$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft File: WDy8e8lmFFeQyfbyI2iK2v5a07g.mft (raw, json) Hash identifier: UtbTcicMf2EFXEPa4hHXq+Y0IkuxsKhzDhEp3CYqidw= Subject key identifier: 55:A2:07:44:42:B7:87:3C:F1:89:10:07:8C:D9:7C:8D:3C:D4:9C:CF Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft Manifest number: 012C Signing time: Wed 23 Apr 2025 03:49:31 +0000 Manifest this update: Wed 23 Apr 2025 03:49:31 +0000 Manifest next update: Wed 30 Apr 2025 03:49:30 +0000 Files and hashes: 1: WDy8e8lmFFeQyfbyI2iK2v5a07g.crl (hash: B/J1nys47vfx/JM5Ml96gru0RpTMKazY6vkh/ntx5io=) 2: 35941A5CF49D11EFBD8ACC0EC4F9AE02.roa (hash: +NQ3vCKy/oYUGSob2QsizFARgh8URiIrafoqIAVImwU=) 3: 34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (hash: grwRSfDjkxpIsUifNfjhlA5i8BodWXehXyGY6BwSf7I=) 4: 09820DBA626411EEB46F7861C4F9AE02.roa (hash: zVFsQRkEqj63u/+I4QGpWcSHeZXQmoNT4Cfqu4+Goyw=) 5: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (hash: L40Slg3ZYSgLHLHaJtzo7K3P+FdCTKJ/Kn2CGC4kby0=) 6: 34F912AAF49D11EFBD8ACC0EC4F9AE02.roa (hash: c5vk3kr217STypuahM0vAhdq6P8h5827xgCJJ38F4Ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Apr 23 03:49:31 2025 GMT Not After : Apr 30 03:49:30 2025 GMT Subject: CN=6808634b-5e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:14:de:d8:30:2a:da:a6:89:8e:f3:5a:c9: b9:0d:74:54:8a:8e:d2:5b:b2:ca:47:9b:53:34:32: f0:40:b0:58:96:9a:1f:6e:56:26:a7:ad:14:28:63: 3f:ba:f8:4a:61:04:63:c8:c0:66:a2:ab:46:9b:bc: ab:d2:32:3f:b7:87:51:34:a4:1d:24:a4:30:62:c0: a4:e2:a7:d7:5e:5a:84:dd:b7:7e:11:fd:d8:ea:e2: 34:4e:fd:fe:94:a0:59:4b:da:f4:6e:9d:a0:9b:02: 37:d6:66:19:9c:57:61:3a:d7:f8:c4:36:c7:3a:e3: eb:31:ef:47:15:e5:98:1c:4d:77:5f:5d:e3:b1:05: a5:5a:28:2e:c9:a8:dc:69:b5:c5:43:40:41:26:97: 85:1d:db:27:ac:34:9a:0a:e9:13:ff:4e:13:bb:40: 8f:ce:10:16:d3:6e:24:62:01:72:b0:64:7b:51:60: 04:9b:76:42:a3:60:25:4c:8d:cf:c6:97:c9:7a:bb: 92:2a:85:09:2f:f5:34:b7:14:94:17:78:27:f9:76: b2:ba:4a:8b:53:88:2d:ca:54:bc:ff:de:68:36:d5: 49:c5:8a:64:7d:07:32:c7:fc:f6:79:8e:72:3d:52: 44:46:6e:ae:b7:78:93:a4:58:e7:04:2c:5c:78:15: 49:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:07:44:42:B7:87:3C:F1:89:10:07:8C:D9:7C:8D:3C:D4:9C:CF X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ed:1f:8d:50:34:c2:c9:ad:93:ef:6d:4b:3b:f4:84:17:0e: 87:2f:69:0f:5c:3c:b9:2b:79:82:ca:f8:97:cd:9f:be:93:6c: 06:f9:1e:05:d5:83:14:88:2d:e9:cd:7e:fb:c7:64:98:ff:cf: 65:1c:bf:8b:96:0e:76:7c:52:b4:11:ff:30:8c:98:59:72:f0: c6:aa:2e:b4:f2:b5:86:46:df:32:c6:b5:aa:51:2a:14:94:cc: 58:ff:bf:f8:03:c9:4a:3f:74:62:49:eb:07:77:37:df:0d:db: 02:c3:ff:dd:4a:09:76:87:b4:50:a2:37:1f:ff:4d:b6:c3:1f: 3d:71:81:0b:d6:3c:73:f9:46:71:57:36:47:5d:6e:29:08:ab: 88:b1:e0:ec:d4:b9:0a:ad:99:47:da:cc:b3:b3:97:14:3b:4f: 2c:6f:07:53:2c:ed:86:81:b3:22:85:3e:e4:28:44:45:75:e2: 5b:ec:4d:76:ec:02:56:7a:1f:79:3b:40:ec:66:d0:7f:f2:76: 6e:d5:25:d6:b1:0a:98:32:d0:44:97:0f:9f:91:f2:91:25:87: f0:39:fe:de:18:c7:f9:7d:98:41:2a:0d:0d:70:51:70:b2:4e: 56:04:77:24:7f:d0:19:42:ab:68:90:a9:7c:e5:2d:86:87:c7: 17:4d:8f:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUwNDIzMDM0OTMxWhcNMjUwNDMwMDM0OTMwWjAYMRYwFAYD VQQDEw02ODA4NjM0Yi01ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5sU3tgwKtqmiY7zWsm5DXRUio7SW7LKR5tTNDLwQLBYlpofblYmp60UKGM/ uvhKYQRjyMBmoqtGm7yr0jI/t4dRNKQdJKQwYsCk4qfXXlqE3bd+Ef3Y6uI0Tv3+ lKBZS9r0bp2gmwI31mYZnFdhOtf4xDbHOuPrMe9HFeWYHE13X13jsQWlWiguyajc abXFQ0BBJpeFHdsnrDSaCukT/04Tu0CPzhAW024kYgFysGR7UWAEm3ZCo2AlTI3P xpfJeruSKoUJL/U0txSUF3gn+XayukqLU4gtylS8/95oNtVJxYpkfQcyx/z2eY5y PVJERm6ut3iTpFjnBCxceBVJiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWiB0RC t4c88YkQB4zZfI081JzPMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZG ZVF5ZmJ5STJpSzJ2NWEwN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS7R+NUDTCya2T721LO/SEFw6HL2kPXDy5K3mCyviXzZ++k2wG+R4F 1YMUiC3pzX77x2SY/89lHL+Llg52fFK0Ef8wjJhZcvDGqi608rWGRt8yxrWqUSoU lMxY/7/4A8lKP3RiSesHdzffDdsCw//dSgl2h7RQojcf/022wx89cYEL1jxz+UZx VzZHXW4pCKuIseDs1LkKrZlH2syzs5cUO08sbwdTLO2GgbMihT7kKERFdeJb7E12 7AJWeh95O0DsZtB/8nZu1SXWsQqYMtBElw+fkfKRJYfwOf7eGMf5fZhBKg0NcFFw sk5WBHckf9AZQqtokKl85S2Gh8cXTY/H -----END CERTIFICATE-----Generated at Wed Apr 23 06:36:01 2025 by rpki-client on console.sobornost.net