$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json) Hash identifier: WWISVh/ff/bZ71SPcWlXj/IPVXq6KElJVSyDuumJ79A= Subject key identifier: 8C:D4:99:B8:E3:BC:BA:E8:94:DE:B0:4E:5D:A7:69:9C:7F:29:05:87 Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft Manifest number: 91 Signing time: Sun 27 Apr 2025 05:14:37 +0000 Manifest this update: Sun 27 Apr 2025 05:14:36 +0000 Manifest next update: Sun 04 May 2025 05:14:36 +0000 Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: jtRN2tCKY2kBDyqEQVEG1/ZKNa/Pud12533ECjEeiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: Apr 27 05:14:36 2025 GMT Not After : May 4 05:14:36 2025 GMT Subject: CN=680dbd3d-0b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:d9:43:19:4f:18:1d:5e:4e:6f:59:14:e8: 60:6d:9e:eb:64:db:57:b2:2d:5a:96:d8:50:55:5c: eb:32:2d:d0:92:30:b6:2d:87:9d:4c:78:59:55:68: b0:dd:87:45:ac:2a:7e:19:4f:ed:d7:c3:cb:a7:5f: e6:7c:7b:27:25:bb:69:d7:fd:73:e5:95:f1:6d:96: 1b:48:c2:d9:d2:64:37:c4:28:b1:e9:1c:8c:ad:04: cd:87:2c:c8:04:c8:52:4d:46:a2:dd:23:53:13:53: 9b:9b:00:6a:db:81:50:e4:13:37:83:9b:6b:7c:db: 51:9e:21:8e:d6:de:5a:3a:45:be:12:be:ae:6a:64: 2b:24:45:8f:2e:3e:6a:28:1e:11:99:18:29:1c:87: 9f:dc:d1:ae:f2:11:5d:f7:9c:33:a6:69:1d:e6:fe: d8:b9:2d:b1:10:ae:49:8a:d8:3f:73:25:93:6b:fd: c0:58:07:d5:0b:9f:c8:44:80:b8:fe:c7:03:72:3c: 47:ce:6a:5b:f9:9e:ce:39:c9:58:5e:00:43:7e:5d: 92:a2:c3:14:c1:01:7f:ad:c6:12:d9:25:df:9b:54: e2:b7:a4:59:ef:ff:5d:dd:ae:5d:70:96:00:b1:47: 5a:e8:95:03:01:f0:c8:45:fc:f4:af:76:e4:30:d0: 24:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D4:99:B8:E3:BC:BA:E8:94:DE:B0:4E:5D:A7:69:9C:7F:29:05:87 X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:56:40:cb:64:74:99:ef:8d:e3:cc:d5:97:49:d4:40:19:bb: e4:f5:77:d0:38:2d:8a:4a:f0:f6:e7:6e:57:43:a8:67:10:dd: cb:43:25:2b:83:d9:b9:1c:6b:6d:85:b8:c8:5f:e8:b3:ea:fd: 49:7f:75:63:38:28:70:7c:fa:9f:d0:00:72:8f:c6:15:d5:62: 5f:3b:70:eb:43:4d:52:d4:1b:c4:95:1d:af:1f:72:d2:4d:b1: 1c:70:f5:89:fa:06:16:23:ce:45:c1:62:1b:41:b9:52:44:92: f3:a0:b3:b3:bd:1c:aa:57:9b:21:c7:f8:78:33:c3:3b:c3:76: f8:0a:5f:52:68:69:0c:51:63:77:cf:43:87:2f:16:cf:94:c2: 55:bc:55:1a:12:26:f3:cb:f5:5b:aa:fb:37:ce:b6:06:30:b1: 1c:0c:c9:b3:09:e7:03:a1:e8:71:28:57:2f:7e:58:73:fa:58: c3:65:12:d1:c2:fc:0f:42:f8:57:a3:84:7e:ca:0e:50:b2:8f: 6f:3a:a7:89:b5:ff:12:0c:7a:97:31:c4:bc:86:33:5e:01:fc: f3:d2:97:21:02:67:49:df:4b:f6:85:3b:71:c5:35:36:d4:7d: a1:e1:93:83:03:59:2e:9c:12:aa:ff:01:07:56:00:4e:82:e0: 58:a1:66:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjUwNDI3MDUxNDM2WhcNMjUwNTA0MDUxNDM2WjAYMRYwFAYD VQQDEw02ODBkYmQzZC0wYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EvZQxlPGB1eTm9ZFOhgbZ7rZNtXsi1althQVVzrMi3QkjC2LYedTHhZVWiw 3YdFrCp+GU/t18PLp1/mfHsnJbtp1/1z5ZXxbZYbSMLZ0mQ3xCix6RyMrQTNhyzI BMhSTUai3SNTE1ObmwBq24FQ5BM3g5trfNtRniGO1t5aOkW+Er6uamQrJEWPLj5q KB4RmRgpHIef3NGu8hFd95wzpmkd5v7YuS2xEK5Jitg/cyWTa/3AWAfVC5/IRIC4 /scDcjxHzmpb+Z7OOclYXgBDfl2SosMUwQF/rcYS2SXfm1Tit6RZ7/9d3a5dcJYA sUda6JUDAfDIRfz0r3bkMNAkKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzUmbjj vLrolN6wTl2naZx/KQWHMB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81OERCODdGMjQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENh NHdleHVjN2t2OVI4UEhkeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlVkDLZHSZ743jzNWXSdRAGbvk9XfQOC2KSvD2525XQ6hnEN3LQyUr g9m5HGtthbjIX+iz6v1Jf3VjOChwfPqf0AByj8YV1WJfO3DrQ01S1BvElR2vH3LS TbEccPWJ+gYWI85FwWIbQblSRJLzoLOzvRyqV5shx/h4M8M7w3b4Cl9SaGkMUWN3 z0OHLxbPlMJVvFUaEibzy/Vbqvs3zrYGMLEcDMmzCecDoehxKFcvflhz+ljDZRLR wvwPQvhXo4R+yg5Qso9vOqeJtf8SDHqXMcS8hjNeAfzz0pchAmdJ30v2hTtxxTU2 1H2h4ZODA1kunBKq/wEHVgBOguBYoWbm -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:54 2025 by rpki-client on console.sobornost.net