$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: Dk+zRrx/AVbHYvpYbHKP49YdLVax3eYshzFoiDCM7NM= Subject key identifier: B2:F3:D3:14:BD:D5:E7:8E:31:2A:71:99:4A:52:FF:83:35:6D:86:CB Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 010F Signing time: Sun 27 Apr 2025 03:58:33 +0000 Manifest this update: Sun 27 Apr 2025 03:58:32 +0000 Manifest next update: Sun 04 May 2025 03:58:32 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: RZ/BkwPKydqQ4YhX12vHDQk+Rm53a3wCYtRLbhsjXtY=) 2: 3E269BEE155F11F0A4BD4442C4F9AE02.roa (hash: YepcYqCU3z67JdbH5lWyJSuimAJ/H7ABqSOHQGnz6Xw=) 3: 3EE85A64F15011EFB213307AC4F9AE02.roa (hash: FZiV32cBEg2NN1DO+SVE2QlqP4jS8vRZNJ/pSFiMq2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Apr 27 03:58:32 2025 GMT Not After : May 4 03:58:32 2025 GMT Subject: CN=680dab68-94e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:c4:92:15:7c:42:9f:72:65:9a:11:ea:1d: 57:cf:cd:a2:c8:75:5c:2e:5d:7d:44:cb:44:b4:c6: f6:a8:4f:a1:ff:f7:70:f1:d1:7f:e6:22:b1:b8:57: bf:e2:6a:36:58:af:cc:b3:70:bb:07:9c:b3:66:5a: 54:db:50:39:9a:55:b7:80:f4:e5:79:3a:6e:42:5f: 93:5d:65:5d:e8:95:60:7a:08:7d:13:6e:b0:d0:01: 5c:1a:a6:06:32:3d:b8:42:14:f5:83:29:aa:e5:b8: f4:38:35:c6:57:11:27:5c:48:a2:2d:59:73:d2:1c: ff:c5:53:94:71:7e:6f:65:99:2e:b9:ec:62:d9:c7: 0b:a9:bc:87:c5:41:11:e6:d0:f0:df:9f:3d:72:a8: 48:5b:fa:42:52:f9:b5:b5:ee:dc:9f:50:ba:0a:2d: 53:75:4c:b2:82:fd:9c:d9:41:c8:ee:dd:1a:19:23: 74:92:60:d4:da:f2:7d:28:51:3c:68:d8:05:52:92: a3:40:56:16:8b:cc:a4:d3:93:9f:86:0a:69:64:91: 3c:88:0b:f7:af:9a:c2:6b:9c:b2:63:6c:b4:ad:31: 3b:93:ca:79:77:fa:9b:c5:8e:3a:68:7a:1c:53:6e: 34:76:6e:b7:6d:2f:ef:4c:cf:3c:5d:be:15:ac:85: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F3:D3:14:BD:D5:E7:8E:31:2A:71:99:4A:52:FF:83:35:6D:86:CB X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:0d:e9:4e:37:ae:5a:e9:cc:c8:54:7e:f3:5a:6a:59:d4:2c: de:c4:b2:78:8c:a8:d0:1c:34:10:96:17:07:bb:44:f8:f9:54: 1b:c0:31:a1:24:03:77:a7:f2:1d:74:a4:14:b7:03:c9:81:bc: 0a:31:cd:02:b1:9a:ae:3f:d5:2a:f3:7a:fb:b2:ca:29:cc:19: c3:f2:14:0a:e4:1d:5b:e7:4a:4b:bd:8c:d3:e5:76:bf:e3:80: 5c:bb:71:de:16:55:88:54:8f:f0:81:88:9e:fe:6f:3f:54:48: c3:1e:60:b1:60:ff:6b:b1:a0:6f:4a:bb:6f:a3:96:17:9d:11: f4:b6:3d:75:6a:3f:d9:60:e6:bb:52:3b:64:b9:c0:56:97:be: 0d:9d:13:9f:eb:b4:32:67:3c:5f:27:61:a3:99:03:0e:d0:24: 24:fd:bf:fa:61:79:51:71:5a:a8:e7:18:3d:d8:46:7a:fc:47: 50:bb:e4:77:4e:b5:0a:f5:9f:7e:fc:9f:15:98:04:07:32:81: b2:c2:3e:d7:98:68:b1:25:fb:d3:c3:df:ad:ec:98:c4:45:72: e4:87:b5:e7:f8:7b:82:48:99:24:5f:58:07:82:1f:43:57:e7: f7:91:dc:c7:ee:95:4d:63:17:57:74:5a:bb:8c:48:16:3f:d8: 95:51:67:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwNDI3MDM1ODMyWhcNMjUwNTA0MDM1ODMyWjAYMRYwFAYD VQQDEw02ODBkYWI2OC05NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAry/EkhV8Qp9yZZoR6h1Xz82iyHVcLl19RMtEtMb2qE+h//dw8dF/5iKxuFe/ 4mo2WK/Ms3C7B5yzZlpU21A5mlW3gPTleTpuQl+TXWVd6JVgegh9E26w0AFcGqYG Mj24QhT1gymq5bj0ODXGVxEnXEiiLVlz0hz/xVOUcX5vZZkuuexi2ccLqbyHxUER 5tDw3589cqhIW/pCUvm1te7cn1C6Ci1TdUyygv2c2UHI7t0aGSN0kmDU2vJ9KFE8 aNgFUpKjQFYWi8yk05OfhgppZJE8iAv3r5rCa5yyY2y0rTE7k8p5d/qbxY46aHoc U240dm63bS/vTM88Xb4VrIX+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLz0xS9 1eeOMSpxmUpS/4M1bYbLMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQDelON65a6czIVH7zWmpZ1CzexLJ4jKjQHDQQlhcHu0T4+VQbwDGh JAN3p/IddKQUtwPJgbwKMc0CsZquP9Uq83r7ssopzBnD8hQK5B1b50pLvYzT5Xa/ 44Bcu3HeFlWIVI/wgYie/m8/VEjDHmCxYP9rsaBvSrtvo5YXnRH0tj11aj/ZYOa7 UjtkucBWl74NnROf67QyZzxfJ2GjmQMO0CQk/b/6YXlRcVqo5xg92EZ6/EdQu+R3 TrUK9Z9+/J8VmAQHMoGywj7XmGixJfvTw9+t7JjERXLkh7Xn+HuCSJkkX1gHgh9D V+f3kdzH7pVNYxdXdFq7jEgWP9iVUWfn -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net