$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft File: wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft (raw, json) Hash identifier: Lm70HO/ACc8fCNswCRAzfcKCCL7AHs9Fv3T937/V3N0= Subject key identifier: 52:64:22:19:9C:1C:2F:B7:B3:5A:AA:5B:EA:6F:55:7C:F7:4A:E4:7F Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 Certificate issuer: /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Certificate serial: 0F28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft Manifest number: 0EAE Signing time: Thu 24 Apr 2025 17:41:54 +0000 Manifest this update: Thu 24 Apr 2025 17:41:53 +0000 Manifest next update: Thu 01 May 2025 17:41:53 +0000 Files and hashes: 1: wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl (hash: tkOd6qOQlMusixtK7AMfOrVGphPwoZkLK5e1KhidWQA=) 2: 20AB43C81F9411F083A54B70C4F9AE02.roa (hash: GRtkIj1YL0gqEVBvZmLDoilCINMA8Q7mQLGbrlN+AYw=) 3: 8BF4322E978211EF8ED65F7CC4F9AE02.roa (hash: 69vf8i2AyBWTvcreeXZcAmXyRzf/6fUCTiPRkTLNVcA=) 4: 21C5EC42C27411ED9C3E8009C4F9AE02.roa (hash: DPa2SyiYsDe0TvzZ1Z3q6+1dtL6Alr2cq0P1vHVdLaM=) 5: 369A67D4B01B11EEBD075854C4F9AE02.roa (hash: ll8uPXO7+p+L4mr0tZPETWCxlV0OBmMVm5vFHlyDwyk=) 6: 218CF3401F9411F083A54B70C4F9AE02.roa (hash: f+RwKKXcne4Q7FQMnvMgxVjrAJpS0nxTkUmEioq1Njw=) 7: 3D6D075A0ED011F0850DFC18C4F9AE02.roa (hash: B8KBNufHoIgJko/QQOXJs97tNZDlzfBWHkTjrMS1moo=) 8: E23B9C48F97D11EDB12DE418C4F9AE02.roa (hash: GQ7BlSff2SRKmCMQxyAGueYKZPB5XCwxNw5oLLxj8Xc=) 9: 1A582DBABDCB11ED998A723DC4F9AE02.roa (hash: +OviFQ85mowakK+fg84OXMpO+t1TRoDLWVpJ0HIDDFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3880 (0xf28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72 Validity Not Before: Apr 24 17:41:53 2025 GMT Not After : May 1 17:41:53 2025 GMT Subject: CN=680a77e2-1cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1b:4a:16:f1:55:5f:8a:f2:4e:0b:f5:a9:f8: 48:b4:18:a2:29:1f:d8:f4:15:5d:65:3c:55:74:c5: ea:3d:43:f9:28:ee:4c:2f:12:7b:41:c4:3b:3a:ba: 6f:8d:fe:ed:df:71:0b:ed:9f:1b:5f:8b:44:ee:1e: 76:97:f8:f4:ff:25:7c:08:22:42:20:83:de:59:ee: fd:66:99:b8:4c:20:e0:2b:dc:21:58:b2:c4:bc:71: 82:7a:f9:1a:eb:cb:d0:0e:0c:cc:03:bf:b4:1f:f4: c4:31:62:89:08:ad:1b:e6:8f:ea:26:4b:b3:c6:b9: 58:d2:8c:d8:db:f0:7f:42:aa:d2:85:46:da:d4:36: ca:ec:45:e7:75:fe:d6:f4:24:c3:09:df:95:3c:54: 64:c6:0c:45:70:f8:38:6c:b9:eb:7c:60:3d:d0:72: b0:30:0c:32:a9:e8:5e:6a:5f:2b:53:03:d8:4c:61: 7c:61:9c:83:f9:82:f8:15:a5:b7:db:24:ec:36:97: 