$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: /fNJK2XVbQSopJa9v29XIlZ0cEkIfhAHCuSeY2A2Kfs= Subject key identifier: F6:95:B4:53:58:0A:6A:F4:8F:AD:5C:D8:85:49:8A:4E:3D:4F:1A:3B Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 1138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 1119 Signing time: Thu 24 Apr 2025 17:16:55 +0000 Manifest this update: Thu 24 Apr 2025 17:16:54 +0000 Manifest next update: Thu 01 May 2025 17:16:54 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: EJvWvnEDpztGKIQaLSC7an5IHy42hXZ4ytzpkEVmTMA=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: LI5814/1mo8RhGHDIyDmTnyAaT8jPK8eiZW8nnVoECM=) 3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: KE984DbFRTO0XDJnJvkUh9nTQI9OdADddfHh/b8sXns=) 4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: tG0xAoHX5Jrg4VXIV0PMgN27hGtGNiwPzNpPEMcc5ZU=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: NlRxG3SgenSihBb1Uz1mdp6In7PIY3SWzoat7OXr7O8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4408 (0x1138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Apr 24 17:16:54 2025 GMT Not After : May 1 17:16:54 2025 GMT Subject: CN=680a7206-9165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:04:9c:e5:53:43:5c:72:a4:cf:d3:fa:87: 6a:1f:29:1d:da:04:4b:ec:3b:e3:92:10:99:65:b4: 0a:c1:bf:64:9e:7a:d2:06:8b:22:63:63:f8:4c:f4: 12:f1:33:30:60:6f:89:45:bc:cb:c7:c8:1c:e5:fc: b2:cf:90:45:28:a8:cf:42:63:50:27:03:6e:cd:bf: 0b:ab:fa:e3:ee:1b:7e:5f:e0:58:5d:c1:47:97:30: 74:44:3f:b4:23:44:b9:3c:ea:d6:97:39:ac:8d:19: 90:a3:7e:9f:d5:6e:fe:d0:38:f0:aa:e2:2b:d7:37: e9:d5:ec:60:65:a8:8f:dc:be:8b:c5:64:c7:4d:b6: 0f:d5:66:d4:77:0d:0c:af:65:ba:bd:95:89:b6:c1: da:03:47:95:58:4b:e7:19:43:f3:68:2d:bc:be:ae: d8:b3:d2:7b:fa:e8:b5:82:33:1c:3f:00:33:38:36: 85:fa:bb:12:97:6a:db:0c:85:9b:b7:95:0c:e8:02: 6b:fc:1a:ff:88:09:62:bf:27:1b:cc:d8:b7:47:f0: f5:31:d8:17:6c:a1:1f:7f:1c:27:a4:4b:ac:36:8c: 0d:d8:e0:36:7c:cf:0b:87:f6:28:0a:a0:09:6d:ff: ad:5b:22:04:76:66:6f:7b:b4:51:f1:bf:5a:39:d9: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:95:B4:53:58:0A:6A:F4:8F:AD:5C:D8:85:49:8A:4E:3D:4F:1A:3B X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b3:bc:8f:17:04:42:b5:34:34:3c:a0:b2:36:fa:42:79:81: 39:ca:62:ba:f4:42:59:dd:9b:f6:27:cc:5d:bf:43:7c:6a:66: 3f:fe:4d:0b:6f:ef:95:fc:92:1f:0e:03:a0:77:f8:c8:cb:dd: d2:21:c4:00:67:55:1d:aa:89:fa:20:f4:78:aa:0b:3c:d2:d8: 44:91:23:19:83:22:9a:ac:24:ab:18:17:ca:ea:5f:c2:b3:06: 64:b3:5e:d2:5b:82:4a:09:50:81:19:47:f6:ee:f2:88:ce:ac: df:3c:66:0b:a2:a4:23:26:f1:11:51:39:66:e7:96:f1:ff:33: fb:26:8f:42:9b:b4:cc:a1:15:a9:10:c7:17:cd:b7:03:83:6c: 05:4e:ed:6f:66:e7:05:13:61:66:09:9f:ad:be:05:d5:a7:32: 82:e9:ae:3d:08:39:47:c6:1d:b1:9b:f2:0b:69:67:8c:a9:db: 25:9f:f1:e5:0a:39:6a:cd:9a:d5:1a:26:25:18:f4:2c:4c:76: 04:6a:3a:45:d2:70:a2:b7:ae:7e:5b:11:1a:2b:26:d0:52:0a: 59:69:e8:1e:24:6b:09:c6:d1:f5:00:e5:7c:30:68:93:29:0f: 2e:90:94:52:5f:01:b0:7e:61:81:e9:ec:2d:03:bc:c3:ae:b7: 0d:43:98:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUwNDI0MTcxNjU0WhcNMjUwNTAxMTcxNjU0WjAYMRYwFAYD VQQDEw02ODBhNzIwNi05MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq0EnOVTQ1xypM/T+odqHykd2gRL7DvjkhCZZbQKwb9knnrSBosiY2P4TPQS 8TMwYG+JRbzLx8gc5fyyz5BFKKjPQmNQJwNuzb8Lq/rj7ht+X+BYXcFHlzB0RD+0 I0S5POrWlzmsjRmQo36f1W7+0DjwquIr1zfp1exgZaiP3L6LxWTHTbYP1WbUdw0M r2W6vZWJtsHaA0eVWEvnGUPzaC28vq7Ys9J7+ui1gjMcPwAzODaF+rsSl2rbDIWb t5UM6AJr/Br/iAlivycbzNi3R/D1MdgXbKEffxwnpEusNowN2OA2fM8Lh/YoCqAJ bf+tWyIEdmZve7RR8b9aOdkx3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaVtFNY Cmr0j61c2IVJik49Txo7MB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNs7yPFwRCtTQ0PKCyNvpCeYE5ymK69EJZ3Zv2J8xdv0N8amY//k0L b++V/JIfDgOgd/jIy93SIcQAZ1Udqon6IPR4qgs80thEkSMZgyKarCSrGBfK6l/C swZks17SW4JKCVCBGUf27vKIzqzfPGYLoqQjJvERUTlm55bx/zP7Jo9Cm7TMoRWp EMcXzbcDg2wFTu1vZucFE2FmCZ+tvgXVpzKC6a49CDlHxh2xm/ILaWeMqdsln/Hl CjlqzZrVGiYlGPQsTHYEajpF0nCit65+WxEaKybQUgpZaegeJGsJxtH1AOV8MGiT KQ8ukJRSXwGwfmGB6ewtA7zDrrcNQ5j3 -----END CERTIFICATE-----Generated at Thu Apr 24 20:39:22 2025 by rpki-client on console.sobornost.net