$ rpki-client -vvf rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft File: Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft (raw, json) Hash identifier: QEmQ/yBy9gUh2D/p9QKLZQWvMxs3SON+YlLVZeyL2Qc= Subject key identifier: 04:BA:12:9E:39:D9:5E:4E:A0:13:4C:4E:0A:6C:C1:25:E8:25:F4:5D Authority key identifier: 5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68 Certificate issuer: /CN=A91806C2/serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568 Certificate serial: 0326 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft Manifest number: 031E Signing time: Wed 23 Apr 2025 01:00:32 +0000 Manifest this update: Wed 23 Apr 2025 01:00:31 +0000 Manifest next update: Wed 30 Apr 2025 01:00:31 +0000 Files and hashes: 1: Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl (hash: OBBgcKKDuOKNqvS0lrlpwxNngwER4fg4sItyWMjT0wM=) 2: 1CD62088C4A211EC8FD6D313C4F9AE02.roa (hash: KamW1zC+t0AxsWxUwBVMnEzMkI75A/xxojQk/vMnrhE=) 3: 1C3679E8C4A211EC8FD6D313C4F9AE02.roa (hash: R45goBc9ltNNydJH/crrPm7jUsX2yEtOzi9r+yJorZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 806 (0x326) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91806C2, serialNumber=5B0BBC84B5CBD15C30D90142706528CF19010568 Validity Not Before: Apr 23 01:00:31 2025 GMT Not After : Apr 30 01:00:31 2025 GMT Subject: CN=68083baf-aca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:14:7a:55:34:a5:fb:1f:57:e1:92:6f:89: f6:79:9c:14:e4:24:7b:61:6e:2e:2e:ed:58:e5:60: 7b:ba:77:10:ff:5f:5a:64:5b:a4:c5:3d:b6:de:46: 84:ab:df:37:c5:c0:3f:3e:83:3d:e6:fd:63:1e:86: c1:b1:45:1c:09:df:df:9b:4b:d0:c2:13:e4:ef:38: c3:40:73:68:c7:56:6e:21:92:e4:63:c8:f9:11:19: 4b:6d:17:c4:2a:0b:e9:ca:22:53:4d:12:33:46:96: c6:5d:47:0e:7d:15:b8:d2:7e:2d:10:1c:f3:5b:a3: 73:a4:20:38:06:45:ee:15:88:4d:79:d0:07:2c:6a: b9:c2:e5:99:8f:be:29:27:32:fb:61:73:ae:78:96: b3:ee:7d:cc:7e:6c:4a:d5:74:14:5e:dd:0f:aa:59: 4f:55:ee:0a:f8:7c:d6:cb:8d:a0:25:d4:eb:05:b7: fe:16:09:f6:36:b8:eb:c8:07:0b:aa:3a:64:65:a8: 6e:7d:b2:71:21:f2:89:44:a5:4e:57:fb:35:00:64: 8f:ea:cb:3e:33:1a:ef:6f:07:1e:ed:82:09:ea:09: ff:c7:a2:a0:8c:7d:34:b5:15:e9:c4:63:af:3b:e2: e9:6d:22:a6:99:06:cd:38:4f:90:0d:cd:0a:51:45: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BA:12:9E:39:D9:5E:4E:A0:13:4C:4E:0A:6C:C1:25:E8:25:F4:5D X509v3 Authority Key Identifier: keyid:5B:0B:BC:84:B5:CB:D1:5C:30:D9:01:42:70:65:28:CF:19:01:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wwu8hLXL0Vww2QFCcGUozxkBBWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91806C2/1624D1D8C49F11EC831CAF0EC4F9AE02/Wwu8hLXL0Vww2QFCcGUozxkBBWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0e:aa:c9:45:15:bd:01:93:29:bf:c2:5b:2d:81:8a:0e:d7: 