$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft File: W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft (raw, json) Hash identifier: opXLqThNoxTMUne697CM79hmBD9BA45eOfl65JpAgls= Subject key identifier: 37:82:83:C4:CF:9B:16:98:76:65:CE:58:17:E0:B6:76:FB:A3:6A:D6 Authority key identifier: 5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F Certificate issuer: /CN=A9171882/serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft Manifest number: C8 Signing time: Sun 27 Apr 2025 04:37:55 +0000 Manifest this update: Sun 27 Apr 2025 04:37:55 +0000 Manifest next update: Sun 04 May 2025 04:37:55 +0000 Files and hashes: 1: W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl (hash: 2b+5alm0HBqrmfnn5aV0/+m2E0Jc/QIAF2TwegYAJCk=) 2: FD990E7AF0B311EE9923BC84C4F9AE02.roa (hash: XWibtqlVyPdPRt9izLBx3ZYroA9isT1xxkvokh85YPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=5BC494E89D0A4155B5525363D1235C5EDC0FDE2F Validity Not Before: Apr 27 04:37:55 2025 GMT Not After : May 4 04:37:55 2025 GMT Subject: CN=680db4a3-3da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:1e:70:f9:c8:21:ce:a9:62:a4:50:e4:40: 24:87:03:f9:c8:1c:89:b2:11:27:6a:94:d9:bc:0d: 06:58:10:91:3b:46:84:0a:28:14:a2:b1:18:c7:59: ff:21:61:d4:74:6f:d6:c4:b0:cf:ab:4c:f0:1b:ba: 7a:43:51:da:f9:7f:6e:f4:6a:cc:28:93:ad:bc:94: aa:4e:a8:f3:6e:68:93:36:4f:a3:e0:a1:c6:b7:22: de:5e:73:0b:af:ee:ce:ea:94:9d:43:88:92:7f:eb: 92:b3:ab:f6:7e:56:46:9f:37:d2:6f:49:bb:25:91: 7c:9f:7c:b3:93:b6:de:35:6d:75:36:09:08:a8:e7: 78:b4:96:6c:f8:33:b9:10:1b:d9:99:55:4e:0b:e0: 7d:0a:5c:9f:8d:10:58:6d:80:0b:2b:4a:ef:29:d1: aa:b6:bc:2b:00:82:a7:21:f5:48:f5:ef:18:1b:e1: 11:21:a8:8b:e6:da:56:50:d7:08:56:b4:fc:fd:20: 60:99:ac:a0:ba:fb:69:31:d7:36:d7:42:4f:b4:ac: 97:8b:b4:5e:94:c8:db:69:73:9f:54:14:e9:2e:b2: 1f:87:31:bc:0d:3c:fd:15:87:c7:db:b5:d2:54:97: 91:f1:11:64:86:38:24:a5:da:26:f7:ca:01:57:1c: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:83:C4:CF:9B:16:98:76:65:CE:58:17:E0:B6:76:FB:A3:6A:D6 X509v3 Authority Key Identifier: keyid:5B:C4:94:E8:9D:0A:41:55:B5:52:53:63:D1:23:5C:5E:DC:0F:DE:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W8SU6J0KQVW1UlNj0SNcXtwP3i8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/A8C251EAF0B311EEA4C72F84C4F9AE02/W8SU6J0KQVW1UlNj0SNcXtwP3i8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:72:96:c0:c3:a7:d9:30:fe:a8:b8:ab:ce:15:fd:fa:91:d8: 63:cf:fb:e7:db:05:c0:ea:64:3c:f4:02:3a:53:b0:2c:f0:30: ed:a5:10:d0:3a:15:bd:32:96:5d:54:37:5c:ca:ca:27:c7:59: fe:13:91:ea:1d:74:cc:e8:e1:1d:5b:83:0b:53:49:d2:9b:5f: 2a:db:12:09:2c:88:8a:a5:24:84:d8:da:0a:38:18:b9:ad:53: 6e:7e:46:ad:74:d1:00:c1:ba:53:89:66:16:63:89:76:ae:d1: e5:cd:f7:8e:b5:ed:44:64:31:14:af:5b:d1:ab:57:24:85:ba: ea:0f:84:b6:84:e7:55:48:7e:7e:53:66:74:29:1a:30:4c:c2: 36:5d:0a:85:50:e5:de:6f:58:dd:74:86:0b:28:60:bf:cb:18: 0b:02:53:fd:07:83:83:5f:d6:31:b7:0f:34:69:7b:60:4d:67: 95:45:31:7d:26:10:bd:d5:c5:55:f5:df:4c:95:e5:a1:48:25: 40:c8:cb:84:50:8a:d0:3f:c7:dd:f2:fb:b8:b9:d3:a2:00:dd: c5:98:0f:d8:d4:49:aa:17:c1:67:44:29:60:8f:4a:57:7f:64: fa:f3:0f:b7:59:da:66:34:0d:71:68:af:e4:b4:1f:2c:1b:b8: 9b:7c:bb:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDVCQzQ5NEU4OUQwQTQxNTVCNTUyNTM2M0QxMjM1QzVF REMwRkRFMkYwHhcNMjUwNDI3MDQzNzU1WhcNMjUwNTA0MDQzNzU1WjAYMRYwFAYD VQQDEw02ODBkYjRhMy0zZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZsecPnIIc6pYqRQ5EAkhwP5yByJshEnapTZvA0GWBCRO0aECigUorEYx1n/ IWHUdG/WxLDPq0zwG7p6Q1Ha+X9u9GrMKJOtvJSqTqjzbmiTNk+j4KHGtyLeXnML r+7O6pSdQ4iSf+uSs6v2flZGnzfSb0m7JZF8n3yzk7beNW11NgkIqOd4tJZs+DO5 EBvZmVVOC+B9ClyfjRBYbYALK0rvKdGqtrwrAIKnIfVI9e8YG+ERIaiL5tpWUNcI VrT8/SBgmayguvtpMdc210JPtKyXi7RelMjbaXOfVBTpLrIfhzG8DTz9FYfH27XS VJeR8RFkhjgkpdom98oBVxzcfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeCg8TP mxaYdmXOWBfgtnb7o2rWMB8GA1UdIwQYMBaAFFvElOidCkFVtVJTY9EjXF7cD94v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9BOEMyNTFFQUYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FWVzFVbE5qMFNOY1h0d1Az aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1c4U1U2SjBLUVZXMVVsTmowU05jWHR3UDNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9BOEMyNTFFQUYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9XOFNVNkowS1FW VzFVbE5qMFNOY1h0d1AzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1cpbAw6fZMP6ouKvOFf36kdhjz/vn2wXA6mQ89AI6U7As8DDtpRDQ OhW9MpZdVDdcysonx1n+E5HqHXTM6OEdW4MLU0nSm18q2xIJLIiKpSSE2NoKOBi5 rVNufkatdNEAwbpTiWYWY4l2rtHlzfeOte1EZDEUr1vRq1ckhbrqD4S2hOdVSH5+ U2Z0KRowTMI2XQqFUOXeb1jddIYLKGC/yxgLAlP9B4ODX9Yxtw80aXtgTWeVRTF9 JhC91cVV9d9MleWhSCVAyMuEUIrQP8fd8vu4udOiAN3FmA/Y1EmqF8FnRClgj0pX f2T68w+3WdpmNA1xaK/ktB8sG7ibfLvl -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:49 2025 by rpki-client on console.sobornost.net