$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: iBLR887ZBrpm2h53k22i7/MFX8mvR6ekpoJle31VCuE= Subject key identifier: 04:0D:E6:4E:B8:A2:95:A3:47:F7:93:88:57:A3:5F:0A:B6:E6:CF:5B Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: A9 Signing time: Sun 27 Apr 2025 04:58:51 +0000 Manifest this update: Sun 27 Apr 2025 04:58:51 +0000 Manifest next update: Sun 04 May 2025 04:58:51 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: NFeibQAKbhIkFIGquOQE46K2rkjBFXnYmfrK7akh48Y=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Apr 27 04:58:51 2025 GMT Not After : May 4 04:58:51 2025 GMT Subject: CN=680db98b-4170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d0:60:53:08:22:bd:f9:24:f6:a0:9d:de:09: c4:d0:0b:22:d2:fc:05:e8:00:bd:46:8a:28:e1:2b: 3b:29:f5:b1:0f:98:d5:5a:f6:5b:24:4c:72:df:f4: 7f:f0:cd:c7:fc:3c:68:b7:ae:57:c4:33:5b:61:f0: cd:be:e3:08:55:0b:0e:88:c8:82:18:76:05:f6:05: 7c:a9:0d:e3:68:c3:bf:1d:86:be:a3:70:fc:71:7d: d5:e2:34:1c:3b:4b:04:27:76:db:3a:85:43:51:24: 43:3e:7c:e1:1c:f3:32:fc:15:42:30:7c:7d:7d:4b: da:43:c5:10:ae:32:13:aa:83:52:dc:e9:74:90:5f: 00:68:22:87:9d:fd:1f:b5:31:cb:12:22:02:af:ca: 0d:11:9a:c3:52:ca:12:60:27:96:88:bf:bb:19:be: 82:32:da:cd:2b:65:a2:58:a2:c5:90:05:d8:1a:90: 37:85:46:82:78:7c:52:ee:e4:2b:e0:ab:01:a6:35: 38:d3:77:9f:29:1d:52:ac:0a:93:69:fe:26:50:21: 25:1c:d2:d4:d7:c7:77:da:28:a1:3f:cf:b0:eb:37: c7:82:81:e0:17:fb:5e:9d:42:42:c6:af:68:32:cb: 3a:0a:0e:4e:95:b5:7f:74:87:af:18:54:18:df:74: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:E6:4E:B8:A2:95:A3:47:F7:93:88:57:A3:5F:0A:B6:E6:CF:5B X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:7f:7c:33:a0:a7:0e:3d:9b:65:67:ce:20:52:92:57:2d:c9: a1:0b:8a:4e:bf:61:3c:de:be:f9:ca:26:5b:21:4f:87:0b:33: 99:12:6b:99:8a:8f:59:bf:46:fc:3f:16:7f:eb:c5:79:36:93: fa:0a:9a:b1:70:c2:3b:e8:3d:bd:db:2b:b7:7f:54:ef:c4:98: 77:51:99:10:1f:23:0e:48:81:51:be:02:6c:6b:44:b1:d6:ce: fd:bc:34:b7:3b:f1:c8:83:ad:ca:7d:ca:35:78:46:10:55:6d: 84:ff:c7:62:2e:d2:ff:ff:f8:d5:5b:43:22:3e:cf:16:a9:ea: 06:33:c2:0a:4d:2f:b8:10:ed:1e:27:a0:a9:0e:4a:d0:de:9e: cf:ea:f8:83:9a:b3:e8:d2:21:70:aa:35:ee:2d:be:b9:0f:1c: 95:a4:6b:30:b0:80:15:94:ee:f4:ba:1f:25:5a:26:94:b9:a2: 5a:02:d0:d2:16:09:4a:9f:0e:73:be:78:f1:cf:43:77:f6:b2: 4d:1c:c9:1e:1e:fa:9d:19:99:10:a6:c9:4e:87:c7:00:3e:9f: 6d:e5:39:96:4f:82:ce:20:4a:0b:34:20:3a:0b:ca:ce:56:e9: 99:0f:a2:66:88:b4:76:74:b8:6a:d1:de:01:72:ab:fa:57:e1: 49:69:03:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwNDI3MDQ1ODUxWhcNMjUwNTA0MDQ1ODUxWjAYMRYwFAYD VQQDEw02ODBkYjk4Yi00MTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19BgUwgivfkk9qCd3gnE0Asi0vwF6AC9Rooo4Ss7KfWxD5jVWvZbJExy3/R/ 8M3H/Dxot65XxDNbYfDNvuMIVQsOiMiCGHYF9gV8qQ3jaMO/HYa+o3D8cX3V4jQc O0sEJ3bbOoVDUSRDPnzhHPMy/BVCMHx9fUvaQ8UQrjITqoNS3Ol0kF8AaCKHnf0f tTHLEiICr8oNEZrDUsoSYCeWiL+7Gb6CMtrNK2WiWKLFkAXYGpA3hUaCeHxS7uQr 4KsBpjU403efKR1SrAqTaf4mUCElHNLU18d32iihP8+w6zfHgoHgF/tenUJCxq9o Mss6Cg5OlbV/dIevGFQY33TghwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQN5k64 opWjR/eTiFejXwq25s9bMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3f3wzoKcOPZtlZ84gUpJXLcmhC4pOv2E83r75yiZbIU+HCzOZEmuZ io9Zv0b8PxZ/68V5NpP6CpqxcMI76D292yu3f1TvxJh3UZkQHyMOSIFRvgJsa0Sx 1s79vDS3O/HIg63Kfco1eEYQVW2E/8diLtL///jVW0MiPs8WqeoGM8IKTS+4EO0e J6CpDkrQ3p7P6viDmrPo0iFwqjXuLb65DxyVpGswsIAVlO70uh8lWiaUuaJaAtDS FglKnw5zvnjxz0N39rJNHMkeHvqdGZkQpslOh8cAPp9t5TmWT4LOIEoLNCA6C8rO VumZD6JmiLR2dLhq0d4Bcqv6V+FJaQPi -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:41 2025 by rpki-client on console.sobornost.net