$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: sAx/EoH6r+thei2p5vZiAwA5bIYzeUz9mtUvizRhY1I= Subject key identifier: B1:F2:3C:2D:43:ED:54:97:8B:EC:7E:6E:3C:B5:6B:54:AB:F6:73:9A Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 0192 Signing time: Sun 27 Apr 2025 02:39:15 +0000 Manifest this update: Sun 27 Apr 2025 02:39:14 +0000 Manifest next update: Sun 04 May 2025 02:39:14 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: fY17h8eim7nWAHtToquBWSyxhujNXs5VjuOrnQsPteI=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=) 3: AD88248C1FBE11EE97342E64C4F9AE02.roa (hash: GPafla64VUamN9CnaYJ2F+XELitJmP/fVhbH40kAovU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Apr 27 02:39:14 2025 GMT Not After : May 4 02:39:14 2025 GMT Subject: CN=680d98d2-c51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cd:ab:bd:34:fb:54:2f:89:16:62:65:78:4b: 61:e2:17:a9:97:dc:4c:96:2d:42:ad:e3:e8:e3:f1: c4:a5:86:0c:2d:84:2b:ee:03:58:d3:17:16:16:b6: 98:74:31:0e:bc:37:74:b9:d6:f8:47:80:96:b6:15: 36:7d:d2:d0:59:d1:aa:df:f5:f7:cc:8f:0c:9a:6b: 7e:7b:0f:4d:74:1c:15:cb:c6:9e:41:88:d6:07:e3: 71:50:09:60:1d:92:24:88:d1:29:2f:c0:96:ea:e4: 71:95:6a:87:38:fa:4f:a6:61:64:43:81:0c:46:60: 72:cb:59:47:ae:80:51:c4:a9:b6:ab:7e:bf:ff:fb: 60:56:13:6e:d7:3c:63:37:79:6c:6e:14:ca:b7:23: cd:7d:8a:b8:0d:46:ef:90:63:b4:29:bb:70:36:24: e2:a2:11:18:63:c6:d4:40:98:76:9d:18:28:3e:b6: 31:bd:9c:1c:59:9f:c4:71:83:d4:6f:35:1d:01:b1: ac:58:a9:20:fb:89:23:21:8d:f5:5e:6c:da:1f:f5: ea:16:fb:97:29:2c:2e:b3:ce:5c:e5:12:15:d1:32: e0:b3:a0:88:26:02:9f:97:80:24:a3:a3:e9:5a:8b: 8f:76:04:9f:f2:03:28:06:04:3a:74:31:1c:b7:00: 74:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:3C:2D:43:ED:54:97:8B:EC:7E:6E:3C:B5:6B:54:AB:F6:73:9A X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ad:11:8d:c1:9d:31:8e:6f:76:83:ba:6f:6e:6a:51:c1:e9: 32:c7:02:7f:86:4c:2a:2a:52:25:b3:c4:ac:07:d6:29:ac:50: 01:4f:db:6c:29:6c:b0:7c:71:f1:04:91:56:67:84:ae:44:1c: 8c:28:c1:41:9c:70:e0:55:f7:a8:25:b6:f7:26:c5:5b:29:92: ee:db:81:b0:b8:27:f4:f0:2e:7d:4b:8c:a6:c2:92:5d:2b:04: b0:35:ec:f9:d9:2e:86:a3:88:d9:a3:23:87:af:92:95:35:e0: d6:c8:e3:35:47:68:63:25:2b:dc:1e:cb:d8:9e:43:31:42:2f: 37:f2:1c:99:ab:82:0d:88:31:64:8c:b6:d1:fe:d1:c8:a3:eb: 52:2a:61:cc:d9:1a:57:f7:17:7a:89:f5:c2:78:02:35:8c:2d: 61:38:6c:4c:83:0b:39:03:69:38:2f:bf:ae:8e:e5:96:73:f1: c2:b8:29:89:6c:87:b3:82:22:3e:e2:9d:92:eb:7a:af:03:fe: 02:c5:64:a3:47:a7:6d:82:52:70:76:cc:4f:c5:73:f7:5a:25: 2a:25:71:71:d3:34:56:1b:f1:2e:93:83:e0:c4:db:4c:c9:56: ea:44:a3:7f:d8:4d:10:4d:bf:cb:53:a3:2b:18:20:ad:7a:3d: 38:dd:46:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjUwNDI3MDIzOTE0WhcNMjUwNTA0MDIzOTE0WjAYMRYwFAYD VQQDEw02ODBkOThkMi1jNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM2rvTT7VC+JFmJleEth4hepl9xMli1CrePo4/HEpYYMLYQr7gNY0xcWFraY dDEOvDd0udb4R4CWthU2fdLQWdGq3/X3zI8Mmmt+ew9NdBwVy8aeQYjWB+NxUAlg HZIkiNEpL8CW6uRxlWqHOPpPpmFkQ4EMRmByy1lHroBRxKm2q36///tgVhNu1zxj N3lsbhTKtyPNfYq4DUbvkGO0KbtwNiTiohEYY8bUQJh2nRgoPrYxvZwcWZ/EcYPU bzUdAbGsWKkg+4kjIY31XmzaH/XqFvuXKSwus85c5RIV0TLgs6CIJgKfl4Ako6Pp WouPdgSf8gMoBgQ6dDEctwB0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHyPC1D 7VSXi+x+bjy1a1Sr9nOaMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkrRGNwZ0xjm92g7pvbmpRwekyxwJ/hkwqKlIls8SsB9YprFABT9ts KWywfHHxBJFWZ4SuRByMKMFBnHDgVfeoJbb3JsVbKZLu24GwuCf08C59S4ymwpJd KwSwNez52S6Go4jZoyOHr5KVNeDWyOM1R2hjJSvcHsvYnkMxQi838hyZq4INiDFk jLbR/tHIo+tSKmHM2RpX9xd6ifXCeAI1jC1hOGxMgws5A2k4L7+ujuWWc/HCuCmJ bIezgiI+4p2S63qvA/4CxWSjR6dtglJwdsxPxXP3WiUqJXFx0zRWG/Euk4PgxNtM yVbqRKN/2E0QTb/LU6MrGCCtej043UZ1 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:07 2025 by rpki-client on console.sobornost.net