$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json) Hash identifier: TJzel7FgYljkhGdC6RzxyYbCr33FDMrcWR3n11epQsk= Subject key identifier: D4:56:FC:15:25:C9:B3:EB:D4:CC:A0:14:B0:E8:AF:41:1C:6C:49:37 Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 28F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft Manifest number: 28C4 Signing time: Thu 24 Apr 2025 15:38:08 +0000 Manifest this update: Thu 24 Apr 2025 15:38:07 +0000 Manifest next update: Thu 01 May 2025 15:38:07 +0000 Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: GTMOmkzKvX6GvZwavVgodcitIpbNoOcCmonUce4drwM=) 2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: AzW4aIQu3oC/RB4Ph7Oxui4fN9NO75Dymw0HBe9vHgA=) 3: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: E9GpG8r2RS+wZVKx4VfWz8DtkWxY78qwYvbLbq0Wo/g=) 4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 3ffKspDDCMwFhMU04xxlteFDU4SgN8Gby605uNp3lZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10487 (0x28f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Validity Not Before: Apr 24 15:38:07 2025 GMT Not After : May 1 15:38:07 2025 GMT Subject: CN=680a5adf-5ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:31:3a:4c:65:8c:c1:67:12:d4:66:9d:e0: fb:f3:51:1b:56:29:17:63:0f:d2:c1:28:ba:d8:65: c3:94:e7:31:89:13:18:49:52:e3:1c:0e:ee:a3:7d: 63:05:e2:11:70:ca:6c:fd:45:dd:c1:4b:16:04:c4: b2:00:a5:16:dd:4e:62:f9:fe:59:01:95:01:f9:2c: 43:f5:79:ab:ee:98:ef:8b:71:fc:60:13:83:08:16: ae:46:d5:89:5f:35:b6:91:22:68:88:f5:79:3b:80: 25:6c:22:ae:9d:b6:1a:62:b8:67:cb:c4:99:5f:a6: 2e:04:53:53:d9:f9:ba:8f:0a:9f:eb:ce:f2:5a:51: ed:c3:9a:4c:03:dd:d1:de:c1:40:d9:9f:14:88:61: 15:3b:26:51:76:c1:6a:33:3b:da:33:f4:ee:3f:74: 8d:31:59:da:d3:44:7b:60:9c:be:6a:06:b7:fc:b4: 9b:ff:6e:38:3e:a6:f9:72:89:1f:a5:54:3e:e1:b9: 09:6f:df:61:c2:a8:29:ee:07:55:4e:04:23:0d:26: c6:f1:55:aa:b1:4f:ed:4e:d5:43:f2:67:81:48:d1: be:4a:fb:67:f2:91:47:3b:0e:95:ae:04:f5:d7:7e: 9a:c0:3f:95:7f:49:1b:34:cc:f5:b4:4d:16:30:5c: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:56:FC:15:25:C9:B3:EB:D4:CC:A0:14:B0:E8:AF:41:1C:6C:49:37 X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:01:37:d5:7f:a1:d7:87:bf:df:51:cd:c7:de:e6:bc:30:b4: 7c:9f:cb:53:1f:eb:f4:f1:33:89:29:aa:4f:d2:34:39:e3:41: 0d:e2:fe:9c:c4:1f:47:5c:94:58:fe:1c:4c:6f:e3:3f:79:b3: 48:f3:ae:f9:1f:d0:d4:51:10:31:a0:a2:d1:e4:7d:55:7a:68: 51:04:6f:fb:e9:f2:ed:0f:ab:75:56:cf:6d:94:c2:c9:ee:2d: 35:ef:e6:eb:f9:dc:e2:51:56:13:d4:fc:9c:fb:40:06:dc:27: 3c:c8:64:7d:83:59:e2:6d:a2:01:83:df:4b:a2:7d:98:16:9b: e8:4b:6b:0a:d3:d1:fc:75:a2:b1:0c:ff:e1:f4:1a:fa:61:41: 50:b7:d4:12:a1:78:d7:37:9a:5c:e5:74:a1:cd:90:16:f2:6e: 94:31:e0:58:a7:3d:d6:5c:f7:10:7a:06:31:12:b2:ac:dd:98: 00:22:44:f6:92:ea:0a:2b:a2:60:ba:65:ef:24:ee:5a:eb:9d: 0a:27:f4:72:c8:2a:55:90:ce:1e:90:ee:0b:1f:8e:3b:fb:3f: c7:54:bc:10:d0:87:29:92:b2:9f:7e:df:68:b6:45:4a:56:0d: fd:bc:dc:ab:15:f7:ff:24:d2:45:67:c2:56:7c:c3:73:d1:d2: 19:a5:9b:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjUwNDI0MTUzODA3WhcNMjUwNTAxMTUzODA3WjAYMRYwFAYD VQQDEw02ODBhNWFkZi01YWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHUxOkxljMFnEtRmneD781EbVikXYw/SwSi62GXDlOcxiRMYSVLjHA7uo31j BeIRcMps/UXdwUsWBMSyAKUW3U5i+f5ZAZUB+SxD9Xmr7pjvi3H8YBODCBauRtWJ XzW2kSJoiPV5O4AlbCKunbYaYrhny8SZX6YuBFNT2fm6jwqf687yWlHtw5pMA93R 3sFA2Z8UiGEVOyZRdsFqMzvaM/TuP3SNMVna00R7YJy+aga3/LSb/244Pqb5cokf pVQ+4bkJb99hwqgp7gdVTgQjDSbG8VWqsU/tTtVD8meBSNG+Svtn8pFHOw6VrgT1 136awD+Vf0kbNMz1tE0WMFzZ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRW/BUl ybPr1MygFLDor0EcbEk3MB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f dkJoM0d1eUxZQUpuSTdZSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuATfVf6HXh7/fUc3H3ua8MLR8n8tTH+v08TOJKapP0jQ540EN4v6c xB9HXJRY/hxMb+M/ebNI8675H9DUURAxoKLR5H1VemhRBG/76fLtD6t1Vs9tlMLJ 7i017+br+dziUVYT1Pyc+0AG3Cc8yGR9g1nibaIBg99Lon2YFpvoS2sK09H8daKx DP/h9Br6YUFQt9QSoXjXN5pc5XShzZAW8m6UMeBYpz3WXPcQegYxErKs3ZgAIkT2 kuoKK6JgumXvJO5a650KJ/RyyCpVkM4ekO4LH447+z/HVLwQ0IcpkrKfft9otkVK Vg39vNyrFff/JNJFZ8JWfMNz0dIZpZuE -----END CERTIFICATE-----Generated at Thu Apr 24 18:07:57 2025 by rpki-client on console.sobornost.net