$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: S9hwow/nzE+SGpnZlyFzu5Vj8SjRxHTf7MTeGCROPF8= Subject key identifier: 6A:57:CB:B1:6B:65:61:73:6E:21:DC:63:E2:86:6C:A9:D9:8F:94:C3 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C00 Signing time: Mon 28 Apr 2025 19:02:16 +0000 Manifest this update: Mon 28 Apr 2025 19:02:15 +0000 Manifest next update: Mon 05 May 2025 19:02:15 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: FIzBsCw7ZFzs6H9kc1yOYjmxjPXVCTXFcSGt/SSDhHg=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3108 (0xc24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Apr 28 19:02:15 2025 GMT Not After : May 5 19:02:15 2025 GMT Subject: CN=680fd0b7-f018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:cd:2e:6e:0c:23:0e:e9:ba:d8:07:e6:ea: 5d:72:46:4e:fa:a9:bb:54:18:1d:37:d8:b2:be:9b: 69:13:c5:60:bc:e5:b3:ac:e2:40:20:ab:d9:01:d8: 75:67:b5:52:68:62:76:bf:7e:b0:eb:a5:10:fa:3d: c4:a7:cd:2a:7a:0a:1f:85:e0:d0:34:0c:fd:9d:d5: 36:74:9d:e9:ae:ee:38:0b:de:a2:91:02:2e:ba:92: 86:a5:a8:d7:d0:d7:17:d4:0a:a6:3b:2f:96:04:31: 70:7d:cc:89:a4:df:dd:92:1a:e5:bb:01:18:35:7f: 13:41:5c:b3:c1:f9:a2:bf:8b:61:68:e0:3e:91:58: 2c:b2:ce:4f:f8:28:d0:6f:9d:1b:3d:87:58:f5:09: 8e:bd:21:71:e1:a3:25:b7:d5:da:a6:ad:9d:1c:81: 28:c5:1f:9e:07:8d:0e:46:62:15:cd:26:5e:22:35: cb:b4:16:9b:60:f6:f4:5f:05:ab:f9:40:b0:ba:db: 86:1b:ff:98:45:54:24:ff:c4:e1:5b:be:1d:70:85: b3:17:42:cb:f8:06:7d:20:33:f4:99:b8:91:c1:70: 4d:e6:a6:64:0c:b6:c4:d5:ec:84:88:5e:3f:c1:0d: 48:c3:c3:14:75:f4:7f:85:66:ea:dd:a0:c8:6d:aa: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:57:CB:B1:6B:65:61:73:6E:21:DC:63:E2:86:6C:A9:D9:8F:94:C3 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:05:bf:41:cc:12:5a:e9:10:1c:b0:40:57:97:be:28:73:55: af:6a:bb:24:10:21:59:65:26:82:2a:d6:0b:ad:37:8e:33:2e: 6a:a6:38:2a:06:2d:ba:6b:fa:c5:63:41:21:84:39:3a:72:07: b4:2a:3b:82:c5:96:cf:35:05:fe:d2:44:04:2b:ca:cd:85:8c: b8:f9:b6:54:0d:17:d1:da:81:9b:38:8c:45:a7:cf:d5:7f:e7: 85:de:f4:7e:9b:1b:bb:2a:33:d5:a5:d6:c5:3f:16:c6:57:12: 31:0a:5b:2c:e5:3c:cf:c2:13:ce:e5:ed:06:a4:47:8f:3d:2a: 9f:a8:e3:ec:da:0d:fc:b8:c8:a6:b7:22:d4:ef:d1:39:ff:44: a5:76:8e:fc:c1:cd:39:64:46:46:bc:2f:18:79:d4:7d:12:76: f5:84:55:4b:d7:e4:fc:36:77:76:c0:a3:f3:4c:89:1a:00:8a: df:33:a5:42:75:e4:1b:51:72:7d:c3:5c:60:1b:f8:74:1d:07: 66:00:d8:ab:41:e0:3d:8d:db:eb:9d:ca:1a:01:c0:34:fb:19: ca:53:72:41:0c:e2:dc:7e:2d:ae:ca:47:7f:a1:74:f3:da:f1: 55:13:70:9e:a0:7e:c9:39:0f:fc:2c:fd:de:6a:d3:c8:11:b2: d7:4a:b2:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUwNDI4MTkwMjE1WhcNMjUwNTA1MTkwMjE1WjAYMRYwFAYD VQQDEw02ODBmZDBiNy1mMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqvNLm4MIw7putgH5updckZO+qm7VBgdN9iyvptpE8VgvOWzrOJAIKvZAdh1 Z7VSaGJ2v36w66UQ+j3Ep80qegofheDQNAz9ndU2dJ3pru44C96ikQIuupKGpajX 0NcX1AqmOy+WBDFwfcyJpN/dkhrluwEYNX8TQVyzwfmiv4thaOA+kVgsss5P+CjQ b50bPYdY9QmOvSFx4aMlt9Xapq2dHIEoxR+eB40ORmIVzSZeIjXLtBabYPb0XwWr +UCwutuGG/+YRVQk/8ThW74dcIWzF0LL+AZ9IDP0mbiRwXBN5qZkDLbE1eyEiF4/ wQ1Iw8MUdfR/hWbq3aDIbapDlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpXy7Fr ZWFzbiHcY+KGbKnZj5TDMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSBb9BzBJa6RAcsEBXl74oc1WvarskECFZZSaCKtYLrTeOMy5qpjgq Bi26a/rFY0EhhDk6cge0KjuCxZbPNQX+0kQEK8rNhYy4+bZUDRfR2oGbOIxFp8/V f+eF3vR+mxu7KjPVpdbFPxbGVxIxClss5TzPwhPO5e0GpEePPSqfqOPs2g38uMim tyLU79E5/0Sldo78wc05ZEZGvC8YedR9Enb1hFVL1+T8Nnd2wKPzTIkaAIrfM6VC deQbUXJ9w1xgG/h0HQdmANirQeA9jdvrncoaAcA0+xnKU3JBDOLcfi2uykd/oXTz 2vFVE3CeoH7JOQ/8LP3eatPIEbLXSrLY -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:15 2025 by rpki-client on console.sobornost.net