$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft File: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft (raw, json) Hash identifier: WBfqDSLklPrS5ktx5EnEgfqXM47kzMR3lctKy5OAdxQ= Subject key identifier: 40:3F:77:30:0D:17:13:D4:30:81:A7:BB:21:9E:A0:7E:25:BD:C7:F6 Authority key identifier: 67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D Certificate issuer: /CN=A9181EAA/serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Certificate serial: 1D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft Manifest number: 1CFA Signing time: Mon 28 Apr 2025 16:15:46 +0000 Manifest this update: Mon 28 Apr 2025 16:15:46 +0000 Manifest next update: Mon 05 May 2025 16:15:46 +0000 Files and hashes: 1: Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl (hash: w48/pV9LLOfaVZdOapHM+/SOprD/Uh2oEtyOqf/bWRE=) 2: 14FFD39467BE11E8910CB13EC4F9AE02.roa (hash: QR4V+G44HNdHIrjfSi80Dwbdarxdiad903tEFHxOmOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7431 (0x1d07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=673D05549D4134D0AC355DD9B650DF3C1C68AA5D Validity Not Before: Apr 28 16:15:46 2025 GMT Not After : May 5 16:15:46 2025 GMT Subject: CN=680fa9b2-0890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:32:96:ef:59:1e:65:54:b4:48:b5:e6:a9:1b: 1e:e7:c5:f6:f3:f3:42:14:60:a6:5d:2e:55:a5:5c: 26:5d:d0:68:12:52:95:e8:fb:ca:34:9e:a2:ec:e1: 63:59:4b:71:22:c0:32:e8:44:b9:0e:13:70:ba:2e: 94:dc:b0:87:7f:29:4b:b3:9a:f0:4c:b3:5a:3b:9c: 9c:b7:7e:95:71:c9:6c:3f:9f:ac:6f:4a:b0:a5:79: 92:5c:1b:eb:20:7b:95:a3:c3:ea:6d:e1:b0:89:48: e4:c7:f8:60:92:9f:1c:0d:b8:7e:8d:a4:2d:df:ed: 4b:3b:aa:a7:1e:9f:f7:72:f3:a9:b6:e3:c1:c7:59: 70:ab:4f:ec:b8:dd:d9:29:b3:e1:3c:5d:6f:9a:f6: c5:4d:f3:64:1b:9f:1d:73:c6:f3:73:a0:8b:9d:bc: b8:c8:e5:bd:6f:03:a3:45:b2:27:35:46:a4:c8:2c: c6:e6:bf:2e:b8:dc:df:21:16:cc:f9:77:f2:e0:37: 42:18:14:4d:7d:bf:0d:9f:54:70:a5:81:e1:66:76: 6f:ae:dd:2f:29:5f:c1:1a:e5:6e:be:da:18:a6:71: ce:eb:8d:9a:58:cc:18:ad:7a:41:10:9f:83:6e:6f: b6:75:59:7b:26:1b:b8:17:b9:77:60:56:a1:71:2b: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3F:77:30:0D:17:13:D4:30:81:A7:BB:21:9E:A0:7E:25:BD:C7:F6 X509v3 Authority Key Identifier: keyid:67:3D:05:54:9D:41:34:D0:AC:35:5D:D9:B6:50:DF:3C:1C:68:AA:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/8828D0F4BB7711E695636338C4F9AE02/Zz0FVJ1BNNCsNV3ZtlDfPBxoql0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:63:5a:62:a0:cf:7a:db:e7:6a:59:5d:b7:98:b8:72:f2:3d: da:39:42:70:8d:bb:1b:e9:eb:1f:83:2b:87:29:31:11:23:bb: de:c7:bf:26:2c:fd:f6:39:f1:3e:1a:70:7f:4f:ec:47:bc:0e: 84:18:07:32:e2:66:95:d1:78:42:8b:94:68:fe:d2:f1:ed:3c: ad:87:ba:84:e7:d1:5e:0c:df:a0:7b:2c:01:61:c3:fe:58:32: 92:5c:45:9a:77:74:03:a1:b1:5a:1f:71:76:3c:98:21:88:13: b1:e0:a8:77:95:3f:dd:a3:4a:6b:e1:a2:0a:dd:3e:9a:01:20: c6:97:0e:36:94:9c:44:2c:e7:59:9b:51:2f:6f:b6:c5:38:0e: 73:2a:ab:28:d4:ff:31:4b:66:f4:b4:1f:6c:18:d4:79:8f:a8: 9a:78:d9:9d:f3:43:a0:7b:b4:47:a4:6e:c2:f9:93:56:9e:08: 02:81:7e:44:7e:13:16:9f:0e:c9:9f:0e:f5:2c:fb:f6:f7:68: ad:13:31:7b:cc:fe:5d:4e:de:cd:af:5a:17:33:61:14:11:fe: 0f:a7:9e:e9:f3:cc:91:83:b1:c7:b3:e7:7a:87:fd:32:27:c5: 07:20:0c:fa:b9:fe:a7:b8:9c:32:34:28:f4:cd:38:09:87:69: 2a:49:8f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDY3M0QwNTU0OUQ0MTM0RDBBQzM1NUREOUI2NTBERjND MUM2OEFBNUQwHhcNMjUwNDI4MTYxNTQ2WhcNMjUwNTA1MTYxNTQ2WjAYMRYwFAYD VQQDEw02ODBmYTliMi0wODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzKW71keZVS0SLXmqRse58X28/NCFGCmXS5VpVwmXdBoElKV6PvKNJ6i7OFj WUtxIsAy6ES5DhNwui6U3LCHfylLs5rwTLNaO5yct36VcclsP5+sb0qwpXmSXBvr IHuVo8PqbeGwiUjkx/hgkp8cDbh+jaQt3+1LO6qnHp/3cvOptuPBx1lwq0/suN3Z KbPhPF1vmvbFTfNkG58dc8bzc6CLnby4yOW9bwOjRbInNUakyCzG5r8uuNzfIRbM +Xfy4DdCGBRNfb8Nn1RwpYHhZnZvrt0vKV/BGuVuvtoYpnHO642aWMwYrXpBEJ+D bm+2dVl7Jhu4F7l3YFahcSs5SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA/dzAN FxPUMIGnuyGeoH4lvcf2MB8GA1UdIwQYMBaAFGc9BVSdQTTQrDVd2bZQ3zwcaKpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS84ODI4RDBGNEJC NzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5OQ3NOVjNadGxEZlBCeG9x bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6MEZWSjFCTk5Dc05WM1p0bERmUEJ4b3FsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS84ODI4RDBGNEJCNzcxMUU2OTU2MzYzMzhDNEY5QUUwMi9aejBGVkoxQk5O Q3NOVjNadGxEZlBCeG9xbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyY1pioM962+dqWV23mLhy8j3aOUJwjbsb6esfgyuHKTERI7vex78m LP32OfE+GnB/T+xHvA6EGAcy4maV0XhCi5Ro/tLx7Tyth7qE59FeDN+geywBYcP+ WDKSXEWad3QDobFaH3F2PJghiBOx4Kh3lT/do0pr4aIK3T6aASDGlw42lJxELOdZ m1Evb7bFOA5zKqso1P8xS2b0tB9sGNR5j6iaeNmd80Oge7RHpG7C+ZNWnggCgX5E fhMWnw7Jnw71LPv292itEzF7zP5dTt7Nr1oXM2EUEf4Pp57p88yRg7HHs+d6h/0y J8UHIAz6uf6nuJwyNCj0zTgJh2kqSY+U -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:44 2025 by rpki-client on console.sobornost.net