$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft File: Wnw4Syls_H8kJg8FEI1n1gxurc4.mft (raw, json) Hash identifier: 35F6tnKLSi0i5X6CJeG7ouUaQH+g2i3qf7aAj4mPL3I= Subject key identifier: CB:94:20:1D:5E:3F:89:09:66:DC:65:38:65:54:87:68:80:77:E9:C1 Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE Certificate issuer: /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft Manifest number: 0120 Signing time: Thu 05 Jun 2025 04:15:16 +0000 Manifest this update: Thu 05 Jun 2025 04:15:15 +0000 Manifest next update: Thu 12 Jun 2025 04:15:15 +0000 Files and hashes: 1: Wnw4Syls_H8kJg8FEI1n1gxurc4.crl (hash: Mhr3EgbXRZW5/EcLA9+Cp7Le0daTlbF+/mssOri30KA=) 2: 6BD285BA971D11EE9333CE70C4F9AE02.roa (hash: Qtm+4szSQdAgynHCTX77NVhRERzrbE+zoyUpXzir0eY=) 3: DA1C00CE26F411F097943C73C4F9AE02.roa (hash: CfZU7daywOHQvFGh6BufBiOThF5L/4BKQajPooLtqOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE Validity Not Before: Jun 5 04:15:15 2025 GMT Not After : Jun 12 04:15:15 2025 GMT Subject: CN=684119d3-0aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:ee:fa:44:eb:86:46:6b:c5:c3:d7:eb:ed: a1:24:3e:80:f3:79:42:d4:d4:00:62:29:60:02:82: f6:ad:9b:61:a1:c5:87:8e:0d:28:0c:a4:cf:2f:16: 81:4b:80:eb:68:c8:a2:c0:02:c0:41:d8:5b:8f:e6: e3:79:93:89:05:48:fd:f1:2e:c2:ee:13:9b:d2:b3: c2:38:ca:bb:8c:63:ac:e4:f6:23:3f:47:f8:e7:ec: 56:b7:fc:5d:b0:27:34:00:d2:84:fc:95:15:5c:b7: 39:1d:04:24:11:6d:2b:90:a7:ab:7a:73:b2:e9:66: 90:36:be:66:40:3b:43:5b:43:e6:bd:e5:be:07:9a: 46:5f:82:37:78:e7:d0:20:a9:7e:32:dc:3b:22:82: 47:5c:fe:d5:cf:1e:47:6a:d2:53:dc:4d:de:75:b8: c0:b2:4a:ca:52:c4:cc:50:df:8f:1a:8b:5f:d0:b9: e5:87:ef:1d:e3:44:77:fb:a7:2e:49:41:ba:1a:2a: d8:6e:24:6d:4d:03:34:7c:68:ed:a0:56:b6:e0:e0: b2:d6:66:39:7c:f7:33:eb:34:ff:8f:46:f7:cd:d5: bf:3f:e7:c3:17:81:1f:18:26:f5:35:a8:95:ee:ac: 69:79:27:7a:ac:63:e3:8c:e0:c5:5b:5e:44:25:60: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:94:20:1D:5E:3F:89:09:66:DC:65:38:65:54:87:68:80:77:E9:C1 X509v3 Authority Key Identifier: keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:55:ed:74:3e:0f:02:fa:5b:f9:72:70:7a:d7:7a:1d:9c:e2: b7:b0:40:d2:ef:4e:c8:37:69:a4:af:dd:31:6e:ac:dc:4f:3e: d6:e6:ae:65:0f:45:2a:8b:13:15:d9:40:ef:cd:6e:7d:1c:74: 42:83:71:48:68:36:35:b4:ae:8a:9c:57:6a:7d:c2:ce:43:67: 37:28:a7:b1:c7:19:e2:1f:b7:6f:9f:16:b5:31:15:31:5b:23: 88:8c:c4:9e:20:27:21:5f:6a:e3:59:11:eb:91:f4:5c:fd:d0: 80:01:00:ae:38:45:2d:e9:90:78:fc:7e:22:ca:96:7f:89:d2: e2:b0:34:35:2e:fa:0e:65:81:cf:f7:ba:4c:4c:99:e9:f4:5e: 4c:db:55:30:0b:dd:bf:98:ec:d7:78:66:34:40:0e:f5:a3:90: a0:68:7f:54:f4:c9:69:e1:0b:54:58:df:23:50:fe:8d:36:8d: be:36:0f:76:d6:03:63:bf:7d:cd:78:85:54:f8:ac:f3:a6:41: 36:52:4d:88:0f:ca:3e:f6:0b:cf:5b:33:99:4c:a9:14:97:c7: f0:04:e1:77:9b:cf:bc:9b:0c:9a:77:45:ac:0c:2e:a6:fd:4d: df:32:ed:7b:12:fe:0e:c5:4e:3f:00:83:d7:aa:e1:87:14:e4: 46:9d:76:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0MkQxMTAvBgNVBAUTKDVBN0MzODRCMjk2Q0ZDN0YyNDI2MEYwNTEwOEQ2N0Q2 MEM2RUFEQ0UwHhcNMjUwNjA1MDQxNTE1WhcNMjUwNjEyMDQxNTE1WjAYMRYwFAYD VQQDEw02ODQxMTlkMy0wYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFnu+kTrhkZrxcPX6+2hJD6A83lC1NQAYilgAoL2rZthocWHjg0oDKTPLxaB S4DraMiiwALAQdhbj+bjeZOJBUj98S7C7hOb0rPCOMq7jGOs5PYjP0f45+xWt/xd sCc0ANKE/JUVXLc5HQQkEW0rkKerenOy6WaQNr5mQDtDW0PmveW+B5pGX4I3eOfQ IKl+Mtw7IoJHXP7Vzx5HatJT3E3edbjAskrKUsTMUN+PGotf0Lnlh+8d40R3+6cu SUG6GirYbiRtTQM0fGjtoFa24OCy1mY5fPcz6zT/j0b3zdW/P+fDF4EfGCb1NaiV 7qxpeSd6rGPjjODFW15EJWC9CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuUIB1e P4kJZtxlOGVUh2iAd+nBMB8GA1UdIwQYMBaAFFp8OEspbPx/JCYPBRCNZ9YMbq3O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQyRC82NjMxNUNDMDk2 MzMxMUVFQTNBQUM0MThDNEY5QUUwMi9Xbnc0U3lsc19IOGtKZzhGRUkxbjFneHVy YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dudzRTeWxzX0g4a0pnOEZFSTFuMWd4dXJjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQyRC82NjMxNUNDMDk2MzMxMUVFQTNBQUM0MThDNEY5QUUwMi9Xbnc0U3lsc19I OGtKZzhGRUkxbjFneHVyYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuVe10Pg8C+lv5cnB613odnOK3sEDS707IN2mkr90xbqzcTz7W5q5l D0UqixMV2UDvzW59HHRCg3FIaDY1tK6KnFdqfcLOQ2c3KKexxxniH7dvnxa1MRUx WyOIjMSeICchX2rjWRHrkfRc/dCAAQCuOEUt6ZB4/H4iypZ/idLisDQ1LvoOZYHP 97pMTJnp9F5M21UwC92/mOzXeGY0QA71o5CgaH9U9Mlp4QtUWN8jUP6NNo2+Ng92 1gNjv33NeIVU+KzzpkE2Uk2ID8o+9gvPWzOZTKkUl8fwBOF3m8+8mwyad0WsDC6m /U3fMu17Ev4OxU4/AIPXquGHFORGnXZg -----END CERTIFICATE-----Generated at Thu Jun 5 20:11:18 2025 by rpki-client