$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft File: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft (raw, json) Hash identifier: yravuGYb11uCytKBauAx11PXwhu0ZPhAF2kXDgxt8Bo= Subject key identifier: DB:8A:BC:7B:59:9D:AC:85:F2:4B:D6:F5:A6:D4:63:5E:F8:9C:C6:8E Authority key identifier: 64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 Certificate issuer: /CN=A91E6D5D/serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Certificate serial: 1AD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft Manifest number: 9F03 Signing time: Mon 28 Apr 2025 14:32:35 +0000 Manifest this update: Mon 28 Apr 2025 14:32:34 +0000 Manifest next update: Mon 05 May 2025 14:32:34 +0000 Files and hashes: 1: ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl (hash: ZN72MjnY3cmjl9+ScWdiyL9jCU7jM2vlY9z0p2MtGmk=) 2: 9907DC46D4BC11EF9BDDAF2EC4F9AE02.roa (hash: RYynr8uizf4mxXQD/bYs58a0i9OmwI4vdpj7nHmjiJU=) 3: 959AC422557911EBBD21EB2FC4F9AE02.roa (hash: oMF/P2hGXRHcLkAXgbmeUw5lcthqUMWdcFQRgDGmw2Q=) 4: 20C6F2EC699D11EAA33EAE83C4F9AE02.roa (hash: 68iXhMXoCKzkvFm4ZJIC/ibhTxkbyNkKn12MmIsJUjc=) 5: 191363A69DD911EC99D91668C4F9AE02.roa (hash: oqniAucPfqcKV0mTFTmt9sxkwi/yyX2GOXb0nYNRsyI=) 6: ACC8833824DE11EDAEC0E529C4F9AE02.roa (hash: SpN5g9M2rsSW+Cra37fKcK/lk5XqYbPAMh8S4vUS9qk=) 7: 4FF339D8F01D11EB8C4B505BC4F9AE02.roa (hash: U9RF+JaWcsKZTr1DEGw1Y5hTdB+oWxy9sRXTz5ZgIuo=) 8: C89FD6DA557611EBA04C290BC4F9AE02.roa (hash: Y+JgutBZqKB0sr/67XUkEfaEMyqBwPZIYt+9Yv44r5c=) 9: FC6A19D892D511EC8FBFF32AC4F9AE02.roa (hash: kjWRly5sP345NgQNsNa2Y38tsuhMAJkUf7cDKkslnxQ=) 10: 1BF3A43C15BE11EF93ABFD7DC4F9AE02.roa (hash: Dnw6VZCydK3JoKDSOzotlEvfgmRpxLVN7ezEA2ZyyGo=) 11: 0B24875C7A4411EB804B7430C4F9AE02.roa (hash: Y+xehgtewaeOdOL6PowHHRPVgAd4mQJAADuq74in7FA=) 12: 3D68F8C29A4A11EA94706012C4F9AE02.roa (hash: +Q2D0d9yEIcvHWqL458RmFQjgHnoWa/Nyf3wOjdRqJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6865 (0x1ad1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=64A665816AEFED73B3075007DA5337AC7DEC4B81 Validity Not Before: Apr 28 14:32:34 2025 GMT Not After : May 5 14:32:34 2025 GMT Subject: CN=680f9182-5afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:23:b9:66:33:9f:45:60:a3:0b:01:f3:24: 90:b4:9d:16:7d:ba:83:6e:96:51:c3:cd:b0:07:c0: 1a:70:e4:fb:9f:a6:c7:3c:65:57:a6:fd:e1:b9:45: dc:49:ea:71:ce:66:c1:06:3e:3a:f0:b8:87:62:e9: 46:b7:4f:6b:0e:b5:86:92:30:d3:55:96:32:82:f1: 16:37:f6:f6:f4:33:b7:a7:12:1f:dc:04:08:eb:ac: d8:d5:76:e9:43:b8:e1:ce:d2:04:29:1a:41:0e:2f: fe:7f:a5:5b:11:9b:e5:54:bb:30:cf:5c:ec:84:1d: e4:21:e3:d2:03:f2:2c:a6:95:e5:1d:42:ad:98:f0: 18:ff:8f:f0:7b:cb:b8:c2:18:27:cd:f8:e5:50:b7: c0:11:58:8c:98:a2:0c:cf:2a:21:1d:96:49:88:ec: 70:a9:73:16:4d:fc:d2:e1:6b:d8:38:da:b5:ba:df: e2:f7:2f:c9:70:57:4f:22:1a:45:ae:27:7a:e1:48: 