$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: +hSnnysyNHvXGmi1GnuJOMuFkc1jkWN/c8BpJRg72Fo= Subject key identifier: 73:AE:82:8E:77:BB:CA:73:D5:49:DD:D8:3C:D8:5A:D5:0C:5E:65:B0 Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 17C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 1777 Signing time: Sat 26 Apr 2025 16:33:57 +0000 Manifest this update: Sat 26 Apr 2025 16:33:56 +0000 Manifest next update: Sat 03 May 2025 16:33:56 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: uCyl9Yw0csP59njIR0C8/3p3OiJZ679wbE5OZXNHTfg=) 2: 3F43565CB4A711EFA3D95012C4F9AE02.roa (hash: OELdD8LbVgXXbJX6bTHTOCI+oCTaXDP2euo2Avh/+Rk=) 3: C4C407A6ABFE11EF8BC3AC17C4F9AE02.roa (hash: EhC7Iw3SYEkIxbf/jSCiFbV/awgcX2mr9+KQdTNr1bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6087 (0x17c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125, serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: Apr 26 16:33:56 2025 GMT Not After : May 3 16:33:56 2025 GMT Subject: CN=680d0af4-280f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:ee:66:64:a1:44:bb:20:76:a2:5a:51:8f: 7a:f2:f1:bf:5b:c2:cb:8a:c6:58:c9:60:3b:90:69: 8b:4d:46:06:19:87:0a:4c:59:92:2c:d8:8f:96:02: e3:1a:6c:7d:af:f0:9a:a6:96:01:78:19:d2:71:f0: 9d:77:ac:ec:16:00:18:0e:0b:b6:9c:fc:de:a8:80: 9d:13:29:5f:e5:ac:d2:0b:9e:83:da:b8:db:4d:6c: 0b:d7:89:9f:2e:5a:d0:62:ae:fa:8f:53:eb:4c:97: 24:3d:e8:15:42:6c:ec:50:12:b8:03:17:f0:fd:82: 84:fc:84:b1:4f:de:84:74:cf:a6:d3:f4:4a:6e:4c: 84:5b:f4:7d:10:fb:52:85:4b:1a:9a:5c:49:88:c1: 0b:4d:18:71:f3:e2:61:a0:9f:38:27:7a:49:38:34: 69:09:bc:8b:b3:69:d9:ea:5b:aa:23:2f:57:87:41: 65:cf:04:96:b1:f5:33:f6:34:fd:d9:22:16:02:fd: 9f:9a:9f:aa:23:81:07:d1:0c:d9:9a:fe:42:f9:96: 27:9b:d7:f7:d7:1b:87:83:df:79:c7:ae:98:9a:48: 89:93:57:aa:3e:4b:d4:22:5a:f9:76:38:1f:a8:9d: 04:b8:32:be:75:0a:65:70:f0:85:6e:91:cb:e0:11: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AE:82:8E:77:BB:CA:73:D5:49:DD:D8:3C:D8:5A:D5:0C:5E:65:B0 X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:8e:15:b6:6d:6a:1a:b0:a0:9e:09:60:04:55:68:2c:a4:11: 43:7a:25:2e:e6:d8:64:5f:97:a8:a8:6b:d2:7e:10:d9:91:17: 55:92:bf:fc:2b:55:28:3b:f5:be:d9:e3:0f:67:84:eb:05:69: 24:cf:c6:67:7e:00:90:79:7a:bc:5c:ad:f1:28:5a:e7:b9:cb: 9b:30:67:2c:b0:d0:12:10:0f:c8:c9:65:0e:65:9e:80:49:21: 7a:db:f5:b7:92:87:4a:66:5e:8d:f4:b4:3d:c8:bd:84:67:27: 9b:6f:69:9d:d7:38:a4:d2:87:80:aa:24:80:fd:6b:00:4f:00: 2b:a9:95:5c:d0:46:7c:ff:21:e1:e6:fa:2b:fc:73:b2:b8:f8: 60:ec:41:91:47:12:bc:e6:d7:1c:5a:7a:6f:01:fd:d5:d4:55: 36:a5:a7:46:d3:d5:fa:bf:e5:15:c8:12:77:ef:94:c3:42:ef: 0e:69:9b:35:3d:16:f0:1e:38:9f:74:ed:7c:9c:65:d6:1f:e6: 43:9c:e5:f4:04:8c:99:60:47:e5:86:19:45:0f:5a:1c:83:9f: 2a:80:27:cd:e3:fc:87:bf:b6:ce:a9:67:83:fa:34:c1:54:b4: 33:ee:ec:e9:af:6d:92:91:e4:27:89:fd:3c:a9:0c:8c:21:64: 9d:37:e5:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjUwNDI2MTYzMzU2WhcNMjUwNTAzMTYzMzU2WjAYMRYwFAYD VQQDEw02ODBkMGFmNC0yODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCLuZmShRLsgdqJaUY968vG/W8LLisZYyWA7kGmLTUYGGYcKTFmSLNiPlgLj Gmx9r/CappYBeBnScfCdd6zsFgAYDgu2nPzeqICdEylf5azSC56D2rjbTWwL14mf LlrQYq76j1PrTJckPegVQmzsUBK4Axfw/YKE/ISxT96EdM+m0/RKbkyEW/R9EPtS hUsamlxJiMELTRhx8+JhoJ84J3pJODRpCbyLs2nZ6luqIy9Xh0FlzwSWsfUz9jT9 2SIWAv2fmp+qI4EH0QzZmv5C+ZYnm9f31xuHg995x66YmkiJk1eqPkvUIlr5djgf qJ0EuDK+dQplcPCFbpHL4BFRUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOugo53 u8pz1Und2DzYWtUMXmWwMB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYjhW2bWoasKCeCWAEVWgspBFDeiUu5thkX5eoqGvSfhDZkRdVkr/8 K1UoO/W+2eMPZ4TrBWkkz8ZnfgCQeXq8XK3xKFrnucubMGcssNASEA/IyWUOZZ6A SSF62/W3kodKZl6N9LQ9yL2EZyebb2md1zik0oeAqiSA/WsATwArqZVc0EZ8/yHh 5vor/HOyuPhg7EGRRxK85tccWnpvAf3V1FU2padG09X6v+UVyBJ375TDQu8OaZs1 PRbwHjifdO18nGXWH+ZDnOX0BIyZYEflhhlFD1ocg58qgCfN4/yHv7bOqWeD+jTB VLQz7uzpr22SkeQnif08qQyMIWSdN+Vv -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:02 2025 by rpki-client on console.sobornost.net