$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: BwfGJPChzbSqATdTXMjpHT3lRakS+/daICAjIIj5Om0= Subject key identifier: AC:C0:4B:B4:F8:BB:8E:DB:4E:16:1E:C6:94:9B:39:D1:FA:21:85:3A Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 01FB Signing time: Fri 25 Apr 2025 01:54:28 +0000 Manifest this update: Fri 25 Apr 2025 01:54:28 +0000 Manifest next update: Fri 02 May 2025 01:54:28 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: cP6tc6L7RoDyGFLq6Tnd/2euTGe+egCSD34h66iHBwY=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 8BxigLcXRfHjVBQQ/jgBW++OCfhAQf3T5L8XSqY0uw8=) 3: 2E926DC45B7C11EDAAFAB831C4F9AE02.roa (hash: 4S6+TvvIlZFl5lZcA3CsU31FWGChPr43XTz66P+tqmo=) 4: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: zf9lfjVRzDBvijPsU/+tznrhofnaF/WZi0W6mRh1UBY=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: yyzsnoKe2xrHXVjufeheWpYqsGoX6iG/JlHj0H/JHAE=) 6: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: 3s8uH3WU7dVuraPTfGSJqzavBun+DYBh7A5A+AUgQFo=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: UVgLIMIzRdrzQP6ZniFXC977V2WicoP6V/VNTBtWiRk=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: k6OUPpome7pEAtnI12aWT99EGCFOt7JboBTF3+d34UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Apr 25 01:54:28 2025 GMT Not After : May 2 01:54:28 2025 GMT Subject: CN=680aeb54-166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d0:81:3d:23:e5:73:44:2f:9a:d2:c6:8c:ac: b4:a8:44:17:1f:5a:f0:33:61:ad:25:de:15:33:47: 0c:91:18:13:a6:39:86:95:b3:20:81:36:92:15:fa: c4:54:66:e4:4a:64:7a:58:a3:1c:cd:73:32:70:ba: 8d:45:08:f1:61:8a:52:99:89:84:c0:93:72:05:da: 39:46:58:a0:0c:96:b7:a4:ad:76:cd:78:81:53:84: fe:62:e9:13:99:4f:fc:69:2b:f8:f8:fb:01:6e:9c: 3a:c0:ef:ca:11:0d:05:44:f0:87:b6:c7:e4:87:38: 4c:0c:3f:7e:65:ca:ea:bb:07:6d:bc:7b:22:d5:4e: 0c:4c:1f:0e:7d:3e:84:4c:59:b4:45:f7:79:22:c0: 20:cb:60:57:4b:d9:73:ab:78:91:f3:b5:5c:dc:c8: 33:9a:f8:9e:b4:8d:50:75:65:14:06:a6:cf:c5:34: ef:06:cf:51:7c:9c:9a:6a:6a:d9:53:6f:2f:59:43: ca:39:48:90:44:c0:64:4f:91:ff:87:3a:a8:e4:6c: 5e:8c:a9:04:e9:b4:cb:d2:41:1b:b1:03:85:e5:23: bd:26:42:09:0b:e0:40:ec:bd:0f:94:95:01:fa:db: ad:6c:bb:87:1c:65:4e:25:64:30:ba:85:6a:6b:e8: 04:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C0:4B:B4:F8:BB:8E:DB:4E:16:1E:C6:94:9B:39:D1:FA:21:85:3A X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d6:d5:98:a0:21:6e:53:2e:9b:dd:c3:14:51:46:4f:0a:e7: e8:a2:b2:36:1e:ed:47:af:4f:c2:74:97:2c:33:ac:1d:3b:30: f5:ac:3a:cb:b8:79:b9:d0:34:46:75:91:ac:c3:e0:c4:a4:f3: 9b:8e:c3:c8:fb:c4:a3:e0:10:c3:68:da:74:0d:e3:52:5a:a7: 5e:0e:77:5c:36:cf:c0:8e:0c:8e:7d:bf:38:30:29:75:32:62: b2:0c:8e:9e:ba:82:8e:d3:e3:9b:da:94:1e:04:c9:b5:02:c9: 15:ec:d7:e8:5e:f0:bc:6d:29:31:c3:69:83:25:e2:33:95:3e: 1f:e7:f3:5a:72:3e:0c:d0:f2:5a:76:50:00:6f:b4:42:3d:41: c3:5c:cb:5e:39:ac:37:bf:b5:16:ee:1c:c2:8b:0e:21:d0:fa: 47:3c:b8:64:b9:62:f5:fa:07:21:44:aa:13:32:5f:a8:25:1b: 0e:11:b0:4d:15:fc:ce:d1:e0:db:2d:ad:c7:12:64:32:28:af: a9:52:d9:ca:41:aa:48:19:7c:3e:41:20:ea:16:62:56:dc:75: 18:d9:f4:18:5f:62:46:ff:ce:49:51:e5:17:5f:d7:01:bf:ea: f1:0b:74:ac:af:37:38:f1:a6:f3:c0:47:f5:28:7f:52:34:77: 21:7f:e8:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwNDI1MDE1NDI4WhcNMjUwNTAyMDE1NDI4WjAYMRYwFAYD VQQDEw02ODBhZWI1NC0xNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNCBPSPlc0QvmtLGjKy0qEQXH1rwM2GtJd4VM0cMkRgTpjmGlbMggTaSFfrE VGbkSmR6WKMczXMycLqNRQjxYYpSmYmEwJNyBdo5RligDJa3pK12zXiBU4T+YukT mU/8aSv4+PsBbpw6wO/KEQ0FRPCHtsfkhzhMDD9+ZcrquwdtvHsi1U4MTB8OfT6E TFm0Rfd5IsAgy2BXS9lzq3iR87Vc3MgzmvietI1QdWUUBqbPxTTvBs9RfJyaamrZ U28vWUPKOUiQRMBkT5H/hzqo5GxejKkE6bTL0kEbsQOF5SO9JkIJC+BA7L0PlJUB +tutbLuHHGVOJWQwuoVqa+gEpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzAS7T4 u47bThYexpSbOdH6IYU6MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU1tWYoCFuUy6b3cMUUUZPCufoorI2Hu1Hr0/CdJcsM6wdOzD1rDrL uHm50DRGdZGsw+DEpPObjsPI+8Sj4BDDaNp0DeNSWqdeDndcNs/AjgyOfb84MCl1 MmKyDI6euoKO0+Ob2pQeBMm1AskV7NfoXvC8bSkxw2mDJeIzlT4f5/Nacj4M0PJa dlAAb7RCPUHDXMteOaw3v7UW7hzCiw4h0PpHPLhkuWL1+gchRKoTMl+oJRsOEbBN FfzO0eDbLa3HEmQyKK+pUtnKQapIGXw+QSDqFmJW3HUY2fQYX2JG/85JUeUXX9cB v+rxC3Ssrzc48abzwEf1KH9SNHchf+gr -----END CERTIFICATE-----Generated at Fri Apr 25 08:24:57 2025 by rpki-client on console.sobornost.net