$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft File: ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft (raw, json) Hash identifier: jrFTnRNM63AzoFyt6339R0Vk8AF+WGbjEyC3G9ysUEM= Subject key identifier: 7C:E6:9B:BB:3A:1E:95:71:E1:49:46:02:80:39:B9:0F:7B:A9:31:BD Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft Manifest number: F8 Signing time: Sun 27 Apr 2025 04:21:07 +0000 Manifest this update: Sun 27 Apr 2025 04:21:06 +0000 Manifest next update: Sun 04 May 2025 04:21:06 +0000 Files and hashes: 1: ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl (hash: yLuzVRAiUQZl5XCPMGRB6EC2vbl1Nm4r+xzNe4zHjVk=) 2: 12331DA8098111F0B807472DC4F9AE02.roa (hash: nXu+ugMit/v+Ok/7yKTPVTxNvwRTB2sLsBSTwkKiYCs=) 3: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (hash: +hRdmHlXyGiRWryTkVRUo/4XE+FN8pke0PDTLFQX3WU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Apr 27 04:21:06 2025 GMT Not After : May 4 04:21:06 2025 GMT Subject: CN=680db0b2-197d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:c9:0b:ee:a2:f2:7a:32:6a:fa:c9:3a:4e: 04:0b:89:a9:5f:9e:47:5e:40:7a:5c:c3:22:aa:05: 5b:23:7b:c6:49:ad:8a:be:05:0e:ff:08:84:d7:8d: d5:25:5b:51:b7:ca:58:17:de:1e:c1:b2:50:ac:a8: a3:f0:69:5b:51:68:39:bb:ff:3f:f5:b6:b3:89:fe: c9:64:f3:a4:8d:13:82:16:76:65:6d:95:09:7a:68: 24:e1:d8:2b:11:4c:fb:f3:1e:48:65:f2:95:0f:7f: 49:52:3f:65:30:16:73:9a:02:b4:c7:a5:40:43:01: b2:d8:18:22:e5:96:d0:4c:e8:d2:84:96:ef:d5:01: 83:5f:32:60:66:24:9d:1d:38:f5:40:8a:66:f7:9c: 56:e1:0b:f1:e5:24:7a:9c:94:b5:7a:ea:88:f0:f1: 80:f3:a4:bc:e1:6e:59:d4:64:39:a4:01:96:1a:55: f2:c9:4e:d6:7f:e8:2d:60:37:f2:cf:fd:dd:6f:c7: fe:e6:d4:97:0d:3a:df:2e:ce:49:7e:e5:c7:18:83: 0d:f4:10:15:aa:9e:d8:d8:d4:ea:79:ae:26:3e:79: 36:df:40:d8:f0:4a:2b:5f:8a:10:9d:6e:14:06:89: 3d:50:7f:67:da:2b:d9:24:b0:85:be:b1:b8:2b:5e: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E6:9B:BB:3A:1E:95:71:E1:49:46:02:80:39:B9:0F:7B:A9:31:BD X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:c5:f5:3e:31:c9:12:cc:f1:0b:8f:a7:1c:06:df:29:ee:85: ff:f2:23:53:7c:c5:67:7d:ff:2b:1c:5a:ad:10:5d:be:22:4c: 00:e8:5e:b9:27:2d:31:fa:eb:b9:01:15:d4:c2:dd:a0:32:ba: d4:a0:e0:2f:75:8e:59:15:be:cd:70:2f:3b:fc:8b:88:13:b9: 77:5d:ff:ae:67:08:e6:f2:bf:a4:d9:97:09:01:fd:91:b8:fd: 1d:b4:34:b3:55:91:9b:22:37:e4:29:54:60:f6:d5:ff:51:84: 31:26:c8:88:e9:63:62:19:70:3d:2f:87:61:2b:7f:7a:db:63: c0:df:3b:71:4b:92:1c:6d:28:58:d7:07:d1:de:87:c1:75:97: de:46:af:3d:23:c3:f9:04:e9:57:66:d6:15:9f:56:14:f8:92: cb:11:49:b3:55:e5:49:62:45:a9:0f:de:ee:41:cb:18:a8:ae: 9c:f1:26:04:47:4e:5e:d4:79:e2:88:7f:08:6a:62:b4:73:2a: b6:e1:6a:a3:ed:85:c1:56:0a:1c:53:f1:23:03:05:7c:3a:dc: cb:a0:13:29:32:73:81:37:3f:ff:d2:40:90:1b:0f:f3:fc:e2: 39:d5:3e:47:d9:f4:a0:b1:a0:b9:9e:0d:1e:7a:13:06:b0:6e: 8a:f8:b7:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUwNDI3MDQyMTA2WhcNMjUwNTA0MDQyMTA2WjAYMRYwFAYD VQQDEw02ODBkYjBiMi0xOTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRrJC+6i8noyavrJOk4EC4mpX55HXkB6XMMiqgVbI3vGSa2KvgUO/wiE143V JVtRt8pYF94ewbJQrKij8GlbUWg5u/8/9bazif7JZPOkjROCFnZlbZUJemgk4dgr EUz78x5IZfKVD39JUj9lMBZzmgK0x6VAQwGy2Bgi5ZbQTOjShJbv1QGDXzJgZiSd HTj1QIpm95xW4Qvx5SR6nJS1euqI8PGA86S84W5Z1GQ5pAGWGlXyyU7Wf+gtYDfy z/3db8f+5tSXDTrfLs5JfuXHGIMN9BAVqp7Y2NTqea4mPnk230DY8EorX4oQnW4U Bok9UH9n2ivZJLCFvrG4K14hLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzmm7s6 HpVx4UlGAoA5uQ97qTG9MB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEU2Mi83MDJBMDI4Q0M5OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVm OWc5eDZ5QndSd29TWXVORHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5xfU+MckSzPELj6ccBt8p7oX/8iNTfMVnff8rHFqtEF2+IkwA6F65 Jy0x+uu5ARXUwt2gMrrUoOAvdY5ZFb7NcC87/IuIE7l3Xf+uZwjm8r+k2ZcJAf2R uP0dtDSzVZGbIjfkKVRg9tX/UYQxJsiI6WNiGXA9L4dhK39622PA3ztxS5IcbShY 1wfR3ofBdZfeRq89I8P5BOlXZtYVn1YU+JLLEUmzVeVJYkWpD97uQcsYqK6c8SYE R05e1HniiH8IamK0cyq24Wqj7YXBVgocU/EjAwV8OtzLoBMpMnOBNz//0kCQGw/z /OI51T5H2fSgsaC5ng0eehMGsG6K+Lcc -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:55 2025 by rpki-client on console.sobornost.net