$ rpki-client -vvf rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft File: FWZDTXxsxlkckNwnSr9z3gDrBQE.mft (raw, json) Hash identifier: J0YtA4DRQxc5XNNwg6I12jehCdI/IVjE0lMMo+kts9s= Subject key identifier: F0:7B:DC:2C:B3:42:DD:9B:E4:13:08:95:E3:A4:5C:11:D1:F1:69:FF Authority key identifier: 15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 Certificate issuer: /CN=A912FEAB/serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft Manifest number: 0213 Signing time: Sun 27 Apr 2025 01:37:15 +0000 Manifest this update: Sun 27 Apr 2025 01:37:15 +0000 Manifest next update: Sun 04 May 2025 01:37:15 +0000 Files and hashes: 1: FWZDTXxsxlkckNwnSr9z3gDrBQE.crl (hash: +/MnbLZuujSNbWj5lb46OwHnUXvys3rTYgfD5RyiKeE=) 2: 9082B9C42F8711ED90F1090CC4F9AE02.roa (hash: ONxSWlWsPlzS3F23WNJvpVx69ftE7+2igW4xzmclKbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FEAB, serialNumber=1566434D7C6CC6591C90DC274ABF73DE00EB0501 Validity Not Before: Apr 27 01:37:15 2025 GMT Not After : May 4 01:37:15 2025 GMT Subject: CN=680d8a4b-b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:80:8d:95:9c:40:87:dd:e3:cb:f9:e2:04: f8:d7:a8:c4:cb:95:c3:63:f7:24:55:79:5e:f8:39: d3:32:42:8b:b5:ac:13:8c:53:e4:8a:49:14:2c:2f: 6b:e7:b9:bd:29:8d:98:5c:d4:8c:b8:a7:5a:12:6f: ac:31:8f:c5:66:5f:da:02:48:e3:c5:1e:c5:81:50: 85:93:2c:45:b3:11:28:a9:e6:b3:a3:07:95:f4:60: 95:d2:73:52:46:66:61:cd:ce:2d:ed:53:25:e9:dd: 14:3a:60:5a:ba:ae:36:62:62:15:84:11:6a:20:62: 94:eb:ce:8c:07:e8:e0:02:5e:38:20:1b:b3:25:92: de:01:c2:df:5b:77:c8:a2:39:61:71:1c:6a:1d:e9: be:e6:b2:be:3d:46:ca:15:81:d6:4d:a0:da:cb:49: b8:76:b0:ab:27:76:d3:70:6c:9c:ef:b5:7d:1a:fe: 8e:49:7a:e8:d0:2b:bd:c6:79:38:ba:2b:3e:69:19: 18:3f:2b:b0:fe:3f:7f:7e:ff:6a:fc:68:c3:98:31: b5:eb:87:9b:c2:46:7d:6b:63:b4:27:be:cd:be:f3: e0:d8:cf:f3:20:ce:e2:7e:87:77:82:18:ab:58:b7: 6e:99:d7:43:a6:2d:3c:0f:ec:78:00:eb:25:17:82: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7B:DC:2C:B3:42:DD:9B:E4:13:08:95:E3:A4:5C:11:D1:F1:69:FF X509v3 Authority Key Identifier: keyid:15:66:43:4D:7C:6C:C6:59:1C:90:DC:27:4A:BF:73:DE:00:EB:05:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWZDTXxsxlkckNwnSr9z3gDrBQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FEAB/FDD899EC2F8411ED98B91B0AC4F9AE02/FWZDTXxsxlkckNwnSr9z3gDrBQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:65:73:7b:30:6f:d6:2a:5c:18:38:8a:5f:48:e8:b2:07:5b: fe:42:db:9e:e7:55:0d:60:af:24:c0:7b:77:15:4b:80:e6:6b: c4:45:34:50:79:d7:76:8a:37:7c:5e:e8:45:90:db:3c:6a:f6: 71:8a:91:70:1a:e3:03:ee:d7:bb:5f:74:55:3d:07:8a:e1:2d: 3f:3e:26:67:54:fe:fe:16:a7:82:a5:7c:d0:e1:39:c8:e2:0c: 41:2a:3e:dc:7e:22:17:58:0e:64:ce:3b:2c:82:81:ea:84:75: fc:f3:71:30:1a:1a:1c:e2:ce:02:bd:e8:19:07:d8:f4:bb:61: 95:dc:87:bf:25:a7:d8:29:65:f0:a6:80:57:91:37:bd:c5:32: 56:4b:36:18:5a:7c:68:e0:d9:24:6c:52:f8:3f:e0:8f:ac:ad: a1:13:b5:c6:30:a2:04:c9:2d:d3:01:3b:2d:09:d0:0a:7d:db: bf:3a:65:e7:49:b8:fb:63:24:0c:22:cf:51:2a:01:b7:91:48: 3a:e6:f8:d0:84:f3:da:db:36:30:dc:0d:05:c6:9d:02:53:fa: 5f:72:d7:6d:90:ca:af:98:e8:b9:ff:63:e9:a8:57:47:3a:ae: b7:7f:e1:5b:0c:c8:a3:71:b6:7c:1c:28:91:41:e1:21:72:e9: df:ff:71:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZFQUIxMTAvBgNVBAUTKDE1NjY0MzREN0M2Q0M2NTkxQzkwREMyNzRBQkY3M0RF MDBFQjA1MDEwHhcNMjUwNDI3MDEzNzE1WhcNMjUwNTA0MDEzNzE1WjAYMRYwFAYD VQQDEw02ODBkOGE0Yi1iNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaCAjZWcQIfd48v54gT416jEy5XDY/ckVXle+DnTMkKLtawTjFPkikkULC9r 57m9KY2YXNSMuKdaEm+sMY/FZl/aAkjjxR7FgVCFkyxFsxEoqeazoweV9GCV0nNS RmZhzc4t7VMl6d0UOmBauq42YmIVhBFqIGKU686MB+jgAl44IBuzJZLeAcLfW3fI ojlhcRxqHem+5rK+PUbKFYHWTaDay0m4drCrJ3bTcGyc77V9Gv6OSXro0Cu9xnk4 uis+aRkYPyuw/j9/fv9q/GjDmDG164ebwkZ9a2O0J77NvvPg2M/zIM7ifod3ghir WLdumddDpi08D+x4AOslF4Lf+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB73Cyz Qt2b5BMIleOkXBHR8Wn/MB8GA1UdIwQYMBaAFBVmQ018bMZZHJDcJ0q/c94A6wUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkVBQi9GREQ4OTlFQzJG ODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hsa2NrTnduU3I5ejNnRHJC UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXWkRUWHhzeGxrY2tOd25Tcjl6M2dEckJRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkVBQi9GREQ4OTlFQzJGODQxMUVEOThCOTFCMEFDNEY5QUUwMi9GV1pEVFh4c3hs a2NrTnduU3I5ejNnRHJCUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIZXN7MG/WKlwYOIpfSOiyB1v+Qtue51UNYK8kwHt3FUuA5mvERTRQ edd2ijd8XuhFkNs8avZxipFwGuMD7te7X3RVPQeK4S0/PiZnVP7+FqeCpXzQ4TnI 4gxBKj7cfiIXWA5kzjssgoHqhHX883EwGhoc4s4CvegZB9j0u2GV3Ie/JafYKWXw poBXkTe9xTJWSzYYWnxo4NkkbFL4P+CPrK2hE7XGMKIEyS3TATstCdAKfdu/OmXn Sbj7YyQMIs9RKgG3kUg65vjQhPPa2zYw3A0Fxp0CU/pfctdtkMqvmOi5/2PpqFdH Oq63f+FbDMijcbZ8HCiRQeEhcunf/3Ga -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:26 2025 by rpki-client on console.sobornost.net