$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: BgqCm1YzrcFhZ9ZkrsYlU8r2IoFznM5Un9++L69l+NQ= Subject key identifier: D5:3E:EB:3A:A8:FE:2F:72:EB:FF:EB:40:28:CC:EB:A6:13:8C:2C:78 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0C61 Signing time: Mon 28 Apr 2025 18:33:09 +0000 Manifest this update: Mon 28 Apr 2025 18:33:09 +0000 Manifest next update: Mon 05 May 2025 18:33:09 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: S/9z5Uzjgo6fyb3Oo2T4I3o+XpRwNfW4Tk/n2Rl0WZA=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 18:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Apr 28 18:33:09 2025 GMT Not After : May 5 18:33:09 2025 GMT Subject: CN=680fc9e5-62f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ee:61:5d:e6:14:ca:04:5b:12:8b:e8:5a:c3: 45:ae:e5:86:90:2f:dc:57:c7:ce:0c:3e:54:8c:fb: 26:95:a5:e3:02:a7:b8:8b:ad:c0:57:6a:31:a4:81: 46:97:5b:75:d0:8d:9d:b3:23:28:0e:f5:42:c0:0d: ad:13:47:d2:26:c4:76:95:22:ac:5b:64:25:17:65: 4a:37:24:9d:1a:b8:25:c1:6d:d4:b4:78:43:d1:81: 77:58:e0:93:cc:ed:30:81:88:45:14:a8:9a:5f:da: 93:82:51:de:8d:1c:7c:8e:e5:8d:a8:7a:95:48:53: 83:b2:2b:8d:7f:05:64:06:ff:78:1e:27:66:2d:9f: f0:32:7f:a1:86:c1:b7:c8:01:5a:58:88:33:38:f2: 57:a9:43:70:c1:b3:88:f0:69:8d:be:18:3b:46:ab: ec:07:8c:1d:5c:72:52:5f:f2:8c:63:8a:f1:48:ef: 72:7f:30:c1:d0:65:ea:2a:64:0f:af:a4:97:3b:0e: 31:8f:8c:3d:9b:3e:74:5a:1b:1c:6f:bd:a7:c3:45: 24:8a:de:1a:c9:bf:99:05:86:ce:f1:f1:9c:9c:e8: 9d:aa:0a:86:42:34:20:31:1e:15:b0:1e:08:fa:5e: 69:e1:a9:54:1f:46:ee:71:c5:f2:f5:3a:df:7f:ab: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3E:EB:3A:A8:FE:2F:72:EB:FF:EB:40:28:CC:EB:A6:13:8C:2C:78 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2a:bd:ec:b5:65:5a:fc:d5:20:6f:ff:e3:6a:a7:0e:6f:d7: 2c:e1:7a:90:cb:16:e1:2d:69:98:8e:ae:36:f5:35:32:81:a4: 1d:99:bf:14:7f:97:fd:41:be:fe:bd:25:7d:f2:01:de:f1:16: 76:e3:83:70:4d:0f:99:13:18:8a:b7:5e:7b:6b:1a:dd:d2:4a: a8:6b:87:9d:86:50:86:d2:d9:3c:c2:b6:c0:cc:e1:76:a2:15: 0a:fe:fa:75:77:1c:21:6a:1d:a9:60:b5:c1:ff:cd:2b:51:dc: 02:4d:29:46:73:bf:45:7b:f4:eb:52:e5:1f:77:33:09:ea:ad: 05:70:2b:46:4b:a8:0b:d7:08:cd:f6:6d:ae:8e:56:2c:17:a8: 5c:dc:fe:a4:3d:2d:90:d7:8f:ae:2e:eb:d5:d0:e2:79:55:29: d6:55:a0:0e:9b:9d:ed:ea:73:98:59:42:fc:2f:c7:f1:74:ab: ae:2d:cd:ac:6f:18:14:ad:d4:11:09:d7:7c:4b:3f:9e:31:af: e4:6f:36:07:7b:5d:f6:c1:4e:6a:1c:4c:f8:5d:c9:73:d1:b1: 6d:8a:32:d3:76:83:46:f4:ed:21:b2:f5:8e:b3:c8:31:ed:a8: 57:8f:33:ee:6b:e4:d2:fb:72:4c:ad:7e:6e:45:4d:e2:88:69: 7d:bb:8a:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUwNDI4MTgzMzA5WhcNMjUwNTA1MTgzMzA5WjAYMRYwFAYD VQQDEw02ODBmYzllNS02MmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8e5hXeYUygRbEovoWsNFruWGkC/cV8fODD5UjPsmlaXjAqe4i63AV2oxpIFG l1t10I2dsyMoDvVCwA2tE0fSJsR2lSKsW2QlF2VKNySdGrglwW3UtHhD0YF3WOCT zO0wgYhFFKiaX9qTglHejRx8juWNqHqVSFODsiuNfwVkBv94HidmLZ/wMn+hhsG3 yAFaWIgzOPJXqUNwwbOI8GmNvhg7RqvsB4wdXHJSX/KMY4rxSO9yfzDB0GXqKmQP r6SXOw4xj4w9mz50Whscb72nw0Ukit4ayb+ZBYbO8fGcnOidqgqGQjQgMR4VsB4I +l5p4alUH0buccXy9Trff6sLKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNU+6zqo /i9y6//rQCjM66YTjCx4MB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOKr3stWVa/NUgb//jaqcOb9cs4XqQyxbhLWmYjq429TUygaQdmb8U f5f9Qb7+vSV98gHe8RZ244NwTQ+ZExiKt157axrd0kqoa4edhlCG0tk8wrbAzOF2 ohUK/vp1dxwhah2pYLXB/80rUdwCTSlGc79Fe/TrUuUfdzMJ6q0FcCtGS6gL1wjN 9m2ujlYsF6hc3P6kPS2Q14+uLuvV0OJ5VSnWVaAOm53t6nOYWUL8L8fxdKuuLc2s bxgUrdQRCdd8Sz+eMa/kbzYHe132wU5qHEz4Xclz0bFtijLTdoNG9O0hsvWOs8gx 7ahXjzPua+TS+3JMrX5uRU3iiGl9u4r1 -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:37 2025 by rpki-client on console.sobornost.net