$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: 7HxpbOPITlvp2tpT7VbMSb9bUNMdYn4IM/leg2URdYU= Subject key identifier: A9:0F:A1:34:87:63:C6:25:08:92:67:08:35:0E:54:5F:A2:F6:D2:C0 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 17DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 17CC Signing time: Tue 06 May 2025 16:36:06 +0000 Manifest this update: Tue 06 May 2025 16:36:06 +0000 Manifest next update: Tue 13 May 2025 16:36:06 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: SU+gSvaNsYIC9POux4g3OawK4mX2KO+7m/W/bNj/qpI=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: o72VLQ1AaTbDR0LUWxX7H2rR6ueROwUZcL0xiM3p7KI=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: XSMOrkD+VKk/yODIQVEJZLLi9dBXNMbWFRIFf5Gr+QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 16:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6111 (0x17df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: May 6 16:36:06 2025 GMT Not After : May 13 16:36:06 2025 GMT Subject: CN=681a3a76-f6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:fe:85:59:f2:8a:e5:c4:23:4a:7f:ad:d2: 5d:ca:0a:9c:2c:c6:67:a3:5f:7b:5e:94:a7:32:f5: 96:e4:d3:2d:85:0e:d5:07:46:55:fa:e2:aa:61:36: cc:a5:3a:b2:a2:c2:b9:ac:70:69:a2:7f:90:16:49: be:6c:79:7f:dd:64:c6:de:cd:8c:51:fe:88:c6:5f: 37:77:78:10:d5:5d:f5:b7:16:bf:f4:fa:31:9a:49: 22:65:25:46:99:a6:60:0d:7d:a2:d8:8b:1d:34:36: c1:2a:a5:c0:35:57:dd:f1:51:fb:ec:aa:cc:e1:8e: f2:85:92:c4:f3:a3:ef:74:db:77:58:1d:05:67:a0: e9:93:40:92:35:e8:f4:b8:83:5e:79:4a:73:90:f4: 00:07:32:73:8d:4f:8a:f5:e2:9d:6c:89:b1:d6:cd: 5b:a6:27:aa:1d:18:58:1a:69:11:c7:13:6a:09:a6: f0:31:af:1b:b0:9b:5a:3d:b8:33:d6:17:e0:34:45: 0b:93:92:67:99:90:ef:08:c9:3c:6c:fe:b3:59:b3: 61:d2:6d:34:1e:3f:61:ae:a8:55:80:dc:d7:27:b8: 10:0e:d3:0d:46:dd:8a:27:51:72:aa:6b:50:76:08: 43:11:40:e3:7c:db:41:ac:c6:59:02:05:35:b2:5e: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0F:A1:34:87:63:C6:25:08:92:67:08:35:0E:54:5F:A2:F6:D2:C0 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:00:93:fb:28:50:01:85:f0:bc:99:4f:c4:54:1b:03:79: d1:72:21:f0:f2:7f:98:b7:d5:4a:3d:1f:83:ee:70:a5:d9:7c: c6:9f:34:53:48:00:76:03:77:9a:d8:23:b3:5e:fa:dc:29:8b: a8:fc:a6:60:35:b6:e3:76:e6:b3:d3:89:03:3e:8b:a8:bf:25: 67:a5:6b:41:8a:b5:94:a3:d4:53:13:20:71:45:29:a8:96:06: c8:07:f5:33:93:b7:62:27:8d:96:4f:28:5d:6b:87:60:47:ec: ec:1e:da:69:31:84:76:71:06:4e:94:f6:37:d0:1d:e5:79:9b: 47:11:0c:94:56:af:1b:99:cc:ca:8e:ba:29:26:c2:61:3f:b9: 19:d0:11:a6:f5:16:39:87:61:df:29:e2:68:09:af:b0:7d:50: ce:9e:c2:92:5d:e7:d1:5f:1b:56:79:b2:f3:d7:b4:58:b5:3b: c1:40:ca:b8:cd:a5:79:d2:e3:27:75:ce:3a:b8:95:29:34:1c: 5e:b2:b9:9f:7f:a3:97:7b:99:04:bc:4f:53:96:fd:f5:84:e0: fe:25:68:63:57:08:a8:6c:60:0f:4d:36:b8:d0:5d:03:f0:d9: 50:b6:a0:fc:c3:76:73:38:90:60:5c:0a:d6:57:95:59:f0:6a: b2:da:8e:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjUwNTA2MTYzNjA2WhcNMjUwNTEzMTYzNjA2WjAYMRYwFAYD VQQDEw02ODFhM2E3Ni1mNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcf+hVnyiuXEI0p/rdJdygqcLMZno197XpSnMvWW5NMthQ7VB0ZV+uKqYTbM pTqyosK5rHBpon+QFkm+bHl/3WTG3s2MUf6Ixl83d3gQ1V31txa/9PoxmkkiZSVG maZgDX2i2IsdNDbBKqXANVfd8VH77KrM4Y7yhZLE86PvdNt3WB0FZ6Dpk0CSNej0 uINeeUpzkPQABzJzjU+K9eKdbImx1s1bpieqHRhYGmkRxxNqCabwMa8bsJtaPbgz 1hfgNEULk5JnmZDvCMk8bP6zWbNh0m00Hj9hrqhVgNzXJ7gQDtMNRt2KJ1FyqmtQ dghDEUDjfNtBrMZZAgU1sl6dpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkPoTSH Y8YlCJJnCDUOVF+i9tLAMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAksACT+yhQAYXwvJlPxFQbA3nRciHw8n+Yt9VKPR+D7nCl2XzGnzRT SAB2A3ea2COzXvrcKYuo/KZgNbbjduaz04kDPouovyVnpWtBirWUo9RTEyBxRSmo lgbIB/Uzk7diJ42WTyhda4dgR+zsHtppMYR2cQZOlPY30B3leZtHEQyUVq8bmczK jropJsJhP7kZ0BGm9RY5h2HfKeJoCa+wfVDOnsKSXefRXxtWebLz17RYtTvBQMq4 zaV50uMndc46uJUpNBxesrmff6OXe5kEvE9Tlv31hOD+JWhjVwiobGAPTTa40F0D 8NlQtqD8w3ZzOJBgXArWV5VZ8Gqy2o4N -----END CERTIFICATE-----Generated at Tue May 6 20:07:48 2025 by rpki-client on console.sobornost.net