$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json) Hash identifier: iUE8Q8bG/5ai1eXDk5qKg9DDZgCyBq5XkYg4ippItFE= Subject key identifier: 41:C1:77:A1:BC:BB:3A:BB:6A:05:A8:37:0F:49:70:1F:B9:9D:26:82 Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft Manifest number: 78 Signing time: Sun 27 Apr 2025 05:46:01 +0000 Manifest this update: Sun 27 Apr 2025 05:46:01 +0000 Manifest next update: Sun 04 May 2025 05:46:01 +0000 Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: IrAYqKoWbAPvPfekycUoCuAd8Vhwgtk7vZj3YXoj3t4=) 2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: gTljkeOtiLUXIev71WvDZsUroRxts5KzF3IxcDIZHnk=) 3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: rP5j4C0CGZJsw2gJYjo66ntxudPoLAvM82b5Jln8ZuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Validity Not Before: Apr 27 05:46:01 2025 GMT Not After : May 4 05:46:01 2025 GMT Subject: CN=680dc499-b44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c4:22:cd:08:bb:7d:6b:57:92:04:07:1d:56: 5d:d6:72:4f:40:33:8e:29:bc:18:91:93:de:04:b6: 4f:99:c3:b4:c6:a8:e1:c1:e5:99:5d:43:05:df:b5: bc:fd:0a:8a:b1:46:8b:25:24:cc:83:0c:71:41:d0: fa:53:04:36:c1:77:04:b4:17:f7:af:83:42:55:22: ba:9e:ac:61:32:4c:2d:2b:35:4d:10:05:4f:85:23: 82:b6:77:3d:6e:77:54:23:ec:b9:7e:77:94:ae:2c: f4:e5:b3:8c:67:ce:c4:60:99:a5:6b:30:21:ce:87: db:39:ac:82:c2:6c:e0:32:1e:d9:28:58:38:b4:03: 57:8c:2d:bc:3e:12:64:6a:0f:97:fb:21:b0:b7:63: 92:1d:84:d1:88:c2:b7:02:c2:9f:28:b8:93:47:99: 54:10:1a:31:04:2a:14:e9:b7:28:74:7a:6f:44:11: fa:fd:4c:64:82:53:1b:25:d1:48:88:be:ae:9a:c0: d4:ac:18:82:f0:7f:73:e6:96:9b:65:de:e0:91:7f: 4f:be:2e:12:90:df:f9:73:de:f2:70:f2:f7:10:08: 47:78:9c:77:7e:a3:91:8c:31:d4:8d:c7:d7:fa:4a: 67:1e:ed:de:2b:c5:72:b1:22:4b:fe:3a:ab:4c:58: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C1:77:A1:BC:BB:3A:BB:6A:05:A8:37:0F:49:70:1F:B9:9D:26:82 X509v3 Authority Key Identifier: keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:13:61:8b:bf:ff:c0:24:89:78:4b:2a:e6:57:bb:9b:46:27: ea:45:7b:06:fb:ce:f6:3c:3e:22:90:a1:27:81:ba:59:38:56: 7a:ba:1d:d9:07:45:5d:2f:79:01:f7:dc:88:2e:36:fc:23:9b: 59:a5:36:8f:d2:42:08:6e:fa:15:c9:74:40:4a:49:1a:05:8b: e1:88:9f:e4:6f:0e:24:23:44:7d:07:47:20:af:11:06:e9:28: 37:79:6d:76:78:02:d2:2e:a5:cf:b8:75:c2:69:9d:c0:6a:ea: 3a:2f:0a:e0:41:85:4d:81:93:e1:ff:2c:84:cf:5a:96:67:f8: a7:d7:36:96:a5:3e:01:22:9d:24:8e:6d:f0:6b:12:9f:91:e0: 7e:87:d9:86:a4:66:e0:ac:d6:9e:ed:48:13:f4:a1:78:f2:7d: 6d:0b:ec:7f:33:f2:85:13:cd:cd:84:51:b9:2c:ce:9d:49:b2: 70:9c:eb:34:5c:c5:40:49:6c:c3:34:18:1c:7f:dc:75:17:2d: 58:c5:81:9c:f9:6b:ea:6c:a3:8b:ce:74:38:8a:31:88:1d:ec: a5:d4:e8:74:3c:7a:d9:4a:99:0f:f5:eb:ae:b0:f9:eb:ce:4e: d9:7d:a6:27:76:88:fd:7b:91:09:0a:86:0a:21:6b:cc:11:64: 25:30:f4:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE RDNCMzhCRjIwHhcNMjUwNDI3MDU0NjAxWhcNMjUwNTA0MDU0NjAxWjAYMRYwFAYD VQQDEw02ODBkYzQ5OS1iNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38QizQi7fWtXkgQHHVZd1nJPQDOOKbwYkZPeBLZPmcO0xqjhweWZXUMF37W8 /QqKsUaLJSTMgwxxQdD6UwQ2wXcEtBf3r4NCVSK6nqxhMkwtKzVNEAVPhSOCtnc9 bndUI+y5fneUriz05bOMZ87EYJmlazAhzofbOayCwmzgMh7ZKFg4tANXjC28PhJk ag+X+yGwt2OSHYTRiMK3AsKfKLiTR5lUEBoxBCoU6bcodHpvRBH6/UxkglMbJdFI iL6umsDUrBiC8H9z5pabZd7gkX9Pvi4SkN/5c97ycPL3EAhHeJx3fqORjDHUjcfX +kpnHu3eK8VysSJL/jqrTFjp7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHBd6G8 uzq7agWoNw9JcB+5nSaCMB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2 QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB NUhmdVIwMXNsVW5kT3ppX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBE2GLv//AJIl4SyrmV7ubRifqRXsG+872PD4ikKEngbpZOFZ6uh3Z B0VdL3kB99yILjb8I5tZpTaP0kIIbvoVyXRASkkaBYvhiJ/kbw4kI0R9B0cgrxEG 6Sg3eW12eALSLqXPuHXCaZ3Aauo6LwrgQYVNgZPh/yyEz1qWZ/in1zaWpT4BIp0k jm3waxKfkeB+h9mGpGbgrNae7UgT9KF48n1tC+x/M/KFE83NhFG5LM6dSbJwnOs0 XMVASWzDNBgcf9x1Fy1YxYGc+WvqbKOLznQ4ijGIHeyl1Oh0PHrZSpkP9euusPnr zk7ZfaYndoj9e5EJCoYKIWvMEWQlMPTT -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:42 2025 by rpki-client on console.sobornost.net