$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: 09lRrBNigfdwPUThzddLU63lzZfogdjhbAds2mh8Aag= Subject key identifier: A4:AD:AE:7F:B8:E1:25:01:B8:97:A1:04:12:03:31:97:44:14:05:A5 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: 49 Signing time: Sun 27 Apr 2025 06:12:28 +0000 Manifest this update: Sun 27 Apr 2025 06:12:28 +0000 Manifest next update: Sun 04 May 2025 06:12:28 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: UAmFBqyuATxEiD4eX5N2AB9PhJrgWgpQrsk20H7EPmc=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: BCZ1HJoEZyrIFeiF3ZHLW8BBZXBaO4KH4xqAbBol+hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Apr 27 06:12:28 2025 GMT Not After : May 4 06:12:28 2025 GMT Subject: CN=680dcacc-8807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:32:a3:83:72:d5:49:c0:e6:11:9c:8d:4d:b1: 6e:8c:87:e9:43:2c:c3:ae:75:25:45:01:17:19:6c: 56:b2:c6:0e:10:66:2e:fd:fa:65:3e:0b:73:a5:73: c4:9f:7f:dd:0c:b6:89:9f:dc:ff:22:ad:c0:6d:06: e0:94:fc:64:06:c6:6a:b8:7c:6a:fe:4d:bd:af:bf: 92:db:9c:43:66:74:72:b2:29:bc:8b:62:7b:d5:8a: 44:bc:5b:10:0a:66:ee:62:3f:56:6a:0f:59:51:43: 8a:ed:09:97:88:ff:c7:c0:82:a4:c6:33:fd:13:a6: b5:81:c4:d9:96:fc:90:0e:e1:a9:00:8a:c6:8c:b1: 73:56:c1:18:83:44:b5:50:84:00:5f:14:51:9b:14: e5:02:d1:5e:79:0e:d2:5a:7d:34:71:d9:91:e5:bc: 8d:b2:56:e7:cd:87:9c:cc:ac:3f:91:61:fe:ca:b7: 35:3d:b5:d6:11:0f:4e:ae:74:f6:b7:cf:e0:ca:d3: cf:44:21:f6:84:c0:db:2c:73:55:c7:d3:30:8b:6b: 48:b7:c4:e8:3d:93:7a:8a:cb:98:ba:ac:12:a2:c1: 7e:c5:e7:9a:a5:0d:1d:12:84:9c:99:70:ee:12:21: f4:e9:ba:37:94:75:09:5e:1e:39:a9:67:80:57:27: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AD:AE:7F:B8:E1:25:01:B8:97:A1:04:12:03:31:97:44:14:05:A5 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:2e:e6:d0:bc:0c:32:9b:11:a6:6f:89:26:c3:0d:4a:02:2f: 1c:b8:d6:0b:53:92:b6:9d:e2:2e:d8:d5:c7:4d:f8:a4:56:35: 0b:28:c4:58:21:ce:65:64:c5:5b:35:81:e0:f7:76:93:31:5c: a4:f8:1d:e2:45:23:7f:88:8c:a5:35:45:b1:3a:45:d0:81:59: a8:69:6e:42:f1:ec:80:02:47:6f:0c:76:93:f5:c7:01:cb:62: f5:0b:16:23:2d:5e:87:44:81:0f:05:24:cf:0a:67:13:73:a6: 4f:49:51:15:da:30:3a:a8:fa:4c:d3:b1:fe:18:0f:cc:3a:d2: 5f:e5:71:0d:b0:f5:ff:66:3b:07:5c:f9:f0:b7:9e:8a:87:ce: 9a:02:b8:dd:ff:07:63:2f:77:b5:eb:9f:72:3e:1a:db:a2:4f: 71:4c:c8:e3:4a:cc:31:09:b5:31:34:9f:dc:72:3c:09:75:6c: 4e:22:80:b3:22:ef:9b:21:17:2a:3c:d4:3c:ae:8c:ed:1a:e3: d3:d0:7c:e8:be:05:e9:16:37:03:c9:cd:23:d9:9e:e9:35:f5: 46:ef:c2:fc:89:ea:9b:80:c6:7c:04:5c:ab:54:4a:a0:e2:9d: 29:52:80:75:86:fd:bf:dc:bd:9e:bf:b8:15:c5:b6:86:2a:ee: df:0e:05:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkM2MTExMC8GA1UEBRMoNjREMkIzRDY1QTVDNkNDRTREMDhENzhGRkVEQjI4NTZC NjQxRDZBMzAeFw0yNTA0MjcwNjEyMjhaFw0yNTA1MDQwNjEyMjhaMBgxFjAUBgNV BAMTDTY4MGRjYWNjLTg4MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClMqODctVJwOYRnI1NsW6Mh+lDLMOudSVFARcZbFayxg4QZi79+mU+C3Olc8Sf f90Mtomf3P8ircBtBuCU/GQGxmq4fGr+Tb2vv5LbnENmdHKyKbyLYnvVikS8WxAK Zu5iP1ZqD1lRQ4rtCZeI/8fAgqTGM/0TprWBxNmW/JAO4akAisaMsXNWwRiDRLVQ hABfFFGbFOUC0V55DtJafTRx2ZHlvI2yVufNh5zMrD+RYf7KtzU9tdYRD06udPa3 z+DK089EIfaEwNssc1XH0zCLa0i3xOg9k3qKy5i6rBKiwX7F55qlDR0ShJyZcO4S IfTpujeUdQleHjmpZ4BXJ2v5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpK2uf7jh JQG4l6EEEgMxl0QUBaUwHwYDVR0jBBgwFoAUZNKz1lpcbM5NCNeP/tsoVrZB1qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQzYxLzQ0NkJEN0EyQjZD NDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWk5LejFscGNiTTVOQ05lUF90c29WclpCMXFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC QzYxLzQ0NkJEN0EyQjZDNDExRUZBMjRBQTYxNkM0RjlBRTAyL1pOS3oxbHBjYk01 TkNOZVBfdHNvVnJaQjFxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHMu5tC8DDKbEaZviSbDDUoCLxy41gtTkrad4i7Y1cdN+KRWNQsoxFgh zmVkxVs1geD3dpMxXKT4HeJFI3+IjKU1RbE6RdCBWahpbkLx7IACR28MdpP1xwHL YvULFiMtXodEgQ8FJM8KZxNzpk9JURXaMDqo+kzTsf4YD8w60l/lcQ2w9f9mOwdc +fC3noqHzpoCuN3/B2Mvd7Xrn3I+GtuiT3FMyONKzDEJtTE0n9xyPAl1bE4igLMi 75shFyo81DyujO0a49PQfOi+BekWNwPJzSPZnuk19UbvwvyJ6puAxnwEXKtUSqDi nSlSgHWG/b/cvZ6/uBXFtoYq7t8OBUU= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:58 2025 by rpki-client on console.sobornost.net