$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft File: Wnw4Syls_H8kJg8FEI1n1gxurc4.mft (raw, json) Hash identifier: kaoXyDmKdvdHB2p5pfq8mR0ZzXFf/C3XYVsjAwom2hk= Subject key identifier: E0:60:2D:2C:84:53:9F:F3:3C:A2:FD:9F:41:90:D7:84:6C:53:56:AF Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE Certificate issuer: /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft Manifest number: 0106 Signing time: Tue 15 Apr 2025 04:01:56 +0000 Manifest this update: Tue 15 Apr 2025 04:01:55 +0000 Manifest next update: Tue 22 Apr 2025 04:01:55 +0000 Files and hashes: 1: Wnw4Syls_H8kJg8FEI1n1gxurc4.crl (hash: boOkesxfFUrrigSkkAKGViIC65Sc/3s4EmG8upRPwGM=) 2: 6BD285BA971D11EE9333CE70C4F9AE02.roa (hash: Qtm+4szSQdAgynHCTX77NVhRERzrbE+zoyUpXzir0eY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 04:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Validity Not Before: Apr 15 04:01:55 2025 GMT Not After : Apr 22 04:01:55 2025 GMT Subject: CN=67fdda33-63f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4c:f1:12:a0:be:7e:5c:be:10:50:60:27:2f: 50:19:4c:8f:a9:9a:cc:ba:dc:5d:94:e2:ce:0e:73: a7:be:b5:cb:12:33:49:44:94:43:45:47:21:6a:ab: a9:38:2a:0a:9c:0e:11:63:11:15:43:d4:35:49:84: 38:6b:cc:3b:bb:14:86:d0:06:48:24:3d:05:d5:0a: aa:60:98:5d:ec:e0:be:f2:ca:a9:3c:72:54:c0:e1: f3:bc:0f:ef:93:6e:77:ba:5f:10:fb:8a:05:ac:e5: 7e:47:23:c1:2a:f2:62:13:07:3c:83:bc:9d:bb:b8: 6a:a1:24:68:30:e0:e5:b9:c5:1f:ee:75:20:10:0a: e0:33:0f:e1:70:9e:b4:f5:36:e8:a4:11:4f:f6:08: d4:70:d6:82:52:72:8e:fb:0c:6e:49:6d:c1:70:82: 19:95:be:40:c1:22:20:a9:58:6f:2e:ae:65:00:1d: 54:45:d7:05:30:8e:23:35:55:bc:5a:72:99:42:b2: 24:a7:7f:14:05:ed:b3:1e:3a:8a:11:a0:5f:61:fe: b8:98:c9:30:76:56:92:61:89:00:e8:a1:fe:34:3a: 12:d3:69:83:28:be:8e:ea:b4:12:ea:37:1a:7f:0e: 8b:34:cf:92:3c:5a:9a:03:ac:e3:e0:b7:fa:2e:2a: 04:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:60:2D:2C:84:53:9F:F3:3C:A2:FD:9F:41:90:D7:84:6C:53:56:AF X509v3 Authority Key Identifier: keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:84:45:af:42:89:dc:a2:54:29:51:25:1c:cd:0e:be:dc:a0: 60:8b:8b:f1:da:a8:28:67:4a:3c:1c:00:d4:c8:c3:ff:c9:27: 4d:89:a6:dc:96:21:b3:ca:f1:ca:19:2c:3d:e0:88:71:28:dd: 48:8e:05:52:66:ee:d1:ac:f3:50:a5:36:ed:df:39:18:9c:e2: 57:fd:90:a2:d1:81:f8:7f:1d:f2:51:4f:ad:45:8f:8b:f9:fe: 02:da:cb:7b:72:e7:7f:93:fc:91:51:22:58:c3:36:7d:b9:98: 7f:d1:c8:e3:7f:e7:8f:c6:fb:b5:54:9b:64:ec:fc:8a:6e:de: 0c:2a:dc:3d:f5:42:8a:08:02:8b:0e:e2:74:64:a5:65:f3:b4: a4:7f:e8:a5:17:14:4b:ab:66:b2:22:7f:d8:9c:3e:8e:00:f7: 18:d7:ac:f4:5c:4f:db:ea:b9:ba:f6:05:bc:fd:e6:58:49:c3: 00:14:60:56:df:a3:e1:f2:2d:46:c0:f7:7c:a2:14:77:de:d2: b9:ae:94:6a:d4:3f:f7:3b:41:c9:a3:ba:a5:29:2d:9a:6e:40: a2:d1:c5:a4:0d:6f:6a:8f:f1:24:ba:19:d8:6b:6d:30:19:10: 0a:c9:67:dc:3a:13:95:16:4a:46:8a:eb:e8:00:b5:c4:da:92: 88:32:c1:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0MkQxMTAvBgNVBAUTKDVBN0MzODRCMjk2Q0ZDN0YyNDI2MEYwNTEwOEQ2N0Q2 MEM2RUFEQ0UwHhcNMjUwNDE1MDQwMTU1WhcNMjUwNDIyMDQwMTU1WjAYMRYwFAYD VQQDEw02N2ZkZGEzMy02M2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50zxEqC+fly+EFBgJy9QGUyPqZrMutxdlOLODnOnvrXLEjNJRJRDRUchaqup OCoKnA4RYxEVQ9Q1SYQ4a8w7uxSG0AZIJD0F1QqqYJhd7OC+8sqpPHJUwOHzvA/v k253ul8Q+4oFrOV+RyPBKvJiEwc8g7ydu7hqoSRoMODlucUf7nUgEArgMw/hcJ60 9TbopBFP9gjUcNaCUnKO+wxuSW3BcIIZlb5AwSIgqVhvLq5lAB1URdcFMI4jNVW8 WnKZQrIkp38UBe2zHjqKEaBfYf64mMkwdlaSYYkA6KH+NDoS02mDKL6O6rQS6jca fw6LNM+SPFqaA6zj4Lf6LioExwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBgLSyE U5/zPKL9n0GQ14RsU1avMB8GA1UdIwQYMBaAFFp8OEspbPx/JCYPBRCNZ9YMbq3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQyRC82NjMxNUNDMDk2 MzMxMUVFQTNBQUM0MThDNEY5QUUwMi9Xbnc0U3lsc19IOGtKZzhGRUkxbjFneHVy YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dudzRTeWxzX0g4a0pnOEZFSTFuMWd4dXJjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQyRC82NjMxNUNDMDk2MzMxMUVFQTNBQUM0MThDNEY5QUUwMi9Xbnc0U3lsc19I OGtKZzhGRUkxbjFneHVyYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnhEWvQoncolQpUSUczQ6+3KBgi4vx2qgoZ0o8HADUyMP/ySdNiabc liGzyvHKGSw94IhxKN1IjgVSZu7RrPNQpTbt3zkYnOJX/ZCi0YH4fx3yUU+tRY+L +f4C2st7cud/k/yRUSJYwzZ9uZh/0cjjf+ePxvu1VJtk7PyKbt4MKtw99UKKCAKL DuJ0ZKVl87Skf+ilFxRLq2ayIn/YnD6OAPcY16z0XE/b6rm69gW8/eZYScMAFGBW 36Ph8i1GwPd8ohR33tK5rpRq1D/3O0HJo7qlKS2abkCi0cWkDW9qj/EkuhnYa20w GRAKyWfcOhOVFkpGiuvoALXE2pKIMsGy -----END CERTIFICATE-----Generated at Wed Apr 16 20:18:21 2025 by rpki-client