$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: HYmCdvyf0goBOvwgaLsQtgRKmjN6JABeSmVHOkiL9yk= Subject key identifier: E8:EA:CA:35:D3:1D:A8:00:C1:95:28:00:CD:BC:43:4A:D0:CF:FE:88 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: 86 Signing time: Sun 27 Apr 2025 05:24:51 +0000 Manifest this update: Sun 27 Apr 2025 05:24:50 +0000 Manifest next update: Sun 04 May 2025 05:24:50 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: ypVzYf+hZAQoj/QpwN9t0H8Y8jGT5gntphnrUQZaKEQ=) 2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ScK5Mkjc4CtGpC9rnxIJeiwAah1HeyqfBAVqLucgBa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Apr 27 05:24:50 2025 GMT Not After : May 4 05:24:50 2025 GMT Subject: CN=680dbfa2-4362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:02:4c:9c:c7:7d:88:08:79:1f:6b:49:39: bc:b0:86:18:a8:eb:8e:1e:7b:a7:54:d9:86:1e:59: 1c:d3:2b:c3:47:16:81:ad:66:17:fc:be:b2:c4:50: c6:7f:c0:ae:8f:6d:c8:a5:75:9d:ed:2d:ae:f1:8c: b3:87:1e:6d:b2:1f:b9:d0:09:7c:dc:91:00:3a:aa: 15:c2:4b:35:43:7e:18:b1:2e:6e:2f:38:bf:52:ac: 53:4b:cd:c5:b3:7e:a9:41:f9:f7:c0:1c:89:30:03: 13:f1:10:22:c2:a3:9c:9e:15:c8:2c:4f:b9:9d:a9: 8f:c9:b4:11:e7:6b:f2:8f:f2:a1:ce:7a:ac:54:61: 26:ba:75:3d:d5:10:1c:14:0e:70:fc:fb:84:77:89: 1c:11:11:80:9d:1a:0b:31:04:64:19:bb:c9:63:75: 05:b7:a4:10:d5:c4:2c:a2:36:e4:9d:7b:69:87:99: 92:bd:f1:56:64:35:89:ea:28:45:1a:e9:eb:41:15: 26:4e:e9:fe:69:c5:77:e2:7e:c9:a2:ac:97:0c:2c: c0:a1:40:f0:9b:b7:5f:39:48:6b:ea:b4:e4:4f:42: 2c:b1:fc:38:d8:ff:8a:d1:97:9f:0d:db:74:dd:57: a2:08:da:3e:47:0d:cb:cf:40:48:5d:15:ed:be:95: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:EA:CA:35:D3:1D:A8:00:C1:95:28:00:CD:BC:43:4A:D0:CF:FE:88 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:99:54:c9:b7:13:a8:24:e7:69:37:09:d5:42:ec:fc:d7:e6: c7:80:39:9b:fb:d7:97:ca:fb:29:e8:c0:54:c1:1e:d9:ea:00: 9e:e5:9b:00:a6:4f:93:a7:5f:fb:1d:f3:1a:9b:45:e7:d2:1f: 2a:ee:45:39:e9:91:5f:c9:83:05:bb:29:79:4a:4f:5e:83:b7: ed:3a:56:df:77:71:96:29:fe:74:cf:bd:63:13:c6:4e:46:5b: 55:6f:03:c2:87:26:f9:21:25:93:1a:9a:74:3e:50:a8:72:48: 75:2e:3f:8e:92:5c:58:65:ee:21:bb:ea:30:ab:27:ae:72:1e: aa:d3:32:a9:a4:52:c0:b5:7a:5c:d9:3c:f1:4b:e6:4e:85:91: 01:11:b9:0c:ac:35:62:e4:cb:c4:9e:68:e5:e0:86:f3:f2:90: 2b:cc:6c:c7:f3:95:4a:d4:d7:ee:2e:7e:6d:03:b1:0d:78:58: ec:af:f3:73:06:58:b8:af:e7:5e:c5:1a:25:41:a6:87:2f:af: a7:18:6c:e4:aa:30:73:54:8f:98:b9:73:be:a8:ad:67:8c:0a: 15:1d:a3:83:93:c2:a5:85:bf:14:58:b4:e1:94:e0:c3:74:bc: 72:d0:a1:19:5e:47:88:19:a0:c9:07:a9:23:b4:ee:56:70:0c: 91:fc:25:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjUwNDI3MDUyNDUwWhcNMjUwNTA0MDUyNDUwWjAYMRYwFAYD VQQDEw02ODBkYmZhMi00MzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKUCTJzHfYgIeR9rSTm8sIYYqOuOHnunVNmGHlkc0yvDRxaBrWYX/L6yxFDG f8Cuj23IpXWd7S2u8Yyzhx5tsh+50Al83JEAOqoVwks1Q34YsS5uLzi/UqxTS83F s36pQfn3wByJMAMT8RAiwqOcnhXILE+5namPybQR52vyj/KhznqsVGEmunU91RAc FA5w/PuEd4kcERGAnRoLMQRkGbvJY3UFt6QQ1cQsojbknXtph5mSvfFWZDWJ6ihF GunrQRUmTun+acV34n7JoqyXDCzAoUDwm7dfOUhr6rTkT0Issfw42P+K0ZefDdt0 3VeiCNo+Rw3Lz0BIXRXtvpVkoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjqyjXT HagAwZUoAM28Q0rQz/6IMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7mVTJtxOoJOdpNwnVQuz81+bHgDmb+9eXyvsp6MBUwR7Z6gCe5ZsA pk+Tp1/7HfMam0Xn0h8q7kU56ZFfyYMFuyl5Sk9eg7ftOlbfd3GWKf50z71jE8ZO RltVbwPChyb5ISWTGpp0PlCockh1Lj+OklxYZe4hu+owqyeuch6q0zKppFLAtXpc 2TzxS+ZOhZEBEbkMrDVi5MvEnmjl4Ibz8pArzGzH85VK1NfuLn5tA7ENeFjsr/Nz Bli4r+dexRolQaaHL6+nGGzkqjBzVI+YuXO+qK1njAoVHaODk8Klhb8UWLThlODD dLxy0KEZXkeIGaDJB6kjtO5WcAyR/CXX -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net