$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft File: z64jGpiXN_YdrZV8wk0hNYWBjtw.mft (raw, json) Hash identifier: WUxYESzxMTiL817/kzci8H4NaqARy2c3jJIcsEwzixU= Subject key identifier: A3:39:88:16:D3:5F:D5:48:62:08:19:3F:B3:16:5A:0B:FA:0F:C0:C4 Authority key identifier: CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC Certificate issuer: /CN=A914B45F/serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft Manifest number: 0147 Signing time: Sun 27 Apr 2025 03:12:06 +0000 Manifest this update: Sun 27 Apr 2025 03:12:05 +0000 Manifest next update: Sun 04 May 2025 03:12:05 +0000 Files and hashes: 1: z64jGpiXN_YdrZV8wk0hNYWBjtw.crl (hash: LSQ6aKZVIAj0/ls1gX7Sa7s2yGpH9+e2b0SMaXpNfNs=) 2: 578C92D62F6611EE9CAFAA58C4F9AE02.roa (hash: Km7Ntr3HPW+9p2/xgcR3/NDs3gM06IRtzM1XksYLFiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=CFAE231A989737F61DAD957CC24D213585818EDC Validity Not Before: Apr 27 03:12:05 2025 GMT Not After : May 4 03:12:05 2025 GMT Subject: CN=680da085-63e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:d8:22:ed:54:15:1e:c7:a0:ca:68:43:a2: 9b:b7:62:97:1b:43:a1:88:af:1a:7b:9e:25:f3:d8: f8:e2:cc:cf:d1:56:7a:04:b9:75:d0:1e:d5:a5:75: 82:cd:ec:42:38:25:74:7a:b1:87:38:f1:8c:a8:0a: d4:87:68:db:24:f5:6d:41:1a:de:ef:72:54:76:37: c7:e7:82:cb:7b:ae:20:de:f4:60:85:6b:5f:b5:1f: 6f:ea:65:89:65:ca:31:be:3e:b4:24:e1:f4:ac:3a: 43:45:3c:6e:9d:20:64:a9:c5:2c:d1:87:6c:1c:9e: fa:b8:81:b5:29:20:93:9a:e4:67:85:5c:cf:3d:bc: 22:76:79:aa:8a:6f:85:e8:87:7d:a3:4c:26:16:d3: d3:8c:a5:e1:77:bc:83:f0:a6:83:85:bc:2c:e7:e6: 35:ff:3e:f8:b0:dd:74:c6:bb:80:ce:7e:6b:90:79: d8:cb:4d:4f:bc:0b:99:ab:ff:36:f3:9c:45:57:6c: 76:f7:6a:8b:6d:26:15:0c:1a:05:75:42:a4:86:d6: d6:e1:ca:8f:d8:24:34:2b:72:55:18:87:52:40:a8: e6:05:27:66:a0:65:6a:7b:46:89:ff:ca:5f:53:0c: 25:b0:96:1a:9d:5f:f5:3e:98:b8:10:9c:c3:a7:64: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:39:88:16:D3:5F:D5:48:62:08:19:3F:B3:16:5A:0B:FA:0F:C0:C4 X509v3 Authority Key Identifier: keyid:CF:AE:23:1A:98:97:37:F6:1D:AD:95:7C:C2:4D:21:35:85:81:8E:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z64jGpiXN_YdrZV8wk0hNYWBjtw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/40BB15742F6511EE95FDED56C4F9AE02/z64jGpiXN_YdrZV8wk0hNYWBjtw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:6f:a5:d3:00:8f:3d:af:b2:11:8a:da:89:d1:5c:44:7b:75: