$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft File: KZYjJd4LreTcndvFdq4ncBK8N1g.mft (raw, json) Hash identifier: bAUw5X2wqAN+nn5CrrqwCcSKhNkQeDjonVLM1MY5RjA= Subject key identifier: C3:62:A7:3F:19:0B:14:4E:39:E1:1B:96:D4:3A:F4:43:17:BA:46:3E Authority key identifier: 29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 Certificate issuer: /CN=A914DA2D/serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Certificate serial: 1A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft Manifest number: 1A28 Signing time: Mon 28 Apr 2025 16:33:39 +0000 Manifest this update: Mon 28 Apr 2025 16:33:39 +0000 Manifest next update: Mon 05 May 2025 16:33:39 +0000 Files and hashes: 1: KZYjJd4LreTcndvFdq4ncBK8N1g.crl (hash: 2az2czZPjxL5YqI4mEuDMJX9xuCEm3K0ImOZg2izgoI=) 2: A0769964641D11EFA3C4902EC4F9AE02.roa (hash: YiQQCnKQlSh2g27BuutnhmwEnJ5qDzk3kEj9SOd11G4=) 3: B201496EF3A311EC8804FE09C4F9AE02.roa (hash: RhwUVojEG1WuV9dRF2T14LTQ1Wlv5CN2R82nJUIH6fo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6724 (0x1a44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA2D, serialNumber=29962325DE0BADE4DC9DDBC576AE277012BC3758 Validity Not Before: Apr 28 16:33:39 2025 GMT Not After : May 5 16:33:39 2025 GMT Subject: CN=680fade3-dc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:d3:21:50:da:11:2f:58:2d:76:e5:be:d8: c8:79:6f:fe:25:6a:3e:f2:b8:09:54:70:e0:35:50: 5c:e6:de:b0:33:33:3d:07:fc:8e:71:14:26:7b:15: 41:13:6a:cf:83:08:c5:d4:65:37:13:c1:08:cd:c3: 76:25:c4:0e:10:78:0f:63:0a:16:97:23:8a:cc:25: 17:d4:d1:97:58:f0:4c:7b:64:f9:e2:5e:0e:c2:cb: 40:e3:d2:e5:66:24:76:52:b6:95:b7:2a:d0:c0:e0: fa:c4:3e:3a:b9:16:fb:af:8f:9f:03:6e:80:62:9b: 35:88:3f:33:ae:16:52:b4:d9:f7:2e:71:12:e9:a3: 19:58:27:10:ef:61:39:b6:3e:09:b2:3b:07:2a:30: 02:45:45:61:d7:c0:38:fc:47:47:6e:40:70:71:ff: b7:e3:eb:c4:69:07:51:e3:0a:87:38:4a:6e:53:ce: 1f:a2:8d:16:5d:cb:b2:f3:90:88:a7:d6:cf:a6:38: 7b:6c:ae:7d:09:a6:2c:b5:da:b8:41:83:11:47:54: 89:23:83:9b:42:0a:82:a2:81:37:b9:45:c3:14:fa: 62:02:8c:97:95:97:5c:29:12:4f:ed:50:cb:51:4b: 1a:ec:3a:fc:23:bb:eb:55:28:64:73:c8:1e:fe:c0: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:62:A7:3F:19:0B:14:4E:39:E1:1B:96:D4:3A:F4:43:17:BA:46:3E X509v3 Authority Key Identifier: keyid:29:96:23:25:DE:0B:AD:E4:DC:9D:DB:C5:76:AE:27:70:12:BC:37:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KZYjJd4LreTcndvFdq4ncBK8N1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/8383620A50D511E79ECE4013C4F9AE02/KZYjJd4LreTcndvFdq4ncBK8N1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6e:84:8d:e3:35:d3:0b:e8:c1:89:ec:ce:6b:ab:6d:fc:3f: 