$ rpki-client -vvf rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft File: nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft (raw, json) Hash identifier: 3L3SHh7gArEPUG1d3LHDuPf2eP6ffKhnwnWyKtS5xw8= Subject key identifier: 89:18:BA:31:3A:A2:14:3B:82:83:DD:42:1D:ED:B2:28:03:20:AC:84 Authority key identifier: 9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 Certificate issuer: /CN=A9175906/serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft Manifest number: 0422 Signing time: Sun 19 Oct 2025 02:15:57 +0000 Manifest this update: Sun 19 Oct 2025 02:15:56 +0000 Manifest next update: Sun 26 Oct 2025 02:15:56 +0000 Files and hashes: 1: nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl (hash: TyReO7ebWsGae/6edTIznKDBci5mI/HMVfmx/ugdl9k=) 2: 27A6D5CAAF1C11EC94FF9534C4F9AE02.roa (hash: tuiOvz0EtN5gYIcDBljazRXB+32WdpyvWw0LqnkHLT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175906, serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686 Validity Not Before: Oct 19 02:15:56 2025 GMT Not After : Oct 26 02:15:56 2025 GMT Subject: CN=68f449dd-2ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9d:a9:da:0a:ca:52:4d:02:63:41:9c:99:b4: b7:31:38:2f:04:52:43:3f:1f:e3:8a:5d:eb:76:ab: e2:ff:77:91:47:1d:c7:87:4c:f9:4a:ad:7d:83:7e: ad:61:81:9b:a5:19:c0:57:ec:26:70:85:db:41:99: ad:54:91:66:64:84:cf:c7:48:ca:18:ad:62:99:0c: ca:12:a3:2e:d8:c6:f7:75:6f:d4:07:1e:cc:01:eb: 0f:31:db:ff:72:20:21:13:7b:dc:02:7d:c0:ad:50: 9e:67:15:4e:ec:cc:68:b3:2f:71:c1:8c:8e:2a:59: c7:e7:41:37:0e:2f:4d:f1:f7:73:4e:46:da:23:dc: d9:ec:79:19:8a:11:91:d1:59:c6:10:5a:97:01:1a: 32:5e:aa:3e:77:ee:35:9f:1d:f1:9b:d6:18:7a:5c: 2c:84:c8:80:77:ff:4e:02:59:f8:e4:a5:0a:bd:38: c5:2b:07:a9:62:69:35:37:bc:85:76:cd:13:7d:59: e6:ea:5d:24:b7:4e:8e:17:e5:02:39:35:2b:f5:43: 96:4b:f1:ad:b2:a8:5c:99:54:c2:35:db:ff:fa:b8: 34:b8:38:de:0f:0c:2d:25:7e:a1:da:4f:72:7e:fc: ae:4d:a1:b1:cd:9b:d0:bd:84:ad:51:c0:92:23:67: 27:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:18:BA:31:3A:A2:14:3B:82:83:DD:42:1D:ED:B2:28:03:20:AC:84 X509v3 Authority Key Identifier: keyid:9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:23:50:ab:a9:b5:d5:15:cf:0c:63:28:1f:16:da:55:83:fa: e1:83:88:2b:9b:5b:6e:66:bb:74:95:97:d5:94:22:3d:79:65: 6e:7f:48:0b:05:d5:ac:cf:8b:82:f9:c7:ef:e9:5f:18:3a:42: f6:95:99:94:ff:f9:c5:12:a8:82:68:ad:27:c6:4f:18:9d:0c: 49:e9:20:02:e4:8a:56:b9:bb:39:75:5a:5e:d6:62:e0:39:c3: 2c:a3:5c:a5:fb:27:51:e6:12:bf:e3:ac:c7:37:8a:d2:cc:98: 39:01:4f:b4:d8:74:53:04:38:74:cb:d0:9e:f3:af:97:10:d7: 72:07:64:64:84:39:17:cd:4a:c9:1a:14:53:1f:d8:99:db:97: 10:0b:9d:35:3d:92:8c:97:2f:c5:38:13:f0:38:80:50:41:9f: 0c:05:f1:31:b7:20:11:31:cf:3f:6d:d0:24:df:04:2c:04:e1: fa:e4:15:eb:73:7a:2e:c8:5e:d3:96:f3:ae:f3:69:c8:e0:81: 3a:14:a7:dc:08:89:85:67:80:da:7b:37:90:fe:bb:03:55:dd: ca:1b:36:ff:7f:83:48:76:e2:3c:d3:a3:24:37:a1:a6:d8:b5: d6:31:54:1d:52:68:6e:0a:10:56:60:88:dc:21:26:99:95:ae: cb:38:29:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MDYxMTAvBgNVBAUTKDlEMUJBQ0Q0MEE4MjU5OTI0Q0QyQzU2OTUxQTQzRTBC Rjg3MkQ2ODYwHhcNMjUxMDE5MDIxNTU2WhcNMjUxMDI2MDIxNTU2WjAYMRYwFAYD VQQDEw02OGY0NDlkZC0yY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5p2p2grKUk0CY0GcmbS3MTgvBFJDPx/jil3rdqvi/3eRRx3Hh0z5Sq19g36t YYGbpRnAV+wmcIXbQZmtVJFmZITPx0jKGK1imQzKEqMu2Mb3dW/UBx7MAesPMdv/ ciAhE3vcAn3ArVCeZxVO7Mxosy9xwYyOKlnH50E3Di9N8fdzTkbaI9zZ7HkZihGR 0VnGEFqXARoyXqo+d+41nx3xm9YYelwshMiAd/9OAln45KUKvTjFKwepYmk1N7yF ds0TfVnm6l0kt06OF+UCOTUr9UOWS/GtsqhcmVTCNdv/+rg0uDjeDwwtJX6h2k9y fvyuTaGxzZvQvYStUcCSI2cn0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkYujE6 ohQ7goPdQh3tsigDIKyEMB8GA1UdIwQYMBaAFJ0brNQKglmSTNLFaVGkPgv4ctaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkwNi84Q0NDQ0JBNDgz RTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1daSk0wc1ZwVWFRLUNfaHkx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SdXMxQXFDV1pKTTBzVnBVYVEtQ19oeTFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkwNi84Q0NDQ0JBNDgzRTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1da Sk0wc1ZwVWFRLUNfaHkxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYI1CrqbXVFc8MYygfFtpVg/rhg4grm1tuZrt0lZfVlCI9eWVuf0gL BdWsz4uC+cfv6V8YOkL2lZmU//nFEqiCaK0nxk8YnQxJ6SAC5IpWubs5dVpe1mLg OcMso1yl+ydR5hK/46zHN4rSzJg5AU+02HRTBDh0y9Ce86+XENdyB2RkhDkXzUrJ GhRTH9iZ25cQC501PZKMly/FOBPwOIBQQZ8MBfExtyARMc8/bdAk3wQsBOH65BXr c3ouyF7TlvOu82nI4IE6FKfcCImFZ4DaezeQ/rsDVd3KGzb/f4NIduI806MkN6Gm 2LXWMVQdUmhuChBWYIjcISaZla7LOCmr -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:23 2025 by rpki-client