eb:e5:fb:00:fd:08:42:4c:ef:f8:c5:76:72:2b:53:b2:0f:25: 93:9e:63:74:1c:1b:84:b8:50:98:cd:ab:55:0d:cf:cb:a3:c6: 41:c7:22:f0:6c:80:20:47:39:68:6a:79:eb:e9:f6:31:d7:2d: 7c:ff:fb:4b:ca:5e:a3:97:c5:cb:b7:a4:5e:74:d0:8b:f8:0d: 66:0d:e7:2b:ca:dc:24:1e:bb:b3:a9:6b:2d:4c:bd:35:3a:ca: e8:b7:ed:2f:2a:36:48:4f:b9:f0:3e:a7:58:aa:e7:9f:fb:f4: 29:62:2d:fd:a3:0c:6b:20:b8:5a:f6:f2:65:3f:e1:8f:8f:3d: 53:98:cf:f7:94:96:2f:b1:74:8f:15:29:1c:1b:1d:92:43:f7: 19:f3:bc:e2:d5:91:24:cf:a3:1f:8e:32:c7:87:3b:4a:e2:e9: 47:ef:4c:77:13:dd:11:03:67:3a:9c:4f:65:48:87:6a:0a:50: 34:a8:2a:dc:f8:f8:23:64:73:13:c9:94:a3:07:f3:ec:80:1d: 21:e6:e5:55:0d:5c:f2:a5:aa:5d:34:2c:4b:2d:66:38:23:db: d1:4f:f1:06:74:3b:c9:21:48:08:69:b4:3f:17:7c:ac:88:9e: c6:63:82:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NUYxMTAvBgNVBAUTKENGQUUyMzFBOTg5NzM3RjYxREFEOTU3Q0MyNEQyMTM1 ODU4MThFREMwHhcNMjUwNDI3MDMxMjA1WhcNMjUwNTA0MDMxMjA1WjAYMRYwFAYD VQQDEw02ODBkYTA4NS02M2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qfYIu1UFR7HoMpoQ6Kbt2KXG0OhiK8ae54l89j44szP0VZ6BLl10B7VpXWC zexCOCV0erGHOPGMqArUh2jbJPVtQRre73JUdjfH54LLe64g3vRghWtftR9v6mWJ Zcoxvj60JOH0rDpDRTxunSBkqcUs0YdsHJ76uIG1KSCTmuRnhVzPPbwidnmqim+F 6Id9o0wmFtPTjKXhd7yD8KaDhbws5+Y1/z74sN10xruAzn5rkHnYy01PvAuZq/82 85xFV2x292qLbSYVDBoFdUKkhtbW4cqP2CQ0K3JVGIdSQKjmBSdmoGVqe0aJ/8pf UwwlsJYanV/1Ppi4EJzDp2TUrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKM5iBbT X9VIYggZP7MWWgv6D8DEMB8GA1UdIwQYMBaAFM+uIxqYlzf2Ha2VfMJNITWFgY7c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri80MEJCMTU3NDJG NjUxMUVFOTVGREVENTZDNEY5QUUwMi96NjRqR3BpWE5fWWRyWlY4d2swaE5ZV0Jq dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o2NGpHcGlYTl9ZZHJaVjh3azBoTllXQmp0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ1Ri80MEJCMTU3NDJGNjUxMUVFOTVGREVENTZDNEY5QUUwMi96NjRqR3BpWE5f WWRyWlY4d2swaE5ZV0JqdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYb6XTAI89r7IRitqJ0VxEe3Xr5fsA/QhCTO/4xXZyK1OyDyWTnmN0 HBuEuFCYzatVDc/Lo8ZBxyLwbIAgRzloannr6fYx1y18//tLyl6jl8XLt6RedNCL +A1mDecrytwkHruzqWstTL01Osrot+0vKjZIT7nwPqdYquef+/QpYi39owxrILha 9vJlP+GPjz1TmM/3lJYvsXSPFSkcGx2SQ/cZ87zi1ZEkz6MfjjLHhztK4ulH70x3 E90RA2c6nE9lSIdqClA0qCrc+PgjZHMTyZSjB/PsgB0h5uVVDVzypapdNCxLLWY4 I9vRT/EGdDvJIUgIabQ/F3ysiJ7GY4Lc -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:41 2025 by rpki-client on console.sobornost.net