74:a8:d3:ba:71:7b:3a:40:39:4c:c5:39:10:a8:98: 80:e4:88:4a:a0:a6:6f:4a:7c:df:8b:13:77:c6:ef: cb:68:b7:b7:df:4e:6d:f1:77:ef:ea:a2:ac:db:77: 0f:02:9d:56:d4:ef:71:fb:74:33:d3:d5:c1:07:cc: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:64:22:19:9C:1C:2F:B7:B3:5A:AA:5B:EA:6F:55:7C:F7:4A:E4:7F X509v3 Authority Key Identifier: keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b5:db:cf:88:10:25:12:5c:5d:c4:3d:50:37:44:8f:86:f5: 91:26:cb:04:88:d7:05:c7:43:8a:04:2c:9b:28:df:d6:bb:06: 12:64:d1:d9:d6:22:97:b8:aa:63:ce:8c:b1:c0:ba:ba:f0:dd: 39:c2:5f:42:3f:24:69:bf:c9:d2:58:24:48:08:56:83:81:ed: 72:1e:69:02:07:09:79:e0:10:97:a3:f3:1a:6e:52:0a:ae:77: 0b:52:0a:5c:5a:51:ec:ae:a4:3f:06:ec:76:33:fc:12:76:e9: 76:c1:f5:49:21:27:6e:21:bc:36:51:b2:f4:7f:28:65:7a:ae: 35:26:17:d9:7b:98:c7:e9:43:c2:09:e0:0c:b6:a8:56:79:f1: c3:82:8f:76:ba:c0:1a:47:31:72:48:f0:84:c3:9a:bc:9e:db: 4d:01:6a:71:55:c0:a0:0a:45:b9:99:21:c0:a3:ef:55:6f:9f: e7:0e:08:53:d0:91:3e:98:4e:ec:c9:69:b4:c4:b7:26:c4:6f: 5d:eb:93:c2:e8:77:9a:77:12:01:e2:ce:2e:6c:36:d3:2c:a9: 1e:4a:1f:a9:31:0f:d8:07:75:ea:fa:58:ee:0d:ad:f4:3d:37: a9:d9:4b:7b:da:06:4b:72:f2:47:18:ae:44:a8:99:12:7c:d9: f4:37:a2:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC NTI3NzZGNzIwHhcNMjUwNDI0MTc0MTUzWhcNMjUwNTAxMTc0MTUzWjAYMRYwFAYD VQQDEw02ODBhNzdlMi0xY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RtKFvFVX4ryTgv1qfhItBiiKR/Y9BVdZTxVdMXqPUP5KO5MLxJ7QcQ7Orpv jf7t33EL7Z8bX4tE7h52l/j0/yV8CCJCIIPeWe79Zpm4TCDgK9whWLLEvHGCevka 68vQDgzMA7+0H/TEMWKJCK0b5o/qJkuzxrlY0ozY2/B/QqrShUba1DbK7EXndf7W 9CTDCd+VPFRkxgxFcPg4bLnrfGA90HKwMAwyqeheal8rUwPYTGF8YZyD+YL4FaW3 2yTsNpd0qNO6cXs6QDlMxTkQqJiA5IhKoKZvSnzfixN3xu/LaLe3305t8Xfv6qKs 23cPAp1W1O9x+3Qz09XBB8zfcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJkIhmc HC+3s1qqW+pvVXz3SuR/MB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkJGRi9FNDJCRUFDMjkzRjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFB V2kxSVc2UVMydEsxSjNiM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPtdvPiBAlElxdxD1QN0SPhvWRJssEiNcFx0OKBCybKN/WuwYSZNHZ 1iKXuKpjzoyxwLq68N05wl9CPyRpv8nSWCRICFaDge1yHmkCBwl54BCXo/MablIK rncLUgpcWlHsrqQ/Bux2M/wSdul2wfVJISduIbw2UbL0fyhleq41JhfZe5jH6UPC CeAMtqhWefHDgo92usAaRzFySPCEw5q8nttNAWpxVcCgCkW5mSHAo+9Vb5/nDghT 0JE+mE7syWm0xLcmxG9d65PC6HeadxIB4s4ubDbTLKkeSh+pMQ/YB3Xq+ljuDa30 PTep2Ut72gZLcvJHGK5EqJkSfNn0N6LZ -----END CERTIFICATE-----Generated at Thu Apr 24 20:39:10 2025 by rpki-client on console.sobornost.net