$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: /l4CgbYr95G60IWfCf7fdTLGRtf7KYLdZK+saSTd7bI= Subject key identifier: 66:8E:8B:9F:7C:D8:92:4E:6B:31:94:D7:2B:EB:3F:E1:BB:9B:C4:D6 Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: D8 Signing time: Fri 25 Apr 2025 04:38:25 +0000 Manifest this update: Fri 25 Apr 2025 04:38:24 +0000 Manifest next update: Fri 02 May 2025 04:38:24 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: 0SVj5upkgxbyBpGgQEE3euRzSy7unYLAkrrNysqbp14=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Apr 25 04:38:24 2025 GMT Not After : May 2 04:38:24 2025 GMT Subject: CN=680b11c1-b916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d1:0e:3b:00:4d:83:59:55:23:59:d2:58:5d: e4:7a:de:2a:b9:7c:c9:46:83:7b:07:a3:23:4a:5e: 1c:51:ca:20:43:4e:e7:eb:6f:4c:7c:45:b1:b9:11: ad:3f:87:73:fb:e4:b8:f2:d2:bf:a2:ba:7a:2b:4a: 46:31:6d:45:eb:90:e4:74:c2:6c:d5:22:be:fb:50: 3e:d6:24:b7:cd:d3:ea:e1:6d:1e:13:72:4d:e2:10: ec:e5:85:c2:70:d8:7f:7a:ce:89:90:a2:b1:7b:d9: 70:6e:a8:7a:02:c6:13:7f:7f:44:50:90:fd:91:45: a8:15:63:0b:36:21:56:12:e2:4d:77:89:fd:94:6c: 1d:99:8f:2a:9e:b9:2d:5c:bb:5c:3e:f0:8b:ca:d4: ea:db:62:6a:a5:52:db:12:64:72:98:47:e6:6b:6a: ab:aa:c5:f0:cc:d5:84:3f:75:fd:94:2c:8c:cc:cc: db:c4:91:e4:9b:a4:2c:46:84:35:41:a5:e8:61:a1: ee:66:43:80:df:b7:27:5b:28:da:20:a4:7c:91:e5: 1e:21:2d:fb:a8:e4:37:87:28:6c:37:d1:1a:f9:34: 06:e2:dd:79:22:dc:69:ba:aa:e6:2f:8e:2a:01:97: 85:24:6e:45:aa:4c:a3:ca:80:59:ab:15:9c:c8:6e: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8E:8B:9F:7C:D8:92:4E:6B:31:94:D7:2B:EB:3F:E1:BB:9B:C4:D6 X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:1f:0d:d2:ba:04:47:2b:38:61:38:dc:b8:9b:e3:36:a2:5d: 36:19:fd:37:9f:39:b5:d0:1e:eb:ec:10:6e:5e:16:1c:37:46: 8b:8c:a0:c6:f5:8e:76:56:cd:3e:ba:02:dd:83:df:2e:bb:1c: 99:4d:fe:85:b9:da:e1:c0:1b:f0:66:74:dc:01:fb:96:d5:16: fe:f1:db:8f:aa:24:d6:5b:b5:89:ac:68:0e:05:24:af:82:7e: fe:3f:6b:30:ce:1a:6c:b3:14:ae:60:1e:76:ab:93:27:6f:71: 57:fe:4b:b2:b3:a3:f1:b5:56:87:bd:d7:87:c3:a8:44:4e:87: 9d:d1:c0:81:c0:93:be:f5:dc:ed:fa:2a:cf:e8:aa:1a:d3:60: 88:3e:02:9c:1f:9c:7a:06:6b:81:50:84:b9:27:f8:23:53:f5: 89:31:69:3a:cf:b1:65:0a:be:fe:b4:1c:e4:14:53:25:2d:22: e5:1b:09:73:f5:fc:fd:86:71:ef:db:66:b1:04:16:ef:48:d5: a0:e0:2e:69:38:98:51:8d:96:60:f3:9e:d1:4e:97:9a:1b:e2: 4b:7d:bf:94:66:f6:76:d6:ba:14:99:76:ab:e1:d8:18:44:5c: cb:bb:47:21:d9:26:8d:e8:41:a7:b8:fb:0f:d3:4c:36:68:c5: 4e:08:79:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUwNDI1MDQzODI0WhcNMjUwNTAyMDQzODI0WjAYMRYwFAYD VQQDEw02ODBiMTFjMS1iOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNEOOwBNg1lVI1nSWF3ket4quXzJRoN7B6MjSl4cUcogQ07n629MfEWxuRGt P4dz++S48tK/orp6K0pGMW1F65DkdMJs1SK++1A+1iS3zdPq4W0eE3JN4hDs5YXC cNh/es6JkKKxe9lwbqh6AsYTf39EUJD9kUWoFWMLNiFWEuJNd4n9lGwdmY8qnrkt XLtcPvCLytTq22JqpVLbEmRymEfma2qrqsXwzNWEP3X9lCyMzMzbxJHkm6QsRoQ1 QaXoYaHuZkOA37cnWyjaIKR8keUeIS37qOQ3hyhsN9Ea+TQG4t15ItxpuqrmL44q AZeFJG5FqkyjyoBZqxWcyG78OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGaOi598 2JJOazGU1yvrP+G7m8TWMB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Hw3SugRHKzhhONy4m+M2ol02Gf03nzm10B7r7BBuXhYcN0aLjKDG 9Y52Vs0+ugLdg98uuxyZTf6FudrhwBvwZnTcAfuW1Rb+8duPqiTWW7WJrGgOBSSv gn7+P2swzhpssxSuYB52q5Mnb3FX/kuys6PxtVaHvdeHw6hEToed0cCBwJO+9dzt +irP6Koa02CIPgKcH5x6BmuBUIS5J/gjU/WJMWk6z7FlCr7+tBzkFFMlLSLlGwlz 9fz9hnHv22axBBbvSNWg4C5pOJhRjZZg857RTpeaG+JLfb+UZvZ21roUmXar4dgY RFzLu0ch2SaN6EGnuPsP00w2aMVOCHmb -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:45 2025 by rpki-client on console.sobornost.net