$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json) Hash identifier: aEES0QfUHOEsVIJ/TcYEXzcpTdEhUbgvBWPcqPZLzP0= Subject key identifier: FA:6A:8C:52:C0:BA:5A:56:18:59:59:2C:73:92:68:E0:FB:95:76:97 Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Certificate serial: 034D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft Manifest number: 034D Signing time: Sat 26 Apr 2025 20:44:39 +0000 Manifest this update: Sat 26 Apr 2025 20:44:38 +0000 Manifest next update: Sat 03 May 2025 20:44:38 +0000 Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: Ad0sTXXCygMYa6mubPWl7fOCK1un6+5ThGjbOv53AoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 845 (0x34d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Validity Not Before: Apr 26 20:44:38 2025 GMT Not After : May 3 20:44:38 2025 GMT Subject: CN=680d45b7-6d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:24:c5:1a:56:a2:43:b2:e9:15:80:ea:fd: 75:a7:77:4d:dd:5e:f9:24:6b:93:87:36:23:4d:00: 51:8b:dd:5e:8e:22:08:6b:2e:ff:5f:bb:7b:2d:8a: fa:2a:31:be:8f:45:7f:f2:51:14:26:cc:b4:3c:40: b7:91:35:f8:5d:f0:7a:41:2b:f4:28:c6:f0:42:e0: 05:51:3d:01:02:1d:72:24:da:8e:8b:90:18:04:25: 62:4b:d2:3e:15:51:86:45:d3:b0:c8:3f:f9:2e:7a: 0d:e1:b5:99:80:00:ee:39:6f:b1:fb:8f:03:76:ae: 1c:cc:18:8a:31:2c:17:a4:43:38:1c:d9:69:98:d5: 7b:3e:8b:2b:9b:69:b6:29:d4:19:15:2e:a6:3f:07: 8f:79:c5:fc:0c:4d:43:81:62:89:9a:99:33:fe:61: e2:43:7a:a0:c7:63:5b:a2:28:ad:0f:d9:bf:c2:dc: 2a:70:52:ec:95:eb:10:4b:11:13:da:a5:92:37:6a: ea:4c:f1:36:a4:7b:82:4d:a7:6d:bd:12:40:1b:90: 96:6d:1f:c5:40:1e:73:4d:37:de:5f:ed:36:d0:fd: 42:33:f4:41:1e:50:00:6f:f9:70:ce:b3:07:17:e0: b5:84:13:aa:bb:8d:e2:90:ef:11:0d:b7:8e:8e:b6: cb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6A:8C:52:C0:BA:5A:56:18:59:59:2C:73:92:68:E0:FB:95:76:97 X509v3 Authority Key Identifier: keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:62:ce:36:22:06:e7:7e:9d:55:e7:2d:26:a1:af:88:ab:6e: e8:55:8a:08:f0:22:01:66:2e:27:f5:ae:e2:88:ed:79:f7:50: 0f:c7:73:c5:4c:9b:ae:15:f4:0e:f7:42:54:83:13:e7:10:0b: 4c:a5:43:92:fd:34:f2:3f:02:a1:b7:64:85:bf:2c:50:2d:57: 6f:68:7d:2e:b6:75:b2:5c:5a:ea:88:d7:3b:11:ac:5c:37:00: ef:78:9c:dd:0d:f1:6d:ee:7c:ff:67:09:08:18:8f:42:52:a7: 98:45:df:ad:63:a7:a9:9d:e2:e6:0d:15:bd:8f:bb:a2:5c:7f: 29:0a:be:2a:28:0c:88:cb:10:b4:a9:6e:b2:9a:45:04:60:c3: 54:64:76:a2:df:a8:e8:14:f8:19:d5:84:ac:52:df:77:d7:78: ee:7b:d2:cd:41:f7:1c:33:63:c4:fe:69:2c:cd:73:db:29:3f: 45:12:d4:ae:b7:20:e5:4e:bb:0a:ac:5b:4d:89:f2:fe:da:47: be:b5:9c:1a:f1:7d:2c:6c:81:cd:51:ca:c8:1c:fe:e5:ed:62: 8e:8e:0b:bc:a6:1c:23:ed:e0:7a:61:7c:6f:5a:01:57:f8:f3: f6:1d:da:7f:e5:03:c6:d9:59:09:23:fe:cd:2b:10:09:b3:50: a7:21:ab:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1 OUZCQkQ1NzQwHhcNMjUwNDI2MjA0NDM4WhcNMjUwNTAzMjA0NDM4WjAYMRYwFAYD VQQDEw02ODBkNDViNy02ZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXUkxRpWokOy6RWA6v11p3dN3V75JGuThzYjTQBRi91ejiIIay7/X7t7LYr6 KjG+j0V/8lEUJsy0PEC3kTX4XfB6QSv0KMbwQuAFUT0BAh1yJNqOi5AYBCViS9I+ FVGGRdOwyD/5LnoN4bWZgADuOW+x+48Ddq4czBiKMSwXpEM4HNlpmNV7Posrm2m2 KdQZFS6mPwePecX8DE1DgWKJmpkz/mHiQ3qgx2NboiitD9m/wtwqcFLslesQSxET 2qWSN2rqTPE2pHuCTadtvRJAG5CWbR/FQB5zTTfeX+020P1CM/RBHlAAb/lwzrMH F+C1hBOqu43ikO8RDbeOjrbLgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpqjFLA ulpWGFlZLHOSaOD7lXaXMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaYs42Igbnfp1V5y0moa+Iq27oVYoI8CIBZi4n9a7iiO1591APx3PF TJuuFfQO90JUgxPnEAtMpUOS/TTyPwKht2SFvyxQLVdvaH0utnWyXFrqiNc7Eaxc NwDveJzdDfFt7nz/ZwkIGI9CUqeYRd+tY6epneLmDRW9j7uiXH8pCr4qKAyIyxC0 qW6ymkUEYMNUZHai36joFPgZ1YSsUt9313jue9LNQfccM2PE/mkszXPbKT9FEtSu tyDlTrsKrFtNifL+2ke+tZwa8X0sbIHNUcrIHP7l7WKOjgu8phwj7eB6YXxvWgFX +PP2Hdp/5QPG2VkJI/7NKxAJs1CnIau7 -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:54 2025 by rpki-client on console.sobornost.net