$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft File: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft (raw, json) Hash identifier: 3ZdqUAQzeEub08HkS2vWiOhPcI2IF1/igT11yx+UMZE= Subject key identifier: 05:92:F2:9A:F1:33:9D:F7:A1:09:CB:29:62:95:75:5B:B9:65:33:AB Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 Certificate issuer: /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Certificate serial: 97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft Manifest number: 92 Signing time: Sun 27 Apr 2025 05:18:29 +0000 Manifest this update: Sun 27 Apr 2025 05:18:29 +0000 Manifest next update: Sun 04 May 2025 05:18:29 +0000 Files and hashes: 1: zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl (hash: r0NVDTaNNd4I0Fs6J4gQ2zSN2SWx1L4IyDn5U2MA9Yg=) 2: 96908C564E0C11EF9EAADA7EC4F9AE02.roa (hash: hLvwEFk98bWRQGRyM9lagexFlMamyjjm31+1YE8+aHE=) 3: 178F0A124E0D11EFB25FB07FC4F9AE02.roa (hash: qhTLRhnOO7ik7RZ20f6PHZaEkopFMfPgBZc1HXBQUng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 151 (0x97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191354, serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999 Validity Not Before: Apr 27 05:18:29 2025 GMT Not After : May 4 05:18:29 2025 GMT Subject: CN=680dbe25-9aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:9f:4b:9f:23:5f:32:2c:da:3c:8a:a8:af: 38:00:02:ee:db:01:11:e6:ed:db:85:4f:ae:49:96: df:a7:29:92:5c:ef:25:62:b5:f1:63:fe:5f:08:ab: 1f:67:7d:ef:9c:7b:16:64:57:26:53:cf:d1:e7:f4: 83:d8:2d:1c:07:7c:3b:3b:c0:57:b7:25:75:e8:25: a8:db:70:47:77:fe:1d:0c:3c:58:73:12:25:4c:e1: 01:fe:64:f9:2c:38:93:a9:28:68:6b:b7:d5:3e:45: 0e:c5:6a:b9:cd:54:d5:98:83:56:35:e3:25:6e:a1: 07:cd:53:37:fd:96:8b:27:c8:da:f8:ec:9e:1d:04: ec:dd:41:8c:b3:40:80:1f:64:4c:eb:5e:5f:d8:00: a8:9e:12:38:e4:00:54:2e:a2:8c:a2:e6:7d:02:ca: d5:c6:64:25:fb:10:fc:6e:6b:ae:05:3f:60:a5:49: df:af:51:03:9d:6b:24:06:a5:57:21:0a:ee:90:c0: bd:ee:02:13:c3:51:b5:d1:52:62:80:66:0d:36:78: bc:e5:93:fc:be:46:84:75:af:4a:5d:e3:68:a7:b1: 82:ba:55:6d:d5:a8:ed:f1:e6:85:29:cc:50:fe:70: 8b:98:1c:69:be:6d:72:e4:81:5a:f1:82:a6:74:77: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:92:F2:9A:F1:33:9D:F7:A1:09:CB:29:62:95:75:5B:B9:65:33:AB X509v3 Authority Key Identifier: keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f9:0f:2c:58:91:8c:c8:37:8f:a5:47:07:7e:fc:6f:9b:f5: 8e:db:80:ac:41:6e:af:c5:43:86:39:8d:00:72:ec:24:b2:a9: 5f:73:9d:20:3d:30:0b:83:74:22:54:ff:00:5c:23:a1:dc:7b: 42:ce:1e:c1:1c:ce:9f:39:dc:74:b9:9a:89:9f:63:c3:90:fd: 02:e4:4b:67:bb:92:d4:d2:39:5d:b8:0e:b0:4d:0f:9c:bd:6d: 23:f8:c8:8c:e9:15:af:9d:bd:30:8c:68:0b:0f:b8:cc:8d:08: 75:d9:e2:8e:10:b3:b8:ff:27:c8:18:4f:49:fd:0c:f0:38:40: dc:ff:a3:0b:4d:00:f9:b4:df:d2:7d:25:7f:7c:b0:e5:ae:58: c8:0e:24:d2:23:62:14:0a:70:ba:ae:81:55:f7:f9:79:eb:c3: e1:fb:6f:3a:6c:65:ec:dd:01:d1:ea:fd:84:59:7e:31:b1:61: cb:dc:e8:9f:02:72:e1:49:2c:cd:ab:b8:d9:1e:46:55:2f:19: 05:c4:e3:d4:de:b4:1f:45:88:64:1b:8e:78:94:a5:3b:0c:b8: a5:64:ff:ee:47:3f:c8:ca:7a:b5:6c:ba:ea:81:1c:8c:84:eb: 2b:b0:8f:3e:f2:df:5b:09:31:84:b2:80:71:9f:27:7c:e1:f4: a5:22:86:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEzNTQxMTAvBgNVBAUTKENFQzlCMUIzNTlGRTU4RTkwMjNBODRDRkMyNjc0QzE2 MTgyOEY5OTkwHhcNMjUwNDI3MDUxODI5WhcNMjUwNTA0MDUxODI5WjAYMRYwFAYD VQQDEw02ODBkYmUyNS05YWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1efS58jXzIs2jyKqK84AALu2wER5u3bhU+uSZbfpymSXO8lYrXxY/5fCKsf Z33vnHsWZFcmU8/R5/SD2C0cB3w7O8BXtyV16CWo23BHd/4dDDxYcxIlTOEB/mT5 LDiTqShoa7fVPkUOxWq5zVTVmINWNeMlbqEHzVM3/ZaLJ8ja+OyeHQTs3UGMs0CA H2RM615f2AConhI45ABULqKMouZ9AsrVxmQl+xD8bmuuBT9gpUnfr1EDnWskBqVX IQrukMC97gITw1G10VJigGYNNni85ZP8vkaEda9KXeNop7GCulVt1ajt8eaFKcxQ /nCLmBxpvm1y5IFa8YKmdHck+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWS8prx M533oQnLKWKVdVu5ZTOrMB8GA1UdIwQYMBaAFM7JsbNZ/ljpAjqEz8JnTBYYKPmZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTM1NC84RDRFQ0Y4NDRE ODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdPa0NPb1RQd21kTUZoZ28t WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pzbXhzMW4tV09rQ09vVFB3bWRNRmhnby1aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTM1NC84RDRFQ0Y4NDREODcxMUVGQjkxQ0I4MzVDNEY5QUUwMi96c214czFuLVdP a0NPb1RQd21kTUZoZ28tWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz+Q8sWJGMyDePpUcHfvxvm/WO24CsQW6vxUOGOY0Acuwksqlfc50g PTALg3QiVP8AXCOh3HtCzh7BHM6fOdx0uZqJn2PDkP0C5Etnu5LU0jlduA6wTQ+c vW0j+MiM6RWvnb0wjGgLD7jMjQh12eKOELO4/yfIGE9J/QzwOEDc/6MLTQD5tN/S fSV/fLDlrljIDiTSI2IUCnC6roFV9/l568Ph+286bGXs3QHR6v2EWX4xsWHL3Oif AnLhSSzNq7jZHkZVLxkFxOPU3rQfRYhkG454lKU7DLilZP/uRz/Iynq1bLrqgRyM hOsrsI8+8t9bCTGEsoBxnyd84fSlIoYM -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:51 2025 by rpki-client on console.sobornost.net