$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: orFlc5t8hnRuo+hWHf3w+GFbpOd+1Crs9WIT8WqQ2d8= Subject key identifier: A6:76:5E:AE:25:C2:B9:E4:EA:CF:B2:36:3E:2E:E3:B1:DB:76:8E:56 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 091E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 0900 Signing time: Sat 26 Apr 2025 20:06:36 +0000 Manifest this update: Sat 26 Apr 2025 20:06:36 +0000 Manifest next update: Sat 03 May 2025 20:06:36 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: W0ijA6VqTA9RJPiqdK5zpXhdZi0UurkakrwuzwkenkE=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: gOCw5zLl7y7h+UWFzAOSwX3oI4JmJwwAJxjqn+jEKuo=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: NQ+08YGOdEaF/ITWmOcqyCWrC35sSFn/SumNIjZOhls=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: mVbCZmxbw75/wJuw2lQw2e9EqjrrEqzYVc8QSZMYsH8=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: c5z4KkXkym8vqTv49IzGrRHtzbiepV0IBMzX8Mue6BQ=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: ya3/+CFVUd26DRczFvF0+d7fGBWWa9IkA5jh/NTOjQU=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: qBySD0Ql5ISyNIpBRQOOsUE/7hyokJQg1egqkA93Wgs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2334 (0x91e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Apr 26 20:06:36 2025 GMT Not After : May 3 20:06:36 2025 GMT Subject: CN=680d3ccc-9cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:83:8d:6a:89:e1:8c:ee:a5:62:29:08:84: 4d:08:f7:84:2e:74:a7:65:25:f6:d6:33:c5:ab:63: e7:23:5d:c7:f9:c0:5d:24:18:09:67:59:a0:b5:04: c8:03:73:42:0f:15:7a:a3:20:d8:37:ed:99:85:78: d3:6e:63:f7:bb:c0:7e:2d:01:e3:2b:b7:14:c3:d2: 99:7c:1e:bd:80:65:1e:21:05:5e:8b:e6:86:28:87: f4:8f:14:42:39:02:66:fd:f8:22:67:55:7c:d2:0c: 87:e6:c8:f6:d8:56:5d:e3:65:75:f1:e2:34:05:f4: 4c:6f:8f:bf:27:cd:14:29:af:5d:6c:f8:16:b1:31: 38:7c:98:34:14:80:61:1e:b1:32:f9:17:79:a1:f6: 36:d5:58:ec:bd:02:80:e5:56:1a:ff:d4:ae:e9:9c: 6a:a2:8b:0f:47:52:eb:0c:48:cd:08:a8:a0:78:29: 23:2e:bc:41:29:57:c3:95:b2:22:fa:6d:e8:d2:6e: d9:3d:b1:39:d2:e0:94:80:38:35:bd:fb:e3:e7:0e: 16:01:46:1d:f3:3e:a4:c4:d9:31:13:22:9b:8f:b1: 72:51:10:dc:80:75:32:2e:8f:b0:74:9f:3e:8e:aa: 22:76:90:b9:cc:f3:0a:2c:40:dc:09:45:bf:c4:71: bf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:76:5E:AE:25:C2:B9:E4:EA:CF:B2:36:3E:2E:E3:B1:DB:76:8E:56 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:8a:5c:01:60:aa:a0:ce:ad:d0:cd:0f:39:aa:ae:f1:98:d8: 58:de:70:fd:1c:a2:0d:4a:0f:8c:61:74:6e:e2:3e:bb:d7:6b: 1f:75:57:cc:19:cd:27:27:db:fb:e8:9d:a8:05:06:40:44:95: 04:ab:2b:1e:e3:db:7c:13:3e:4e:c7:f2:ee:d8:f2:dc:5b:a3: c9:84:86:84:97:5d:5a:ae:43:b5:a0:de:85:e4:dc:ed:c0:09: 30:0b:71:ab:dc:fb:4a:13:e0:4a:d7:72:a6:d4:59:9e:16:10: 03:3e:01:4e:28:31:51:35:0d:b0:d1:dc:8b:8e:da:d9:cb:d6: 7e:fb:93:35:5f:8d:40:e8:ed:fe:a9:a4:78:14:0e:a1:76:b1: 53:b3:0e:a0:31:bb:d6:9c:5c:22:9e:a1:bf:54:a7:1c:bd:fe: a7:ea:aa:42:d6:2e:97:8f:a8:c8:ac:05:bb:71:cb:ec:c6:7d: d2:63:a3:94:d1:df:31:7d:eb:54:c7:ae:8b:ed:5b:0a:b9:05: d9:97:c1:fe:4e:55:4d:26:f1:58:ff:07:f8:e4:1f:93:6f:d7: 7e:d5:28:eb:c0:4c:ac:cb:87:67:40:b0:a6:56:7c:4b:2f:54: 34:34:bb:0d:38:56:78:5c:f8:c5:09:3a:20:cc:5c:42:b4:08: c1:88:b0:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwNDI2MjAwNjM2WhcNMjUwNTAzMjAwNjM2WjAYMRYwFAYD VQQDEw02ODBkM2NjYy05Y2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+qDjWqJ4YzupWIpCIRNCPeELnSnZSX21jPFq2PnI13H+cBdJBgJZ1mgtQTI A3NCDxV6oyDYN+2ZhXjTbmP3u8B+LQHjK7cUw9KZfB69gGUeIQVei+aGKIf0jxRC OQJm/fgiZ1V80gyH5sj22FZd42V18eI0BfRMb4+/J80UKa9dbPgWsTE4fJg0FIBh HrEy+Rd5ofY21VjsvQKA5VYa/9Su6ZxqoosPR1LrDEjNCKigeCkjLrxBKVfDlbIi +m3o0m7ZPbE50uCUgDg1vfvj5w4WAUYd8z6kxNkxEyKbj7FyURDcgHUyLo+wdJ8+ jqoidpC5zPMKLEDcCUW/xHG//QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ2Xq4l wrnk6s+yNj4u47Hbdo5WMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUilwBYKqgzq3QzQ85qq7xmNhY3nD9HKINSg+MYXRu4j6712sfdVfM Gc0nJ9v76J2oBQZARJUEqyse49t8Ez5Ox/Lu2PLcW6PJhIaEl11arkO1oN6F5Nzt wAkwC3Gr3PtKE+BK13Km1FmeFhADPgFOKDFRNQ2w0dyLjtrZy9Z++5M1X41A6O3+ qaR4FA6hdrFTsw6gMbvWnFwinqG/VKccvf6n6qpC1i6Xj6jIrAW7ccvsxn3SY6OU 0d8xfetUx66L7VsKuQXZl8H+TlVNJvFY/wf45B+Tb9d+1SjrwEysy4dnQLCmVnxL L1Q0NLsNOFZ4XPjFCTogzFxCtAjBiLCv -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:14 2025 by rpki-client on console.sobornost.net