$ rpki-client -vvf rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft File: WWynM84d0W-O7zIxnqXTqLIvkMk.mft (raw, json) Hash identifier: 9phiZiOajEHBpfM+qPl8Ry85wIKXO+3WjeToeXmlXJE= Subject key identifier: D9:F0:A3:5B:49:30:5C:B0:13:43:75:0F:54:F3:25:4F:7B:93:F1:CB Authority key identifier: 59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9 Certificate issuer: /CN=A917126B/serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft Manifest number: 07F9 Signing time: Thu 24 Apr 2025 20:44:04 +0000 Manifest this update: Thu 24 Apr 2025 20:44:04 +0000 Manifest next update: Thu 01 May 2025 20:44:04 +0000 Files and hashes: 1: WWynM84d0W-O7zIxnqXTqLIvkMk.crl (hash: NEEg/yZyyYP5QEkDBT1TqRb9djp5gBs0PdRMqiNW/9E=) 2: CF4D7C70DADE11EABE8DD41DC4F9AE02.roa (hash: bnHHifqyfmIvk8onUg2t/SyKb3Qse0OgPOBOI1YqMW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917126B, serialNumber=596CA733CE1DD16F8EEF32319EA5D3A8B22F90C9 Validity Not Before: Apr 24 20:44:04 2025 GMT Not After : May 1 20:44:04 2025 GMT Subject: CN=680aa294-4754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:2c:a0:c3:d8:50:b5:da:b2:43:2c:a5:07: 23:b1:6e:82:68:eb:af:51:78:d3:98:8e:99:db:d1: 4a:f5:11:32:bd:7e:10:45:36:d9:74:2f:29:af:94: be:b4:50:2f:7d:e2:eb:39:4d:75:6d:a2:f1:62:0e: 6a:75:88:ef:65:a2:9a:8f:25:6c:40:b7:ba:4d:db: 00:bb:28:93:3c:d4:61:63:09:59:af:f3:e0:dc:13: 41:ac:5b:04:e7:8c:2a:91:b0:a4:8c:6e:ad:bf:67: 2f:a1:23:b8:7d:ad:78:a9:22:42:02:c0:ad:67:c1: 97:5a:50:df:1a:3a:86:83:e3:43:da:54:c0:01:b8: 05:f1:d2:7b:91:b8:ed:6f:29:d9:d7:4d:a9:89:96: 9a:19:3e:6e:87:a7:9a:88:01:a8:89:cf:b1:70:ab: 34:08:48:f4:99:be:af:8d:7d:4a:3f:2c:f1:4d:44: 6c:4c:f2:73:8d:39:b1:0a:8a:9f:12:59:52:fb:85: 96:88:90:61:28:19:9d:6a:99:79:5f:38:c9:75:84: bb:b9:5b:c6:50:3f:ea:3f:5d:4f:a8:24:27:63:e5: 36:9f:dc:f3:87:f6:ec:59:2d:4a:cd:a4:aa:c6:b3: 49:65:29:02:09:ce:40:f1:bc:0c:5b:2f:e9:f0:88: 39:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F0:A3:5B:49:30:5C:B0:13:43:75:0F:54:F3:25:4F:7B:93:F1:CB X509v3 Authority Key Identifier: keyid:59:6C:A7:33:CE:1D:D1:6F:8E:EF:32:31:9E:A5:D3:A8:B2:2F:90:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWynM84d0W-O7zIxnqXTqLIvkMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917126B/7F965D74DADD11EAAF0F4B1CC4F9AE02/WWynM84d0W-O7zIxnqXTqLIvkMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:be:18:a0:38:5a:6d:11:91:9e:d6:28:22:07:af:64:70:6c: 