$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft File: WZsF7zwJOSLemJvcc5k_RtYldUk.mft (raw, json) Hash identifier: tPUZyjxBr+OsfvAqRna7D9+5y5Dl1Gcii6PI51ndslY= Subject key identifier: 3B:AD:55:BE:07:0E:A4:B9:F3:8A:10:9B:84:C6:0B:8D:23:2E:2F:51 Authority key identifier: 59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 Certificate issuer: /CN=A91308CE/serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Certificate serial: 3471 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft Manifest number: 3471 Signing time: Thu 24 Apr 2025 14:54:11 +0000 Manifest this update: Thu 24 Apr 2025 14:54:10 +0000 Manifest next update: Thu 01 May 2025 14:54:10 +0000 Files and hashes: 1: WZsF7zwJOSLemJvcc5k_RtYldUk.crl (hash: nyZuxMjbNj1yUhWylya/4rIAx+ZHPFyoLkLBm0sn7Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13425 (0x3471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91308CE, serialNumber=599B05EF3C093922DE989BDC73993F46D6257549 Validity Not Before: Apr 24 14:54:10 2025 GMT Not After : May 1 14:54:10 2025 GMT Subject: CN=680a5092-f1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:d8:4d:aa:12:e6:23:b0:1f:bc:5a:2a:74: a2:94:07:bd:e3:41:c2:9f:89:3b:6e:a3:2c:53:ff: 97:b4:5d:b1:a7:3c:44:34:d7:22:7e:9a:b5:58:ce: 8c:40:73:59:cb:7a:c3:eb:64:de:d4:96:11:9e:c1: ce:75:62:5d:46:72:b3:5d:69:cc:19:fc:6e:c4:04: 28:3b:d7:9d:32:a3:1c:84:7b:b4:b4:b9:b9:ec:75: b3:fc:8f:a2:9e:3f:1c:20:13:07:93:dd:d8:e7:c4: e7:99:5b:26:bf:33:68:f0:cf:28:c0:4c:e2:0b:d9: 58:7c:c5:3e:2d:15:b6:38:df:aa:ea:8d:23:9a:bf: 4f:34:57:46:61:57:8d:4d:64:dd:22:9a:b0:51:d8: c2:61:74:fa:b8:94:25:c1:f1:40:91:be:45:fa:8f: e8:0b:a0:49:17:0a:b7:8f:c3:f5:2b:27:b2:3f:fb: 50:7f:8a:28:fb:b3:80:ec:53:37:5d:ac:d9:77:00: 1b:27:80:9b:e9:63:43:4f:e4:ef:1f:be:c5:03:c8: 1c:58:af:36:59:af:0f:f7:d5:b2:53:6e:a0:b5:e4: 8d:75:52:f2:7d:42:98:9e:f7:3b:8d:c0:33:b3:76: ee:4a:6f:60:08:3e:62:0d:93:fa:2d:f8:7a:72:ac: 1f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:55:BE:07:0E:A4:B9:F3:8A:10:9B:84:C6:0B:8D:23:2E:2F:51 X509v3 Authority Key Identifier: keyid:59:9B:05:EF:3C:09:39:22:DE:98:9B:DC:73:99:3F:46:D6:25:75:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WZsF7zwJOSLemJvcc5k_RtYldUk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/1860DFC61D9911E2967B9D8308B02CD2/WZsF7zwJOSLemJvcc5k_RtYldUk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c7:60:75:d5:9d:23:0c:d1:4c:be:d1:00:83:66:7c:ca:c0: 