$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft File: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft (raw, json) Hash identifier: Lyi2QbbY8iOGoa5pIWRrbGjezpAqjxn+YR6kSAuwm8c= Subject key identifier: E8:A6:BF:7F:06:85:B5:95:C4:FB:F4:00:91:4B:00:BE:10:D3:20:F8 Authority key identifier: CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0 Certificate issuer: /CN=A91EBFB0/serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0 Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft Manifest number: 0C74 Signing time: Sun 04 May 2025 18:08:17 +0000 Manifest this update: Sun 04 May 2025 18:08:16 +0000 Manifest next update: Sun 11 May 2025 18:08:16 +0000 Files and hashes: 1: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl (hash: padT3T6MUzmJKLi5tCOGCJBW1tO1a1OzOzu+M3jONtU=) 2: F690CAECF87D11E9A746D05BC4F9AE02.roa (hash: tPAGXaSYisbjEXVlWGxE30ABgdsZwLOrekyu2J6vfbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFB0, serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0 Validity Not Before: May 4 18:08:16 2025 GMT Not After : May 11 18:08:16 2025 GMT Subject: CN=6817ad11-1ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:d3:8a:2c:80:b5:75:4c:fe:2c:d8:95:24: 0f:e3:ec:4b:7c:e6:6f:e0:ee:10:4c:e6:80:86:53: 05:92:eb:f7:57:3e:fc:cd:93:21:8c:28:28:0d:c2: 32:a8:dd:ea:2c:49:24:1b:05:3f:87:79:f9:09:98: da:65:8c:36:0e:13:46:dc:54:cc:fc:49:e0:62:8b: 03:cb:3e:0c:d1:c8:0a:3e:a3:6c:21:b6:49:de:f2: bd:3b:24:24:3e:24:44:1d:c3:a5:24:47:bf:82:25: 80:29:3b:d3:d2:71:ed:2e:03:94:93:61:35:c5:7c: f6:06:4a:2a:ca:90:2b:3c:eb:9b:fe:1f:0c:32:b2: e5:98:fa:6c:43:c0:3b:8a:7e:5d:76:cb:14:de:46: 64:aa:39:50:93:1d:de:ee:d8:25:b4:5f:71:5e:a8: b4:39:a9:0b:59:78:07:4b:60:70:32:bb:05:4a:37: 2f:54:dc:65:f0:25:e7:02:17:97:ea:6d:23:7d:99: b2:68:c9:0b:d4:82:81:5d:1a:7f:38:9a:d6:33:ea: 4e:6b:e2:d6:ac:de:8b:31:b4:61:a9:15:61:9b:31: c3:a0:32:77:6e:71:6b:a2:de:84:99:57:3e:06:86: ba:9a:0f:10:59:28:b3:f6:45:6d:cb:17:c9:16:6c: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A6:BF:7F:06:85:B5:95:C4:FB:F4:00:91:4B:00:BE:10:D3:20:F8 X509v3 Authority Key Identifier: keyid:CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:b4:96:63:be:12:f3:91:d3:82:e2:c4:cf:b8:f1:67:83:57: 8e:f6:58:3c:2e:21:1e:09:b2:c2:c2:b7:b2:a0:23:ce:44:2a: 0b:cc:2b:11:2c:6a:03:f1:81:48:a6:f1:20:bf:1a:c7:7c:86: ee:62:a6:72:00:67:ad:f8:40:2a:a6:62:fc:b9:aa:d4:96:1a: a1:af:59:26:8f:17:82:dc:33:4e:b3:2c:25:77:e7:68:29:a3: 55:74:7e:4a:ee:df:57:53:aa:3f:38:ff:b5:d5:41:49:28:ea: 67:b6:2d:80:0e:ec:4e:43:dc:ce:1b:b6:36:29:dc:85:7b:87: 48:a1:63:e3:6f:04:0f:ed:1a:8e:fc:24:31:74:2c:8f:61:32: d8:42:61:3d:74:a5:5a:a3:71:c1:8f:8c:16:07:7d:71:c1:0b: 47:ce:86:9a:98:95:64:3c:dc:64:c2:c8:ff:04:80:cb:b8:93: f5:d3:c5:2f:2f:ab:f3:34:0d:b2:76:a8:89:56:1e:bd:17:60: 50:ef:f5:55:9e:d8:a6:c0:03:5d:21:3e:e0:39:00:18:36:f7: 20:fe:e0:20:a0:bf:2f:7c:e5:9e:cf:d7:e3:f1:c7:5e:68:bb: f5:86:fb:3e:74:4b:88:94:0d:2c:2c:61:8d:e2:db:31:f9:f3: 17:c2:10:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQjAxMTAvBgNVBAUTKENDODUwOUQzMUZCNjNBOERERDZCRjJEM0Q4NEM3QkMw QjJCQTNGQzAwHhcNMjUwNTA0MTgwODE2WhcNMjUwNTExMTgwODE2WjAYMRYwFAYD VQQDEw02ODE3YWQxMS0xZWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0LTiiyAtXVM/izYlSQP4+xLfOZv4O4QTOaAhlMFkuv3Vz78zZMhjCgoDcIy qN3qLEkkGwU/h3n5CZjaZYw2DhNG3FTM/EngYosDyz4M0cgKPqNsIbZJ3vK9OyQk PiREHcOlJEe/giWAKTvT0nHtLgOUk2E1xXz2BkoqypArPOub/h8MMrLlmPpsQ8A7 in5ddssU3kZkqjlQkx3e7tgltF9xXqi0OakLWXgHS2BwMrsFSjcvVNxl8CXnAheX 6m0jfZmyaMkL1IKBXRp/OJrWM+pOa+LWrN6LMbRhqRVhmzHDoDJ3bnFrot6EmVc+ Boa6mg8QWSiz9kVtyxfJFmyBpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOimv38G hbWVxPv0AJFLAL4Q0yD4MB8GA1UdIwQYMBaAFMyFCdMftjqN3Wvy09hMe8Cyuj/A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZCMC9BM0FCNDNCMkY4 N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9vM2RhX0xUMkV4N3dMSzZQ OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJVUoweC0yT28zZGFfTFQyRXg3d0xLNlA4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZCMC9BM0FCNDNCMkY4N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9v M2RhX0xUMkV4N3dMSzZQOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAotJZjvhLzkdOC4sTPuPFng1eO9lg8LiEeCbLCwreyoCPORCoLzCsR LGoD8YFIpvEgvxrHfIbuYqZyAGet+EAqpmL8uarUlhqhr1kmjxeC3DNOsywld+do KaNVdH5K7t9XU6o/OP+11UFJKOpnti2ADuxOQ9zOG7Y2KdyFe4dIoWPjbwQP7RqO /CQxdCyPYTLYQmE9dKVao3HBj4wWB31xwQtHzoaamJVkPNxkwsj/BIDLuJP108Uv L6vzNA2ydqiJVh69F2BQ7/VVntimwANdIT7gOQAYNvcg/uAgoL8vfOWez9fj8cde aLv1hvs+dEuIlA0sLGGN4tsx+fMXwhDL -----END CERTIFICATE-----Generated at Sun May 4 20:44:21 2025 by rpki-client on console.sobornost.net