$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: POyVsa32wVTezf1pB6yD92MohGW/318/1kUUUc2YTeU= Subject key identifier: CA:73:56:B2:D6:26:8F:AB:6E:A3:B9:E0:E1:55:6E:11:EF:E7:A5:5D Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 0148 Signing time: Sun 27 Apr 2025 03:13:46 +0000 Manifest this update: Sun 27 Apr 2025 03:13:46 +0000 Manifest next update: Sun 04 May 2025 03:13:46 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: 4GlDxYtI17FY2t8YqO0vQawzFRhYPSGjHmHgzUphN2s=) 2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 5/5EDXfdidDN1kIIpU6RxLH5nwhq7RavGWsn7HWaobc=) 3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: RQHCuTNnhU+W3QyMF/cWQQa7ATaR8Vs28IecrYMvrEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Apr 27 03:13:46 2025 GMT Not After : May 4 03:13:46 2025 GMT Subject: CN=680da0ea-eb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:ae:8a:ce:b3:02:bb:2f:22:09:9b:85:13: 54:99:a6:94:97:75:42:01:72:22:a9:48:41:bf:50: 80:15:87:44:5b:5d:72:22:d1:1f:ed:fb:46:51:40: 19:d3:a5:41:99:49:34:a0:ae:2c:41:ad:f9:94:6a: 09:b8:28:44:fe:d5:1a:d5:c9:1d:29:d2:26:74:d7: b2:13:c6:d4:6c:51:24:65:39:ab:cc:a2:28:9f:c1: 2f:07:8d:43:c9:bd:1d:5e:5a:d7:23:73:a7:5f:b1: 3f:fd:5f:80:09:68:05:a1:bb:64:33:12:e0:74:8d: db:6e:b3:ae:d5:dc:71:bb:d4:2f:ae:e3:ec:6d:ff: a2:0a:bc:bb:7d:8e:0d:26:6e:f0:34:c7:16:6d:28: 40:83:3d:d7:59:1a:94:6d:4d:b6:7f:fb:1a:5e:cb: fd:0a:4c:c6:93:85:f6:1c:e0:90:00:35:16:2b:26: 06:f3:f6:e9:29:a1:6e:e5:60:f2:81:19:17:41:63: 29:36:62:c2:63:ad:1a:3f:59:31:c9:1a:df:cb:7a: ac:9f:11:3b:14:1e:db:6d:6c:81:bd:68:3a:07:47: 17:8f:e8:f4:4c:c9:97:93:a1:51:33:03:83:5e:bd: 0d:bf:df:b4:83:78:b5:0f:58:7b:f7:7f:2d:df:ed: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:56:B2:D6:26:8F:AB:6E:A3:B9:E0:E1:55:6E:11:EF:E7:A5:5D X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:20:f1:15:75:1d:f2:83:b2:14:8a:25:85:9c:8b:f1:4e:f9: 0d:e8:31:c2:52:9f:88:a9:6a:e3:19:99:ef:ce:e2:ce:29:1a: de:74:aa:46:6c:16:5b:07:8c:85:d8:52:c6:05:18:f2:ca:43: 82:d6:0e:38:82:79:61:0f:1a:30:3d:61:76:04:30:98:3c:84: 26:42:3c:16:ef:c0:79:7f:4a:3b:3c:0b:17:06:ca:3a:4a:43: ac:74:59:c3:7e:e8:ab:8e:6c:0f:be:96:71:ef:8d:69:40:f4: c3:a0:a9:ac:9c:d8:44:66:57:ef:0a:49:97:ec:ae:13:b6:48: 1a:0e:72:f0:10:3b:17:32:aa:20:28:b0:0d:16:dd:04:e2:25: 38:26:95:a4:8f:59:98:eb:88:75:59:16:59:c8:00:52:22:ab: b7:c4:16:85:74:6d:67:7d:61:26:e0:b7:40:19:df:aa:91:dd: 31:11:7e:f9:2c:59:10:fe:08:c2:e0:a2:4c:0e:d5:a6:10:63: 5b:7b:eb:e3:0a:93:e4:1d:95:4d:de:cd:a4:10:69:fa:af:56: 55:b3:ba:d9:f1:52:90:31:cb:33:a4:0f:8e:2e:64:43:6f:4e: 67:11:1c:d6:6c:45:57:c4:fc:27:61:d4:55:18:f2:65:ed:fb: 9a:43:60:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUwNDI3MDMxMzQ2WhcNMjUwNTA0MDMxMzQ2WjAYMRYwFAYD VQQDEw02ODBkYTBlYS1lYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygmuis6zArsvIgmbhRNUmaaUl3VCAXIiqUhBv1CAFYdEW11yItEf7ftGUUAZ 06VBmUk0oK4sQa35lGoJuChE/tUa1ckdKdImdNeyE8bUbFEkZTmrzKIon8EvB41D yb0dXlrXI3OnX7E//V+ACWgFobtkMxLgdI3bbrOu1dxxu9QvruPsbf+iCry7fY4N Jm7wNMcWbShAgz3XWRqUbU22f/saXsv9CkzGk4X2HOCQADUWKyYG8/bpKaFu5WDy gRkXQWMpNmLCY60aP1kxyRrfy3qsnxE7FB7bbWyBvWg6B0cXj+j0TMmXk6FRMwOD Xr0Nv9+0g3i1D1h7938t3+1Q2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpzVrLW Jo+rbqO54OFVbhHv56VdMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8IPEVdR3yg7IUiiWFnIvxTvkN6DHCUp+IqWrjGZnvzuLOKRredKpG bBZbB4yF2FLGBRjyykOC1g44gnlhDxowPWF2BDCYPIQmQjwW78B5f0o7PAsXBso6 SkOsdFnDfuirjmwPvpZx741pQPTDoKmsnNhEZlfvCkmX7K4TtkgaDnLwEDsXMqog KLANFt0E4iU4JpWkj1mY64h1WRZZyABSIqu3xBaFdG1nfWEm4LdAGd+qkd0xEX75 LFkQ/gjC4KJMDtWmEGNbe+vjCpPkHZVN3s2kEGn6r1ZVs7rZ8VKQMcszpA+OLmRD b05nERzWbEVXxPwnYdRVGPJl7fuaQ2Cj -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:39 2025 by rpki-client on console.sobornost.net