$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: yJ5H6DjFmGFZ99Dt5nOltoZgCAQy27Ary+OslKPlyg4= Subject key identifier: C9:B0:4A:B6:CC:6B:AC:EB:26:0A:EA:8C:BA:B2:E9:2E:64:3B:3D:61 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 0585 Signing time: Sat 26 Apr 2025 22:55:48 +0000 Manifest this update: Sat 26 Apr 2025 22:55:47 +0000 Manifest next update: Sat 03 May 2025 22:55:47 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: fEwK/xj6WyWe4NiPQmEWyKXD0I93+HaPfxFGHfWBWIE=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: KjSC+EBY/UPIqhkSiTjfbrlSvd1G9oxKPCBMNEBLTuc=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: uorWefsb8OvwMByFaUFxQVQuG9e9l+g4lViL2blRqv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 22:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Apr 26 22:55:47 2025 GMT Not After : May 3 22:55:47 2025 GMT Subject: CN=680d6473-7594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:17:46:9a:b9:00:4a:c6:d5:f4:f2:61:f0:49: 4f:49:13:1e:94:54:bb:1d:7c:bf:b0:bc:c9:ec:31: bc:75:f8:ef:41:23:41:7f:74:ed:b2:2a:0e:d5:01: 4b:a0:f7:39:0d:80:19:d3:13:17:ac:61:87:1a:a9: 89:ca:ec:66:ac:c9:39:52:16:6f:44:59:7c:22:49: 81:e2:66:22:54:b5:b6:f1:c3:dc:fe:7a:75:e1:37: 4e:cb:fa:de:a1:10:25:46:d0:e2:78:6c:48:b1:98: 1f:c6:7c:19:80:fe:2c:05:2e:d3:0e:c5:bc:fa:57: dc:af:0f:87:d9:17:7a:b8:62:1e:6b:5e:c7:cb:1c: 98:9a:80:14:43:e4:fa:71:9a:85:46:b7:ae:23:54: e9:60:95:ef:f9:09:fe:b1:6c:e7:73:c0:46:1e:aa: 26:df:d7:78:13:f2:f5:99:57:ab:18:00:ee:67:c4: 7e:3f:07:20:43:46:60:a6:e7:89:84:35:37:b0:a0: 17:c3:07:43:be:65:ec:c0:c7:90:3f:73:1f:52:c5: bc:bd:20:64:f6:b5:61:c9:4c:0e:c7:9c:82:41:8f: fb:1b:37:56:b1:b3:e9:88:6e:9e:5c:06:ac:2f:f6: 04:f7:cf:b9:21:2d:59:ec:d4:60:76:82:73:2b:2a: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B0:4A:B6:CC:6B:AC:EB:26:0A:EA:8C:BA:B2:E9:2E:64:3B:3D:61 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:49:65:91:46:68:01:dc:94:30:07:be:74:b9:4f:6c:23: 3a:35:0d:33:86:7b:fe:88:3c:c0:e6:cf:86:f5:e7:3a:3c:25: bf:89:be:cc:95:51:17:82:69:77:dd:f4:19:77:06:73:e0:64: 65:ca:d8:ea:16:fd:e0:58:f1:cd:72:ee:c0:9c:c5:e3:6c:db: 10:3c:bf:1e:02:66:6d:e0:c7:76:0f:47:ae:7f:14:ad:cc:63: da:85:18:fa:6f:a4:c6:ad:c6:8c:15:88:d5:55:50:55:86:3e: d1:f7:36:99:7b:bf:c9:a5:52:6e:8a:9d:ff:a7:21:30:de:a2: 2e:e7:c5:00:d1:89:d5:3a:02:08:93:c2:6d:36:c5:c1:60:38: 91:b2:01:b1:3c:13:fa:40:d5:04:c4:c1:e1:0b:c0:a5:72:a6: 7b:8a:aa:ae:dd:22:dd:5b:47:f0:fc:74:bf:4f:8a:62:1c:9f: 4b:43:34:ff:3e:5e:f1:d7:d4:f7:3e:6f:96:64:64:ae:73:7f: 5a:31:5a:b7:c7:83:b6:5a:e9:17:f5:fd:31:01:a2:56:26:44: 01:39:fd:6d:ae:65:e2:9e:68:87:2b:e0:25:d8:e3:46:3e:5f: 6d:72:61:6d:ce:ff:42:cb:42:22:0c:30:df:7b:b9:de:56:ca: 78:de:79:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwNDI2MjI1NTQ3WhcNMjUwNTAzMjI1NTQ3WjAYMRYwFAYD VQQDEw02ODBkNjQ3My03NTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xdGmrkASsbV9PJh8ElPSRMelFS7HXy/sLzJ7DG8dfjvQSNBf3TtsioO1QFL oPc5DYAZ0xMXrGGHGqmJyuxmrMk5UhZvRFl8IkmB4mYiVLW28cPc/np14TdOy/re oRAlRtDieGxIsZgfxnwZgP4sBS7TDsW8+lfcrw+H2Rd6uGIea17HyxyYmoAUQ+T6 cZqFRreuI1TpYJXv+Qn+sWznc8BGHqom39d4E/L1mVerGADuZ8R+PwcgQ0ZgpueJ hDU3sKAXwwdDvmXswMeQP3MfUsW8vSBk9rVhyUwOx5yCQY/7GzdWsbPpiG6eXAas L/YE98+5IS1Z7NRgdoJzKyrwowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmwSrbM a6zrJgrqjLqy6S5kOz1hMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwQUllkUZoAdyUMAe+dLlPbCM6NQ0zhnv+iDzA5s+G9ec6PCW/ib7M lVEXgml33fQZdwZz4GRlytjqFv3gWPHNcu7AnMXjbNsQPL8eAmZt4Md2D0eufxSt zGPahRj6b6TGrcaMFYjVVVBVhj7R9zaZe7/JpVJuip3/pyEw3qIu58UA0YnVOgII k8JtNsXBYDiRsgGxPBP6QNUExMHhC8ClcqZ7iqqu3SLdW0fw/HS/T4piHJ9LQzT/ Pl7x19T3Pm+WZGSuc39aMVq3x4O2WukX9f0xAaJWJkQBOf1trmXinmiHK+Al2ONG Pl9tcmFtzv9Cy0IiDDDfe7neVsp43nnv -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:17 2025 by rpki-client on console.sobornost.net