$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: 2wHT+kQh25cDpT7SJKjMUGbhDXndqVH0CT7MkuPrKsA= Subject key identifier: 95:94:77:CA:12:12:9B:76:4D:5F:3D:6A:A3:89:13:9B:CB:0C:8B:10 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: 7E Signing time: Sun 27 Apr 2025 05:37:21 +0000 Manifest this update: Sun 27 Apr 2025 05:37:20 +0000 Manifest next update: Sun 04 May 2025 05:37:20 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: hir+UO61UGaXcBsg+BRGCoVjEf9bI5e+eK0ldnvsWwc=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: vVZpZ/GG/1Ru9DW9P38xQ7eaFTzhr71A4G/otG0nIJg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Apr 27 05:37:20 2025 GMT Not After : May 4 05:37:20 2025 GMT Subject: CN=680dc290-9f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:33:3b:c7:93:ec:c9:37:f9:94:22:b9:80: e9:68:55:ff:13:c8:0b:d3:5e:99:21:bd:2a:c2:01: 6d:13:62:f5:04:ad:d8:5c:b3:d5:25:70:d8:64:e4: 76:65:d4:d1:55:7a:d3:0c:97:12:e5:c3:bf:02:2f: f6:e4:a4:bf:26:4f:72:73:64:27:5a:bd:8d:86:91: 97:e1:c4:cf:dc:b9:a0:e2:31:26:58:e5:44:7a:fb: 06:4a:7c:00:0d:5b:b6:d9:9e:7f:70:4e:52:6e:e5: 7a:12:60:24:7a:38:51:0a:e8:63:3e:ac:d8:20:4f: 5b:30:a5:ca:09:24:da:7d:52:ff:18:70:e1:33:65: bb:db:be:94:d8:11:e1:b1:b1:0b:65:c7:a2:75:7e: 81:84:83:01:07:43:1c:e3:be:97:21:13:dd:9a:4f: dd:69:e4:d7:ee:cd:31:d6:f9:73:06:83:b5:36:32: db:11:a7:37:8e:bf:ac:d4:3d:0c:81:52:b0:c1:5f: 4b:1c:84:32:4b:e7:50:a7:1f:4b:ae:29:a0:8d:71: 01:9f:c1:b4:d8:99:8e:de:cf:ec:ea:48:2c:dc:69: b0:2e:ca:48:55:2e:a1:1d:27:01:50:a6:ee:29:b5: 20:f5:67:ff:cc:16:8b:68:e5:22:b0:83:d6:ce:01: 26:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:94:77:CA:12:12:9B:76:4D:5F:3D:6A:A3:89:13:9B:CB:0C:8B:10 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:2d:e6:b2:34:30:09:7d:81:a5:12:41:5e:d1:80:2a:75:fa: 8b:ab:2a:e6:a1:34:93:b7:2e:18:9a:bd:dc:9d:fa:64:c4:af: 18:2d:fb:0e:63:14:d1:31:a8:2a:79:15:88:64:ac:de:7e:59: a7:ba:83:c5:d8:56:74:98:ea:5b:fd:66:48:eb:b5:48:54:04: 46:25:13:87:2e:7b:4b:7b:73:b2:4e:00:ad:53:27:93:ee:13: 92:ce:71:b5:91:87:4d:2e:c4:f6:e1:85:29:ee:3d:ab:1d:80: 71:e8:6f:7b:0c:46:78:53:d1:4c:63:e4:93:93:95:52:48:b4: 93:77:ec:49:e6:a2:19:1c:fe:5c:a7:02:00:6d:37:1b:3e:f2: 4e:48:62:3b:9e:08:f7:82:c9:af:9c:b9:c5:88:9c:b9:9f:a0: 65:e6:dc:0e:7e:1d:ae:12:74:31:d2:4a:ba:e5:1e:c2:75:01: d5:d7:d3:8e:d2:23:dc:97:88:08:c6:1c:22:4d:bc:87:26:40: 99:40:e3:28:e8:af:43:ab:11:94:92:10:d1:fe:be:26:e9:49: 52:02:3a:6a:b1:20:40:b9:9d:6a:39:f2:40:d0:24:87:9c:77: 90:bc:bd:c0:3c:0e:43:31:cc:59:92:0b:90:1a:68:98:63:b8: 9e:f6:bc:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUwNDI3MDUzNzIwWhcNMjUwNTA0MDUzNzIwWjAYMRYwFAYD VQQDEw02ODBkYzI5MC05ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+AzO8eT7Mk3+ZQiuYDpaFX/E8gL016ZIb0qwgFtE2L1BK3YXLPVJXDYZOR2 ZdTRVXrTDJcS5cO/Ai/25KS/Jk9yc2QnWr2NhpGX4cTP3Lmg4jEmWOVEevsGSnwA DVu22Z5/cE5SbuV6EmAkejhRCuhjPqzYIE9bMKXKCSTafVL/GHDhM2W7276U2BHh sbELZceidX6BhIMBB0Mc476XIRPdmk/daeTX7s0x1vlzBoO1NjLbEac3jr+s1D0M gVKwwV9LHIQyS+dQpx9LrimgjXEBn8G02JmO3s/s6kgs3GmwLspIVS6hHScBUKbu KbUg9Wf/zBaLaOUisIPWzgEmfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWUd8oS Ept2TV89aqOJE5vLDIsQMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPLeayNDAJfYGlEkFe0YAqdfqLqyrmoTSTty4Ymr3cnfpkxK8YLfsO YxTRMagqeRWIZKzeflmnuoPF2FZ0mOpb/WZI67VIVARGJROHLntLe3OyTgCtUyeT 7hOSznG1kYdNLsT24YUp7j2rHYBx6G97DEZ4U9FMY+STk5VSSLSTd+xJ5qIZHP5c pwIAbTcbPvJOSGI7ngj3gsmvnLnFiJy5n6Bl5twOfh2uEnQx0kq65R7CdQHV19OO 0iPcl4gIxhwiTbyHJkCZQOMo6K9DqxGUkhDR/r4m6UlSAjpqsSBAuZ1qOfJA0CSH nHeQvL3APA5DMcxZkguQGmiYY7ie9rxq -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:46 2025 by rpki-client on console.sobornost.net