4c:f5:74:8e:64:6b:e1:d7:d5:23:fc:42:86:4d:65:ff:db:f9: 34:a3:20:35:5d:c5:82:b5:8f:1c:ca:29:7a:e8:83:5c:d2:f0: 02:64:29:10:c6:84:7e:21:03:4e:ee:5b:cf:87:3d:fe:8a:f6: b8:ee:95:80:a7:70:41:5c:84:36:3c:94:f8:67:4e:2a:8f:9c: f5:75:25:22:e1:69:bc:b3:25:82:0f:e1:2b:11:2a:e4:81:12: 59:c4:8f:77:89:ff:c0:6f:0f:c6:4f:99:25:9e:00:13:27:3e: da:1d:43:91:bf:04:59:77:a0:82:ac:cf:53:99:e6:a6:f6:c0: 97:fe:1a:66:28:76:e2:8e:64:1f:41:91:b4:0a:16:0e:cc:26: 67:64:8f:20:99:2f:d7:f5:7e:ee:ea:97:a5:4f:43:41:32:71: fa:b5:80:da:49:56:8f:da:82:09:de:d3:8f:37:94:94:00:a1: 41:de:8f:c9:42:50:57:cc:27:11:69:b5:01:af:f2:ce:bd:ee: c2:7c:71:15:dd:97:21:0a:ab:c3:91:de:56:97:46:d5:71:9c: 26:82:36:54:9e:ec:1b:b8:56:37:c7:d1:9c:89:21:2b:9b:dd: 8b:a5:37:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyNkIxMTAvBgNVBAUTKDU5NkNBNzMzQ0UxREQxNkY4RUVGMzIzMTlFQTVEM0E4 QjIyRjkwQzkwHhcNMjUwNDI0MjA0NDA0WhcNMjUwNTAxMjA0NDA0WjAYMRYwFAYD VQQDEw02ODBhYTI5NC00NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqQsoMPYULXaskMspQcjsW6CaOuvUXjTmI6Z29FK9REyvX4QRTbZdC8pr5S+ tFAvfeLrOU11baLxYg5qdYjvZaKajyVsQLe6TdsAuyiTPNRhYwlZr/Pg3BNBrFsE 54wqkbCkjG6tv2cvoSO4fa14qSJCAsCtZ8GXWlDfGjqGg+ND2lTAAbgF8dJ7kbjt bynZ102piZaaGT5uh6eaiAGoic+xcKs0CEj0mb6vjX1KPyzxTURsTPJzjTmxCoqf EllS+4WWiJBhKBmdapl5XzjJdYS7uVvGUD/qP11PqCQnY+U2n9zzh/bsWS1KzaSq xrNJZSkCCc5A8bwMWy/p8Ig52wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnwo1tJ MFywE0N1D1TzJU97k/HLMB8GA1UdIwQYMBaAFFlspzPOHdFvju8yMZ6l06iyL5DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTI2Qi83Rjk2NUQ3NERB REQxMUVBQUYwRjRCMUNDNEY5QUUwMi9XV3luTTg0ZDBXLU83ekl4bnFYVHFMSXZr TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXeW5NODRkMFctTzd6SXhucVhUcUxJdmtNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTI2Qi83Rjk2NUQ3NERBREQxMUVBQUYwRjRCMUNDNEY5QUUwMi9XV3luTTg0ZDBX LU83ekl4bnFYVHFMSXZrTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXvhigOFptEZGe1igiB69kcGxM9XSOZGvh19Uj/EKGTWX/2/k0oyA1 XcWCtY8cyil66INc0vACZCkQxoR+IQNO7lvPhz3+iva47pWAp3BBXIQ2PJT4Z04q j5z1dSUi4Wm8syWCD+ErESrkgRJZxI93if/Abw/GT5klngATJz7aHUORvwRZd6CC rM9Tmeam9sCX/hpmKHbijmQfQZG0ChYOzCZnZI8gmS/X9X7u6pelT0NBMnH6tYDa SVaP2oIJ3tOPN5SUAKFB3o/JQlBXzCcRabUBr/LOve7CfHEV3ZchCqvDkd5Wl0bV cZwmgjZUnuwbuFY3x9GciSErm92LpTfx -----END CERTIFICATE-----Generated at Sat Apr 26 12:58:21 2025 by rpki-client