$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: WUcsZnd8z3v5P29jmtIbe83CZZtFDa9PQ8/j8IBykE8= Subject key identifier: DD:D0:44:4A:D5:2E:5F:27:27:D4:93:6C:07:7F:08:6F:E0:7D:5C:80 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 6C Signing time: Sun 27 Apr 2025 05:43:16 +0000 Manifest this update: Sun 27 Apr 2025 05:43:16 +0000 Manifest next update: Sun 04 May 2025 05:43:16 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: D4dwvAtTa8zivH0NzyEPVKchp9a4OSTRwo1NkVq/Xak=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Apr 27 05:43:16 2025 GMT Not After : May 4 05:43:16 2025 GMT Subject: CN=680dc3f4-5d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b1:5b:96:63:0a:16:55:d9:5d:98:43:22:a9: f4:76:08:2a:98:09:df:ea:83:29:64:67:68:f2:01: 3a:9a:bb:35:e2:4b:48:95:da:fb:d8:9c:cc:7c:95: a3:66:e7:ae:d4:cd:c1:36:6e:9e:0f:30:b1:f7:06: 71:3b:80:4a:50:08:31:15:5e:13:a1:82:85:1e:eb: 47:a8:96:c1:0b:d5:55:e0:09:32:a9:30:11:eb:6d: 1a:3e:29:33:75:df:df:e9:42:36:61:10:ed:c7:a8: 9f:2e:3c:27:3c:4f:2f:29:0b:26:76:00:c5:a6:78: 85:0b:2f:cc:ca:9d:eb:76:14:b8:ad:c2:dc:f5:00: 40:ac:b1:d5:ab:3f:be:9e:ce:63:3d:94:31:d8:ac: cb:37:be:a9:f9:e5:ae:90:3c:42:2f:ff:42:49:a0: de:cf:9c:af:b6:38:4b:ee:5f:7d:6f:c9:57:b8:4a: e0:77:ac:0e:be:c0:35:63:60:05:88:ab:e8:23:71: 9b:fa:75:b1:08:a6:2d:16:e4:bd:83:f1:31:98:0b: d2:b4:ea:08:c6:00:2a:4c:ae:f9:2b:8b:73:bb:3c: 61:c9:6e:76:ca:b1:71:fe:58:eb:e2:96:d5:02:85: eb:a1:c0:61:9b:dd:56:d8:fd:32:e2:f5:13:73:38: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:44:4A:D5:2E:5F:27:27:D4:93:6C:07:7F:08:6F:E0:7D:5C:80 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e7:2a:ef:98:09:33:07:d9:c4:85:18:b6:97:8d:fa:12:d3: 31:b0:71:0b:9b:94:98:91:39:3d:ce:97:c0:d5:99:a4:e2:89: d2:f0:d7:9b:ba:16:93:a5:c2:d9:90:ae:cf:ac:4f:72:c8:15: 1c:2a:4a:fb:5b:45:63:ea:1d:9c:34:f3:13:1f:f4:b1:56:dd: 20:77:1f:b7:24:df:14:c2:2a:fd:d8:94:2a:b6:9d:c4:b9:2b: 82:d5:36:1f:44:ec:d2:6e:1d:dd:73:76:b9:39:e4:d1:a7:1b: a0:3f:2c:84:f3:43:a0:8f:da:2d:4e:4c:6c:04:59:d6:fa:8d: 78:89:2e:2e:f6:42:9c:52:18:cd:84:84:4f:e6:83:c5:71:9d: 10:96:d9:9d:cb:d7:41:46:45:6b:f0:52:7e:1f:02:ed:d6:26: 51:a2:cc:1d:cb:b6:ad:b7:4e:d9:5c:79:b5:2f:03:05:74:d4: 7b:1d:0f:27:17:d4:ce:b3:31:0a:e6:0d:58:d4:93:42:52:36: 0b:f2:6b:1c:82:62:dc:14:1e:ec:b3:50:73:ba:e5:59:01:cf: 1b:96:45:e7:00:d1:28:b9:a3:d9:c2:4f:1c:68:d2:64:9e:37: 6c:16:c5:48:ff:e6:30:cc:cd:03:7a:35:bd:28:fe:51:da:b1: f4:7a:00:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzZERjExMC8GA1UEBRMoNjRGMjFDREU2NDhCMzlCNTI4MkI4Q0IxMjc5MjhFMjMz MjQ4ODI5NDAeFw0yNTA0MjcwNTQzMTZaFw0yNTA1MDQwNTQzMTZaMBgxFjAUBgNV BAMTDTY4MGRjM2Y0LTVkNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMsVuWYwoWVdldmEMiqfR2CCqYCd/qgylkZ2jyATqauzXiS0iV2vvYnMx8laNm 567UzcE2bp4PMLH3BnE7gEpQCDEVXhOhgoUe60eolsEL1VXgCTKpMBHrbRo+KTN1 39/pQjZhEO3HqJ8uPCc8Ty8pCyZ2AMWmeIULL8zKnet2FLitwtz1AECssdWrP76e zmM9lDHYrMs3vqn55a6QPEIv/0JJoN7PnK+2OEvuX31vyVe4SuB3rA6+wDVjYAWI q+gjcZv6dbEIpi0W5L2D8TGYC9K06gjGACpMrvkri3O7PGHJbnbKsXH+WOviltUC heuhwGGb3VbY/TLi9RNzOIJjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3dBEStUu Xycn1JNsB38Ib+B9XIAwHwYDVR0jBBgwFoAUZPIc3mSLObUoK4yxJ5KOIzJIgpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNkRGLzIzMTg0MDhDODEz RjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlBJYzNtU0xPYlVvSzR5eEo1S09JekpJZ3BRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz NkRGLzIzMTg0MDhDODEzRjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JV b0s0eXhKNUtPSXpKSWdwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKznKu+YCTMH2cSFGLaXjfoS0zGwcQublJiROT3Ol8DVmaTiidLw15u6 FpOlwtmQrs+sT3LIFRwqSvtbRWPqHZw08xMf9LFW3SB3H7ck3xTCKv3YlCq2ncS5 K4LVNh9E7NJuHd1zdrk55NGnG6A/LITzQ6CP2i1OTGwEWdb6jXiJLi72QpxSGM2E hE/mg8VxnRCW2Z3L10FGRWvwUn4fAu3WJlGizB3Ltq23TtlcebUvAwV01HsdDycX 1M6zMQrmDVjUk0JSNgvyaxyCYtwUHuyzUHO65VkBzxuWRecA0Si5o9nCTxxo0mSe N2wWxUj/5jDMzQN6Nb0o/lHasfR6AE0= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net