$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: 91Lm2j5qNNXyUlS/U1q6umJDelwZQzslvUF3A2XPE1k= Subject key identifier: 7A:06:00:88:C1:15:E1:74:17:40:E0:6A:EF:31:35:1F:4E:38:15:F2 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: 7F Signing time: Sun 27 Apr 2025 05:56:02 +0000 Manifest this update: Sun 27 Apr 2025 05:56:01 +0000 Manifest next update: Sun 04 May 2025 05:56:01 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: PLqk2MmAfcL7i9KRtcVw51XB+QGta+71iwxDFBERACk=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 5: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Apr 27 05:56:01 2025 GMT Not After : May 4 05:56:01 2025 GMT Subject: CN=680dc6f1-9b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:cb:ed:fe:ef:fb:16:f4:f9:00:ec:83:7d:f7: 03:11:a3:92:43:12:f6:71:d0:bc:43:ef:e4:48:db: b1:87:6b:6f:38:c9:f2:a8:42:43:5f:9d:11:75:b9: c3:b6:0e:60:1d:57:2e:55:cd:1c:97:97:5b:c9:1b: ea:8b:25:0e:8b:1e:36:35:d9:30:38:16:a8:e1:df: 6c:05:3b:28:11:aa:ec:7e:b5:5b:c2:31:da:f1:58: 1b:dc:98:4a:09:01:0c:64:a1:25:04:6d:61:80:05: 0d:9a:6e:47:11:c0:58:d6:3f:eb:20:7e:c5:61:93: 52:55:3b:f5:0c:0a:d6:6e:3a:77:58:13:96:29:ce: 56:d3:73:43:07:62:fb:09:f4:0b:b9:ca:5d:ee:d8: 59:65:18:85:36:64:dd:57:9a:63:f7:af:90:a3:6a: 86:86:c8:3e:68:99:5c:72:7c:70:a7:51:94:3e:8c: 2e:cf:a2:ee:ca:91:b7:dd:c0:da:81:d4:38:ab:02: d4:50:6e:e5:c2:c3:24:fd:bf:2e:9f:ce:32:0e:e4: 94:a3:65:ee:9f:bc:3b:94:a7:32:35:b6:29:e4:af: d3:5c:bd:f0:5b:86:35:b0:02:16:fa:d5:31:ac:ef: 70:a2:fe:75:7a:c2:0d:2f:f4:09:08:12:f7:28:bd: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:06:00:88:C1:15:E1:74:17:40:E0:6A:EF:31:35:1F:4E:38:15:F2 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:64:ce:69:ef:bb:a7:4b:00:0a:8a:20:56:9e:69:ff:03:62: da:e5:b1:32:f7:8e:8e:d6:00:52:59:57:6e:d6:99:3e:43:a0: 9a:57:44:87:6f:80:55:80:5b:1a:a0:89:2b:54:6d:ac:d7:a1: 29:d0:34:9a:94:00:84:99:89:19:23:0a:18:be:c3:1a:a1:1f: 34:29:36:ec:75:80:d2:68:54:2e:37:c1:e6:92:37:13:ce:90: f9:d4:51:93:a7:67:62:b5:fb:cc:4f:18:b5:90:2f:13:19:dc: 3d:1a:9b:d4:ea:9b:e8:84:5a:cf:f3:e7:02:82:b3:10:bd:53: c9:87:54:3d:af:0a:a1:45:65:86:27:d3:dd:8b:b3:a4:d3:1b: 3e:0b:f8:7d:93:26:ca:9c:d5:34:49:79:b5:68:57:b5:04:aa: 67:97:eb:6f:25:dd:76:e4:90:f4:49:06:4a:eb:98:bd:23:42: 6b:a2:c4:f9:b1:61:01:f0:3a:3b:d1:f7:98:c0:b6:b8:33:ea: 4b:27:fb:44:47:d6:18:cd:7f:65:73:37:1f:ca:b6:bb:7b:24: 48:98:dd:94:58:bf:76:9d:9d:24:b7:1e:99:21:aa:21:a7:72: a0:b2:b4:cd:b6:84:6d:21:a6:24:07:f0:8b:78:0f:b4:3c:48: ff:9e:ed:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwNDI3MDU1NjAxWhcNMjUwNTA0MDU1NjAxWjAYMRYwFAYD VQQDEw02ODBkYzZmMS05YjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+cvt/u/7FvT5AOyDffcDEaOSQxL2cdC8Q+/kSNuxh2tvOMnyqEJDX50RdbnD tg5gHVcuVc0cl5dbyRvqiyUOix42NdkwOBao4d9sBTsoEarsfrVbwjHa8Vgb3JhK CQEMZKElBG1hgAUNmm5HEcBY1j/rIH7FYZNSVTv1DArWbjp3WBOWKc5W03NDB2L7 CfQLucpd7thZZRiFNmTdV5pj96+Qo2qGhsg+aJlccnxwp1GUPowuz6LuypG33cDa gdQ4qwLUUG7lwsMk/b8un84yDuSUo2Xun7w7lKcyNbYp5K/TXL3wW4Y1sAIW+tUx rO9wov51esINL/QJCBL3KL2EsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoGAIjB FeF0F0Dgau8xNR9OOBXyMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsZM5p77unSwAKiiBWnmn/A2La5bEy946O1gBSWVdu1pk+Q6CaV0SH b4BVgFsaoIkrVG2s16Ep0DSalACEmYkZIwoYvsMaoR80KTbsdYDSaFQuN8HmkjcT zpD51FGTp2ditfvMTxi1kC8TGdw9GpvU6pvohFrP8+cCgrMQvVPJh1Q9rwqhRWWG J9Pdi7Ok0xs+C/h9kybKnNU0SXm1aFe1BKpnl+tvJd125JD0SQZK65i9I0JrosT5 sWEB8Do70feYwLa4M+pLJ/tER9YYzX9lczcfyra7eyRImN2UWL92nZ0ktx6ZIaoh p3KgsrTNtoRtIaYkB/CLeA+0PEj/nu3M -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net