$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft File: W6ynah06AONY_-Uxi5AkmIANgmw.mft (raw, json) Hash identifier: uUl3GbxX+779KW993Qg5pflFit57yrNvUC8LQRJPI1M= Subject key identifier: 24:52:F7:74:4C:7B:54:1A:EB:3D:72:D8:B2:EE:AA:DE:AC:B8:4C:A3 Authority key identifier: 5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C Certificate issuer: /CN=A911BFB0/serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft Manifest number: 10EE Signing time: Thu 24 Apr 2025 17:35:11 +0000 Manifest this update: Thu 24 Apr 2025 17:35:11 +0000 Manifest next update: Thu 01 May 2025 17:35:11 +0000 Files and hashes: 1: W6ynah06AONY_-Uxi5AkmIANgmw.crl (hash: jPmYZ+G9yw5Ynrd8CKuo75pWzF0U5jYf+cwpRQzT3Ps=) 2: F21C48F48AF811ED89B22845C4F9AE02.roa (hash: YpeD3hofiypQ4UKB2agIyDeHN6KsPnhGs6LVUpcDCB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BFB0, serialNumber=5BACA76A1D3A00E358FFE5318B902498800D826C Validity Not Before: Apr 24 17:35:11 2025 GMT Not After : May 1 17:35:11 2025 GMT Subject: CN=680a764f-9d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:cc:f9:b7:d6:ea:5f:cd:6b:d1:ba:87:97: c6:f2:ea:26:36:63:ba:3b:35:e7:de:30:35:7f:94: 86:0e:0d:fc:fb:3f:30:15:ea:6b:eb:9e:20:8e:2e: 32:06:3a:c6:bd:e2:15:31:c7:9e:5c:44:54:9e:2e: b7:9f:22:2f:e0:71:fb:07:2b:e8:3b:bc:19:c2:b6: 6d:35:bc:f9:1f:be:49:58:2b:63:6b:71:0d:e0:b3: 95:7a:1c:ee:65:36:e7:17:d7:ef:0a:a9:1b:93:37: cb:1a:1f:53:c1:29:e1:00:95:ee:3d:c6:c2:1a:0c: 3e:c6:55:2f:44:83:97:25:ed:dc:82:7c:a3:ab:d0: 8a:51:1a:5b:ca:a8:53:3c:b6:84:07:a3:0a:2e:88: 4d:f6:1b:f5:22:fd:f4:77:f7:6a:50:95:21:31:9b: 03:9b:27:b9:f5:80:4b:bc:ec:63:52:0f:bb:f3:01: 16:de:55:c4:b2:d1:2a:8d:47:2d:d2:90:3a:fc:a8: ee:2e:42:8b:1e:69:29:28:26:9d:69:2a:b8:71:20: ce:6c:72:e7:d8:22:2d:1b:c6:ae:c3:00:b3:83:f6: 5e:57:1d:ef:39:db:f7:b1:84:4b:b4:bc:e8:f1:e3: 48:24:81:a3:3b:cb:62:fe:f3:95:70:bf:b3:38:b0: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:52:F7:74:4C:7B:54:1A:EB:3D:72:D8:B2:EE:AA:DE:AC:B8:4C:A3 X509v3 Authority Key Identifier: keyid:5B:AC:A7:6A:1D:3A:00:E3:58:FF:E5:31:8B:90:24:98:80:0D:82:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6ynah06AONY_-Uxi5AkmIANgmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/W6ynah06AONY_-Uxi5AkmIANgmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:35:4b:5e:92:8f:9b:ca:a5:5b:e1:88:04:3d:df:6f:c5:78: 