$ rpki-client -vvf rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft File: nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft (raw, json) Hash identifier: NmqpzCVABYPU+IQgPYww7y05IdFuPN9DZt8wuDvRC3M= Subject key identifier: 5D:44:7C:37:02:9F:08:42:21:05:B3:21:4C:96:44:2E:C4:03:28:5F Authority key identifier: 9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 Certificate issuer: /CN=A9175906/serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686 Certificate serial: 03F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft Manifest number: 03EB Signing time: Thu 03 Jul 2025 00:52:28 +0000 Manifest this update: Thu 03 Jul 2025 00:52:28 +0000 Manifest next update: Thu 10 Jul 2025 00:52:28 +0000 Files and hashes: 1: nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl (hash: 1te/psC2+nuyTCY4gqmRyYkoIwor3fBZRaMrYJzjy9g=) 2: 27A6D5CAAF1C11EC94FF9534C4F9AE02.roa (hash: tuiOvz0EtN5gYIcDBljazRXB+32WdpyvWw0LqnkHLT4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1010 (0x3f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175906, serialNumber=9D1BACD40A8259924CD2C56951A43E0BF872D686 Validity Not Before: Jul 3 00:52:28 2025 GMT Not After : Jul 10 00:52:28 2025 GMT Subject: CN=6865d44c-e1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:71:b3:93:08:32:63:ed:a4:f6:e6:5b:03: 9c:db:0d:fa:0a:dc:64:cb:a7:b9:5a:8e:a7:b6:77: 5e:45:6c:e7:a5:8f:02:f6:c3:a4:d3:00:70:16:16: b6:f4:20:9e:0e:cd:ac:7f:8e:0b:06:9b:e8:65:1d: 32:7a:85:35:2e:97:4f:8f:b7:7d:ea:d2:ba:61:a4: e0:30:51:31:f2:fe:2d:6c:c4:6b:db:e7:e7:b3:44: 6b:ca:81:b9:45:25:26:03:1b:37:ac:f7:ed:92:40: df:84:c7:41:14:54:0f:4a:b0:41:5f:1a:6c:9d:f8: da:58:35:0e:a4:fd:85:66:51:e5:54:4d:97:fc:a7: 9c:2d:59:db:21:fd:a8:31:cb:22:15:fb:fd:4b:34: 43:0c:5d:8c:6e:a8:df:63:9d:bf:c2:27:22:c1:11: b0:0b:34:9b:0c:6f:55:d2:6e:ea:1f:73:51:3b:ce: 84:62:04:08:98:19:d3:50:27:7b:9c:c4:e1:15:03: 3c:2d:6c:33:42:29:60:91:06:cd:d7:e5:49:5d:69: ca:a6:f6:73:e5:3b:7a:42:13:dc:34:fc:6c:b6:9a: 31:6f:37:26:74:dc:85:04:97:38:23:65:a2:59:66: 3b:aa:6f:00:75:86:e6:1f:26:b7:ea:d6:aa:bf:61: 22:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:44:7C:37:02:9F:08:42:21:05:B3:21:4C:96:44:2E:C4:03:28:5F X509v3 Authority Key Identifier: keyid:9D:1B:AC:D4:0A:82:59:92:4C:D2:C5:69:51:A4:3E:0B:F8:72:D6:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nRus1AqCWZJM0sVpUaQ-C_hy1oY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175906/8CCCCBA483E711ECA0034F6BC4F9AE02/nRus1AqCWZJM0sVpUaQ-C_hy1oY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:07:ef:33:eb:a7:fe:2f:ab:d0:05:d0:85:aa:83:0c:e1:dd: 