$ rpki-client -vvf rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft File: v1WlsAYqTmo9yHnjyfyyZnxokrc.mft (raw, json) Hash identifier: U5YgUWkQ/JvqMzzTrNOFtQmaOkr0sx8oUNm2o9XkTiE= Subject key identifier: 9E:EB:8D:2E:5F:19:76:C1:ED:15:8C:7C:89:C1:9F:12:A3:58:83:95 Authority key identifier: BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 Certificate issuer: /CN=A914E08F/serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Certificate serial: 12F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft Manifest number: 12E5 Signing time: Sat 26 Apr 2025 16:59:56 +0000 Manifest this update: Sat 26 Apr 2025 16:59:56 +0000 Manifest next update: Sat 03 May 2025 16:59:56 +0000 Files and hashes: 1: v1WlsAYqTmo9yHnjyfyyZnxokrc.crl (hash: zKVG2TfPasYtqTQ5Hh6SV0OKTZRmlCqTiCxhQuahFM8=) 2: 7F424CC0350711E9955C524EC4F9AE02.roa (hash: mWJcvoB56xtTVL8jsG+OSQ9sF5v7r1+9ESUNzFxge8k=) 3: 47C453F638A411E9AA7CEB37C4F9AE02.roa (hash: 9g+f1SJF42ygeVyvheaF7ZLxnRH6Cv+HITF3QrrONoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 16:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4856 (0x12f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E08F, serialNumber=BF55A5B0062A4E6A3DC879E3C9FCB2667C6892B7 Validity Not Before: Apr 26 16:59:56 2025 GMT Not After : May 3 16:59:56 2025 GMT Subject: CN=680d110c-f701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:59:d2:ae:01:49:1f:fa:0e:df:2a:69:5b: fd:b6:fe:30:9f:fa:99:98:87:9d:5e:b6:53:01:c3: ad:79:7e:b3:e9:cd:21:66:35:aa:c4:13:9d:06:0a: 0f:71:7f:a5:a3:0c:35:0c:53:c6:66:98:ae:5d:54: b3:08:ea:ed:9a:6c:e9:9c:b9:85:a1:30:3e:64:05: 85:34:a7:0d:1b:2e:fc:c2:d7:c7:e1:20:1d:59:f6: 46:59:ea:d8:f0:62:36:41:ce:b1:12:4d:2d:ec:0a: fd:d6:e2:22:51:2a:61:0e:0f:fb:03:8b:de:70:0e: 69:09:6a:46:9e:f3:76:01:d7:38:fb:1a:26:9b:d0: 5d:44:d5:14:28:eb:23:a5:b4:26:7e:09:84:82:bc: 14:5e:e5:c7:73:d8:f5:9e:3d:91:79:cc:54:67:ef: f3:a8:34:9a:ee:69:52:5c:e2:4b:5a:82:82:f0:12: f1:cf:ce:3b:37:1c:cb:3b:9b:87:7c:76:6e:f9:6f: d3:a9:02:ca:06:fa:54:95:d0:22:0e:34:a7:ac:40: 85:e0:1f:0c:6c:c4:ae:88:60:36:51:d7:8d:19:e4: 2c:26:9e:27:1f:bb:40:c5:ef:d7:14:7b:30:da:47: 90:aa:74:7c:fe:2a:38:60:71:fd:8a:ac:73:e8:f5: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EB:8D:2E:5F:19:76:C1:ED:15:8C:7C:89:C1:9F:12:A3:58:83:95 X509v3 Authority Key Identifier: keyid:BF:55:A5:B0:06:2A:4E:6A:3D:C8:79:E3:C9:FC:B2:66:7C:68:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1WlsAYqTmo9yHnjyfyyZnxokrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E08F/A8F20308B5B911E88AD9A20DC4F9AE02/v1WlsAYqTmo9yHnjyfyyZnxokrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:07:a7:8f:a1:ba:af:25:5c:63:c7:87:37:23:c0:74:85:69: 