16:09:4a:ec:7c:9b:47:62:0d:af:ee:49:e2:67:e0:48:93:cd: ac:58:61:51:d1:54:0b:b3:6e:02:b9:52:0a:b1:60:23:fa:bf: 10:f4:c7:86:d9:cd:00:72:a1:31:31:b1:73:39:0a:2f:0e:d3: 1a:3a:b8:ec:9b:0d:98:7b:b5:c1:29:38:c0:49:55:b8:dd:f6: 70:28:9e:61:79:64:11:d3:1f:8f:e1:cd:80:c6:01:72:9b:c0: 5f:00:ce:6c:a3:5d:9f:f9:92:55:7b:13:92:43:23:7a:f6:ed: ca:61:dd:aa:e6:82:99:7a:cd:67:01:ee:83:1b:ee:c4:e6:51: 3e:37:fe:4d:9f:91:94:8e:aa:4f:26:de:c6:7d:e1:46:55:a3: 98:d4:7a:c1:b8:96:92:29:ab:7c:06:9d:ae:48:ab:8d:b1:0f: 0f:d8:aa:da:3b:05:c2:62:77:cb:65:dd:1f:78:8d:87:59:ba: 72:f8:b4:75:c0:cb:eb:10:9e:1e:5a:e6:8a:b6:c6:eb:28:0c: 7f:d7:4f:79:65:87:1d:b9:3c:f2:f3:04:b3:fb:ce:ed:35:42: 2a:f1:7e:47:24:7a:dd:3b:8d:d6:88:dd:1f:e0:48:5c:45:c3: c5:4a:4a:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJGQjAxMTAvBgNVBAUTKDVCQUNBNzZBMUQzQTAwRTM1OEZGRTUzMThCOTAyNDk4 ODAwRDgyNkMwHhcNMjUwNDI0MTczNTExWhcNMjUwNTAxMTczNTExWjAYMRYwFAYD VQQDEw02ODBhNzY0Zi05ZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4trM+bfW6l/Na9G6h5fG8uomNmO6OzXn3jA1f5SGDg38+z8wFepr654gji4y BjrGveIVMceeXERUni63nyIv4HH7ByvoO7wZwrZtNbz5H75JWCtja3EN4LOVehzu ZTbnF9fvCqkbkzfLGh9TwSnhAJXuPcbCGgw+xlUvRIOXJe3cgnyjq9CKURpbyqhT PLaEB6MKLohN9hv1Iv30d/dqUJUhMZsDmye59YBLvOxjUg+78wEW3lXEstEqjUct 0pA6/KjuLkKLHmkpKCadaSq4cSDObHLn2CItG8auwwCzg/ZeVx3vOdv3sYRLtLzo 8eNIJIGjO8ti/vOVcL+zOLCr3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRS93RM e1Qa6z1y2LLuqt6suEyjMB8GA1UdIwQYMBaAFFusp2odOgDjWP/lMYuQJJiADYJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9XNnluYWgwNkFPTllfLVV4aTVBa21JQU5n bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2eW5haDA2QU9OWV8tVXhpNUFrbUlBTmdtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkZCMC8yMkMyNTE0NjZDQzIxMUU5QTBENkFGNjdDNEY5QUUwMi9XNnluYWgwNkFP TllfLVV4aTVBa21JQU5nbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByNUteko+byqVb4YgEPd9vxXgWCUrsfJtHYg2v7kniZ+BIk82sWGFR 0VQLs24CuVIKsWAj+r8Q9MeG2c0AcqExMbFzOQovDtMaOrjsmw2Ye7XBKTjASVW4 3fZwKJ5heWQR0x+P4c2AxgFym8BfAM5so12f+ZJVexOSQyN69u3KYd2q5oKZes1n Ae6DG+7E5lE+N/5Nn5GUjqpPJt7GfeFGVaOY1HrBuJaSKat8Bp2uSKuNsQ8P2Kra OwXCYnfLZd0feI2HWbpy+LR1wMvrEJ4eWuaKtsbrKAx/1095ZYcduTzy8wSz+87t NUIq8X5HJHrdO43WiN0f4EhcRcPFSkpq -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:17 2025 by rpki-client