$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json) Hash identifier: N72s1hnsXdyeu8JZao5s+zyMoCjfGQEJFxkq9V+hD1E= Subject key identifier: F4:A9:A8:ED:D7:4A:B8:0F:52:A7:E0:E1:E5:82:ED:93:44:F3:A5:8B Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft Manifest number: 0114 Signing time: Mon 28 Apr 2025 17:05:26 +0000 Manifest this update: Mon 28 Apr 2025 17:05:26 +0000 Manifest next update: Mon 05 May 2025 17:05:26 +0000 Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: +yQejDj7NtY/7bXFOVOeThKOoK9ciYTFIySKAc51xJE=) 2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: TReNRUcB9Slmh+4MFPwcv7z0b4ojdmnvbTh9IbkrL54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431 Validity Not Before: Apr 28 17:05:26 2025 GMT Not After : May 5 17:05:26 2025 GMT Subject: CN=680fb556-e4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a0:43:bb:90:38:a7:64:52:dd:0a:16:69:93: e7:14:04:b9:2f:8c:a1:c4:d9:7d:a3:81:b0:1b:02: a7:9b:d2:96:08:a8:33:61:84:90:40:97:25:37:de: 24:20:15:fb:a8:2d:1a:2b:5b:6f:de:f3:38:83:14: cd:b0:52:20:d0:2e:69:5d:ac:42:d0:21:96:a9:47: fe:1a:ed:f0:40:bd:ce:eb:f4:87:e1:76:e0:8d:c0: d3:56:8a:6d:06:52:7f:35:91:56:47:5d:ba:26:e2: 03:57:e6:8b:2d:f2:da:69:6d:ba:0b:b7:bd:55:bd: 2f:87:ba:30:c2:e3:e0:fd:32:c8:1d:0a:73:d8:91: 80:7a:81:ec:5f:39:c0:3f:d9:24:c1:c6:3e:4d:5f: 41:e8:25:c4:0f:8e:35:23:a3:7f:42:2a:86:54:49: c9:95:58:69:e7:f1:d4:cc:e5:df:b4:38:f5:87:c2: 93:a9:3e:86:8f:27:9a:99:5f:8f:16:09:b0:5e:44: 9c:50:98:8e:0d:26:2c:80:c9:0a:52:29:f6:76:42: 61:26:9c:92:8f:62:18:7c:8a:4a:e8:01:da:6b:d8: ea:46:88:db:c5:75:0c:ef:84:c8:3c:d8:42:42:99: 7c:97:3c:9f:6d:d1:e0:7d:8b:13:79:e1:61:31:1d: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A9:A8:ED:D7:4A:B8:0F:52:A7:E0:E1:E5:82:ED:93:44:F3:A5:8B X509v3 Authority Key Identifier: keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0d:20:7e:5e:fd:dc:31:15:11:c5:d8:82:6d:8e:a5:dc:c7: 35:f7:6f:4e:fc:a9:27:e4:1b:6b:c0:fd:54:12:ac:24:83:41: f2:50:d2:b9:87:ad:87:c2:91:d7:d0:02:ae:f6:e7:7e:2e:f7: e0:42:03:20:64:16:fd:69:f8:8f:d7:a7:56:f6:04:af:c7:10: 3f:db:5c:41:85:e4:d0:47:bd:d9:f1:ea:ca:a8:71:38:54:97: 10:8a:a1:31:ae:e7:27:ce:e4:f8:9a:36:83:43:41:3a:37:87: 51:d3:d2:13:45:18:ed:3d:f6:8c:52:fe:a6:98:ad:cd:1e:8a: a5:f8:29:3f:21:97:45:7f:37:ec:79:c7:6d:4e:3b:5e:20:51: fb:48:83:dd:85:01:a5:6f:99:de:29:ec:e7:77:92:26:2a:c3: fa:b5:37:d4:31:78:0d:a9:92:4e:25:10:52:c3:34:0b:31:a0: e0:85:5e:10:26:3a:66:a1:28:a0:e8:f9:36:4f:43:f8:0d:65: e7:45:f3:70:68:70:67:ed:e0:47:0d:1d:44:f7:3c:3e:14:2f: e6:4d:b3:73:46:7e:44:7f:0f:ec:1f:27:6b:e8:fb:6b:82:e9: 90:8e:78:74:32:95:12:db:ce:92:64:13:71:96:96:fc:fa:b8: 3b:12:4f:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBNDkxMTAvBgNVBAUTKENENjVFNjc0MEJBRTdFQjMzQkQ1RTUzOEM5RUU2REU4 QjMzNTQ0MzEwHhcNMjUwNDI4MTcwNTI2WhcNMjUwNTA1MTcwNTI2WjAYMRYwFAYD VQQDEw02ODBmYjU1Ni1lNGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46BDu5A4p2RS3QoWaZPnFAS5L4yhxNl9o4GwGwKnm9KWCKgzYYSQQJclN94k IBX7qC0aK1tv3vM4gxTNsFIg0C5pXaxC0CGWqUf+Gu3wQL3O6/SH4XbgjcDTVopt BlJ/NZFWR126JuIDV+aLLfLaaW26C7e9Vb0vh7owwuPg/TLIHQpz2JGAeoHsXznA P9kkwcY+TV9B6CXED441I6N/QiqGVEnJlVhp5/HUzOXftDj1h8KTqT6GjyeamV+P FgmwXkScUJiODSYsgMkKUin2dkJhJpySj2IYfIpK6AHaa9jqRojbxXUM74TIPNhC Qpl8lzyfbdHgfYsTeeFhMR0BgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSpqO3X SrgPUqfg4eWC7ZNE86WLMB8GA1UdIwQYMBaAFM1l5nQLrn6zO9XlOMnubeizNUQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkE0OS9BNEMwQ0E5Njkw MDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZyTTcxZVU0eWU1dDZMTTFS REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pXWG1kQXV1ZnJNNzFlVTR5ZTV0NkxNMVJERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkE0OS9BNEMwQ0E5NjkwMDkxMUVFOUU1NEEwMzNDNEY5QUUwMi96V1htZEF1dWZy TTcxZVU0eWU1dDZMTTFSREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6DSB+Xv3cMRURxdiCbY6l3Mc1929O/Kkn5BtrwP1UEqwkg0HyUNK5 h62HwpHX0AKu9ud+LvfgQgMgZBb9afiP16dW9gSvxxA/21xBheTQR73Z8erKqHE4 VJcQiqExrucnzuT4mjaDQ0E6N4dR09ITRRjtPfaMUv6mmK3NHoql+Ck/IZdFfzfs ecdtTjteIFH7SIPdhQGlb5neKeznd5ImKsP6tTfUMXgNqZJOJRBSwzQLMaDghV4Q JjpmoSig6Pk2T0P4DWXnRfNwaHBn7eBHDR1E9zw+FC/mTbNzRn5Efw/sHydr6Ptr gumQjnh0MpUS286SZBNxlpb8+rg7Ek+q -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:41 2025 by rpki-client on console.sobornost.net