34:93:00:a1:9c:28:a3:5a:6c:3d:0b:81:a1:70:9e:5c:49:e4: 24:f1:dc:f0:a1:66:db:cb:95:44:d2:a9:62:f4:99:b6:9b:cb: 76:fc:11:da:5f:5a:ae:1e:6f:4a:66:da:56:cc:dd:87:a5:fe: 16:cb:89:10:e4:2f:75:82:34:e3:40:e0:0b:0b:c3:e2:8e:11: 8a:66:dc:d4:d1:29:57:2a:da:89:9e:92:f2:47:a5:c8:ed:d2: e3:71:4b:03:dd:e9:d2:b3:6a:91:32:68:66:c9:fc:0b:4b:b8: dc:27:fa:15:a1:ab:3e:13:7a:02:f9:88:b7:b1:06:68:f0:52: f7:2f:af:38:2f:b8:e9:cb:a3:f7:da:49:1e:83:f6:b5:2f:e3: d3:02:ba:13:fb:0e:b6:c0:2f:74:96:97:22:fc:0a:53:19:14: e1:c6:a3:86:1b:cb:be:8f:b1:05:07:6b:f7:bb:7e:92:fa:79: 76:f0:8c:5c:5a:3b:ba:e6:5c:31:12:11:8f:be:b9:d7:3a:c0: 17:c7:a4:78:fa:46:74:03:91:0e:3b:9a:1e:1d:0d:21:ae:6f: 35:84:15:52:a9:e2:c4:16:8f:7f:5e:3a:5f:5e:4c:78:2a:34: b6:50:bd:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA2QzIxMTAvBgNVBAUTKDVCMEJCQzg0QjVDQkQxNUMzMEQ5MDE0MjcwNjUyOENG MTkwMTA1NjgwHhcNMjUwNDIzMDEwMDMxWhcNMjUwNDMwMDEwMDMxWjAYMRYwFAYD VQQDEw02ODA4M2JhZi1hY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsckUelU0pfsfV+GSb4n2eZwU5CR7YW4uLu1Y5WB7uncQ/19aZFukxT223kaE q983xcA/PoM95v1jHobBsUUcCd/fm0vQwhPk7zjDQHNox1ZuIZLkY8j5ERlLbRfE KgvpyiJTTRIzRpbGXUcOfRW40n4tEBzzW6NzpCA4BkXuFYhNedAHLGq5wuWZj74p JzL7YXOueJaz7n3MfmxK1XQUXt0PqllPVe4K+HzWy42gJdTrBbf+Fgn2NrjryAcL qjpkZahufbJxIfKJRKVOV/s1AGSP6ss+Mxrvbwce7YIJ6gn/x6KgjH00tRXpxGOv O+LpbSKmmQbNOE+QDc0KUUVGJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAS6Ep45 2V5OoBNMTgpswSXoJfRdMB8GA1UdIwQYMBaAFFsLvIS1y9FcMNkBQnBlKM8ZAQVo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDZDMi8xNjI0RDFEOEM0 OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBWd3cyUUZDY0dVb3p4a0JC V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d3dThoTFhMMFZ3dzJRRkNjR1VvenhrQkJXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDZDMi8xNjI0RDFEOEM0OUYxMUVDODMxQ0FGMEVDNEY5QUUwMi9Xd3U4aExYTDBW d3cyUUZDY0dVb3p4a0JCV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEDqrJRRW9AZMpv8JbLYGKDtc0kwChnCijWmw9C4GhcJ5cSeQk8dzw oWbby5VE0qli9Jm2m8t2/BHaX1quHm9KZtpWzN2Hpf4Wy4kQ5C91gjTjQOALC8Pi jhGKZtzU0SlXKtqJnpLyR6XI7dLjcUsD3enSs2qRMmhmyfwLS7jcJ/oVoas+E3oC +Yi3sQZo8FL3L684L7jpy6P32kkeg/a1L+PTAroT+w62wC90lpci/ApTGRThxqOG G8u+j7EFB2v3u36S+nl28IxcWju65lwxEhGPvrnXOsAXx6R4+kZ0A5EOO5oeHQ0h rm81hBVSqeLEFo9/XjpfXkx4KjS2UL05 -----END CERTIFICATE-----Generated at Wed Apr 23 04:14:59 2025 by rpki-client on console.sobornost.net