21:a3:72:e1:01:ce:83:1a:c2:75:2b:e6:e4:15:e4:26:26:e8: ba:1b:b5:dc:a1:95:26:1d:35:d8:b8:8f:20:3b:98:60:42:10: 2c:2a:e7:93:9f:ad:0f:57:b2:76:3c:8b:e0:60:06:92:20:12: 34:58:d3:cd:ab:76:2e:28:4b:c1:b6:8f:71:f2:3a:bd:de:5b: c5:57:5a:de:36:6e:c4:e1:e0:ba:4c:b8:a6:af:b5:4e:cc:06: 9a:58:ed:e6:f6:25:e7:8a:1a:03:2d:c8:06:7f:42:48:b8:68: df:64:6d:60:b6:47:20:21:96:a6:8a:c8:8d:14:30:2c:d7:de: 7a:37:d5:cf:3f:b7:c9:8b:36:4d:c5:40:54:47:9c:7e:6e:e2: 62:10:2d:08:f4:6f:31:e5:03:ab:16:78:22:ad:26:43:fd:34: 26:79:3f:d5:65:c1:51:ee:0b:0b:34:a4:01:67:4a:5c:46:6f: 9e:41:10:ee:f5:22:bb:69:8d:51:50:cf:05:6c:5e:5a:3a:8d: b2:e2:21:39:27:f5:12:f1:2e:5d:cb:75:23:e2:80:6b:e9:a2: ce:04:fc:e1:da:30:2d:f0:44:1d:95:9f:08:5a:7d:9d:c4:2f: db:84:d4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwOEYxMTAvBgNVBAUTKEJGNTVBNUIwMDYyQTRFNkEzREM4NzlFM0M5RkNCMjY2 N0M2ODkyQjcwHhcNMjUwNDI2MTY1OTU2WhcNMjUwNTAzMTY1OTU2WjAYMRYwFAYD VQQDEw02ODBkMTEwYy1mNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmitZ0q4BSR/6Dt8qaVv9tv4wn/qZmIedXrZTAcOteX6z6c0hZjWqxBOdBgoP cX+loww1DFPGZpiuXVSzCOrtmmzpnLmFoTA+ZAWFNKcNGy78wtfH4SAdWfZGWerY 8GI2Qc6xEk0t7Ar91uIiUSphDg/7A4vecA5pCWpGnvN2Adc4+xomm9BdRNUUKOsj pbQmfgmEgrwUXuXHc9j1nj2RecxUZ+/zqDSa7mlSXOJLWoKC8BLxz847NxzLO5uH fHZu+W/TqQLKBvpUldAiDjSnrECF4B8MbMSuiGA2UdeNGeQsJp4nH7tAxe/XFHsw 2keQqnR8/io4YHH9iqxz6PUUlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7rjS5f GXbB7RWMfInBnxKjWIOVMB8GA1UdIwQYMBaAFL9VpbAGKk5qPch548n8smZ8aJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTA4Ri9BOEYyMDMwOEI1 QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRtbzl5SG5qeWZ5eVpueG9r cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxV2xzQVlxVG1vOXlIbmp5Znl5Wm54b2tyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTA4Ri9BOEYyMDMwOEI1QjkxMUU4OEFEOUEyMERDNEY5QUUwMi92MVdsc0FZcVRt bzl5SG5qeWZ5eVpueG9rcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANB6ePobqvJVxjx4c3I8B0hWkho3LhAc6DGsJ1K+bkFeQmJui6G7Xc oZUmHTXYuI8gO5hgQhAsKueTn60PV7J2PIvgYAaSIBI0WNPNq3YuKEvBto9x8jq9 3lvFV1reNm7E4eC6TLimr7VOzAaaWO3m9iXnihoDLcgGf0JIuGjfZG1gtkcgIZam isiNFDAs1956N9XPP7fJizZNxUBUR5x+buJiEC0I9G8x5QOrFngirSZD/TQmeT/V ZcFR7gsLNKQBZ0pcRm+eQRDu9SK7aY1RUM8FbF5aOo2y4iE5J/US8S5dy3Uj4oBr 6aLOBPzh2jAt8EQdlZ8IWn2dxC/bhNSU -----END CERTIFICATE-----Generated at Sat Apr 26 21:01:52 2025 by rpki-client on console.sobornost.net