$ rpki-client -vvf rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft File: ZYFAKi2uxT7NZf18HcgA-m51c_o.mft (raw, json) Hash identifier: XtHxI1/sRKPKqy9ZD99CD06ncfA5xjNAFt1oQ26gtr4= Subject key identifier: 8E:00:8F:90:80:8C:7C:E3:DD:E8:7A:6A:59:F2:CE:77:FB:A8:C6:3B Authority key identifier: 65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA Certificate issuer: /CN=A9178424/serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft Manifest number: 9D Signing time: Sun 27 Apr 2025 05:08:21 +0000 Manifest this update: Sun 27 Apr 2025 05:08:20 +0000 Manifest next update: Sun 04 May 2025 05:08:20 +0000 Files and hashes: 1: ZYFAKi2uxT7NZf18HcgA-m51c_o.crl (hash: 9mCemCSfCiZM4YBK4Io7oKrHyhYybT+HQEHFP+kGAEY=) 2: 9166F61638E511EF803AF660C4F9AE02.roa (hash: HXqdiQxjt6jDJRy6xUG+Y43waVhKeekg/3lz7cpck8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178424, serialNumber=6581402A2DAEC53ECD65FD7C1DC800FA6E7573FA Validity Not Before: Apr 27 05:08:20 2025 GMT Not After : May 4 05:08:20 2025 GMT Subject: CN=680dbbc5-6044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:96:78:36:c7:1a:da:1f:89:84:96:5a:88: 53:26:d2:0f:e2:84:97:a0:78:08:c8:12:cc:6b:b7: d3:4e:2f:93:09:08:61:b0:9d:4f:a1:dc:0c:c1:34: 6d:a4:35:d9:f9:61:6c:39:09:82:07:fe:d3:99:82: 1e:3e:32:3b:6a:dd:0b:1f:8e:9b:ec:77:72:74:35: 3e:36:46:bd:97:4f:d1:2c:a0:cf:4a:cd:0b:4b:45: 4c:69:7c:d1:62:02:0d:51:ba:20:77:16:42:0c:c2: 1f:43:09:00:a7:36:43:f6:3b:9d:b9:16:1b:54:cc: 66:e0:b0:15:85:32:64:35:24:1d:4f:6d:15:9d:28: e8:86:e2:c3:93:4c:1d:ac:aa:f1:4d:8f:a4:29:05: bb:fb:52:40:40:3d:da:17:19:5b:b8:2c:d6:5d:c1: 6d:5d:f1:be:22:d4:6a:e6:8b:ce:cf:c8:f7:de:34: ad:df:c1:84:4c:4e:5a:9d:f5:2e:b5:48:31:e5:f2: 8d:95:29:b7:07:ea:a2:18:91:0b:e4:ac:a2:aa:bf: 33:1e:67:67:d5:29:55:39:18:8e:2b:7e:53:04:e9: 4f:8d:e1:e2:7a:ba:23:d2:cd:af:67:9d:a9:60:d8: 88:01:ed:45:8a:be:6b:45:92:3b:d5:e9:49:62:fc: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:00:8F:90:80:8C:7C:E3:DD:E8:7A:6A:59:F2:CE:77:FB:A8:C6:3B X509v3 Authority Key Identifier: keyid:65:81:40:2A:2D:AE:C5:3E:CD:65:FD:7C:1D:C8:00:FA:6E:75:73:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYFAKi2uxT7NZf18HcgA-m51c_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/825BEB7438E311EF914B2F33C4F9AE02/ZYFAKi2uxT7NZf18HcgA-m51c_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b2:69:26:ae:45:a1:76:b7:63:8f:f5:18:fb:a4:0f:8e:5f: 