04:39:88:86:c3:bf:13:ca:ff:87:f6:e3:95:64:8a:39:c5:d6: 97:29:a6:70:5d:fe:7d:a8:ba:9b:a7:c1:11:29:bc:1d:de:4a: 8f:dc:f0:7c:b4:bf:b5:2d:12:cc:28:8a:68:e9:b7:40:22:3d: 4e:0d:14:a1:75:32:7c:58:50:ac:76:a9:c5:77:d8:20:0a:20: 7b:2f:6d:d3:2b:2c:04:46:40:85:9c:0f:17:47:e8:aa:78:6a: f4:a6:4e:af:86:9a:8a:74:52:38:b0:fc:ee:a3:c8:d0:c5:fb: fe:4b:87:72:e9:67:b7:5a:e1:0e:f8:ec:a9:32:73:51:3a:f7: 32:4f:3b:93:11:21:fa:89:21:75:5e:1d:c4:45:d9:5e:2a:45: a6:7a:13:70:61:7b:59:15:1a:47:cb:5a:9a:fd:3f:66:21:33: ff:38:4e:8a:f7:79:b0:65:f0:0c:64:a4:7f:22:93:a1:01:67: d8:d2:40:ff:59:76:92:ce:45:cc:ec:a0:6f:67:57:ba:a3:e2: 90:e8:44:7c:50:71:05:24:94:00:31:92:62:46:65:25:8b:8e: 20:aa:f6:51:80:80:6c:3e:50:11:fc:5c:a1:f3:9b:b2:f7:e5: 7f:1a:94:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5MDYxMTAvBgNVBAUTKDlEMUJBQ0Q0MEE4MjU5OTI0Q0QyQzU2OTUxQTQzRTBC Rjg3MkQ2ODYwHhcNMjUwNzAzMDA1MjI4WhcNMjUwNzEwMDA1MjI4WjAYMRYwFAYD VQQDEw02ODY1ZDQ0Yy1lMWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSVxs5MIMmPtpPbmWwOc2w36Ctxky6e5Wo6ntndeRWznpY8C9sOk0wBwFha2 9CCeDs2sf44LBpvoZR0yeoU1LpdPj7d96tK6YaTgMFEx8v4tbMRr2+fns0RryoG5 RSUmAxs3rPftkkDfhMdBFFQPSrBBXxpsnfjaWDUOpP2FZlHlVE2X/KecLVnbIf2o McsiFfv9SzRDDF2MbqjfY52/wiciwRGwCzSbDG9V0m7qH3NRO86EYgQImBnTUCd7 nMThFQM8LWwzQilgkQbN1+VJXWnKpvZz5Tt6QhPcNPxstpoxbzcmdNyFBJc4I2Wi WWY7qm8AdYbmHya36taqv2EiDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF1EfDcC nwhCIQWzIUyWRC7EAyhfMB8GA1UdIwQYMBaAFJ0brNQKglmSTNLFaVGkPgv4ctaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTkwNi84Q0NDQ0JBNDgz RTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1daSk0wc1ZwVWFRLUNfaHkx b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25SdXMxQXFDV1pKTTBzVnBVYVEtQ19oeTFvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTkwNi84Q0NDQ0JBNDgzRTcxMUVDQTAwMzRGNkJDNEY5QUUwMi9uUnVzMUFxQ1da Sk0wc1ZwVWFRLUNfaHkxb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3B+8z66f+L6vQBdCFqoMM4d0EOYiGw78Tyv+H9uOVZIo5xdaXKaZw Xf59qLqbp8ERKbwd3kqP3PB8tL+1LRLMKIpo6bdAIj1ODRShdTJ8WFCsdqnFd9gg CiB7L23TKywERkCFnA8XR+iqeGr0pk6vhpqKdFI4sPzuo8jQxfv+S4dy6We3WuEO +OypMnNROvcyTzuTESH6iSF1Xh3ERdleKkWmehNwYXtZFRpHy1qa/T9mITP/OE6K 93mwZfAMZKR/IpOhAWfY0kD/WXaSzkXM7KBvZ1e6o+KQ6ER8UHEFJJQAMZJiRmUl i44gqvZRgIBsPlAR/Fyh85uy9+V/GpR8 -----END CERTIFICATE-----Generated at Fri Jul 4 22:02:54 2025 by rpki-client