$ rpki-client -vvf rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft File: WBMy9dPriCpcJS_f2YC2Cho3jkE.mft (raw, json) Hash identifier: E8m2oEpmzM2EgMr7sfia6PG5X3BE4ss8uDIml/Xwuf0= Subject key identifier: AC:52:E9:E0:0E:12:2C:85:ED:CE:3C:38:50:A7:E1:C6:4D:5F:11:7A Authority key identifier: 58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 Certificate issuer: /CN=A913D65B/serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft Manifest number: 01B8 Signing time: Sun 27 Apr 2025 02:20:09 +0000 Manifest this update: Sun 27 Apr 2025 02:20:08 +0000 Manifest next update: Sun 04 May 2025 02:20:08 +0000 Files and hashes: 1: WBMy9dPriCpcJS_f2YC2Cho3jkE.crl (hash: EEKY7baQi2ABb894p5YSkdvpnkQAxKuGMU9U8bn3jwY=) 2: A3D8BD72E04511EF8BD5FA0EC4F9AE02.roa (hash: NtempH4sH10J4xA32EJi0/pMUNSLL5Y5TyDjBhb9q5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D65B, serialNumber=581332F5D3EB882A5C252FDFD980B60A1A378E41 Validity Not Before: Apr 27 02:20:08 2025 GMT Not After : May 4 02:20:08 2025 GMT Subject: CN=680d9458-974c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:20:59:f5:28:90:19:dd:78:e7:9a:17:4f: 47:b2:e6:8d:a6:93:bc:6d:dd:3b:da:4f:44:ae:92: 36:9f:c7:ed:5a:d8:87:e4:38:11:84:9d:b8:b3:a7: 7a:1a:d3:54:05:20:f1:33:f1:4a:45:72:d8:4a:1d: 31:00:c7:23:2f:46:41:10:95:e3:a4:f3:e6:bc:9f: 2a:c7:7c:df:35:42:7e:41:fe:d1:fc:ee:f2:7b:d8: ce:39:b6:3e:9a:7f:0a:d5:09:93:c0:49:c0:d3:8a: 58:bc:b6:cb:9a:60:39:10:a7:cf:35:2b:42:af:a6: 94:4d:7d:cf:bc:d2:54:3c:76:6f:34:37:13:07:b6: b4:40:7b:68:9a:ad:e2:f6:ad:39:82:d9:62:82:1d: 30:fc:8d:ab:93:5b:ee:11:d7:82:1a:79:9e:e4:3a: 58:b2:f9:b6:8e:cc:1b:56:f6:06:20:10:d3:6d:99: b2:8b:42:98:2b:1e:82:e0:8d:27:ea:db:f5:d5:79: ff:9a:12:a3:18:66:44:dc:75:cc:23:2d:e0:a3:76: 48:df:08:09:f1:1d:03:49:55:cc:e7:52:ca:57:5c: 51:bb:3f:ce:a8:51:d0:31:74:0e:26:3c:55:3f:4e: ee:d1:51:af:ed:58:c5:9c:f3:e8:12:eb:37:d1:92: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:52:E9:E0:0E:12:2C:85:ED:CE:3C:38:50:A7:E1:C6:4D:5F:11:7A X509v3 Authority Key Identifier: keyid:58:13:32:F5:D3:EB:88:2A:5C:25:2F:DF:D9:80:B6:0A:1A:37:8E:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WBMy9dPriCpcJS_f2YC2Cho3jkE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D65B/CF4CF13AA5E611ED8743A12FC4F9AE02/WBMy9dPriCpcJS_f2YC2Cho3jkE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8a:9f:7d:81:f1:71:18:4a:e5:9a:ee:e8:81:9c:03:e4:78: ab:22:0e:b3:15:09:2d:0b:77:6b:3b:47:3a:94:53:39:7d:72: 9a:0d:c8:3b:94:44:87:ea:95:56:0f:c8:98:d1:4c:2a:65:07: 7a:c8:38:25:ef:6a:68:b8:99:f3:bb:e8:40:1f:0a:00:9c:ce: 95:29:db:ef:b0:33:46:30:d1:4a:9c:b7:f9:10:ae:7e:b4:50: b1:13:9d:4d:50:ed:e3:25:ca:fa:a6:d2:bb:bf:b6:92:d4:a8: 89:1c:55:78:52:1c:c3:7a:75:15:b5:12:d4:7f:d3:b4:38:25: 1d:50:c9:7c:02:b7:f5:44:97:40:13:db:ca:34:fe:ae:1b:13: 51:8e:a9:d9:7e:51:62:ad:c6:13:04:32:aa:32:da:7e:18:e1: dd:43:d0:bb:8d:60:b1:0c:f8:16:b1:3b:c7:e2:39:b6:58:94: a1:27:de:96:62:dd:26:6b:a3:78:8a:7e:37:4a:2a:6f:4e:e3: 03:33:70:f9:f8:93:46:b6:34:fa:ff:c7:59:f4:3f:90:b7:d9: a8:46:2a:a6:ac:87:5a:f2:c7:63:99:fc:12:27:37:82:dd:ec: 48:e9:bf:1f:a2:20:d7:28:36:05:dc:95:72:47:8c:df:c7:eb: 77:b8:f2:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q2NUIxMTAvBgNVBAUTKDU4MTMzMkY1RDNFQjg4MkE1QzI1MkZERkQ5ODBCNjBB MUEzNzhFNDEwHhcNMjUwNDI3MDIyMDA4WhcNMjUwNTA0MDIyMDA4WjAYMRYwFAYD VQQDEw02ODBkOTQ1OC05NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sEgWfUokBndeOeaF09HsuaNppO8bd072k9ErpI2n8ftWtiH5DgRhJ24s6d6 GtNUBSDxM/FKRXLYSh0xAMcjL0ZBEJXjpPPmvJ8qx3zfNUJ+Qf7R/O7ye9jOObY+ mn8K1QmTwEnA04pYvLbLmmA5EKfPNStCr6aUTX3PvNJUPHZvNDcTB7a0QHtomq3i 9q05gtligh0w/I2rk1vuEdeCGnme5DpYsvm2jswbVvYGIBDTbZmyi0KYKx6C4I0n 6tv11Xn/mhKjGGZE3HXMIy3go3ZI3wgJ8R0DSVXM51LKV1xRuz/OqFHQMXQOJjxV P07u0VGv7VjFnPPoEus30ZI6RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxS6eAO EiyF7c48OFCn4cZNXxF6MB8GA1UdIwQYMBaAFFgTMvXT64gqXCUv39mAtgoaN45B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDY1Qi9DRjRDRjEzQUE1 RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlDcGNKU19mMllDMkNobzNq a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dCTXk5ZFByaUNwY0pTX2YyWUMyQ2hvM2prRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDY1Qi9DRjRDRjEzQUE1RTYxMUVEODc0M0ExMkZDNEY5QUUwMi9XQk15OWRQcmlD cGNKU19mMllDMkNobzNqa0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9ip99gfFxGErlmu7ogZwD5HirIg6zFQktC3drO0c6lFM5fXKaDcg7 lESH6pVWD8iY0UwqZQd6yDgl72pouJnzu+hAHwoAnM6VKdvvsDNGMNFKnLf5EK5+ tFCxE51NUO3jJcr6ptK7v7aS1KiJHFV4UhzDenUVtRLUf9O0OCUdUMl8Arf1RJdA E9vKNP6uGxNRjqnZflFircYTBDKqMtp+GOHdQ9C7jWCxDPgWsTvH4jm2WJShJ96W Yt0ma6N4in43SipvTuMDM3D5+JNGtjT6/8dZ9D+Qt9moRiqmrIda8sdjmfwSJzeC 3exI6b8foiDXKDYF3JVyR4zfx+t3uPLG -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:34 2025 by rpki-client on console.sobornost.net