$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: s4Ff2Q+iVb9qlVPSsmXSqeWgtVDnPWdJvgoAQV2/UW4= Subject key identifier: DE:C0:24:8C:D5:4F:55:33:4A:55:64:81:F4:93:7D:6F:7D:F4:C1:1E Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 0777 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 0772 Signing time: Sun 06 Apr 2025 21:06:34 +0000 Manifest this update: Sun 06 Apr 2025 21:06:34 +0000 Manifest next update: Sun 13 Apr 2025 21:06:34 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: B/Afr1R1TWcSgxUojxoQESYGPqJ5n7QPLBFuZiHBpkU=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: /CO3yu+8isjuDc/p5etccwYJHfw/FsP334mLJY5Rh+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 21:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1911 (0x777) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5 Validity Not Before: Apr 6 21:06:34 2025 GMT Not After : Apr 13 21:06:34 2025 GMT Subject: CN=67f2ecda-a647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:ee:fc:19:88:2a:17:81:f9:bb:2b:98:f0: 97:e4:81:05:99:3d:51:99:82:e3:59:44:07:47:48: 9a:8b:44:65:97:4d:cc:70:f8:79:ad:a0:c8:2d:cf: ba:4f:c9:be:9a:bd:3c:b5:70:d0:bf:17:ac:bb:bd: 79:16:db:9e:c9:e7:0c:ed:51:05:d5:53:d2:ae:db: 55:aa:cf:fc:e9:18:0a:78:f7:38:e9:33:c3:07:91: 48:fd:17:a2:9b:c9:5e:33:47:81:ee:d7:c3:07:67: 71:6f:9d:41:89:cd:76:f7:d5:f7:59:9b:11:e1:f6: 33:a1:d7:fa:a9:44:e6:d2:35:5e:8d:43:c2:22:d3: 99:5d:d3:bd:49:7d:98:a7:a4:97:7a:17:7b:90:dc: e2:91:82:39:8c:33:a0:8f:47:3c:7a:3c:76:93:30: df:95:5b:1c:7a:e1:d7:b0:45:12:ef:14:1a:d7:48: ab:30:52:f2:01:0b:9a:3b:2a:ce:67:75:8f:9e:5a: 42:64:00:a2:ac:d6:4a:17:4e:d7:f7:bd:ab:b6:7e: eb:8f:82:05:b5:89:b6:85:5d:ee:a3:96:c9:56:19: cb:58:1e:d8:66:4e:6d:d8:be:25:25:b1:b1:64:5d: bf:48:9c:c6:5a:bf:83:37:6a:29:bc:d3:1b:51:07: d4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:24:8C:D5:4F:55:33:4A:55:64:81:F4:93:7D:6F:7D:F4:C1:1E X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d1:e9:06:73:eb:e8:7c:04:c2:82:2b:3b:66:47:97:ce:37: d6:ff:5b:61:29:6b:55:b8:c0:69:93:4c:0e:ad:6e:69:74:d6: e0:e6:7d:3f:db:04:2a:21:d4:e8:cb:21:1f:63:35:ff:49:f8: 0a:70:0a:b8:61:ec:7a:22:57:d5:1d:39:be:72:8f:2f:fe:c0: 43:29:c5:90:c3:ab:92:b4:ce:52:13:b5:6b:b0:52:0b:03:ab: 78:71:7c:2e:b0:1f:8c:4c:20:33:0f:d2:be:91:05:e4:b3:d2: 2c:6a:7d:02:c0:14:79:66:e7:80:43:7d:76:ce:34:dd:9a:48: 43:8e:52:b0:43:c0:2f:a3:2c:14:7c:b3:80:2a:47:f4:99:ec: f8:ca:06:71:48:40:5e:d6:5c:2c:69:b1:89:00:2a:2e:dc:00: 08:fb:85:47:8e:39:c5:42:7e:b2:db:cd:23:7e:1f:63:1d:a2: 9e:81:b0:df:90:5f:d4:66:af:50:20:49:de:6a:68:bd:35:6f: 41:01:1c:4c:5b:6c:fc:d3:bf:a3:af:86:e3:e5:93:2e:f3:75: 04:54:9c:38:76:fc:b9:25:ed:3c:53:07:db:54:f1:67:22:48: 97:78:17:2d:d4:d1:e2:77:8b:b2:ec:ee:61:ea:63:fa:01:5d: f1:3b:ea:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUwNDA2MjEwNjM0WhcNMjUwNDEzMjEwNjM0WjAYMRYwFAYD VQQDEw02N2YyZWNkYS1hNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2Pu/BmIKheB+bsrmPCX5IEFmT1RmYLjWUQHR0iai0Rll03McPh5raDILc+6 T8m+mr08tXDQvxesu715FtueyecM7VEF1VPSrttVqs/86RgKePc46TPDB5FI/Rei m8leM0eB7tfDB2dxb51Bic1299X3WZsR4fYzodf6qUTm0jVejUPCItOZXdO9SX2Y p6SXehd7kNzikYI5jDOgj0c8ejx2kzDflVsceuHXsEUS7xQa10irMFLyAQuaOyrO Z3WPnlpCZACirNZKF07X972rtn7rj4IFtYm2hV3uo5bJVhnLWB7YZk5t2L4lJbGx ZF2/SJzGWr+DN2opvNMbUQfUvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7AJIzV T1UzSlVkgfSTfW999MEeMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA90ekGc+vofATCgis7ZkeXzjfW/1thKWtVuMBpk0wOrW5pdNbg5n0/ 2wQqIdToyyEfYzX/SfgKcAq4Yex6IlfVHTm+co8v/sBDKcWQw6uStM5SE7VrsFIL A6t4cXwusB+MTCAzD9K+kQXks9Isan0CwBR5ZueAQ312zjTdmkhDjlKwQ8AvoywU fLOAKkf0mez4ygZxSEBe1lwsabGJACou3AAI+4VHjjnFQn6y280jfh9jHaKegbDf kF/UZq9QIEneami9NW9BARxMW2z807+jr4bj5ZMu83UEVJw4dvy5Je08UwfbVPFn IkiXeBct1NHid4uy7O5h6mP6AV3xO+qZ -----END CERTIFICATE-----Generated at Tue Apr 8 21:27:08 2025 by rpki-client