$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft File: znsweOogDvHPw0WMTR6QjV-ctzU.mft (raw, json) Hash identifier: QA38jkSJ/5VRbIUAfWj9DAmAGAkUH1eGYpWQJ2hKds0= Subject key identifier: DE:0F:1F:0E:88:B6:DC:05:0D:F3:35:60:69:02:3D:B9:87:D9:64:61 Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 Certificate issuer: /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Certificate serial: 082E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft Manifest number: 080E Signing time: Sat 26 Apr 2025 20:39:47 +0000 Manifest this update: Sat 26 Apr 2025 20:39:47 +0000 Manifest next update: Sat 03 May 2025 20:39:47 +0000 Files and hashes: 1: znsweOogDvHPw0WMTR6QjV-ctzU.crl (hash: MpkeAiJo534PZWiIsf8MJIt2nyKQxyrhzt2H4Ijfv4U=) 2: A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (hash: QfQMDJEFyFJctWqY3TUBdj1n9VR5xXThgyit189Rglg=) 3: 790E442A9B1711ECB256A31CC4F9AE02.roa (hash: x/6buEc3mt0NYc9i/4n+m9cWM6ITkbcO0w+UzTAhQs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2094 (0x82e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735 Validity Not Before: Apr 26 20:39:47 2025 GMT Not After : May 3 20:39:47 2025 GMT Subject: CN=680d4493-6bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:d4:9f:31:1f:ae:2d:87:73:86:c3:7c:ec: 09:dc:14:b0:2e:48:ad:91:03:11:d5:f2:7a:7a:f7: 17:b1:9b:8b:28:9d:1f:36:6d:ce:02:87:7d:46:9a: c3:ec:0b:a2:63:d0:c5:19:b5:b8:b2:eb:31:a9:e4: ef:cc:49:40:60:02:76:23:c2:6a:70:23:fd:2d:ee: 5b:24:90:8e:7e:c0:71:97:18:4b:e3:b0:28:82:93: b2:24:47:48:8f:1e:3a:28:44:c9:f0:1a:59:08:32: a4:cf:67:fa:df:92:36:d2:83:b9:f6:c2:83:79:2f: 5b:3a:c1:d7:80:3b:8a:d4:ae:72:4d:1a:e3:91:3f: 86:ab:57:27:96:56:9a:51:bb:39:c2:f4:89:2d:8a: 7f:87:15:9b:50:50:3c:96:ec:55:3e:60:59:a7:08: 5b:12:06:79:18:f4:94:ac:0e:c3:9f:d9:ff:7d:9e: ff:f9:60:ad:e2:cc:03:ac:fc:6c:65:f8:c1:01:80: 18:e2:dc:99:9f:a0:55:fb:64:db:38:09:9a:1c:f0: 0d:de:c9:2e:5b:75:43:d3:94:1a:f7:3e:aa:49:6d: 9c:0b:44:56:27:53:f5:54:99:cf:36:62:e3:71:4b: 03:47:3a:81:06:9b:9e:ce:ca:52:a4:5e:94:7b:4f: b4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0F:1F:0E:88:B6:DC:05:0D:F3:35:60:69:02:3D:B9:87:D9:64:61 X509v3 Authority Key Identifier: keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:30:11:8e:b7:0f:3f:9d:a4:c7:9d:cb:41:0b:93:d3:59:c0: e4:85:8b:2b:f9:ff:2e:7f:a9:29:71:4f:54:ca:0a:83:fa:dc: 76:aa:2d:e4:94:94:01:96:4f:64:af:4f:f1:ea:ee:d9:d0:5e: ec:f3:2b:d6:6d:2a:95:b5:a4:c4:70:b7:28:f0:97:62:ad:fd: 74:4e:c9:0c:8c:82:de:3c:06:81:e7:e0:fa:48:ec:7c:a1:0b: 6e:cb:65:02:78:0e:2f:01:ee:a1:07:b1:32:1f:3e:d2:fd:61: e4:fb:e4:f2:2a:7b:79:75:35:1b:5b:c6:a2:1e:6f:a8:19:85: 13:0f:e2:d5:0b:65:a0:ab:fa:07:0d:32:2a:26:2d:4c:a7:b8: 16:6f:82:d3:ae:f6:04:e4:85:25:a2:ee:07:11:01:b5:a1:a3: 66:af:2d:da:3f:ab:22:17:7f:8a:a0:54:31:bb:f8:af:d1:b3: 9d:d3:bb:68:2d:92:ab:a3:71:2a:fe:dc:d2:7b:39:ab:b9:5b: fc:d3:d8:43:3b:85:a8:38:c8:e6:80:13:6b:78:68:98:48:57: d7:9c:71:95:70:53:d4:46:98:2f:d2:24:69:5d:af:b3:69:fc: 5e:f9:a4:87:c6:5e:2a:21:50:bd:29:86:25:80:3f:dd:da:23: e4:5a:fe:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U0MTUxMTAvBgNVBAUTKENFN0IzMDc4RUEyMDBFRjFDRkMzNDU4QzREMUU5MDhE NUY5Q0I3MzUwHhcNMjUwNDI2MjAzOTQ3WhcNMjUwNTAzMjAzOTQ3WjAYMRYwFAYD VQQDEw02ODBkNDQ5My02YmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwXUnzEfri2Hc4bDfOwJ3BSwLkitkQMR1fJ6evcXsZuLKJ0fNm3OAod9RprD 7AuiY9DFGbW4susxqeTvzElAYAJ2I8JqcCP9Le5bJJCOfsBxlxhL47AogpOyJEdI jx46KETJ8BpZCDKkz2f635I20oO59sKDeS9bOsHXgDuK1K5yTRrjkT+Gq1cnllaa Ubs5wvSJLYp/hxWbUFA8luxVPmBZpwhbEgZ5GPSUrA7Dn9n/fZ7/+WCt4swDrPxs ZfjBAYAY4tyZn6BV+2TbOAmaHPAN3skuW3VD05Qa9z6qSW2cC0RWJ1P1VJnPNmLj cUsDRzqBBpuezspSpF6Ue0+0OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4PHw6I ttwFDfM1YGkCPbmH2WRhMB8GA1UdIwQYMBaAFM57MHjqIA7xz8NFjE0ekI1fnLc1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTQxNS9CQzY2MTA2RURE OTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2SFB3MFdNVFI2UWpWLWN0 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puc3dlT29nRHZIUHcwV01UUjZRalYtY3R6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTQxNS9CQzY2MTA2RUREOTQxMUVBOEEyRTJEMzdDNEY5QUUwMi96bnN3ZU9vZ0R2 SFB3MFdNVFI2UWpWLWN0elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCMBGOtw8/naTHnctBC5PTWcDkhYsr+f8uf6kpcU9UygqD+tx2qi3k lJQBlk9kr0/x6u7Z0F7s8yvWbSqVtaTEcLco8Jdirf10TskMjILePAaB5+D6SOx8 oQtuy2UCeA4vAe6hB7EyHz7S/WHk++TyKnt5dTUbW8aiHm+oGYUTD+LVC2Wgq/oH DTIqJi1Mp7gWb4LTrvYE5IUlou4HEQG1oaNmry3aP6siF3+KoFQxu/iv0bOd07to LZKro3Eq/tzSezmruVv809hDO4WoOMjmgBNreGiYSFfXnHGVcFPURpgv0iRpXa+z afxe+aSHxl4qIVC9KYYlgD/d2iPkWv5P -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:57 2025 by rpki-client on console.sobornost.net