu9UHjoELK4Qvez9PICeD -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:09 2025 by rpki-client