$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft File: Wnw4Syls_H8kJg8FEI1n1gxurc4.mft (raw, json) Hash identifier: 1u+gtHgJ2ZW0ms2w+jHIRdX0m4DP360qCfdoQILjs0E= Subject key identifier: 3E:A6:B7:B8:9B:BA:71:E9:EB:BB:AD:4F:25:F5:37:6F:5B:4D:6A:D6 Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE Certificate issuer: /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft Manifest number: 010B Signing time: Fri 25 Apr 2025 04:09:35 +0000 Manifest this update: Fri 25 Apr 2025 04:09:35 +0000 Manifest next update: Fri 02 May 2025 04:09:35 +0000 Files and hashes: 1: Wnw4Syls_H8kJg8FEI1n1gxurc4.crl (hash: Kz71dM/sdkvIW3TTfaXsCFa2zrz4vTJ3lZ7d1qa3cA8=) 2: 6BD285BA971D11EE9333CE70C4F9AE02.roa (hash: Qtm+4szSQdAgynHCTX77NVhRERzrbE+zoyUpXzir0eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Validity Not Before: Apr 25 04:09:35 2025 GMT Not After : May 2 04:09:35 2025 GMT Subject: CN=680b0aff-9315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:65:86:c5:37:78:4b:63:41:36:93:b4:2f:49: ca:49:9e:42:04:a2:a6:c5:4d:81:83:0f:93:c9:46: 53:41:a9:65:51:6b:40:34:37:51:69:d8:a2:a8:eb: 91:ff:43:aa:61:45:db:9d:20:aa:a7:96:25:3a:53: 80:c2:f2:d2:4a:b0:1d:d1:73:e5:a1:29:25:6d:fe: ba:68:54:16:e1:40:8f:fb:80:94:a5:a0:9d:d5:14: 2f:fa:12:32:d6:c8:d5:7a:55:9d:89:2a:2d:77:45: 97:f9:ca:d7:1c:80:76:0f:69:0d:56:34:8b:a6:e3: c7:a7:99:28:b2:4f:ba:84:9c:b8:82:f3:a0:b0:7e: 0a:78:5d:e8:82:ce:35:3e:12:8d:ee:1b:78:8d:df: fc:46:7a:58:6d:16:df:93:f5:08:51:fb:ad:46:ff: 1a:55:33:f0:72:65:99:ac:50:83:5b:21:65:b8:99: 2e:a0:39:e3:c2:36:ef:b3:3d:5d:40:54:05:79:d2: c3:f0:b5:46:71:e4:ce:04:6c:a1:5c:f0:63:a5:eb: f3:04:0b:89:be:4f:1d:05:fe:72:cf:ee:96:bb:08: db:45:1e:1e:f5:3b:80:a5:c7:62:3b:1e:48:c8:4d: 22:a0:69:b2:6d:3c:a8:c0:c7:d1:f9:f9:e4:0a:a4: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:B7:B8:9B:BA:71:E9:EB:BB:AD:4F:25:F5:37:6F:5B:4D:6A:D6 X509v3 Authority Key Identifier: keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:84:a6:e6:19:9d:c2:70:20:97:8f:d0:ff:eb:81:f3:00:90: a2:4d:29:48:1a:79:c6:3b:a9:68:e9:21:7a:e2:f0:57:b6:20: 25:bc:3c:8a:71:47:c8:97:8b:16:59:80:aa:63:32:04:6d:50: 2d:55:34:1b:ad:7f:df:8d:24:be:90:31:59:a0:45:34:a9:32: b2:c3:91:12:a8:f7:11:71:b6:e6:ff:3a:95:21:ee:6a:5b:da: 5f:e4:34:7c:f5:81:87:36:2a:08:31:1c:68:35:31:cb:b6:f1: 71:f5:b6:86:22:1a:d2:46:c7:56:c9:a8:14:eb:5b:a5:d5:f7: 7a:86:8b:91:60:b5:a3:60:d3:66:fe:4d:b3:07:0c:66:e3:a4: a6:63:e6:20:a6:d0:83:e4:28:6e:9b:58:d7:ca:44:0b:30:b2: 3a:3d:c2:2f:59:e9:ad:67:fe:9d:5e:70:96:24:b1:24:b8:fe: 50:fc:fe:85:e0:bb:ec:e2:08:64:a9:43:39:39:fe:be:5e:bc: 9a:99:92:91:e6:a8:49:c0:ae:bf:b4:86:ee:d8:9d:c9:3f:2f: dc:29:ec:13:b4:c4:5d:d2:df:c5:58:53:25:c3:ff:0b:58:f2: 2f:c8:e1:46:e9:2e:33:83:56:e9:58:f3:dc:30:23:4f:33:2f: 10:e7:03:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0MkQxMTAvBgNVBAUTKDVBN0MzODRCMjk2Q0ZDN0YyNDI2MEYwNTEwOEQ2N0Q2 MEM2RUFEQ0UwHhcNMjUwNDI1MDQwOTM1WhcNMjUwNTAyMDQwOTM1WjAYMRYwFAYD VQQDEw02ODBiMGFmZi05MzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGWGxTd4S2NBNpO0L0nKSZ5CBKKmxU2Bgw+TyUZTQallUWtANDdRadiiqOuR /0OqYUXbnSCqp5YlOlOAwvLSSrAd0XPloSklbf66aFQW4UCP+4CUpaCd1RQv+hIy 1sjVelWdiSotd0WX+crXHIB2D2kNVjSLpuPHp5kosk+6hJy4gvOgsH4KeF3ogs41 PhKN7ht4jd/8RnpYbRbfk/UIUfutRv8aVTPwcmWZrFCDWyFluJkuoDnjwjbvsz1d QFQFedLD8LVGceTOBGyhXPBjpevzBAuJvk8dBf5yz+6WuwjbRR4e9TuApcdiOx5I yE0ioGmybTyowMfR+fnkCqQ4lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6mt7ib unHp67utTyX1N29bTWrWMB8GA1UdIwQYMBaAFFp8OEspbPx/JCYPBRCNZ9YMbq3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQyRC82NjMxNUNDMDk2 MzMxMUVFQTNBQUM0MThDNEY5QUUwMi9Xbnc0U3lsc19IOGtKZzhGRUkxbjFneHVy YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dudzRTeWxzX0g4a0pnOEZFSTFuMWd4dXJjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQyRC82NjMxNUNDMDk2MzMxMUVFQTNBQUM0MThDNEY5QUUwMi9Xbnc0U3lsc19I OGtKZzhGRUkxbjFneHVyYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/hKbmGZ3CcCCXj9D/64HzAJCiTSlIGnnGO6lo6SF64vBXtiAlvDyK cUfIl4sWWYCqYzIEbVAtVTQbrX/fjSS+kDFZoEU0qTKyw5ESqPcRcbbm/zqVIe5q W9pf5DR89YGHNioIMRxoNTHLtvFx9baGIhrSRsdWyagU61ul1fd6houRYLWjYNNm /k2zBwxm46SmY+YgptCD5Chum1jXykQLMLI6PcIvWemtZ/6dXnCWJLEkuP5Q/P6F 4Lvs4ghkqUM5Of6+XryamZKR5qhJwK6/tIbu2J3JPy/cKewTtMRd0t/FWFMlw/8L WPIvyOFG6S4zg1bpWPPcMCNPMy8Q5wPw -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:49 2025 by rpki-client