2c:25:b6:6a:f6:6f:ce:83:fd:c6:49:28:a4:f6:a7:66:2e:5c: 9b:41:d7:34:30:e3:d2:a7:3d:9b:ed:26:04:a7:b7:69:3a:31: d3:36:a3:c5:6d:32:a7:95:d1:00:c4:ad:87:2e:43:c9:dd:9e: 89:66:9b:81:e2:32:53:10:fd:9d:5b:ac:6e:0a:c9:59:ac:7f: c1:fa:81:1f:3a:ca:70:a4:c6:fd:09:8a:4e:96:19:2a:90:c3: b2:4a:c2:70:7b:a8:4c:4c:f6:e1:38:49:ca:92:d7:aa:5a:69: 20:ea:9b:c9:c5:34:3e:7e:74:11:6a:46:75:bc:bd:02:c6:78: d9:42:8f:94:1d:dc:c3:8a:4f:fc:99:03:84:3b:e4:0a:ef:c1: 08:62:0f:2d:60:1a:7c:9b:02:6a:4f:7f:51:4c:84:cd:6f:8b: 5f:8a:7d:42:d3:06:5c:31:56:16:73:a0:6f:32:46:73:0b:7e: a5:86:4a:b3:74:24:75:87:39:95:bf:dd:d7:51:37:ff:73:bc: d1:d8:45:ff:3d:8d:73:aa:06:fb:d0:1a:50:6e:05:04:1e:4d: 4f:d4:97:15:ec:6b:94:89:c0:55:16:3d:08:0b:1f:fe:af:bb: be:1b:c6:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBMkQxMTAvBgNVBAUTKDI5OTYyMzI1REUwQkFERTREQzlEREJDNTc2QUUyNzcw MTJCQzM3NTgwHhcNMjUwNDI4MTYzMzM5WhcNMjUwNTA1MTYzMzM5WjAYMRYwFAYD VQQDEw02ODBmYWRlMy1kYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuLTIVDaES9YLXblvtjIeW/+JWo+8rgJVHDgNVBc5t6wMzM9B/yOcRQmexVB E2rPgwjF1GU3E8EIzcN2JcQOEHgPYwoWlyOKzCUX1NGXWPBMe2T54l4OwstA49Ll ZiR2UraVtyrQwOD6xD46uRb7r4+fA26AYps1iD8zrhZStNn3LnES6aMZWCcQ72E5 tj4JsjsHKjACRUVh18A4/EdHbkBwcf+34+vEaQdR4wqHOEpuU84foo0WXcuy85CI p9bPpjh7bK59CaYstdq4QYMRR1SJI4ObQgqCooE3uUXDFPpiAoyXlZdcKRJP7VDL UUsa7Dr8I7vrVShkc8ge/sD+dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNipz8Z CxROOeEbltQ69EMXukY+MB8GA1UdIwQYMBaAFCmWIyXeC63k3J3bxXauJ3ASvDdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC84MzgzNjIwQTUw RDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJlVGNuZHZGZHE0bmNCSzhO MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0taWWpKZDRMcmVUY25kdkZkcTRuY0JLOE4xZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REEyRC84MzgzNjIwQTUwRDUxMUU3OUVDRTQwMTNDNEY5QUUwMi9LWllqSmQ0THJl VGNuZHZGZHE0bmNCSzhOMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+boSN4zXTC+jBiezOa6tt/D8sJbZq9m/Og/3GSSik9qdmLlybQdc0 MOPSpz2b7SYEp7dpOjHTNqPFbTKnldEAxK2HLkPJ3Z6JZpuB4jJTEP2dW6xuCslZ rH/B+oEfOspwpMb9CYpOlhkqkMOySsJwe6hMTPbhOEnKkteqWmkg6pvJxTQ+fnQR akZ1vL0CxnjZQo+UHdzDik/8mQOEO+QK78EIYg8tYBp8mwJqT39RTITNb4tfin1C 0wZcMVYWc6BvMkZzC36lhkqzdCR1hzmVv93XUTf/c7zR2EX/PY1zqgb70BpQbgUE Hk1P1JcV7GuUicBVFj0ICx/+r7u+G8bq -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:33 2025 by rpki-client on console.sobornost.net