80:3a:f5:c8:dd:71:ab:23:74:04:68:6d:b8:92:58:19:68:40: ad:48:5f:8f:be:fb:95:c5:d3:00:30:39:3e:68:c7:d8:e7:73: 4b:14:89:c5:b1:0d:32:15:d8:3b:08:5c:00:1c:ba:90:5b:42: 1f:c9:ac:90:f9:58:7d:05:f6:a3:29:57:00:0e:08:25:fd:ae: 87:68:e8:50:b0:71:99:2c:1c:fa:1c:b3:e8:58:24:3c:0d:1d: 95:ea:f0:88:bb:e3:19:97:af:65:b3:35:01:a2:ef:55:5d:29: 87:57:7d:80:25:1a:17:d7:ea:21:98:40:1a:be:77:95:06:a0: 75:fc:a0:b3:8f:7d:64:cd:ac:74:f6:64:ee:fe:03:7c:c3:14: 16:63:03:9e:be:12:f5:ab:43:d6:96:ec:ad:66:0f:b7:62:a0: 91:be:9c:45:f6:36:46:71:71:3e:74:ca:e1:85:25:68:e9:0e: a6:bd:df:59:26:42:47:ad:5a:4d:b9:b4:56:22:d5:c9:06:a0: cd:62:b7:3d:b4:4e:6d:cc:0b:31:2f:be:91:d7:0c:ef:8a:91: 25:f5:51:28:d8:8c:75:14:15:35:52:dd:de:e4:f6:95:4a:29: 1a:69:73:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4Q0UxMTAvBgNVBAUTKDU5OUIwNUVGM0MwOTM5MjJERTk4OUJEQzczOTkzRjQ2 RDYyNTc1NDkwHhcNMjUwNDI0MTQ1NDEwWhcNMjUwNTAxMTQ1NDEwWjAYMRYwFAYD VQQDEw02ODBhNTA5Mi1mMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM7YTaoS5iOwH7xaKnSilAe940HCn4k7bqMsU/+XtF2xpzxENNcifpq1WM6M QHNZy3rD62Te1JYRnsHOdWJdRnKzXWnMGfxuxAQoO9edMqMchHu0tLm57HWz/I+i nj8cIBMHk93Y58TnmVsmvzNo8M8owEziC9lYfMU+LRW2ON+q6o0jmr9PNFdGYVeN TWTdIpqwUdjCYXT6uJQlwfFAkb5F+o/oC6BJFwq3j8P1KyeyP/tQf4oo+7OA7FM3 XazZdwAbJ4Cb6WNDT+TvH77FA8gcWK82Wa8P99WyU26gteSNdVLyfUKYnvc7jcAz s3buSm9gCD5iDZP6Lfh6cqwfewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDutVb4H DqS584oQm4TGC40jLi9RMB8GA1UdIwQYMBaAFFmbBe88CTki3pib3HOZP0bWJXVJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDhDRS8xODYwREZDNjFE OTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9TTGVtSnZjYzVrX1J0WWxk VWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dac0Y3endKT1NMZW1KdmNjNWtfUnRZbGRVay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDhDRS8xODYwREZDNjFEOTkxMUUyOTY3QjlEODMwOEIwMkNEMi9XWnNGN3p3Sk9T TGVtSnZjYzVrX1J0WWxkVWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvx2B11Z0jDNFMvtEAg2Z8ysCAOvXI3XGrI3QEaG24klgZaECtSF+P vvuVxdMAMDk+aMfY53NLFInFsQ0yFdg7CFwAHLqQW0IfyayQ+Vh9BfajKVcADggl /a6HaOhQsHGZLBz6HLPoWCQ8DR2V6vCIu+MZl69lszUBou9VXSmHV32AJRoX1+oh mEAavneVBqB1/KCzj31kzax09mTu/gN8wxQWYwOevhL1q0PWluytZg+3YqCRvpxF 9jZGcXE+dMrhhSVo6Q6mvd9ZJkJHrVpNubRWItXJBqDNYrc9tE5tzAsxL76R1wzv ipEl9VEo2Ix1FBU1Ut3e5PaVSikaaXMM -----END CERTIFICATE-----Generated at Thu Apr 24 18:08:02 2025 by rpki-client on console.sobornost.net