$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: lFCFnGX1EohnONOkWd5vMTEnp/OJCFak4lWSLykCI0k= Subject key identifier: 00:50:D3:B4:4D:E6:BE:2F:ED:1D:C3:5A:6E:88:30:41:07:D6:90:07 Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 08A4 Signing time: Tue 06 May 2025 20:25:13 +0000 Manifest this update: Tue 06 May 2025 20:25:13 +0000 Manifest next update: Tue 13 May 2025 20:25:13 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: uKHRqj2vpAei750cS4g71SLMvbtE1RS2v9rv8w5MnsE=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: j0i0jOhZZOWP9s/TIb9RjR+IPetIqCuM8Ixx2VI3fzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: May 6 20:25:13 2025 GMT Not After : May 13 20:25:13 2025 GMT Subject: CN=681a7029-5397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:d7:6e:0b:a9:b1:e4:7a:b9:70:93:2d:74: 46:e1:26:41:13:a0:bf:99:93:59:c5:01:3a:43:f4: 16:a4:4f:dc:8d:d1:83:cc:8b:11:b9:43:de:bc:98: cd:79:13:29:38:d4:1f:88:8c:41:87:c4:51:1c:95: 4d:24:37:4a:ac:1f:9e:1c:54:a0:00:75:da:e2:b7: 62:4b:90:b4:03:e0:6e:cc:c4:ac:21:9b:7a:87:4d: 76:53:d8:73:ae:f5:17:45:a4:b4:cf:34:de:d8:76: 78:a2:e3:54:90:55:16:c7:a4:54:9e:8e:d3:9f:e5: 38:ab:5b:9e:99:c9:3f:4d:96:a9:23:06:fb:2e:20: 13:7a:78:ae:96:bc:fd:b6:a6:4e:09:4d:91:c0:21: 15:04:af:42:83:2f:be:8f:f6:d7:63:83:97:02:08: d3:e9:72:29:fe:eb:4e:c0:d7:3a:aa:48:23:26:90: fd:1e:e6:55:83:90:72:37:c4:70:ec:82:fc:25:32: 97:99:37:9d:8c:30:2f:d8:9a:46:fe:42:62:12:ed: 73:ec:9e:bd:d5:b7:c9:6d:7a:29:93:e0:fa:16:1a: 9b:0d:9a:f3:b3:91:7a:93:d3:b6:75:72:f9:bc:42: 24:d4:53:7b:58:43:61:7f:f2:17:54:77:1a:ef:f1: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:50:D3:B4:4D:E6:BE:2F:ED:1D:C3:5A:6E:88:30:41:07:D6:90:07 X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:fc:e6:d3:90:6c:0d:33:61:d2:09:2a:f8:21:af:fc:0e:34: aa:9f:3b:14:14:cd:ea:7c:de:94:0e:c9:73:38:76:54:3f:be: 7a:37:20:39:35:98:4f:3d:df:ae:e7:4a:bd:99:85:8d:c1:76: 4f:a8:4f:71:9f:70:ee:19:0d:44:12:68:bb:0b:90:3d:e5:27: de:9d:64:7d:b1:c1:bb:c1:4b:5c:0d:d7:30:1e:57:a4:7e:04: 32:6e:00:c7:89:3c:b9:ce:1b:99:11:37:ca:9f:26:a9:5e:4a: 19:98:dd:d0:e9:f8:8d:a9:d5:c2:f5:bf:25:a4:c4:40:3d:37: d6:58:08:c2:32:f6:19:56:a1:aa:98:c2:22:ea:6b:d9:bc:07: 51:a6:4c:9d:19:36:2a:b3:99:78:33:1b:ab:4f:e8:15:4b:b6: ad:86:78:55:82:70:c3:3b:91:4e:7e:0f:8b:6b:d6:76:cd:20: 36:0f:2a:30:ca:df:04:3c:2d:06:a8:d1:91:29:bf:1b:d5:67: e4:cf:f3:4a:1a:5d:02:0d:8c:aa:13:08:79:3d:db:71:fd:2f: 0d:bb:b5:e8:88:4f:56:87:5e:29:68:fe:c3:8e:61:bf:15:38: d8:19:2e:22:f7:ee:ce:a3:01:e2:89:65:57:98:6d:90:f2:fb: a3:25:3f:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjUwNTA2MjAyNTEzWhcNMjUwNTEzMjAyNTEzWjAYMRYwFAYD VQQDEw02ODFhNzAyOS01Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuITXbgupseR6uXCTLXRG4SZBE6C/mZNZxQE6Q/QWpE/cjdGDzIsRuUPevJjN eRMpONQfiIxBh8RRHJVNJDdKrB+eHFSgAHXa4rdiS5C0A+BuzMSsIZt6h012U9hz rvUXRaS0zzTe2HZ4ouNUkFUWx6RUno7Tn+U4q1uemck/TZapIwb7LiATeniulrz9 tqZOCU2RwCEVBK9Cgy++j/bXY4OXAgjT6XIp/utOwNc6qkgjJpD9HuZVg5ByN8Rw 7IL8JTKXmTedjDAv2JpG/kJiEu1z7J691bfJbXopk+D6FhqbDZrzs5F6k9O2dXL5 vEIk1FN7WENhf/IXVHca7/E8uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABQ07RN 5r4v7R3DWm6IMEEH1pAHMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6/ObTkGwNM2HSCSr4Ia/8DjSqnzsUFM3qfN6UDslzOHZUP756NyA5 NZhPPd+u50q9mYWNwXZPqE9xn3DuGQ1EEmi7C5A95SfenWR9scG7wUtcDdcwHlek fgQybgDHiTy5zhuZETfKnyapXkoZmN3Q6fiNqdXC9b8lpMRAPTfWWAjCMvYZVqGq mMIi6mvZvAdRpkydGTYqs5l4MxurT+gVS7athnhVgnDDO5FOfg+La9Z2zSA2Dyow yt8EPC0GqNGRKb8b1Wfkz/NKGl0CDYyqEwh5Pdtx/S8Nu7XoiE9Wh14paP7DjmG/ FTjYGS4i9+7OowHiiWVXmG2Q8vujJT+p -----END CERTIFICATE-----Generated at Tue May 6 22:44:08 2025 by rpki-client on console.sobornost.net