$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft File: wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft (raw, json) Hash identifier: TBE30kTUU3W3OKck/NCZ0PzHkhsmeBUdom3QMe7UfnY= Subject key identifier: 08:ED:F4:C0:8A:DD:E7:96:9F:1E:59:16:85:C7:FF:2C:AF:A6:1A:19 Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Certificate serial: 177D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft Manifest number: 1748 Signing time: Mon 28 Apr 2025 16:49:01 +0000 Manifest this update: Mon 28 Apr 2025 16:49:00 +0000 Manifest next update: Mon 05 May 2025 16:49:00 +0000 Files and hashes: 1: wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl (hash: WCjv2EjC8dY1ZffHMKK6hHe1QMtNyuelVMo5dX26fMQ=) 2: 507A39A632B011EE89DFF774C4F9AE02.roa (hash: TYrZ+B6VIzKW11uXjXFH3B1vYwvh9CEWEvcjwdCYyoM=) 3: 51635E7E32B011EE89DFF774C4F9AE02.roa (hash: PrshPG5oG7Q/ksTfEH95reK4a0iC1d8YmqXN8qzwXXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 16:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6013 (0x177d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91478E2, serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2 Validity Not Before: Apr 28 16:49:00 2025 GMT Not After : May 5 16:49:00 2025 GMT Subject: CN=680fb17d-cc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:21:24:ad:25:be:ee:0a:4b:d8:a7:36:bf: 2e:77:97:f0:3d:9d:12:92:68:2e:1f:24:78:5b:ed: 79:45:ce:a9:5a:9a:6e:e8:de:51:a4:96:75:aa:77: 11:93:18:ad:15:cf:d7:f9:1c:ed:6b:a9:6c:25:95: 98:df:2d:25:b2:2f:1c:c2:0b:aa:50:b9:f9:92:06: e4:33:94:0d:8e:eb:aa:1b:1e:bc:06:0d:43:a4:80: 95:ab:dd:59:48:6f:2a:c0:2a:5b:68:90:36:14:58: d9:60:ca:8f:aa:6f:11:bd:91:7c:88:2b:7f:22:96: 26:b7:e4:af:62:76:1a:84:3a:1b:61:47:df:8d:70: 7e:a8:3b:e9:96:7e:28:98:c2:a7:80:b4:43:5d:0b: 9f:10:ad:4b:9e:cb:9b:04:71:2c:b7:e8:be:4d:a6: e0:0d:b7:8b:5c:01:c4:a2:8a:66:d7:0a:16:6e:7c: f6:99:45:29:7f:2f:fe:4b:56:19:3d:91:50:df:f2: 07:4b:9a:d6:02:9c:bf:52:c4:e5:f6:b0:9a:19:d1: a7:a0:24:8f:50:b7:7f:b2:d7:21:4a:bd:27:8d:fb: 38:a1:7a:5c:06:ea:52:0f:ba:db:09:68:d5:54:b5: e3:40:4f:90:3c:05:4b:51:41:8f:01:51:b4:8c:94: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:F4:C0:8A:DD:E7:96:9F:1E:59:16:85:C7:FF:2C:AF:A6:1A:19 X509v3 Authority Key Identifier: keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b1:5a:fc:6e:0f:73:6f:52:84:d6:b8:ec:7b:55:4c:74:8b: 7d:34:83:07:3c:9e:c3:0b:ab:2c:c5:61:aa:32:8a:67:dc:20: cd:19:29:91:71:c6:b1:e2:00:2b:da:e6:42:fb:82:17:b6:77: cb:b2:2e:45:3e:fb:c6:d4:5f:4f:15:ed:04:df:64:bc:1c:dd: 36:78:19:f3:f9:ea:a7:24:04:89:66:a4:46:bb:2a:33:99:af: 0f:86:f5:0b:bf:de:1b:a3:fe:f5:e7:09:0b:81:76:3a:db:ce: 5f:01:8c:9a:4f:2e:4d:c7:54:b1:67:37:3a:bc:a1:24:b5:d0: 65:e1:35:39:06:0a:94:7e:89:af:e2:7d:a3:62:b4:dc:6b:78: 87:54:56:e9:59:89:4b:e6:64:a2:8b:c1:4a:f9:fd:20:a8:b3: 3b:12:2d:97:dd:be:ea:cb:2e:58:20:b7:7d:1e:a5:03:9f:14: b0:ae:c8:e5:2d:39:fb:fd:63:e7:d0:fb:3e:2c:99:b4:5e:c7: 33:1b:7e:54:b9:10:df:b6:55:66:cb:2b:02:04:93:c0:15:d4: b6:0b:07:65:9b:79:95:db:33:57:93:d5:82:6a:a2:de:79:2c: f5:54:57:4f:78:49:75:01:07:0e:4a:80:df:89:bf:f3:0c:26: 0b:cf:70:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4RTIxMTAvBgNVBAUTKEMxNDg1M0Q5QkQzRjc4RjY0ODBDNjMzNTIwNzY5NDNC Qzc5QjlGQzIwHhcNMjUwNDI4MTY0OTAwWhcNMjUwNTA1MTY0OTAwWjAYMRYwFAYD VQQDEw02ODBmYjE3ZC1jYzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzachJK0lvu4KS9inNr8ud5fwPZ0SkmguHyR4W+15Rc6pWppu6N5RpJZ1qncR kxitFc/X+Rzta6lsJZWY3y0lsi8cwguqULn5kgbkM5QNjuuqGx68Bg1DpICVq91Z SG8qwCpbaJA2FFjZYMqPqm8RvZF8iCt/IpYmt+SvYnYahDobYUffjXB+qDvpln4o mMKngLRDXQufEK1LnsubBHEst+i+TabgDbeLXAHEoopm1woWbnz2mUUpfy/+S1YZ PZFQ3/IHS5rWApy/UsTl9rCaGdGnoCSPULd/stchSr0njfs4oXpcBupSD7rbCWjV VLXjQE+QPAVLUUGPAVG0jJSd9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjt9MCK 3eeWnx5ZFoXH/yyvphoZMB8GA1UdIwQYMBaAFMFIU9m9P3j2SAxjNSB2lDvHm5/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzhFMi80QzkwOEEyMkUw QjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQWklER00xSUhhVU84ZWJu OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dVaFQyYjBfZVBaSURHTTFJSGFVTzhlYm44SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzhFMi80QzkwOEEyMkUwQjYxMUU3QjJEMEZEODBDNEY5QUUwMi93VWhUMmIwX2VQ WklER00xSUhhVU84ZWJuOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGsVr8bg9zb1KE1rjse1VMdIt9NIMHPJ7DC6ssxWGqMopn3CDNGSmR ccax4gAr2uZC+4IXtnfLsi5FPvvG1F9PFe0E32S8HN02eBnz+eqnJASJZqRGuyoz ma8PhvULv94bo/715wkLgXY6285fAYyaTy5Nx1SxZzc6vKEktdBl4TU5BgqUfomv 4n2jYrTca3iHVFbpWYlL5mSii8FK+f0gqLM7Ei2X3b7qyy5YILd9HqUDnxSwrsjl LTn7/WPn0Ps+LJm0XsczG35UuRDftlVmyysCBJPAFdS2Cwdlm3mV2zNXk9WCaqLe eSz1VFdPeEl1AQcOSoDfib/zDCYLz3BE -----END CERTIFICATE-----Generated at Mon Apr 28 20:10:32 2025 by rpki-client on console.sobornost.net