10:63:fb:70:1b:7c:5a:9f:08:a1:ac:74:9b:0d:1e:a4:ff:22: 80:79:d2:1c:f9:75:96:f6:74:74:c2:ef:4b:09:a0:a5:ea:93: 9e:20:b3:30:60:3d:1e:84:af:74:0c:a3:e2:c0:4f:cb:ca:42: b0:0a:d1:2b:cd:fa:19:47:b3:14:f2:72:c6:af:fd:ac:2b:3a: 87:19:c4:44:cf:fa:d1:78:d0:3d:fc:98:2b:48:dd:d0:20:5a: 5a:6c:ca:eb:65:09:20:78:af:4f:a8:ac:a1:c0:87:9b:0b:32: a4:9e:d7:50:73:0c:9f:e1:62:e5:54:60:f4:ed:ff:d4:7b:70: aa:1c:18:56:e5:bf:9e:e1:e7:c9:84:04:9b:1c:48:d2:70:07: 43:59:88:79:91:5a:0b:2b:c9:34:c8:bc:4e:08:f6:fa:bb:d1: aa:14:a1:65:3f:6d:0a:fc:36:74:2d:4f:c0:09:88:37:09:22: 4e:e3:c5:2c:cc:d9:86:3a:d0:2b:3f:53:a9:00:00:e0:6e:ed: 0b:e4:7b:46:ec:30:91:b3:77:4b:e6:f0:20:98:8b:7d:1e:b9: 3d:8a:95:aa:bd:ea:f8:dd:ad:d0:31:68:a6:e7:78:ff:83:eb: 91:45:7d:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg0MjQxMTAvBgNVBAUTKDY1ODE0MDJBMkRBRUM1M0VDRDY1RkQ3QzFEQzgwMEZB NkU3NTczRkEwHhcNMjUwNDI3MDUwODIwWhcNMjUwNTA0MDUwODIwWjAYMRYwFAYD VQQDEw02ODBkYmJjNS02MDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYiWeDbHGtofiYSWWohTJtIP4oSXoHgIyBLMa7fTTi+TCQhhsJ1PodwMwTRt pDXZ+WFsOQmCB/7TmYIePjI7at0LH46b7HdydDU+Nka9l0/RLKDPSs0LS0VMaXzR YgINUbogdxZCDMIfQwkApzZD9juduRYbVMxm4LAVhTJkNSQdT20VnSjohuLDk0wd rKrxTY+kKQW7+1JAQD3aFxlbuCzWXcFtXfG+ItRq5ovOz8j33jSt38GETE5anfUu tUgx5fKNlSm3B+qiGJEL5Kyiqr8zHmdn1SlVORiOK35TBOlPjeHieroj0s2vZ52p YNiIAe1Fir5rRZI71elJYvyu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4Aj5CA jHzj3eh6alnyznf7qMY7MB8GA1UdIwQYMBaAFGWBQCotrsU+zWX9fB3IAPpudXP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODQyNC84MjVCRUI3NDM4 RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhUN05aZjE4SGNnQS1tNTFj X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZRkFLaTJ1eFQ3TlpmMThIY2dBLW01MWNfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODQyNC84MjVCRUI3NDM4RTMxMUVGOTE0QjJGMzNDNEY5QUUwMi9aWUZBS2kydXhU N05aZjE4SGNnQS1tNTFjX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAusmkmrkWhdrdjj/UY+6QPjl8QY/twG3xanwihrHSbDR6k/yKAedIc +XWW9nR0wu9LCaCl6pOeILMwYD0ehK90DKPiwE/LykKwCtErzfoZR7MU8nLGr/2s KzqHGcREz/rReNA9/JgrSN3QIFpabMrrZQkgeK9PqKyhwIebCzKkntdQcwyf4WLl VGD07f/Ue3CqHBhW5b+e4efJhASbHEjScAdDWYh5kVoLK8k0yLxOCPb6u9GqFKFl P20K/DZ0LU/ACYg3CSJO48UszNmGOtArP1OpAADgbu0L5HtG7DCRs3dL5vAgmIt9 Hrk9ipWqver43a3QMWim53j/g+uRRX3o -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net