$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft File: TZRPMLjG5pGYjTAvumwvnFdMBLA.mft (raw, json) Hash identifier: VAFFvm7ByWpt3unI2nal7N6VsSzf1fQJVU7rGzLi0Do= Subject key identifier: CF:43:B9:C5:52:C9:99:F0:4B:96:C8:73:CC:60:6C:3A:60:3E:17:4B Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft Manifest number: 02B8 Signing time: Sun 27 Apr 2025 01:04:58 +0000 Manifest this update: Sun 27 Apr 2025 01:04:58 +0000 Manifest next update: Sun 04 May 2025 01:04:58 +0000 Files and hashes: 1: TZRPMLjG5pGYjTAvumwvnFdMBLA.crl (hash: hgvtgX5aV1RptD8VFDCQFrC0xjmfAPwlvUAfYwzz+wY=) 2: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (hash: iYkVHc+gEz+KBoaY/orgybHRRbhE8SWTurly5q5QifM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0 Validity Not Before: Apr 27 01:04:58 2025 GMT Not After : May 4 01:04:58 2025 GMT Subject: CN=680d82ba-4fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:63:54:87:77:63:da:59:3d:f5:09:33:02:8f: 8c:a7:73:ea:a5:c5:9f:51:14:dc:31:d2:1b:d0:db: 69:49:06:f0:1b:0e:a4:21:de:9f:86:7d:1d:09:5f: 49:e6:2e:a0:8d:4b:e7:02:59:27:ac:0a:3b:84:6c: f1:25:0f:42:36:c4:1b:84:9e:11:2f:f6:ee:4a:1f: 1a:54:24:d5:65:93:ca:6a:92:f6:cb:ae:09:e6:8c: 19:35:d3:0f:b6:e7:74:b2:f6:71:e0:86:3c:4c:93: 65:1b:09:94:2d:fd:88:4b:cf:98:24:b4:01:a7:62: 91:8c:ed:fc:6a:aa:53:c6:a1:47:d1:36:0d:81:58: 68:bb:04:62:21:95:98:e6:f4:50:07:53:2d:c7:0b: dc:b6:8d:24:51:0e:68:1b:f2:36:d0:49:68:af:be: fa:34:39:3c:39:42:56:1c:74:d4:39:8b:2d:6e:4c: 1c:cd:f1:f8:e1:8f:a9:82:8d:b2:94:94:10:ec:a3: a4:76:51:3a:b4:8f:44:56:9b:43:94:a1:11:69:7a: db:1e:9e:ba:e0:2b:46:2b:ba:47:22:15:70:06:67: d3:69:04:03:00:a6:76:06:b5:1f:bf:c1:51:e7:18: 84:1f:1e:ef:d1:01:94:24:5d:a0:b6:ce:9b:38:80: 24:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:43:B9:C5:52:C9:99:F0:4B:96:C8:73:CC:60:6C:3A:60:3E:17:4B X509v3 Authority Key Identifier: keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:9b:af:be:b5:a5:0e:0a:f2:46:a2:eb:a5:2e:8f:99:ac:0f: 28:52:e2:7a:8f:d4:f4:42:fd:f2:29:91:ec:5b:06:f1:d3:96: 14:bf:01:7f:5e:49:0a:c2:e4:dc:bc:c2:39:a4:51:31:4a:97: 90:82:b6:2c:fa:48:10:cf:27:a3:d3:56:2b:63:ff:42:3b:15: 07:c0:85:f2:5d:d1:f6:ee:06:a4:a3:cf:cd:2b:c4:09:6b:25: b6:49:9d:82:2f:67:4f:d0:e4:9a:97:5d:e4:55:48:9b:c3:75: 39:0a:04:e6:bb:ad:f1:79:e0:e1:23:08:a6:b7:73:a5:f9:25: 6a:53:cf:c5:a7:50:3f:81:3a:eb:a8:bf:7c:58:bd:6d:15:0a: f5:be:e5:23:68:a5:e2:e1:ba:44:08:e9:53:08:b7:86:5a:47: a0:6a:83:32:a3:d7:d4:c2:3c:55:39:aa:0a:b2:16:8d:a0:0d: 47:32:1d:83:9a:85:89:08:fd:9f:fd:ae:a7:01:75:2c:56:7b: df:ba:37:79:ac:79:77:e2:e4:10:35:4b:ba:80:80:2b:63:e0: 83:91:95:54:0b:12:fc:68:5f:1e:bd:67:a2:30:d8:cb:0e:dd: f0:b2:86:9a:7b:7d:45:d6:ff:25:c3:5b:ea:25:3c:dd:37:4d: 7a:2c:f0:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYzNDkxMTAvBgNVBAUTKDREOTQ0RjMwQjhDNkU2OTE5ODhEMzAyRkJBNkMyRjlD NTc0QzA0QjAwHhcNMjUwNDI3MDEwNDU4WhcNMjUwNTA0MDEwNDU4WjAYMRYwFAYD VQQDEw02ODBkODJiYS00ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2NUh3dj2lk99QkzAo+Mp3PqpcWfURTcMdIb0NtpSQbwGw6kId6fhn0dCV9J 5i6gjUvnAlknrAo7hGzxJQ9CNsQbhJ4RL/buSh8aVCTVZZPKapL2y64J5owZNdMP tud0svZx4IY8TJNlGwmULf2IS8+YJLQBp2KRjO38aqpTxqFH0TYNgVhouwRiIZWY 5vRQB1Mtxwvcto0kUQ5oG/I20Elor776NDk8OUJWHHTUOYstbkwczfH44Y+pgo2y lJQQ7KOkdlE6tI9EVptDlKERaXrbHp664CtGK7pHIhVwBmfTaQQDAKZ2BrUfv8FR 5xiEHx7v0QGUJF2gts6bOIAkmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9DucVS yZnwS5bIc8xgbDpgPhdLMB8GA1UdIwQYMBaAFE2UTzC4xuaRmI0wL7psL5xXTASw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjM0OS9DNkY1MDAxQUVE QjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVwR1lqVEF2dW13dm5GZE1C TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaUlBNTGpHNXBHWWpUQXZ1bXd2bkZkTUJMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjM0OS9DNkY1MDAxQUVEQjExMUVDQUY0MzVDNURDNEY5QUUwMi9UWlJQTUxqRzVw R1lqVEF2dW13dm5GZE1CTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAm6++taUOCvJGouulLo+ZrA8oUuJ6j9T0Qv3yKZHsWwbx05YUvwF/ XkkKwuTcvMI5pFExSpeQgrYs+kgQzyej01YrY/9COxUHwIXyXdH27gako8/NK8QJ ayW2SZ2CL2dP0OSal13kVUibw3U5CgTmu63xeeDhIwimt3Ol+SVqU8/Fp1A/gTrr qL98WL1tFQr1vuUjaKXi4bpECOlTCLeGWkegaoMyo9fUwjxVOaoKshaNoA1HMh2D moWJCP2f/a6nAXUsVnvfujd5rHl34uQQNUu6gIArY+CDkZVUCxL8aF8evWeiMNjL Dt3wsoaae31F1v8lw1vqJTzdN016LPDH -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:44 2025 by rpki-client on console.sobornost.net