$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: 5JE201lusb95ir+HSI3JVRXLDg+I2DA0T2iqb2uZxKg= Subject key identifier: 12:8F:03:42:71:F3:B1:74:50:78:9E:87:DA:87:28:E9:2E:58:2E:62 Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 1364 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 133B Signing time: Mon 28 Apr 2025 15:04:25 +0000 Manifest this update: Mon 28 Apr 2025 15:04:25 +0000 Manifest next update: Mon 05 May 2025 15:04:25 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: JbtWBnWz8Su6ASPaElszZ9JM1eccLy0zS4K8yoVJ88w=) 2: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 3: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 4: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 5: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 6: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 7: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) 8: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4964 (0x1364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: Apr 28 15:04:25 2025 GMT Not After : May 5 15:04:25 2025 GMT Subject: CN=680f98f9-c864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:d3:76:c5:91:dd:97:f0:44:f7:17:d2:b7: 0a:5d:0a:8a:32:23:96:c2:48:b3:50:42:19:39:9c: e6:4b:f1:8c:ee:0e:4e:ee:92:d3:ed:52:02:88:7b: af:fc:6d:0e:f2:e3:bb:c1:1e:94:3f:b3:a9:7c:f1: 9c:ab:8f:05:2c:fd:b1:74:6a:d8:2b:59:78:62:73: 63:11:84:4a:63:8b:eb:6e:7a:8a:d6:0c:16:37:a2: 1d:2a:6c:09:d6:d5:77:49:10:41:8f:16:d9:c0:f7: c9:df:ce:e4:cb:92:f0:a2:83:a1:ff:ce:8b:15:30: 4f:7c:0e:ca:7b:5b:a6:f0:9b:e2:bd:59:93:96:25: 4a:71:66:80:35:2a:24:9e:87:3a:f1:76:de:56:fb: 8f:05:a2:7c:2c:71:c8:d7:47:16:53:f5:97:cf:de: 4e:56:a6:39:b9:a2:88:b0:02:4e:b6:65:9c:95:1d: d8:19:4d:84:29:46:45:62:29:c7:8e:5b:7b:60:a9: ad:27:38:c1:5c:cc:e4:a9:57:7f:1a:74:1a:b4:fa: 7f:76:14:76:e7:64:85:26:bb:43:3f:dc:07:a4:60: b8:e2:56:4a:2f:33:f0:8c:6d:e0:16:2c:48:01:dc: fd:88:fd:12:9f:80:49:a9:f5:0a:55:98:e8:14:9b: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8F:03:42:71:F3:B1:74:50:78:9E:87:DA:87:28:E9:2E:58:2E:62 X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:18:a3:90:2a:46:2d:37:b5:ee:5e:68:1d:d2:40:01:43:86: cd:95:6f:2b:d3:09:77:8a:05:41:a2:47:94:ad:d8:7c:e0:33: 87:60:00:63:15:f5:6c:01:93:0b:bd:8e:3d:d1:ab:f0:54:e3: 93:1a:95:f5:3c:f0:16:ee:51:b9:d4:41:01:89:a6:1d:7b:36: fb:6d:44:87:b5:5e:55:19:9c:bc:60:0d:e3:5f:20:47:6b:e3: 6f:37:77:15:34:21:33:d3:77:4a:cf:cb:eb:86:c9:9d:a0:e8: be:8a:99:a3:dd:f8:7e:54:bd:ce:50:3f:d0:f3:68:5c:05:50: b6:11:61:36:52:0a:5a:fa:af:24:dc:31:2c:00:c5:d9:b4:4f: 16:4a:52:d9:0e:c9:f4:92:30:15:fa:76:70:97:9c:33:bb:d5: fd:2d:c0:b5:f6:3d:9f:77:b4:7c:96:1f:07:59:cf:b9:ed:8b: 28:ad:66:bf:98:5e:c5:53:f6:e7:a1:7b:99:8f:77:62:5f:fc: ff:cc:fa:00:75:6f:e4:71:20:f5:85:a9:fb:3b:e1:af:43:d0: 82:3c:6a:26:03:30:24:d4:27:d6:8a:25:98:47:8b:70:5a:f0: 4b:e8:a3:7c:94:d6:58:e2:a3:b7:39:f8:f9:6c:2c:20:5a:d0: 56:a6:65:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUwNDI4MTUwNDI1WhcNMjUwNTA1MTUwNDI1WjAYMRYwFAYD VQQDEw02ODBmOThmOS1jODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwd3TdsWR3ZfwRPcX0rcKXQqKMiOWwkizUEIZOZzmS/GM7g5O7pLT7VICiHuv /G0O8uO7wR6UP7OpfPGcq48FLP2xdGrYK1l4YnNjEYRKY4vrbnqK1gwWN6IdKmwJ 1tV3SRBBjxbZwPfJ387ky5LwooOh/86LFTBPfA7Ke1um8JvivVmTliVKcWaANSok noc68XbeVvuPBaJ8LHHI10cWU/WXz95OVqY5uaKIsAJOtmWclR3YGU2EKUZFYinH jlt7YKmtJzjBXMzkqVd/GnQatPp/dhR252SFJrtDP9wHpGC44lZKLzPwjG3gFixI Adz9iP0Sn4BJqfUKVZjoFJvIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKPA0Jx 87F0UHieh9qHKOkuWC5iMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLGKOQKkYtN7XuXmgd0kABQ4bNlW8r0wl3igVBokeUrdh84DOHYABj FfVsAZMLvY490avwVOOTGpX1PPAW7lG51EEBiaYdezb7bUSHtV5VGZy8YA3jXyBH a+NvN3cVNCEz03dKz8vrhsmdoOi+ipmj3fh+VL3OUD/Q82hcBVC2EWE2Ugpa+q8k 3DEsAMXZtE8WSlLZDsn0kjAV+nZwl5wzu9X9LcC19j2fd7R8lh8HWc+57YsorWa/ mF7FU/bnoXuZj3diX/z/zPoAdW/kcSD1han7O+GvQ9CCPGomAzAk1CfWiiWYR4tw WvBL6KN8lNZY4qO3Ofj5bCwgWtBWpmVJ -----END CERTIFICATE-----Generated at Mon Apr 28 17:44:50 2025 by rpki-client on console.sobornost.net