$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft File: wA8Frg-ptoCpG1bw0yHFGIwecSw.mft (raw, json) Hash identifier: SmLqsmVFOEuu0TjKVrtiWtjQXPQDcxMsxPkLDPN/CDM= Subject key identifier: 6B:1C:90:FA:BD:76:53:33:77:FE:C5:A4:24:AB:DF:1D:56:99:CC:B4 Authority key identifier: C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C Certificate issuer: /CN=A914F937/serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft Manifest number: 0129 Signing time: Sun 27 Apr 2025 03:31:00 +0000 Manifest this update: Sun 27 Apr 2025 03:31:00 +0000 Manifest next update: Sun 04 May 2025 03:31:00 +0000 Files and hashes: 1: wA8Frg-ptoCpG1bw0yHFGIwecSw.crl (hash: jtzXTTcwNxzy3a/b5kSlUTP8dFDVDB9i7ZRXXyg/mqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=C00F05AE0FA9B680A91B56F0D321C5188C1E712C Validity Not Before: Apr 27 03:31:00 2025 GMT Not After : May 4 03:31:00 2025 GMT Subject: CN=680da4f4-8df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:35:dd:7e:95:4f:6d:e2:d7:98:de:9e:59: 9f:9b:3e:07:8c:8e:71:b3:e6:ea:97:a5:9a:08:b4: 67:fe:28:b1:c9:e8:5a:60:9c:49:19:a2:4e:c4:57: 8f:2c:af:c4:11:bb:d5:83:54:1c:22:48:45:05:08: 5a:19:88:6d:f5:7e:3b:2e:bb:20:a7:0c:42:44:78: 2b:f0:41:84:31:9e:86:ed:47:23:d4:3f:31:84:06: 96:e7:fa:45:5f:57:29:63:33:d9:85:1f:95:56:6a: 2a:8a:33:d6:eb:de:b6:8e:82:f8:d0:0c:96:69:ee: 44:82:1c:cd:e0:2a:ea:cf:e9:b9:08:f7:9f:b1:03: f4:a3:ea:be:8b:47:59:91:d5:cb:f9:56:be:e8:69: e1:ef:5d:72:15:ac:7b:37:75:44:7b:e3:47:6d:38: 82:97:c8:c7:56:bb:9c:6e:3d:3e:f5:70:51:d9:25: 18:20:11:8e:09:f2:d1:74:4d:d6:e7:d2:f0:f0:bb: d2:a7:5b:78:1e:79:3d:6c:f4:8d:48:f1:34:94:2f: 6e:3b:87:75:88:dd:b1:59:ca:7f:5b:45:d1:e8:71: 14:fe:93:11:d8:0f:34:bc:b6:1b:92:4a:12:eb:db: 64:44:b7:1c:a3:6c:11:5e:3c:bb:28:d3:7f:ec:8d: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:90:FA:BD:76:53:33:77:FE:C5:A4:24:AB:DF:1D:56:99:CC:B4 X509v3 Authority Key Identifier: keyid:C0:0F:05:AE:0F:A9:B6:80:A9:1B:56:F0:D3:21:C5:18:8C:1E:71:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wA8Frg-ptoCpG1bw0yHFGIwecSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/2F2B3F205B2311EEB8773F70C4F9AE02/wA8Frg-ptoCpG1bw0yHFGIwecSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:2b:08:f7:60:1f:72:94:bb:9a:e9:02:51:71:52:c6:c7:52: 6c:65:ae:24:e9:26:90:5d:24:63:50:25:60:17:d7:92:b6:58: 37:dc:d3:3f:3c:28:16:34:f5:93:73:fa:ac:23:59:1c:c7:ac: 00:75:db:77:58:1a:33:ef:5e:a9:ca:a8:cf:ad:7d:da:d8:85: cb:f0:5b:b1:c4:04:10:5b:98:8a:5b:9d:e2:29:6c:3c:b6:8f: bf:ba:98:47:6f:3e:5b:72:ce:80:ff:18:6f:da:07:62:f0:96: 7c:9e:72:b7:d5:2d:47:3f:96:6d:56:bc:73:29:15:55:64:73: 61:c9:ba:4b:a0:26:37:20:2e:ee:ba:f5:38:16:a9:fb:34:5b: 14:7a:35:8a:ee:fe:12:f0:0d:ae:b3:f4:85:f2:20:c4:d9:d1: 59:63:90:70:2b:ae:de:93:cb:7d:df:f6:51:fd:a1:34:83:cc: 77:c1:bf:41:91:89:e4:3d:f1:a7:14:43:e2:d8:ab:4b:32:6f: 99:7b:45:13:13:3d:a0:9c:84:a9:ad:c2:e9:c4:7c:72:60:8b: d2:eb:72:8d:72:72:5f:8c:dd:fd:2c:d6:97:e5:95:10:1a:66: ed:3c:1b:66:42:f5:b6:8b:04:55:c3:c3:4e:d3:7a:54:78:1f: fb:c4:c2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKEMwMEYwNUFFMEZBOUI2ODBBOTFCNTZGMEQzMjFDNTE4 OEMxRTcxMkMwHhcNMjUwNDI3MDMzMTAwWhcNMjUwNTA0MDMzMTAwWjAYMRYwFAYD VQQDEw02ODBkYTRmNC04ZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1Q13X6VT23i15jenlmfmz4HjI5xs+bql6WaCLRn/iixyehaYJxJGaJOxFeP LK/EEbvVg1QcIkhFBQhaGYht9X47LrsgpwxCRHgr8EGEMZ6G7Ucj1D8xhAaW5/pF X1cpYzPZhR+VVmoqijPW6962joL40AyWae5EghzN4Crqz+m5CPefsQP0o+q+i0dZ kdXL+Va+6Gnh711yFax7N3VEe+NHbTiCl8jHVrucbj0+9XBR2SUYIBGOCfLRdE3W 59Lw8LvSp1t4Hnk9bPSNSPE0lC9uO4d1iN2xWcp/W0XR6HEU/pMR2A80vLYbkkoS 69tkRLcco2wRXjy7KNN/7I1KGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsckPq9 dlMzd/7FpCSr3x1Wmcy0MB8GA1UdIwQYMBaAFMAPBa4PqbaAqRtW8NMhxRiMHnEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yRjJCM0YyMDVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRvQ3BHMWJ3MHlIRkdJd2Vj U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dBOEZyZy1wdG9DcEcxYncweUhGR0l3ZWNTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yRjJCM0YyMDVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi93QThGcmctcHRv Q3BHMWJ3MHlIRkdJd2VjU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuKwj3YB9ylLua6QJRcVLGx1JsZa4k6SaQXSRjUCVgF9eStlg33NM/ PCgWNPWTc/qsI1kcx6wAddt3WBoz716pyqjPrX3a2IXL8FuxxAQQW5iKW53iKWw8 to+/uphHbz5bcs6A/xhv2gdi8JZ8nnK31S1HP5ZtVrxzKRVVZHNhybpLoCY3IC7u uvU4Fqn7NFsUejWK7v4S8A2us/SF8iDE2dFZY5BwK67ek8t93/ZR/aE0g8x3wb9B kYnkPfGnFEPi2KtLMm+Ze0UTEz2gnISprcLpxHxyYIvS63KNcnJfjN39LNaX5ZUQ GmbtPBtmQvW2iwRVw8NO03pUeB/7xMLJ -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:44 2025 by rpki-client on console.sobornost.net