$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json) Hash identifier: br7Qgp6JC3HfAHinEPyTRc6RPsQpR10dqu9VjrrNBAw= Subject key identifier: 96:92:15:FE:D8:CC:F5:7D:25:52:FE:C8:62:AC:F4:04:A7:F9:43:AE Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Certificate serial: 0691 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft Manifest number: 0680 Signing time: Sat 26 Apr 2025 21:58:01 +0000 Manifest this update: Sat 26 Apr 2025 21:58:01 +0000 Manifest next update: Sat 03 May 2025 21:58:01 +0000 Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: OIMB/ETT2ta2/FvyDpCIdIgaswXI+K6O6NhRiSC8yqQ=) 2: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: nbo+aRpaKhKrr9ll2EHatjWC4IcNme0KBXjobYgnQ18=) 3: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: K06objCZTkF4R2m4Es3RoZwatUsJt3KTozD/Y+CKlGA=) 4: C5058712A3B911EC9709462AC4F9AE02.roa (hash: dk7hZcw60oBzYDsH/VfIiPOBe+wfd9KvvAO7IK7LLKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1681 (0x691) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Validity Not Before: Apr 26 21:58:01 2025 GMT Not After : May 3 21:58:01 2025 GMT Subject: CN=680d56e9-bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:d8:fd:5a:e6:79:04:a1:7d:1d:5d:17:5c: 93:a9:ae:6e:9d:5e:02:45:49:b7:e1:ea:25:4c:6d: cc:a2:b7:f3:ff:f3:57:cb:04:df:df:c6:df:62:89: e0:18:bd:dd:ae:16:51:ed:64:32:c9:2f:17:2e:f0: b3:55:79:42:9b:f4:4f:68:cc:b7:d5:e8:a0:7e:d8: c0:80:b7:94:d5:08:55:e5:f8:4d:12:0f:df:c3:df: a3:00:6e:80:71:77:fd:0d:ae:cf:43:b6:8f:d9:25: 79:66:70:e9:4d:eb:10:d4:e5:8f:1d:aa:80:77:76: 0b:34:fd:4a:e1:04:a4:ca:b4:f8:3a:0a:ff:82:bb: 76:38:44:36:e9:cd:4b:16:40:56:64:12:9e:d2:09: 87:27:99:ed:aa:68:47:68:67:c3:6e:1c:e9:50:cf: ce:7f:38:de:8b:66:e3:d0:eb:80:e7:c4:af:59:5f: fe:4c:b9:b3:fe:ab:98:4a:20:f9:ee:d6:09:0d:f7: 5a:db:e8:41:88:5b:a6:13:2b:58:fa:5c:54:ad:df: ca:b8:33:57:80:e9:43:4a:7f:c0:4c:1e:9b:da:72: 1f:c1:12:27:a1:2b:d7:5c:4a:af:b0:50:51:38:b1: 3e:00:bb:88:14:22:6b:f3:8e:f8:48:2e:eb:76:bc: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:92:15:FE:D8:CC:F5:7D:25:52:FE:C8:62:AC:F4:04:A7:F9:43:AE X509v3 Authority Key Identifier: keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8c:2f:13:c0:01:7d:f3:15:b7:15:82:a0:58:0e:c9:3a:8c: b8:3d:2d:63:f7:a1:b0:a2:7b:a5:ed:d3:e7:6e:a9:88:69:cd: 05:48:08:70:d3:69:d6:ee:a7:90:1e:a0:3a:51:c4:a0:95:06: 8d:4d:c9:d2:1d:ac:2d:92:76:01:b3:c3:1a:12:25:ca:63:46: 69:a1:9d:03:d1:8e:03:cc:ba:8c:4d:9e:cc:52:90:38:3b:e4: 60:74:d4:fe:28:6c:82:82:bc:f7:cf:d9:9b:f0:a8:86:fa:95: 89:1c:dc:3d:74:31:a6:34:84:4a:9f:77:9d:32:66:66:4f:e6: 83:61:27:27:40:19:b5:e8:fd:28:6c:75:bb:bb:06:5f:c4:d3: e4:11:11:c4:9b:60:ee:85:e7:d8:ba:ab:cb:9e:59:60:7a:da: 6a:31:56:4d:3d:3a:41:6d:5c:c0:82:f8:2f:60:9d:95:d4:84: 34:16:33:25:d6:93:90:a0:1d:4c:bb:79:cf:a3:b1:43:ab:e9: 20:52:5b:c3:c4:0f:10:cd:ba:70:d9:1e:84:40:d6:46:40:f6: 3e:c5:38:f2:78:96:65:63:18:d6:67:5d:20:71:a3:de:a0:4a: 64:1e:56:7f:11:71:19:d9:08:64:34:11:6f:fa:68:b7:ff:a2: 09:2b:fe:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG QzdCNjlBMUIwHhcNMjUwNDI2MjE1ODAxWhcNMjUwNTAzMjE1ODAxWjAYMRYwFAYD VQQDEw02ODBkNTZlOS1iZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQnY/VrmeQShfR1dF1yTqa5unV4CRUm34eolTG3Morfz//NXywTf38bfYong GL3drhZR7WQyyS8XLvCzVXlCm/RPaMy31eigftjAgLeU1QhV5fhNEg/fw9+jAG6A cXf9Da7PQ7aP2SV5ZnDpTesQ1OWPHaqAd3YLNP1K4QSkyrT4Ogr/grt2OEQ26c1L FkBWZBKe0gmHJ5ntqmhHaGfDbhzpUM/Ofzjei2bj0OuA58SvWV/+TLmz/quYSiD5 7tYJDfda2+hBiFumEytY+lxUrd/KuDNXgOlDSn/ATB6b2nIfwRInoSvXXEqvsFBR OLE+ALuIFCJr8474SC7rdrwtIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaSFf7Y zPV9JVL+yGKs9ASn+UOuMB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzI2MC9ENzhEMkFBMjcxQTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2 bkl6dGlxeG5EXzc4ZTJtaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAjC8TwAF98xW3FYKgWA7JOoy4PS1j96Gwonul7dPnbqmIac0FSAhw 02nW7qeQHqA6UcSglQaNTcnSHawtknYBs8MaEiXKY0ZpoZ0D0Y4DzLqMTZ7MUpA4 O+RgdNT+KGyCgrz3z9mb8KiG+pWJHNw9dDGmNIRKn3edMmZmT+aDYScnQBm16P0o bHW7uwZfxNPkERHEm2DuhefYuqvLnllgetpqMVZNPTpBbVzAgvgvYJ2V1IQ0FjMl 1pOQoB1Mu3nPo7FDq+kgUlvDxA8Qzbpw2R6EQNZGQPY+xTjyeJZlYxjWZ10gcaPe oEpkHlZ/EXEZ2QhkNBFv+mi3/6IJK/43 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:17 2025 by rpki-client on console.sobornost.net