$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: KywdYHg8thN3zHtDw2ZddwY+MpBDSVKDjgp8KF6+UA0= Subject key identifier: 03:90:35:18:EA:95:1B:9A:58:DE:EC:C5:E5:9E:17:F9:E7:AA:2C:0E Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: 24 Signing time: Sun 27 Apr 2025 06:39:00 +0000 Manifest this update: Sun 27 Apr 2025 06:38:59 +0000 Manifest next update: Sun 04 May 2025 06:38:59 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: M8+9eb7+pc8GVUNujHOB8ezFES/VqWobuuEu02XkReA=) 2: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: /+v7Ksoid33z04XmzwyzW93GCN47u5aOiXMh700TRNk=) 3: 4801BE3EF3CF11EF93538346C4F9AE02.roa (hash: r5071xQo7/PgibLwPNn05K7+0v7I1Jv+CGRNijITcBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Apr 27 06:38:59 2025 GMT Not After : May 4 06:38:59 2025 GMT Subject: CN=680dd104-def8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:18:a9:73:49:51:2e:49:59:41:05:38:77: c8:3f:eb:0e:c1:b5:3c:7e:b3:15:78:fd:7c:70:60: b1:20:d8:e9:34:5f:54:81:7c:c4:d8:92:6f:63:bf: d1:17:b6:23:98:4f:d9:3c:58:20:ca:df:48:ad:4f: a8:83:51:0c:ea:0e:d2:b7:d3:67:ad:0e:15:28:d7: 50:c9:2f:de:76:cf:cb:c1:79:c7:0e:4d:a8:30:93: 11:37:0f:76:53:d1:99:17:b9:d9:d0:77:1c:24:d1: 80:04:cf:6e:99:88:10:24:2c:56:83:e9:98:bd:4d: 0d:30:94:01:80:5b:3f:66:48:bb:7a:7c:40:c2:a7: 5f:d6:a5:da:d0:74:3e:7c:ed:b6:f8:90:03:d8:19: 2b:55:f9:b0:3a:ef:24:8d:a8:73:59:82:14:91:35: d8:4c:c9:58:21:f4:a4:d1:f2:c4:f6:4b:58:49:68: dc:c5:9a:91:25:1f:cf:74:71:82:ee:de:d6:7a:dc: d6:a0:a2:26:61:26:b7:42:0d:1c:bb:61:da:42:06: af:8c:ea:38:cc:42:f7:dc:eb:33:8e:1a:93:67:d7: ef:5e:98:24:06:cb:66:c6:01:a6:dc:e5:ce:65:99: 55:f3:a8:2b:e9:54:5f:16:49:9f:1e:88:83:cf:cb: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:90:35:18:EA:95:1B:9A:58:DE:EC:C5:E5:9E:17:F9:E7:AA:2C:0E X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:28:ac:45:7e:20:94:7d:2e:4c:80:2c:5b:03:c7:f2:f3:3d: 2d:e3:d4:b0:44:aa:20:5a:ee:af:91:76:e5:e8:42:d5:c2:b0: 9b:65:d1:4b:1a:97:b9:4e:83:fa:bd:9d:df:3c:de:7e:a8:7b: 09:6e:9a:bc:8f:0b:c4:f3:b4:6a:21:2a:21:a7:a3:00:48:bf: ca:4d:96:45:d2:38:52:36:12:4a:c9:2e:38:ae:af:87:68:9a: 58:84:61:d3:c8:d2:3c:89:1d:f7:d6:b5:76:3b:61:c3:f1:b1: a8:e1:f1:0a:42:40:ba:cd:dd:1e:3a:ce:4c:5f:76:18:8c:04: b7:bd:76:cb:04:cc:72:8a:c6:33:01:9e:df:c0:0b:04:8e:e6: c7:d1:86:e9:4e:80:22:2f:66:b7:4c:24:bf:79:df:5c:c6:e7: c5:cd:e4:df:0b:6d:8c:39:b4:c0:e1:bc:60:b0:3b:9c:33:16: f5:45:b8:bd:1f:c4:97:db:1a:69:74:79:9f:49:3d:ef:ef:88: e0:e7:4a:cf:11:a8:96:e7:d5:a4:d7:c0:28:0a:54:72:ed:5b: 09:40:2d:3b:9d:7d:b2:6b:4b:20:6e:2c:a0:4a:b9:ec:3d:4f: e0:10:b5:66:89:64:4f:df:be:f9:93:67:c9:00:e2:8e:1d:22: 97:52:bf:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTVENDExMC8GA1UEBRMoNjYxMzREQTFCRkVEQUMwQzkxOUQyNkIxRjdGOUUxNjhB RjlEMkI0RTAeFw0yNTA0MjcwNjM4NTlaFw0yNTA1MDQwNjM4NTlaMBgxFjAUBgNV BAMTDTY4MGRkMTA0LWRlZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJiRipc0lRLklZQQU4d8g/6w7BtTx+sxV4/XxwYLEg2Ok0X1SBfMTYkm9jv9EX tiOYT9k8WCDK30itT6iDUQzqDtK302etDhUo11DJL952z8vBeccOTagwkxE3D3ZT 0ZkXudnQdxwk0YAEz26ZiBAkLFaD6Zi9TQ0wlAGAWz9mSLt6fEDCp1/WpdrQdD58 7bb4kAPYGStV+bA67ySNqHNZghSRNdhMyVgh9KTR8sT2S1hJaNzFmpElH890cYLu 3tZ63NagoiZhJrdCDRy7YdpCBq+M6jjMQvfc6zOOGpNn1+9emCQGy2bGAabc5c5l mVXzqCvpVF8WSZ8eiIPPy9OXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA5A1GOqV G5pY3uzF5Z4X+eeqLA4wHwYDVR0jBBgwFoAUZhNNob/trAyRnSax9/nhaK+dK04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNUQ0LzY1MEI0REU4RjND RTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEsw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmhOTm9iX3RyQXlSblNheDlfbmhhSy1kSzA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB NUQ0LzY1MEI0REU4RjNDRTExRUY5MTRFRjY0NEM0RjlBRTAyL1poTk5vYl90ckF5 Um5TYXg5X25oYUstZEswNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUorEV+IJR9LkyALFsDx/LzPS3j1LBEqiBa7q+RduXoQtXCsJtl0Usa l7lOg/q9nd883n6oewlumryPC8TztGohKiGnowBIv8pNlkXSOFI2EkrJLjiur4do mliEYdPI0jyJHffWtXY7YcPxsajh8QpCQLrN3R46zkxfdhiMBLe9dssEzHKKxjMB nt/ACwSO5sfRhulOgCIvZrdMJL9531zG58XN5N8LbYw5tMDhvGCwO5wzFvVFuL0f xJfbGml0eZ9JPe/viODnSs8RqJbn1aTXwCgKVHLtWwlALTudfbJrSyBuLKBKuew9 T+AQtWaJZE/fvvmTZ8kA4o4dIpdSvyM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:17 2025 by rpki-client on console.sobornost.net