$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json) Hash identifier: QOxRwOrPSAMnbaBglnHuHfGVznSVyKHE48/VblQK3Kk= Subject key identifier: 01:B0:99:BC:FB:7C:04:DD:1D:00:0D:A2:42:A9:B3:41:98:FD:9D:EA Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft Manifest number: 03F3 Signing time: Sun 27 Apr 2025 00:31:25 +0000 Manifest this update: Sun 27 Apr 2025 00:31:25 +0000 Manifest next update: Sun 04 May 2025 00:31:25 +0000 Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: KP40oNAbIi/xQ/s1WQNFqj4cYwI9JIJK3BYF6Gawe5Q=) 2: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (hash: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI=) 3: 75CD74841CC611EEAD8F6969C4F9AE02.roa (hash: NN12ijjN6eHiIP1fgGNt8W/SjYLPT878HAPA443nXjw=) 4: 8ED9161EB08F11EF8E3C4F2FC4F9AE02.roa (hash: CH8GchMto/uPRqPYkKGBpICTR9Zi45Sn6IDLqaBYXYk=) 5: ACFCE162DAFB11EE902F6539C4F9AE02.roa (hash: xJ7KzUAv8j9M+W6KCeCK63jNH2dqcmPqZTR8VHBvDCE=) 6: 0A6FBB5C152811EE8E31B969C4F9AE02.roa (hash: 8P9fQsyTCuiC83nyFEWreUG4FXx+RrwZOmDW3liswnE=) 7: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM=) 8: 6806A9D07B4111EF87D2E951C4F9AE02.roa (hash: /KHhv0wFN+iPlsJ858r8JVJtCaymXIBJ4SFRGoaj2DM=) 9: 73FCC4481CAD11EEA46B151DC4F9AE02.roa (hash: xLAp8SL1FdY9rdr5UWy+ApLo8i+9DkxfF4xI/C+ZcI0=) 10: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (hash: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Apr 27 00:31:25 2025 GMT Not After : May 4 00:31:25 2025 GMT Subject: CN=680d7add-bc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:19:9a:5c:47:3c:52:8c:c7:b1:c1:4e:2e:3b: 91:ba:e7:f9:33:93:11:63:30:31:2d:25:6a:7b:6c: c3:f2:90:42:9b:71:a5:45:04:df:9c:4b:b1:5f:34: 0a:e2:13:28:53:8d:58:f5:0f:11:55:3c:ac:7a:8a: 43:4a:bb:75:76:4f:16:94:b4:d5:a9:8c:05:b0:22: e9:1d:03:19:89:84:0b:8a:fa:5d:3f:c5:5d:5e:6d: 8f:3b:25:82:4b:8b:1c:9b:f5:24:30:5a:7a:e3:c0: 1f:ba:cc:3d:71:5b:bb:f7:40:58:c5:ff:3b:09:4f: 58:fa:4d:82:5e:e3:4a:ae:2a:d9:3f:e1:b8:aa:f8: a2:39:34:18:03:25:00:3e:54:30:7e:4c:08:4e:95: 27:22:de:c1:40:3b:f3:75:88:92:43:ba:b1:15:99: fd:3c:8e:b2:aa:29:5d:7c:67:a6:61:bc:25:32:4e: b4:ea:7b:87:2d:da:e7:49:e9:bd:e8:72:34:6e:95: ef:fd:cb:45:bb:85:25:2c:68:b0:a0:24:07:b7:2e: 61:5d:ba:b3:ed:a3:a1:15:5e:12:04:e0:d6:4c:6e: b3:d0:a9:a6:c4:7f:14:b7:0c:3f:b2:35:ed:56:b9: 1e:c6:ee:22:2c:1d:c3:99:23:31:91:67:b3:75:c5: f7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B0:99:BC:FB:7C:04:DD:1D:00:0D:A2:42:A9:B3:41:98:FD:9D:EA X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2a:57:86:3e:c9:36:46:ed:88:07:c3:14:df:59:9f:dc:b7: a5:7a:02:8f:05:c9:c3:8f:20:77:7f:75:b4:5b:32:67:80:93: c9:9f:be:10:b4:ff:c2:66:fa:a0:c2:d5:44:13:67:45:d6:c7: f7:e5:45:fc:db:86:d9:1f:6f:9a:9d:90:21:fe:87:c2:71:8a: 29:e4:d3:78:75:a6:9a:59:5d:c4:cc:e1:03:c0:b4:82:b5:f1: a6:2c:d2:50:68:cc:1f:a4:1e:b9:6a:f5:d2:b6:23:c6:1b:f3: d3:ee:9a:06:b5:a0:ca:2f:ca:84:b1:db:1a:4d:e9:41:1a:9e: f4:30:af:a4:43:55:65:ff:7b:d3:56:dd:09:09:11:1a:c3:97: b5:8d:fd:d6:f5:93:e1:9c:b9:41:df:79:51:b7:c9:41:be:e8: 78:bc:44:45:af:6d:f8:1a:f4:e7:2f:14:77:d9:e7:7a:e3:bb: ad:3b:f3:5e:84:c4:68:fa:32:7a:99:63:63:2e:d9:3c:cf:ec: d7:fd:8b:ec:65:5e:04:7c:2a:67:86:f3:92:8a:c6:59:13:26: 4e:00:01:7f:99:49:74:6b:03:1d:cb:3f:21:36:f8:ba:8d:10: d7:95:26:7a:38:ae:f3:a3:66:f9:9d:42:7b:5a:be:12:c9:1c: 24:2f:6f:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwNDI3MDAzMTI1WhcNMjUwNTA0MDAzMTI1WjAYMRYwFAYD VQQDEw02ODBkN2FkZC1iYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBmaXEc8UozHscFOLjuRuuf5M5MRYzAxLSVqe2zD8pBCm3GlRQTfnEuxXzQK 4hMoU41Y9Q8RVTyseopDSrt1dk8WlLTVqYwFsCLpHQMZiYQLivpdP8VdXm2POyWC S4scm/UkMFp648Afusw9cVu790BYxf87CU9Y+k2CXuNKrirZP+G4qviiOTQYAyUA PlQwfkwITpUnIt7BQDvzdYiSQ7qxFZn9PI6yqildfGemYbwlMk606nuHLdrnSem9 6HI0bpXv/ctFu4UlLGiwoCQHty5hXbqz7aOhFV4SBODWTG6z0KmmxH8Utww/sjXt Vrkexu4iLB3DmSMxkWezdcX3cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGwmbz7 fATdHQANokKps0GY/Z3qMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkM3My8wMTQ0Q0RGODlGMzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlS czFKZHBWM1VySlhPLXZXcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdKleGPsk2Ru2IB8MU31mf3LelegKPBcnDjyB3f3W0WzJngJPJn74Q tP/CZvqgwtVEE2dF1sf35UX824bZH2+anZAh/ofCcYop5NN4daaaWV3EzOEDwLSC tfGmLNJQaMwfpB65avXStiPGG/PT7poGtaDKL8qEsdsaTelBGp70MK+kQ1Vl/3vT Vt0JCREaw5e1jf3W9ZPhnLlB33lRt8lBvuh4vERFr234GvTnLxR32ed647utO/Ne hMRo+jJ6mWNjLtk8z+zX/YvsZV4EfCpnhvOSisZZEyZOAAF/mUl0awMdyz8hNvi6 jRDXlSZ6OK7zo2b5nUJ7Wr4SyRwkL2/c -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:26 2025 by rpki-client on console.sobornost.net