07:f4:7f:e7:ef:a9:bd:3b:ad:85:df:94:ff:09:35: 79:30:27:53:3c:d3:39:e6:e4:f9:83:88:52:68:9d: 5c:6b:2b:e4:5c:30:73:1c:fc:2c:2f:18:ae:30:2f: fd:64:4c:6e:f7:91:3d:f6:37:dc:12:32:a8:06:f4: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8A:BC:7B:59:9D:AC:85:F2:4B:D6:F5:A6:D4:63:5E:F8:9C:C6:8E X509v3 Authority Key Identifier: keyid:64:A6:65:81:6A:EF:ED:73:B3:07:50:07:DA:53:37:AC:7D:EC:4B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/ZKZlgWrv7XOzB1AH2lM3rH3sS4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b5:3a:44:4c:5d:63:1d:a9:28:92:3d:35:9b:dd:90:2d:34: f7:a7:b7:62:50:42:65:46:f3:83:b1:8a:6c:b2:83:61:f4:23: 11:17:30:e5:73:d9:cf:fe:ea:0a:2c:e4:df:e5:56:ee:01:af: 22:32:f0:e4:f3:b0:90:86:c5:5d:66:64:6c:ac:29:13:81:5a: 9c:bd:d6:08:7b:bb:46:36:1d:5f:97:09:37:35:a6:47:34:66: 28:e4:11:6a:17:ae:03:2e:6f:91:67:2d:71:74:e0:2e:e9:96: 75:74:bc:c0:9f:75:51:9e:b2:21:28:00:55:3d:f0:d5:df:01: 37:d5:95:cf:3f:09:ea:50:3a:70:ee:8e:fd:aa:93:f0:46:f2: 24:97:e1:87:e7:ba:f8:9e:87:a2:2f:37:d0:fd:f0:4b:48:fe: 0c:91:31:10:cf:b9:61:eb:65:4a:7e:49:d9:6c:8f:94:15:9d: 72:0b:df:c4:41:9b:8b:f8:ca:2f:bf:ea:88:e3:60:b7:a9:0c: 73:a3:b6:d6:79:cd:11:cf:ee:c7:9a:71:3e:16:78:bc:67:b1: bf:1d:6a:a2:2b:3b:e3:d2:10:85:fc:0f:ae:1a:e5:04:c7:5d: 2b:1f:db:f1:d4:0e:00:3d:ec:5b:c4:1e:e5:d5:19:ef:7c:72: 62:3b:4e:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDY0QTY2NTgxNkFFRkVENzNCMzA3NTAwN0RBNTMzN0FD N0RFQzRCODEwHhcNMjUwNDI4MTQzMjM0WhcNMjUwNTA1MTQzMjM0WjAYMRYwFAYD VQQDEw02ODBmOTE4Mi01YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WAjuWYzn0VgowsB8ySQtJ0WfbqDbpZRw82wB8AacOT7n6bHPGVXpv3huUXc SepxzmbBBj468LiHYulGt09rDrWGkjDTVZYygvEWN/b29DO3pxIf3AQI66zY1Xbp Q7jhztIEKRpBDi/+f6VbEZvlVLswz1zshB3kIePSA/IsppXlHUKtmPAY/4/we8u4 whgnzfjlULfAEViMmKIMzyohHZZJiOxwqXMWTfzS4WvYONq1ut/i9y/JcFdPIhpF rid64UgH9H/n76m9O62F35T/CTV5MCdTPNM55uT5g4hSaJ1cayvkXDBzHPwsLxiu MC/9ZExu95E99jfcEjKoBvRx0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuKvHtZ nayF8kvW9abUY174nMaOMB8GA1UdIwQYMBaAFGSmZYFq7+1zswdQB9pTN6x97EuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdYT3pCMUFIMmxNM3JIM3NT NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLWmxnV3J2N1hPekIxQUgybE0zckgzc1M0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9aS1psZ1dydjdY T3pCMUFIMmxNM3JIM3NTNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3tTpETF1jHakokj01m92QLTT3p7diUEJlRvODsYpssoNh9CMRFzDl c9nP/uoKLOTf5VbuAa8iMvDk87CQhsVdZmRsrCkTgVqcvdYIe7tGNh1flwk3NaZH NGYo5BFqF64DLm+RZy1xdOAu6ZZ1dLzAn3VRnrIhKABVPfDV3wE31ZXPPwnqUDpw 7o79qpPwRvIkl+GH57r4noeiLzfQ/fBLSP4MkTEQz7lh62VKfknZbI+UFZ1yC9/E QZuL+Movv+qI42C3qQxzo7bWec0Rz+7HmnE+Fni8Z7G/HWqiKzvj0hCF/A+uGuUE x10rH9vx1A4APexbxB7l1RnvfHJiO04c -----END CERTIFICATE-----Generated at Mon Apr 28 17:46:03 2025 by rpki-client on console.sobornost.net