$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: W8EObufEe4+gFWi0cdgQm6VHB9QCKM6iayr27FJrXDU= Subject key identifier: D1:9E:1D:CA:80:E4:70:73:53:0E:4D:27:8A:12:48:4F:AA:F9:22:5A Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 09A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 098C Signing time: Mon 28 Apr 2025 20:33:10 +0000 Manifest this update: Mon 28 Apr 2025 20:33:09 +0000 Manifest next update: Mon 05 May 2025 20:33:09 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: g+433i2UzKJK7Nnc3zadhnjo4MOzP73cZNT4c6H0HjI=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 20:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2468 (0x9a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Apr 28 20:33:09 2025 GMT Not After : May 5 20:33:09 2025 GMT Subject: CN=680fe605-d1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:5a:2a:c1:fb:01:9a:25:c7:36:77:d5:42: 5b:04:74:43:e4:41:6d:11:cf:26:10:02:89:ed:a2: 8d:8e:c2:4f:a0:79:3a:51:e6:fd:95:22:c2:bd:fe: cb:33:5a:58:51:4e:a9:57:28:65:3a:50:9d:cf:92: 5e:70:6f:9e:0f:ba:a5:0b:bf:5d:34:44:25:91:28: e3:f1:5e:20:a3:fd:67:a3:a3:6d:fe:7d:9a:38:86: 81:b1:66:e0:c1:9b:08:0a:32:b8:53:30:9e:12:f9: 97:c4:9e:04:3a:36:e5:32:9d:c2:50:26:e6:c9:50: 3b:77:99:66:9a:61:7b:aa:b2:95:c3:a6:53:54:8f: 8c:f0:aa:2a:61:50:66:c0:0a:05:f6:70:be:34:a0: 55:50:27:bc:10:d7:3c:fd:22:7f:14:14:d5:15:6f: 75:bc:41:1e:62:eb:5c:10:d2:c1:ab:cf:6c:83:2d: 00:e4:cf:48:5e:1c:9d:6c:ce:bb:84:94:76:89:30: 6a:db:e0:9e:71:b2:98:ed:4a:4e:03:13:c2:03:5c: e5:c6:da:ff:29:58:41:67:d7:a4:9c:63:74:86:98: 99:29:b2:79:55:71:94:23:b0:d2:c7:8b:bc:70:4f: 16:ba:73:f7:11:56:5a:00:1a:3f:cf:ea:89:00:d4: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9E:1D:CA:80:E4:70:73:53:0E:4D:27:8A:12:48:4F:AA:F9:22:5A X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6f:59:39:3c:f0:55:50:9f:e9:ad:29:90:63:28:00:a2:5b: 27:01:4c:ba:6b:bf:5e:c0:08:68:84:65:61:05:e1:08:e0:71: 9c:e7:3a:c9:f4:2b:0d:d8:2d:d7:b4:59:f2:91:22:4b:ef:98: 2b:1d:fd:03:a4:2a:49:60:e5:f7:8a:18:f8:d2:9a:f2:59:60: 2b:be:9e:0d:fd:54:cf:0c:a3:98:18:6d:e3:c7:af:7b:97:f5: 8f:9d:05:66:71:67:88:9b:20:8c:df:a1:d8:87:f9:91:68:bc: 45:58:ac:b1:0c:13:d2:e6:6b:c7:5b:41:7c:ef:22:35:c3:73: 64:81:3a:79:14:ca:4f:9f:28:19:b7:0b:bb:5a:dd:93:f8:2e: 76:a8:f0:20:3c:09:60:4e:e4:3b:d9:7d:71:77:f2:41:43:36: 51:35:b6:b8:86:63:24:23:52:05:38:16:23:02:ed:aa:14:35: 80:6c:cf:b2:67:ae:05:61:e8:30:c7:59:ba:f1:85:7f:9d:c7: 18:f6:e2:8e:dd:4a:df:f6:57:49:79:86:f4:19:84:25:ab:1f: ea:58:88:c4:41:60:00:ad:7c:96:e7:d3:55:47:0a:1d:e0:29: 40:8c:f7:41:16:38:a1:49:d4:7d:e6:3d:22:1c:28:80:dc:32: b8:a2:b6:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUwNDI4MjAzMzA5WhcNMjUwNTA1MjAzMzA5WjAYMRYwFAYD VQQDEw02ODBmZTYwNS1kMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jFaKsH7AZolxzZ31UJbBHRD5EFtEc8mEAKJ7aKNjsJPoHk6Ueb9lSLCvf7L M1pYUU6pVyhlOlCdz5JecG+eD7qlC79dNEQlkSjj8V4go/1no6Nt/n2aOIaBsWbg wZsICjK4UzCeEvmXxJ4EOjblMp3CUCbmyVA7d5lmmmF7qrKVw6ZTVI+M8KoqYVBm wAoF9nC+NKBVUCe8ENc8/SJ/FBTVFW91vEEeYutcENLBq89sgy0A5M9IXhydbM67 hJR2iTBq2+CecbKY7UpOAxPCA1zlxtr/KVhBZ9eknGN0hpiZKbJ5VXGUI7DSx4u8 cE8WunP3EVZaABo/z+qJANSoXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGeHcqA 5HBzUw5NJ4oSSE+q+SJaMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKb1k5PPBVUJ/prSmQYygAolsnAUy6a79ewAhohGVhBeEI4HGc5zrJ 9CsN2C3XtFnykSJL75grHf0DpCpJYOX3ihj40pryWWArvp4N/VTPDKOYGG3jx697 l/WPnQVmcWeImyCM36HYh/mRaLxFWKyxDBPS5mvHW0F87yI1w3NkgTp5FMpPnygZ twu7Wt2T+C52qPAgPAlgTuQ72X1xd/JBQzZRNba4hmMkI1IFOBYjAu2qFDWAbM+y Z64FYegwx1m68YV/nccY9uKO3Urf9ldJeYb0GYQlqx/qWIjEQWAArXyW59NVRwod 4ClAjPdBFjihSdR95j0iHCiA3DK4orZ3 -----END CERTIFICATE-----Generated at Mon Apr 28 23:05:47 2025 by rpki-client on console.sobornost.net