$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: Ne85p3U8TwGAv2EWnyBwgTWWiuJORFqkltRaefISjKY= Subject key identifier: F5:D2:9C:25:AC:02:15:82:E2:F8:1D:8E:B2:94:E5:E6:45:8F:82:02 Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 010A Signing time: Fri 25 Apr 2025 04:11:07 +0000 Manifest this update: Fri 25 Apr 2025 04:11:06 +0000 Manifest next update: Fri 02 May 2025 04:11:06 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: I0HZrkEAfwFc++ShOlsaFsz2AfxlscvKolmmT9hdozo=) 2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: scuWPF8fyZMdaSfCNBdTGSbSe43VNo97CkMVeZgVKFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: Apr 25 04:11:06 2025 GMT Not After : May 2 04:11:06 2025 GMT Subject: CN=680b0b5a-11c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:f2:a7:cb:5d:5d:cc:62:83:29:ab:1e:0a: ef:65:a3:a6:37:e1:8e:10:b5:34:62:ea:02:28:5b: 80:3b:1b:9b:c8:5b:10:53:50:68:5b:fa:ec:46:6b: 69:a4:4e:d0:90:f6:d7:52:8a:3d:ab:b1:14:37:9d: 13:dc:90:3d:c0:99:9e:dd:4f:96:38:0f:f5:f5:6c: 38:b9:b8:8e:39:78:3c:d2:8e:9d:01:3b:0f:d8:6a: 56:cd:c9:cb:1f:6b:c1:26:8a:10:ef:b9:2d:51:be: a9:7f:52:3c:ae:c5:96:39:ba:5e:70:84:c0:3e:ce: ae:40:f1:d8:98:b8:b5:ca:ca:1e:aa:0e:16:c1:68: b2:ec:38:8b:9f:1e:61:2a:85:1a:0b:7a:07:41:d3: 1f:6a:9f:34:a9:f0:91:fe:65:d5:13:c9:19:c5:c1: 4d:82:33:a5:b1:85:91:b3:2d:f4:d5:94:a8:0e:29: de:6c:27:b2:23:14:f5:c3:fd:56:f7:9a:80:06:9d: 8b:c2:fe:27:e3:38:9a:21:f0:bf:3f:31:79:55:55: 9b:fa:55:cd:d7:81:b4:96:aa:f9:b6:d1:d2:d7:60: d4:bf:d5:22:ed:75:e5:44:76:a1:31:99:00:b4:6d: 8f:22:0e:fc:d6:e4:7f:7c:94:a5:c9:88:d1:10:88: 74:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D2:9C:25:AC:02:15:82:E2:F8:1D:8E:B2:94:E5:E6:45:8F:82:02 X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:d0:30:2a:04:f0:b3:40:ea:96:0c:15:52:ef:f5:a0:98: a4:b5:57:32:4f:56:ef:2b:b3:90:ef:72:e5:9d:4f:55:58:f1: 22:a8:ba:e4:da:02:a4:f1:33:1f:2e:91:fa:96:06:26:74:73: 8e:2b:a5:54:e4:fb:da:75:94:af:4e:6f:3e:be:ec:ed:2c:ee: 75:dc:d7:90:85:9c:37:33:e0:75:90:43:f9:d4:59:11:50:e1: 4d:31:ea:b1:ca:62:77:2c:37:60:1f:ec:f9:69:e7:30:60:2b: 33:95:e7:f3:c6:4d:69:7f:bf:d2:14:01:76:08:10:e4:53:b6: 91:60:9d:a2:0a:4f:3e:21:f2:9f:cd:3b:e8:4d:27:39:fd:39: 3b:a9:13:85:29:20:68:90:35:25:9f:de:45:74:4b:22:2f:bf: 52:1b:d3:e9:8c:89:b0:c5:bc:b4:ef:79:f3:0e:6f:5f:b6:f1: 9c:f1:89:27:6a:a9:2d:4e:e0:f6:36:1f:2f:cb:45:c4:80:75: 4d:78:41:09:77:12:44:8a:99:ce:76:09:8a:91:ca:aa:8d:07: d3:6a:88:b9:18:a9:a1:cb:a2:8f:d0:d2:68:d0:35:9e:84:0a: bb:6b:f2:97:8c:2e:b6:ea:cf:b6:c9:0f:58:68:ae:0e:3a:67: 30:a7:cf:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjUwNDI1MDQxMTA2WhcNMjUwNTAyMDQxMTA2WjAYMRYwFAYD VQQDEw02ODBiMGI1YS0xMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y/yp8tdXcxigymrHgrvZaOmN+GOELU0YuoCKFuAOxubyFsQU1BoW/rsRmtp pE7QkPbXUoo9q7EUN50T3JA9wJme3U+WOA/19Ww4ubiOOXg80o6dATsP2GpWzcnL H2vBJooQ77ktUb6pf1I8rsWWObpecITAPs6uQPHYmLi1ysoeqg4WwWiy7DiLnx5h KoUaC3oHQdMfap80qfCR/mXVE8kZxcFNgjOlsYWRsy301ZSoDinebCeyIxT1w/1W 95qABp2Lwv4n4ziaIfC/PzF5VVWb+lXN14G0lqr5ttHS12DUv9Ui7XXlRHahMZkA tG2PIg781uR/fJSlyYjREIh0BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXSnCWs AhWC4vgdjrKU5eZFj4ICMB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRotAwKgTws0DqlgwVUu/1oJiktVcyT1bvK7OQ73LlnU9VWPEiqLrk 2gKk8TMfLpH6lgYmdHOOK6VU5PvadZSvTm8+vuztLO513NeQhZw3M+B1kEP51FkR UOFNMeqxymJ3LDdgH+z5aecwYCszlefzxk1pf7/SFAF2CBDkU7aRYJ2iCk8+IfKf zTvoTSc5/Tk7qROFKSBokDUln95FdEsiL79SG9PpjImwxby073nzDm9ftvGc8Ykn aqktTuD2Nh8vy0XEgHVNeEEJdxJEipnOdgmKkcqqjQfTaoi5GKmhy6KP0NJo0DWe hAq7a/KXjC626s+2yQ9YaK4OOmcwp8/F -----END CERTIFICATE-----Generated at Fri Apr 25 08:25:22 2025 by rpki-client on console.sobornost.net