$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: lEmW6OsYgfu/jd03m9SId5lyCX6tZgHcbwdh1JjdY/8= Subject key identifier: 9B:21:C3:38:8A:56:43:92:5C:8B:FA:AD:F3:D5:FE:3C:82:47:C4:EE Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0906 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 0901 Signing time: Mon 28 Apr 2025 20:47:52 +0000 Manifest this update: Mon 28 Apr 2025 20:47:51 +0000 Manifest next update: Mon 05 May 2025 20:47:51 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: qj/kApW/2rscBKZglfePBti4AT11npKlMM7eG66qmSo=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: Nx148Hia3mtZBzFRIhXoxgU+sJRRy0O36TW1Esz7mxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2310 (0x906) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Apr 28 20:47:51 2025 GMT Not After : May 5 20:47:51 2025 GMT Subject: CN=680fe978-cce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:d7:dd:bb:97:3d:db:ea:b0:71:3b:fb:d3: 8a:18:8e:19:56:cd:82:ee:9a:1d:03:36:50:8f:2c: d7:8f:ad:31:1b:d9:d3:7d:9d:24:59:9f:ba:7d:2d: 21:03:f6:e2:ff:54:f3:e3:f5:1e:f4:2a:65:79:fc: e2:97:4a:af:a7:c6:44:c0:86:25:63:d3:55:9e:92: ce:f8:01:af:35:70:46:4a:f9:4b:d9:75:c9:ed:c1: 48:11:73:14:f9:63:9d:57:52:d0:55:6a:8d:29:f3: 13:87:5b:ce:7f:9f:e5:94:ae:1c:6e:f3:0b:38:c1: cc:da:7a:78:ce:9a:93:6c:e5:7f:2d:49:dc:93:b2: 95:d2:cd:91:67:22:9a:e6:6d:f2:d6:09:8e:d0:02: b9:23:23:ee:85:21:72:3a:24:6b:7b:3c:66:da:af: 14:54:6d:5c:0b:7d:3f:32:50:94:bf:70:d5:d9:27: f0:40:f3:27:9b:f7:dc:94:2c:ce:06:b2:a5:40:1e: 91:67:1e:3f:fd:52:59:2f:9b:b8:44:9b:1c:24:68: 90:9e:ff:a0:7b:f6:18:1b:3d:5e:55:38:13:6e:ad: f9:c7:98:bb:21:c1:81:be:84:26:d8:d5:bb:f3:43: 4c:30:69:ab:1e:3c:8c:f5:a1:23:2d:7e:4c:ec:26: 87:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:21:C3:38:8A:56:43:92:5C:8B:FA:AD:F3:D5:FE:3C:82:47:C4:EE X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:23:37:ff:51:25:2b:49:e7:72:2f:f1:8e:4d:b0:0c:b7:79: 65:9b:92:dd:81:27:0e:a0:e2:24:bc:07:e2:d0:fe:91:d1:91: 0f:bf:cc:a0:3a:44:13:82:0b:92:ed:3f:8a:bd:e6:57:ed:6c: 3f:18:82:6c:1b:4c:a5:8e:d0:44:e4:62:55:7f:50:5a:31:96: 47:36:96:4d:34:75:98:3c:82:38:72:9b:7b:a6:08:44:7f:0f: b1:b9:20:33:c1:08:d1:6c:e2:f0:00:7a:0c:26:0e:97:e9:a9: e4:db:17:81:ce:6c:43:39:63:a9:f7:7a:37:e3:ab:23:39:61: fa:20:5a:64:b7:6f:84:dd:de:e0:3b:14:8d:b8:c0:82:82:cc: 1a:16:2e:f8:d4:69:f9:29:06:b8:6c:3b:71:db:2c:92:dd:ac: b1:9e:8a:a5:64:38:b7:88:c5:ef:55:00:e4:ed:97:a5:6b:1b: 92:05:e4:6f:c1:5a:99:c8:39:29:8b:78:e9:52:e6:38:28:9b: 01:93:cc:21:12:60:23:16:c0:0a:15:7b:da:36:0a:a1:7c:00: 72:35:02:eb:e4:16:2d:f4:ae:52:1a:50:f8:a6:12:9d:1b:4d: 7d:d7:39:d7:16:08:05:c9:59:df:59:3c:71:a9:0d:80:dc:dc: ab:9f:5c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUwNDI4MjA0NzUxWhcNMjUwNTA1MjA0NzUxWjAYMRYwFAYD VQQDEw02ODBmZTk3OC1jY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbfX3buXPdvqsHE7+9OKGI4ZVs2C7podAzZQjyzXj60xG9nTfZ0kWZ+6fS0h A/bi/1Tz4/Ue9Cplefzil0qvp8ZEwIYlY9NVnpLO+AGvNXBGSvlL2XXJ7cFIEXMU +WOdV1LQVWqNKfMTh1vOf5/llK4cbvMLOMHM2np4zpqTbOV/LUnck7KV0s2RZyKa 5m3y1gmO0AK5IyPuhSFyOiRrezxm2q8UVG1cC30/MlCUv3DV2SfwQPMnm/fclCzO BrKlQB6RZx4//VJZL5u4RJscJGiQnv+ge/YYGz1eVTgTbq35x5i7IcGBvoQm2NW7 80NMMGmrHjyM9aEjLX5M7CaH+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJshwziK VkOSXIv6rfPV/jyCR8TuMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlIzf/USUrSedyL/GOTbAMt3llm5LdgScOoOIkvAfi0P6R0ZEPv8yg OkQTgguS7T+KveZX7Ww/GIJsG0yljtBE5GJVf1BaMZZHNpZNNHWYPII4cpt7pghE fw+xuSAzwQjRbOLwAHoMJg6X6ank2xeBzmxDOWOp93o346sjOWH6IFpkt2+E3d7g OxSNuMCCgswaFi741Gn5KQa4bDtx2yyS3ayxnoqlZDi3iMXvVQDk7ZelaxuSBeRv wVqZyDkpi3jpUuY4KJsBk8whEmAjFsAKFXvaNgqhfAByNQLr5BYt9K5SGlD4phKd G0191znXFggFyVnfWTxxqQ2A3Nyrn1zg -----END CERTIFICATE-----Generated at Mon Apr 28 23:04:53 2025 by rpki-client on console.sobornost.net