$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft File: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json) Hash identifier: l6qXB6jx2QxDKDXgLYp0oPYRdONtuq3Bui9oTP+y4XA= Subject key identifier: 1C:28:46:DE:A2:3E:F3:EF:87:1B:93:10:3E:DA:76:14:D0:E5:6E:CF Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 Certificate issuer: /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Certificate serial: 0F9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft Manifest number: 0F91 Signing time: Mon 28 Apr 2025 17:46:45 +0000 Manifest this update: Mon 28 Apr 2025 17:46:45 +0000 Manifest next update: Mon 05 May 2025 17:46:45 +0000 Files and hashes: 1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: BAHrRwpIEEanJntRxe8fszMDP/xSU8lUn+d7QyufZlg=) 2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=) 3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=) 4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 17:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3999 (0xf9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484 Validity Not Before: Apr 28 17:46:45 2025 GMT Not After : May 5 17:46:45 2025 GMT Subject: CN=680fbf05-10b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fb:5d:8e:29:8c:76:da:d6:ff:b3:cc:4d:89: 54:e4:b6:33:27:3b:aa:23:0e:54:60:99:0a:e5:24: fc:51:a7:10:29:39:c1:d5:00:c5:39:4e:67:78:73: 2c:10:97:59:5f:6a:f1:5d:fd:16:4d:71:ea:7a:76: 53:97:d1:73:93:2a:91:f1:6d:f6:cd:33:bc:c7:c2: a1:5e:3a:65:a3:cc:aa:95:e1:93:8e:05:c8:9a:f4: 68:fb:57:b0:61:b1:07:46:94:65:d7:34:3e:a2:95: 4f:0e:c5:8e:4a:ca:97:d3:34:ea:98:e5:52:60:37: 04:e9:ad:8f:e3:d2:cf:d8:86:30:06:4c:2e:51:90: c4:2f:36:84:b4:92:c0:24:10:c4:44:4f:35:1b:6d: 5a:be:df:77:d8:03:66:ce:80:be:6d:0b:9a:53:02: 84:7c:8b:fd:d7:93:8e:53:e8:e9:96:97:bc:72:16: e2:41:c7:bc:5c:92:dd:d8:0e:2e:d1:99:3e:9e:4a: a6:c4:ef:95:df:f8:b1:f8:28:3b:40:1d:b3:a7:43: e9:06:8a:50:a8:2f:62:b4:01:5d:29:b3:08:aa:2c: 5e:7c:4c:9e:cb:96:f3:a9:a2:d0:5d:36:c1:1d:91: 1f:dd:16:e6:06:d9:ef:a4:ac:4f:69:80:64:35:6a: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:28:46:DE:A2:3E:F3:EF:87:1B:93:10:3E:DA:76:14:D0:E5:6E:CF X509v3 Authority Key Identifier: keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:09:3e:eb:87:37:30:00:a6:3f:7e:d7:52:1b:5b:1a:23:82: 26:22:06:e4:18:b2:59:c2:da:50:78:a0:a6:f1:74:20:07:58: 8a:dd:64:d2:b5:45:01:4e:91:7e:2c:7f:b0:7a:42:e4:b6:18: 36:09:0b:26:c6:ec:93:20:76:13:52:ff:da:1f:fe:fb:c9:57: 88:9e:12:a5:ba:d8:82:23:47:99:30:d2:33:d6:af:c6:55:ad: ce:49:9c:16:a7:eb:0d:50:4e:88:ab:a2:07:e3:b6:37:db:3f: 5c:8a:dd:8f:7e:fd:85:00:d9:be:1b:6d:da:e7:cf:0b:f2:1e: 22:cf:e5:67:90:3d:bb:69:6a:27:8f:83:83:b7:ee:b0:0b:06: 55:49:a9:1f:cf:07:32:d5:aa:02:c2:ab:dc:fd:06:98:8a:d4: 12:58:5f:73:57:38:c9:08:e4:5b:5c:19:c1:8d:f9:e9:02:37: b9:3c:bf:d6:cb:b5:25:0e:17:64:35:28:57:ab:5b:1f:f4:53: b4:f4:dc:d4:71:e6:68:52:37:4b:ac:3d:e0:59:ff:a5:ef:e3: 4a:88:57:95:64:e7:3e:fc:27:f7:8f:5a:48:d9:67:7f:c5:3a: 1c:73:03:67:71:dc:df:90:03:b9:9f:f9:ec:13:2f:c2:f0:b5: 6d:17:32:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky NkM0NUM0ODQwHhcNMjUwNDI4MTc0NjQ1WhcNMjUwNTA1MTc0NjQ1WjAYMRYwFAYD VQQDEw02ODBmYmYwNS0xMGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PtdjimMdtrW/7PMTYlU5LYzJzuqIw5UYJkK5ST8UacQKTnB1QDFOU5neHMs EJdZX2rxXf0WTXHqenZTl9FzkyqR8W32zTO8x8KhXjplo8yqleGTjgXImvRo+1ew YbEHRpRl1zQ+opVPDsWOSsqX0zTqmOVSYDcE6a2P49LP2IYwBkwuUZDELzaEtJLA JBDERE81G21avt932ANmzoC+bQuaUwKEfIv915OOU+jplpe8chbiQce8XJLd2A4u 0Zk+nkqmxO+V3/ix+Cg7QB2zp0PpBopQqC9itAFdKbMIqixefEyey5bzqaLQXTbB HZEf3RbmBtnvpKxPaYBkNWp90wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwoRt6i PvPvhxuTED7adhTQ5W7PMB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1 TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMCT7rhzcwAKY/ftdSG1saI4ImIgbkGLJZwtpQeKCm8XQgB1iK3WTS tUUBTpF+LH+wekLkthg2CQsmxuyTIHYTUv/aH/77yVeInhKlutiCI0eZMNIz1q/G Va3OSZwWp+sNUE6Iq6IH47Y32z9cit2Pfv2FANm+G23a588L8h4iz+VnkD27aWon j4ODt+6wCwZVSakfzwcy1aoCwqvc/QaYitQSWF9zVzjJCORbXBnBjfnpAje5PL/W y7UlDhdkNShXq1sf9FO09NzUceZoUjdLrD3gWf+l7+NKiFeVZOc+/Cf3j1pI2Wd/ xToccwNncdzfkAO5n/nsEy/C8LVtFzKG -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:49 2025 by rpki-client on console.sobornost.net