$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json) Hash identifier: fwlsX/UKEn449Gdn+iFLAbHiOIKWmgZbFo7VyhwcIrQ= Subject key identifier: 8F:A8:40:99:DE:B0:C2:DF:1A:67:ED:15:6B:DA:C0:C8:FB:FE:3E:9F Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Certificate serial: 01E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft Manifest number: 01DB Signing time: Sun 27 Apr 2025 01:50:05 +0000 Manifest this update: Sun 27 Apr 2025 01:50:05 +0000 Manifest next update: Sun 04 May 2025 01:50:05 +0000 Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: p2svSPlm++foDy4m7EuspFkB7nCp26tbny2JerXmic8=) 2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: tljXT8G1BNgl+pD66knbjuh1b8kVzEqRHqexSVNncjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 01:50:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 480 (0x1e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Validity Not Before: Apr 27 01:50:05 2025 GMT Not After : May 4 01:50:05 2025 GMT Subject: CN=680d8d4d-0a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:14:ad:fa:10:54:0a:c1:7a:01:dd:ef:96: 8b:a2:7b:09:26:07:e3:00:fd:ee:da:9e:3e:bd:32: 2f:04:d3:eb:01:07:28:61:40:1a:0e:d8:21:a1:a0: 16:0d:67:c4:cd:97:fb:7e:9c:60:5e:a7:3a:44:f0: e5:bb:c7:61:a4:8d:09:7e:6c:8f:92:60:46:94:94: 15:fd:76:e9:05:06:06:6c:c5:be:7c:49:d2:7b:0f: ae:db:2e:32:9b:c7:9e:fc:93:b9:3a:05:24:4a:77: 64:9f:a1:93:3d:53:44:07:37:12:7c:6c:f4:cb:12: 06:14:97:c4:ec:3f:a7:26:9a:f4:63:7f:f6:d0:4c: 34:e6:f6:84:e1:40:10:fb:78:fc:a8:b4:12:62:0e: 2d:d0:8e:05:ea:c1:d7:2a:b0:ca:f5:3d:bf:12:8e: 21:c2:9b:4e:8b:18:9e:93:53:c3:9c:4c:f6:b5:32: 1d:6f:7b:e9:4b:c4:ee:81:04:44:95:c6:f6:51:9e: 3f:5c:7f:76:5c:db:9e:d0:f9:f8:29:84:69:92:a8: 2d:f8:93:79:34:22:ed:63:bf:8a:f5:92:9a:7e:62: 88:23:ac:5b:02:bb:5e:d0:2d:61:ba:cc:e3:e0:79: 1e:d2:4e:3f:8d:3b:4a:db:3e:3b:e8:e5:eb:67:c6: 76:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A8:40:99:DE:B0:C2:DF:1A:67:ED:15:6B:DA:C0:C8:FB:FE:3E:9F X509v3 Authority Key Identifier: keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9b:eb:68:ca:f9:21:1f:35:ef:59:18:74:c3:78:9f:ae:6a: 3e:8f:9a:bd:9c:e3:9d:93:62:e4:1a:d5:fe:f8:cc:06:85:ea: 25:02:21:00:df:c5:86:62:1b:1e:72:12:01:58:2a:0e:5d:64: 87:69:37:71:09:1e:18:11:23:ae:cd:99:ea:28:93:e2:0c:31: 2c:55:6d:27:1a:4a:84:67:5f:75:e0:c5:ed:61:57:13:66:d9: a6:64:86:0d:01:27:6a:a2:9c:8e:6a:3c:f2:e2:f0:bb:68:b4: 3d:69:59:a3:54:2b:32:c7:99:d3:14:90:dd:2b:cd:c2:5a:4c: 07:07:86:41:61:c2:ad:7c:d2:00:79:2e:7d:64:b8:d2:46:71: 36:41:44:f5:d8:5b:99:c9:16:df:3b:0b:a5:19:9a:b5:27:d4: 12:f7:e0:36:4a:65:66:08:e6:5e:12:9c:2d:44:f4:3a:37:06: 00:f2:8a:86:09:90:54:f5:97:16:ce:a3:67:2e:dd:09:4b:43: c0:31:80:14:dc:6f:46:44:cd:eb:ab:cc:8f:33:55:dc:4d:e9: 76:e1:9c:d5:f3:0e:6b:70:19:d5:42:66:11:3c:93:49:d8:6d: bc:28:93:f3:74:8e:99:b0:90:17:e1:cf:00:f1:2c:bb:f4:af: b9:dd:29:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF NEU3MTYzNkMwHhcNMjUwNDI3MDE1MDA1WhcNMjUwNTA0MDE1MDA1WjAYMRYwFAYD VQQDEw02ODBkOGQ0ZC0wYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCoUrfoQVArBegHd75aLonsJJgfjAP3u2p4+vTIvBNPrAQcoYUAaDtghoaAW DWfEzZf7fpxgXqc6RPDlu8dhpI0JfmyPkmBGlJQV/XbpBQYGbMW+fEnSew+u2y4y m8ee/JO5OgUkSndkn6GTPVNEBzcSfGz0yxIGFJfE7D+nJpr0Y3/20Ew05vaE4UAQ +3j8qLQSYg4t0I4F6sHXKrDK9T2/Eo4hwptOixiek1PDnEz2tTIdb3vpS8TugQRE lcb2UZ4/XH92XNue0Pn4KYRpkqgt+JN5NCLtY7+K9ZKafmKII6xbArte0C1huszj 4Hke0k4/jTtK2z476OXrZ8Z2cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+oQJne sMLfGmftFWvawMj7/j6fMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC T0doSHpvbGpsal9rNXhZMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGm+toyvkhHzXvWRh0w3ifrmo+j5q9nOOdk2LkGtX++MwGheolAiEA 38WGYhsechIBWCoOXWSHaTdxCR4YESOuzZnqKJPiDDEsVW0nGkqEZ1914MXtYVcT ZtmmZIYNASdqopyOajzy4vC7aLQ9aVmjVCsyx5nTFJDdK83CWkwHB4ZBYcKtfNIA eS59ZLjSRnE2QUT12FuZyRbfOwulGZq1J9QS9+A2SmVmCOZeEpwtRPQ6NwYA8oqG CZBU9ZcWzqNnLt0JS0PAMYAU3G9GRM3rq8yPM1XcTel24ZzV8w5rcBnVQmYRPJNJ 2G28KJPzdI6ZsJAX4c8A8Sy79K+53Sl3 -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:19 2025 by rpki-client on console.sobornost.net