$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json) Hash identifier: e4lmcuKgHt0Hi9eSQ0K3uTvLKfFdyYRgsspC282oj+s= Subject key identifier: D3:A1:A9:C8:DF:52:DB:54:3B:CB:B2:38:03:49:37:CC:86:96:64:F8 Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft Manifest number: 79 Signing time: Sun 27 Apr 2025 05:34:46 +0000 Manifest this update: Sun 27 Apr 2025 05:34:45 +0000 Manifest next update: Sun 04 May 2025 05:34:45 +0000 Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: G1LMWWfBLmUm3WRP+RL0+ModZtGHpcZwSQlm9YHjtY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Validity Not Before: Apr 27 05:34:45 2025 GMT Not After : May 4 05:34:45 2025 GMT Subject: CN=680dc1f5-4844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:45:a6:81:51:95:e6:c6:cf:65:3c:d4:6b: 33:ff:26:df:5d:68:75:5a:ca:5f:fb:40:a9:bf:8e: 6b:2b:d4:39:e1:e3:17:f8:05:05:51:7e:3a:03:1e: 25:2b:55:48:83:97:a2:b4:08:dd:65:b6:00:f8:88: 85:bb:45:19:fd:d4:5a:5c:b3:39:f1:a9:d7:de:d9: 9e:7c:da:b4:ba:91:ee:08:92:05:7d:88:3b:07:55: 87:32:72:5c:82:02:af:61:b8:52:2d:d9:6c:c6:2d: 76:cb:ab:e4:b5:d2:fe:9f:f1:04:04:ed:2a:35:39: 6b:43:54:96:dc:dd:db:f4:6b:62:01:fc:27:b8:8b: 99:78:75:4d:99:28:b5:3e:58:20:e7:02:4f:23:ce: 5d:a4:97:30:ca:9e:5d:0d:b8:99:47:4f:e3:7d:cc: 6c:86:11:64:91:46:d5:8f:d8:95:01:a2:22:fd:5f: fb:4a:8f:86:ed:5c:af:d6:98:e4:8e:d0:46:61:63: 1f:13:36:f3:91:dd:42:d0:ea:6d:1b:dc:fd:6d:43: 7a:6d:22:b8:10:1c:de:12:cd:9b:7d:d7:30:25:2b: 59:7e:70:d9:19:7a:f6:8e:a5:27:fd:db:44:fb:d7: 98:ba:71:0c:22:21:ce:f5:5b:22:24:f5:21:19:24: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A1:A9:C8:DF:52:DB:54:3B:CB:B2:38:03:49:37:CC:86:96:64:F8 X509v3 Authority Key Identifier: keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:20:df:04:a5:4d:bd:ce:48:01:cb:c9:c2:62:f7:64:ca:d4: 4d:45:0c:e7:54:d5:1f:1d:5e:49:9a:89:36:81:d1:a5:e6:89: 66:00:8d:7e:f2:82:ca:ae:32:3a:66:9c:07:bd:47:13:75:12: 15:b6:43:fa:f0:7c:fb:1e:f8:70:86:a1:4b:0b:9d:e9:77:d0: cf:e7:26:6b:83:35:d3:6f:60:2c:58:b1:88:79:ea:64:12:2d: 3a:7d:5b:69:89:10:0c:3c:05:d6:59:8e:a6:eb:6d:e5:15:51: 02:16:8d:2e:25:91:85:d5:e3:8a:e0:28:e5:a2:0f:13:f6:ed: 29:09:5e:64:0d:93:fc:19:91:ed:26:21:5c:56:bd:28:9a:bc: 24:64:81:ff:2a:7a:d2:59:b9:9c:db:4f:1d:ab:38:a7:ab:a0: 82:3f:06:ca:a3:9e:c0:26:c4:c9:6f:af:46:10:1c:10:a8:97: 38:ef:4c:41:f1:ff:82:9d:9f:8a:3e:80:67:41:7b:e6:0c:e7: 13:29:a3:32:96:fa:27:31:c8:22:fc:ed:b6:ff:ca:a3:e0:87: bf:61:8d:48:53:26:fa:3a:14:c8:9d:26:54:30:0e:3c:af:9b: 77:a9:c4:9e:b9:4e:4f:48:a4:b4:26:9a:04:b4:a9:49:27:31: e1:0b:68:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTJDNDExMC8GA1UEBRMoNjZDNUIxOTA0QjM1QzQ3RDk0NTA4RUMwQTFBQ0RBODM2 OERFRjRBOTAeFw0yNTA0MjcwNTM0NDVaFw0yNTA1MDQwNTM0NDVaMBgxFjAUBgNV BAMTDTY4MGRjMWY1LTQ4NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN+UWmgVGV5sbPZTzUazP/Jt9daHVayl/7QKm/jmsr1Dnh4xf4BQVRfjoDHiUr VUiDl6K0CN1ltgD4iIW7RRn91Fpcsznxqdfe2Z582rS6ke4IkgV9iDsHVYcyclyC Aq9huFIt2WzGLXbLq+S10v6f8QQE7So1OWtDVJbc3dv0a2IB/Ce4i5l4dU2ZKLU+ WCDnAk8jzl2klzDKnl0NuJlHT+N9zGyGEWSRRtWP2JUBoiL9X/tKj4btXK/WmOSO 0EZhYx8TNvOR3ULQ6m0b3P1tQ3ptIrgQHN4SzZt91zAlK1l+cNkZevaOpSf920T7 15i6cQwiIc71WyIk9SEZJGR9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU06GpyN9S 21Q7y7I4A0k3zIaWZPgwHwYDVR0jBBgwFoAUZsWxkEs1xH2UUI7Aoazag2je9Kkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExMkM0L0ZCRjE0RTcyNkMx NzExRUZCREJGRDUwQkM0RjlBRTAyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlL ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNXeGtFczF4SDJVVUk3QW9hemFnMmplOUtrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx MkM0L0ZCRjE0RTcyNkMxNzExRUZCREJGRDUwQkM0RjlBRTAyL1pzV3hrRXMxeEgy VVVJN0FvYXphZzJqZTlLay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0g3wSlTb3OSAHLycJi92TK1E1FDOdU1R8dXkmaiTaB0aXmiWYAjX7y gsquMjpmnAe9RxN1EhW2Q/rwfPse+HCGoUsLnel30M/nJmuDNdNvYCxYsYh56mQS LTp9W2mJEAw8BdZZjqbrbeUVUQIWjS4lkYXV44rgKOWiDxP27SkJXmQNk/wZke0m IVxWvSiavCRkgf8qetJZuZzbTx2rOKeroII/BsqjnsAmxMlvr0YQHBColzjvTEHx /4Kdn4o+gGdBe+YM5xMpozKW+icxyCL87bb/yqPgh79hjUhTJvo6FMidJlQwDjyv m3epxJ65Tk9IpLQmmgS0qUknMeELaEE= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net