$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: HloiFyTDyg7kKX5+5EDwfClGsRAtNENgjf+PWFZVtwI= Subject key identifier: D9:60:19:93:A5:9E:0C:FA:FC:5F:E7:F9:55:F2:D0:5C:A8:2B:83:25 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 34EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 349A Signing time: Mon 28 Apr 2025 14:28:52 +0000 Manifest this update: Mon 28 Apr 2025 14:28:52 +0000 Manifest next update: Mon 05 May 2025 14:28:52 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: dM/RD0T0PZ1rg1pX21gr05DIosDhmOXvSaYpwMBVyFU=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13551 (0x34ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Apr 28 14:28:52 2025 GMT Not After : May 5 14:28:52 2025 GMT Subject: CN=680f90a4-43b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c8:af:94:aa:c5:08:b0:ed:a9:da:b4:e0:4d: 3f:67:27:e4:21:fd:61:f0:79:a3:c2:b4:22:84:0f: b5:55:8b:a3:3b:69:eb:d9:ce:fa:54:6a:08:7d:cf: 60:51:38:e6:20:0e:e0:70:0b:12:a7:27:83:54:0a: 7d:a7:a8:7a:cb:51:1f:4b:0f:28:86:b3:50:db:3f: ac:a9:99:78:04:70:04:2a:f7:c7:34:a5:9e:64:0c: 28:2e:fc:0a:8f:5b:4d:22:b7:94:3d:19:11:50:8d: ec:0c:b2:a7:81:f2:9e:d2:39:40:66:2c:25:df:bd: d1:5a:35:e2:78:4d:af:48:d6:66:7c:d8:54:be:cd: 8c:b4:4d:fe:33:03:dc:12:a5:bb:69:be:02:14:e2: 27:de:46:67:b6:23:22:28:35:7d:b4:ef:43:38:52: 5a:9d:b0:46:64:d3:c2:fb:37:12:f6:56:31:e6:93: e7:4f:b7:59:d9:cb:69:cd:eb:39:9f:43:72:49:6c: 89:5c:e8:3f:44:97:ec:47:c4:a8:0e:41:08:f2:b2: f6:e5:d8:92:f0:18:da:54:b4:ed:ed:65:37:46:b3: a7:4d:f4:08:f6:2d:98:3b:fa:20:66:d5:2d:d5:41: 1d:c1:aa:ce:2e:1c:ca:b6:4b:6a:e1:70:37:0d:62: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:60:19:93:A5:9E:0C:FA:FC:5F:E7:F9:55:F2:D0:5C:A8:2B:83:25 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fa:5c:de:e3:94:d7:5a:27:1a:c0:65:f6:01:a9:e7:48:0a: 41:63:8e:1c:08:85:4d:69:5b:ae:c4:70:c4:c8:55:2a:b6:80: 6f:aa:63:90:a9:f2:40:b1:63:55:c6:41:38:1a:29:aa:ef:59: 17:2c:c1:53:69:b0:02:eb:40:a1:9f:b8:d0:44:13:db:61:ba: 44:1c:da:4b:78:d3:ef:6b:1c:d4:25:60:07:bb:41:ba:1d:b0: 6f:f6:7a:94:69:4c:d6:e9:13:12:55:a2:5a:72:7d:ad:c0:a0: 3b:e9:d2:68:5a:ca:78:cc:58:8d:80:29:49:2a:32:16:c1:59: 5e:b9:6c:06:0c:16:2d:33:1f:6b:df:35:af:1f:e9:62:2f:f3: 2c:83:e1:08:d7:1a:24:9b:8f:85:0c:a7:be:16:d9:22:cf:5d: cd:37:d1:7b:62:18:2a:9e:f4:7f:c0:76:1f:cf:1a:a0:62:03: 6f:da:aa:ef:a3:18:93:f7:86:00:88:40:d0:76:9b:2b:a6:db: b1:34:26:3e:4d:7c:96:f8:ba:30:5c:4a:fb:5f:a6:9f:97:43: 60:1a:f7:58:68:e7:00:ed:e4:bf:7b:f6:7e:cb:a5:1e:2b:88: 33:7c:a9:3f:4b:fd:fc:1c:d7:8d:bb:bd:bb:aa:fd:b2:e1:75: d0:3e:2d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwNDI4MTQyODUyWhcNMjUwNTA1MTQyODUyWjAYMRYwFAYD VQQDEw02ODBmOTBhNC00M2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsivlKrFCLDtqdq04E0/ZyfkIf1h8HmjwrQihA+1VYujO2nr2c76VGoIfc9g UTjmIA7gcAsSpyeDVAp9p6h6y1EfSw8ohrNQ2z+sqZl4BHAEKvfHNKWeZAwoLvwK j1tNIreUPRkRUI3sDLKngfKe0jlAZiwl373RWjXieE2vSNZmfNhUvs2MtE3+MwPc EqW7ab4CFOIn3kZntiMiKDV9tO9DOFJanbBGZNPC+zcS9lYx5pPnT7dZ2ctpzes5 n0NySWyJXOg/RJfsR8SoDkEI8rL25diS8BjaVLTt7WU3RrOnTfQI9i2YO/ogZtUt 1UEdwarOLhzKtktq4XA3DWLCrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlgGZOl ngz6/F/n+VXy0FyoK4MlMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe+lze45TXWicawGX2AannSApBY44cCIVNaVuuxHDEyFUqtoBvqmOQ qfJAsWNVxkE4Gimq71kXLMFTabAC60Chn7jQRBPbYbpEHNpLeNPvaxzUJWAHu0G6 HbBv9nqUaUzW6RMSVaJacn2twKA76dJoWsp4zFiNgClJKjIWwVleuWwGDBYtMx9r 3zWvH+liL/Msg+EI1xokm4+FDKe+Ftkiz13NN9F7YhgqnvR/wHYfzxqgYgNv2qrv oxiT94YAiEDQdpsrptuxNCY+TXyW+LowXEr7X6afl0NgGvdYaOcA7eS/e/Z+y6Ue K4gzfKk/S/38HNeNu727qv2y4XXQPi3G -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:46 2025 by rpki-client on console.sobornost.net