$ rpki-client -vvf rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft File: WR4siXPGPwtQ7voTRGvLFexS5R8.mft (raw, json) Hash identifier: VCkzN4ddlEdHqarrzQ0gbKYn2HsX+rgEBsP9bbgmCns= Subject key identifier: DB:25:B7:AE:6E:39:66:47:6A:EF:06:B2:56:CD:D4:6C:CB:0C:70:39 Authority key identifier: 59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F Certificate issuer: /CN=A9159E90/serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft Manifest number: 015E Signing time: Sun 27 Apr 2025 03:05:51 +0000 Manifest this update: Sun 27 Apr 2025 03:05:51 +0000 Manifest next update: Sun 04 May 2025 03:05:51 +0000 Files and hashes: 1: WR4siXPGPwtQ7voTRGvLFexS5R8.crl (hash: H+ETIqOEtvsHRw0uDHj/kSmS5smWLxKIyYkz2P3M7gE=) 2: 7893F3DC0B8511F086B2C121C4F9AE02.roa (hash: S8YNNTIIBrTPm8ymERHQ4CPzLan04br8iQE6kJBXXTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159E90, serialNumber=591E2C8973C63F0B50EEFA13446BCB15EC52E51F Validity Not Before: Apr 27 03:05:51 2025 GMT Not After : May 4 03:05:51 2025 GMT Subject: CN=680d9f0f-e5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:87:6c:21:e7:37:b4:a7:df:f8:c2:6d:bf: 99:0f:b4:41:3d:de:df:67:82:01:7f:67:ca:e6:c1: 6e:68:a4:58:0e:10:0e:fd:19:49:43:d1:ce:6f:8b: 7b:52:02:32:fb:fc:5a:ba:bd:ff:52:49:d6:1e:88: d3:57:51:6b:3e:9b:3b:72:72:82:58:cf:99:c6:95: 0f:87:55:40:5e:d0:cb:e7:24:f1:85:f7:5d:51:ee: a3:e4:22:51:29:11:d6:f9:49:7b:64:d3:d3:f1:c4: e1:83:92:fb:97:a9:3a:ce:0b:50:32:6a:bf:68:5d: 8b:d9:e3:31:fa:25:86:1f:b8:9e:30:89:96:6f:b2: fb:9a:13:c2:27:aa:cc:3b:10:ae:f7:d4:2d:b1:06: 0e:79:a1:0b:b1:d5:45:79:84:f7:71:5c:d0:78:f8: 8a:07:dd:a2:87:01:66:fc:02:4b:35:32:86:e5:be: 64:9e:97:c7:dd:ca:d2:5b:b9:fc:9b:c1:a0:f5:7b: dc:93:2e:6f:16:8e:4e:b5:6a:91:d9:cb:1b:18:65: e8:c7:c1:f3:64:62:96:bc:f2:91:ec:16:d6:45:d1: 6d:f6:c3:c7:58:34:39:22:52:95:72:10:8d:f0:57: f2:9d:36:67:f2:50:20:d3:f4:00:11:1f:8a:d0:b1: 48:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:25:B7:AE:6E:39:66:47:6A:EF:06:B2:56:CD:D4:6C:CB:0C:70:39 X509v3 Authority Key Identifier: keyid:59:1E:2C:89:73:C6:3F:0B:50:EE:FA:13:44:6B:CB:15:EC:52:E5:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WR4siXPGPwtQ7voTRGvLFexS5R8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159E90/A572B67C1F3211EEB364DD53C4F9AE02/WR4siXPGPwtQ7voTRGvLFexS5R8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:38:d1:e7:0b:ac:74:f0:6b:9a:6b:5d:21:f4:05:ce:e3:fe: 