$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: 0Wsi+PWt2lIALQoDYIxE0XODLCvWgIYq8kwhcLs1U9k= Subject key identifier: B9:BD:D5:F2:D8:D7:AE:B5:5D:39:0B:55:D4:77:FB:A5:0E:54:EB:8B Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 26 Signing time: Sun 27 Apr 2025 06:36:39 +0000 Manifest this update: Sun 27 Apr 2025 06:36:38 +0000 Manifest next update: Sun 04 May 2025 06:36:38 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: i7QBuEf2XlZvqCdjQltmGnDvIMveVeYAwca79iZ0XuE=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Apr 27 06:36:38 2025 GMT Not After : May 4 06:36:38 2025 GMT Subject: CN=680dd076-3d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:8d:d2:13:f8:c6:a6:36:d7:ea:a4:3e:e4: ab:27:c5:eb:de:c1:91:c7:66:53:36:f3:25:0a:3b: 40:cc:6c:38:d4:11:cb:c2:4c:f5:ed:db:2b:f8:0f: a0:86:8f:2e:eb:7a:00:31:7d:e7:13:47:d3:bf:88: 7e:fe:76:49:bc:7d:0d:c5:67:0a:1e:8d:e6:59:b6: 06:2f:d4:da:63:7a:55:8d:44:57:63:49:4a:41:3e: d0:fc:ba:77:3a:85:23:0b:1f:71:e7:14:3c:c7:d0: 74:3f:39:99:3d:2a:9f:59:c6:9e:d7:4b:7f:a8:e6: e5:86:e4:06:ae:24:54:42:71:4e:68:62:d5:71:01: 06:3d:08:40:5e:ca:93:c8:43:dc:4a:13:5b:a0:ca: 21:86:71:3c:fe:6e:36:40:a1:13:71:c4:3d:61:2a: 22:f6:b1:e0:a0:0a:90:5b:98:48:9c:71:b4:22:62: 8b:fb:8a:2b:f4:fb:fe:12:0c:f3:70:be:ed:e5:11: 51:fb:04:63:c7:2c:f5:04:8c:b0:81:1e:c6:0d:69: 64:ce:72:5a:cd:51:df:22:88:1c:4f:e7:a5:75:af: b6:81:79:40:74:0c:45:f5:88:c8:83:79:93:7d:b2: dc:1b:9f:13:82:97:bc:48:c8:95:40:64:28:46:5a: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BD:D5:F2:D8:D7:AE:B5:5D:39:0B:55:D4:77:FB:A5:0E:54:EB:8B X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ab:bf:d9:85:72:8a:e5:ad:eb:f9:04:e7:c1:87:94:72:fd: 80:d7:8d:ba:ca:66:88:d0:e6:16:76:6e:30:87:0a:aa:cf:9c: b6:4c:76:38:08:16:fb:3c:d1:a7:58:35:32:b0:74:cb:6b:0f: c7:7a:01:f1:af:44:fa:6f:c3:25:5d:d4:d2:c0:71:c3:dd:7f: 70:ab:14:f1:e3:b5:1a:62:90:a6:3a:0b:6b:3d:d4:a3:90:c2: 57:3d:ff:d9:57:7f:8f:f4:58:90:63:cd:37:18:51:66:e3:db: 9e:b7:a6:85:b2:9f:b1:a0:ab:0e:bd:a9:07:be:e8:a7:64:74: 8a:da:9c:7f:ed:5e:db:aa:c1:e3:c4:46:82:4e:82:f9:85:7d: 51:36:d4:47:07:ef:d3:ba:c8:61:8d:64:47:dc:5b:70:44:17: 01:48:3e:cb:03:52:00:14:3d:08:1b:3d:d8:5c:20:f0:6e:1b: 2d:1b:03:b9:2b:e6:95:4b:68:30:f5:84:96:4e:74:7b:c0:d7: ec:14:a7:4d:52:7f:57:97:82:74:8a:33:cc:53:d2:e8:04:64: bc:87:f4:a0:8f:ca:0e:51:e5:f0:c5:ce:b1:77:54:a3:70:c4: b8:5b:13:14:55:34:65:99:f0:3c:02:1c:ed:c9:fc:76:40:f4: ba:98:86:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA0MjcwNjM2MzhaFw0yNTA1MDQwNjM2MzhaMBgxFjAUBgNV BAMTDTY4MGRkMDc2LTNkNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDERY3SE/jGpjbX6qQ+5KsnxevewZHHZlM28yUKO0DMbDjUEcvCTPXt2yv4D6CG jy7regAxfecTR9O/iH7+dkm8fQ3FZwoejeZZtgYv1NpjelWNRFdjSUpBPtD8unc6 hSMLH3HnFDzH0HQ/OZk9Kp9Zxp7XS3+o5uWG5AauJFRCcU5oYtVxAQY9CEBeypPI Q9xKE1ugyiGGcTz+bjZAoRNxxD1hKiL2seCgCpBbmEiccbQiYov7iiv0+/4SDPNw vu3lEVH7BGPHLPUEjLCBHsYNaWTOclrNUd8iiBxP56V1r7aBeUB0DEX1iMiDeZN9 stwbnxOCl7xIyJVAZChGWj+bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUub3V8tjX rrVdOQtV1Hf7pQ5U64swHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGarv9mFcorlrev5BOfBh5Ry/YDXjbrKZojQ5hZ2bjCHCqrPnLZMdjgI Fvs80adYNTKwdMtrD8d6AfGvRPpvwyVd1NLAccPdf3CrFPHjtRpikKY6C2s91KOQ wlc9/9lXf4/0WJBjzTcYUWbj2563poWyn7Ggqw69qQe+6KdkdIranH/tXtuqwePE RoJOgvmFfVE21EcH79O6yGGNZEfcW3BEFwFIPssDUgAUPQgbPdhcIPBuGy0bA7kr 5pVLaDD1hJZOdHvA1+wUp01Sf1eXgnSKM8xT0ugEZLyH9KCPyg5R5fDFzrF3VKNw xLhbExRVNGWZ8DwCHO3J/HZA9LqYhp4= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:19 2025 by rpki-client on console.sobornost.net