$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: WgE4HpnLvgbUSd79RRHdaa+tyypLZ59NIdaaNNSAUqw= Subject key identifier: DC:AC:89:C3:4D:51:91:BE:FE:A8:9A:44:7D:76:8F:63:62:39:3B:B7 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 0432 Signing time: Wed 07 May 2025 00:13:42 +0000 Manifest this update: Wed 07 May 2025 00:13:41 +0000 Manifest next update: Wed 14 May 2025 00:13:41 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: oJ5UZwWjWR0nVpTj0e4785Y2IW9GJ6u7qftbnepqcck=) 2: 5590E4766AD111EFB8AD551AC4F9AE02.roa (hash: u4534TN3FipMq5w+c3LILmi2ZS4NbdKmjDpYBOie5OM=) 3: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: May 7 00:13:41 2025 GMT Not After : May 14 00:13:41 2025 GMT Subject: CN=681aa5b6-d043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:44:c6:90:8a:9c:06:1c:f5:07:3a:6e:38: 42:b6:63:76:a4:b6:75:fc:76:b9:71:f3:03:b0:43: 97:e7:e5:f4:05:69:97:23:f0:9b:d6:85:02:6a:3d: f2:d8:d8:bf:6a:65:1d:0e:ab:93:4d:b6:58:4c:dd: 60:f7:b3:03:57:05:bb:0c:ab:de:32:ae:99:1b:d2: 16:d8:1a:5a:09:85:6f:8e:46:da:66:43:8b:ac:02: 4c:71:d3:7d:c5:2d:4f:66:0d:f1:41:48:d9:3c:41: ac:62:e4:fd:7f:04:3e:35:df:de:fd:e6:47:3f:aa: 89:42:34:e0:a3:41:52:a2:11:f0:d3:2b:41:69:62: c4:97:9e:18:08:63:57:33:d9:fa:c0:77:5c:b0:14: 82:fd:24:a3:a4:32:eb:06:23:5c:f0:3d:0e:42:c2: 87:9f:f1:ae:ab:dd:1b:ac:b3:eb:15:7c:06:e6:b9: 72:b9:3a:27:fb:78:da:e5:b4:d3:ba:b9:85:41:09: 27:be:91:79:73:bc:c1:c4:ce:60:90:54:63:f3:f3: 9b:44:05:1c:75:e5:58:72:60:01:ff:17:b5:9b:fd: c6:87:59:d8:37:28:04:17:38:93:39:91:09:6b:c6: 17:3d:3f:62:64:3f:03:80:13:14:8b:b2:f6:44:60: d9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AC:89:C3:4D:51:91:BE:FE:A8:9A:44:7D:76:8F:63:62:39:3B:B7 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d9:93:59:3f:a3:f6:95:30:1d:0f:41:98:9f:cb:f9:fd:6c: 79:af:fc:0f:3d:68:27:ad:bb:a5:63:da:c4:e2:37:03:83:91: f4:fd:8d:bb:0d:d4:45:11:d4:be:d2:04:4c:ee:4b:2c:e2:b9: 27:36:ba:17:b4:f8:ea:5e:15:9c:4d:10:ac:ab:8d:9f:87:83: 97:5f:39:91:b6:e7:26:8e:e0:a6:d3:66:ce:13:bb:7b:08:3c: e3:67:0d:29:98:d4:21:3f:57:31:ae:c5:21:8d:5b:26:0e:8f: fd:50:1e:dd:90:bb:0c:d3:22:0d:82:cc:5d:76:84:f0:13:71: cc:64:06:c7:e6:da:ce:c2:40:96:08:96:d7:d9:a4:2c:4d:77: 53:a3:30:50:ca:6a:b8:26:d4:94:1d:0a:08:25:09:6a:b1:ef: 91:e3:44:66:6c:1b:83:ae:b7:ae:12:b0:4d:b7:d2:bd:ce:f1: 93:6a:4f:06:4f:1e:b7:ae:a7:08:95:c0:4c:a8:af:3b:28:81: 88:fe:ba:5b:c4:86:8d:63:ee:f2:05:7e:97:bf:2b:53:47:1d: 67:08:ad:c4:e8:35:5d:fc:73:88:7f:d3:2f:73:3a:99:08:e4: 05:3e:4a:49:4b:e5:aa:3d:12:f6:ef:99:ae:d9:fe:8b:e6:af: f4:9b:5b:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUwNTA3MDAxMzQxWhcNMjUwNTE0MDAxMzQxWjAYMRYwFAYD VQQDEw02ODFhYTViNi1kMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz81ExpCKnAYc9Qc6bjhCtmN2pLZ1/Ha5cfMDsEOX5+X0BWmXI/Cb1oUCaj3y 2Ni/amUdDquTTbZYTN1g97MDVwW7DKveMq6ZG9IW2BpaCYVvjkbaZkOLrAJMcdN9 xS1PZg3xQUjZPEGsYuT9fwQ+Nd/e/eZHP6qJQjTgo0FSohHw0ytBaWLEl54YCGNX M9n6wHdcsBSC/SSjpDLrBiNc8D0OQsKHn/Guq90brLPrFXwG5rlyuTon+3ja5bTT urmFQQknvpF5c7zBxM5gkFRj8/ObRAUcdeVYcmAB/xe1m/3Gh1nYNygEFziTOZEJ a8YXPT9iZD8DgBMUi7L2RGDZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNysicNN UZG+/qiaRH12j2NiOTu3MB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+2ZNZP6P2lTAdD0GYn8v5/Wx5r/wPPWgnrbulY9rE4jcDg5H0/Y27 DdRFEdS+0gRM7kss4rknNroXtPjqXhWcTRCsq42fh4OXXzmRtucmjuCm02bOE7t7 CDzjZw0pmNQhP1cxrsUhjVsmDo/9UB7dkLsM0yINgsxddoTwE3HMZAbH5trOwkCW CJbX2aQsTXdTozBQymq4JtSUHQoIJQlqse+R40RmbBuDrreuErBNt9K9zvGTak8G Tx63rqcIlcBMqK87KIGI/rpbxIaNY+7yBX6XvytTRx1nCK3E6DVd/HOIf9MvczqZ COQFPkpJS+WqPRL275mu2f6L5q/0m1u5 -----END CERTIFICATE-----Generated at Wed May 7 10:00:42 2025 by rpki-client on console.sobornost.net