89:fc:a3:c6:98:9b:ec:ad:2c:e1:7f:d9:8b:1a:a2:bc:d1:27: 1f:35:0b:71:eb:b8:a8:dd:e6:da:84:aa:f6:af:0d:4a:c3:37: 3a:6c:45:e7:44:91:dd:e6:b1:e3:94:3f:e7:1a:c8:ff:e3:14: d8:7a:3b:6e:66:ef:67:1a:d1:ee:47:31:f4:35:4c:8f:74:18: b6:9e:0a:b4:4b:23:e8:7d:bd:fa:3e:cd:c9:58:ba:3e:74:e2: 0a:9b:39:0c:66:5f:fc:03:6d:06:63:da:f7:6c:81:dd:21:3e: 79:a0:b2:68:f7:7d:77:cb:e1:e6:5d:d0:3c:bd:e5:94:6f:02: 0c:a2:0e:c0:5d:d1:eb:fa:11:5b:f6:5b:3b:42:2d:1b:83:74: 4d:d9:23:02:28:38:e9:a6:43:6c:fe:0b:d8:3a:a6:9b:d7:31: 8d:3e:5d:dd:e0:89:0f:28:6a:c8:d9:67:3f:40:96:ba:90:69: 2e:d5:73:bb:36:d5:05:c4:c8:f0:fb:9e:1f:73:01:51:8a:5b: 18:13:aa:47:d8:9d:c4:da:d9:3e:b9:46:10:65:34:a0:53:3d: 31:ac:1e:7a:27:ff:f8:11:71:ae:bf:4a:20:b8:93:2c:2f:f6: 46:8b:d7:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFOTAxMTAvBgNVBAUTKDU5MUUyQzg5NzNDNjNGMEI1MEVFRkExMzQ0NkJDQjE1 RUM1MkU1MUYwHhcNMjUwNDI3MDMwNTUxWhcNMjUwNTA0MDMwNTUxWjAYMRYwFAYD VQQDEw02ODBkOWYwZi1lNWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIOHbCHnN7Sn3/jCbb+ZD7RBPd7fZ4IBf2fK5sFuaKRYDhAO/RlJQ9HOb4t7 UgIy+/xaur3/UknWHojTV1FrPps7cnKCWM+ZxpUPh1VAXtDL5yTxhfddUe6j5CJR KRHW+Ul7ZNPT8cThg5L7l6k6zgtQMmq/aF2L2eMx+iWGH7ieMImWb7L7mhPCJ6rM OxCu99QtsQYOeaELsdVFeYT3cVzQePiKB92ihwFm/AJLNTKG5b5knpfH3crSW7n8 m8Gg9Xvcky5vFo5OtWqR2csbGGXox8HzZGKWvPKR7BbWRdFt9sPHWDQ5IlKVchCN 8FfynTZn8lAg0/QAER+K0LFI5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNslt65u OWZHau8GslbN1GzLDHA5MB8GA1UdIwQYMBaAFFkeLIlzxj8LUO76E0RryxXsUuUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUU5MC9BNTcyQjY3QzFG MzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3dFE3dm9UUkd2TEZleFM1 UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dSNHNpWFBHUHd0UTd2b1RSR3ZMRmV4UzVSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUU5MC9BNTcyQjY3QzFGMzIxMUVFQjM2NERENTNDNEY5QUUwMi9XUjRzaVhQR1B3 dFE3dm9UUkd2TEZleFM1UjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKONHnC6x08Guaa10h9AXO4/6J/KPGmJvsrSzhf9mLGqK80ScfNQtx 67io3ebahKr2rw1Kwzc6bEXnRJHd5rHjlD/nGsj/4xTYejtuZu9nGtHuRzH0NUyP dBi2ngq0SyPofb36Ps3JWLo+dOIKmzkMZl/8A20GY9r3bIHdIT55oLJo9313y+Hm XdA8veWUbwIMog7AXdHr+hFb9ls7Qi0bg3RN2SMCKDjppkNs/gvYOqab1zGNPl3d 4IkPKGrI2Wc/QJa6kGku1XO7NtUFxMjw+54fcwFRilsYE6pH2J3E2tk+uUYQZTSg Uz0xrB56J//4EXGuv0oguJMsL/ZGi9fS -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:49 2025 by rpki-client on console.sobornost.net