$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: LkXUlp4zlLw823dsZMufbo75ToQsaPVAkbkVeS0LKQ8= Subject key identifier: 3E:41:3E:FF:0B:24:B1:2E:62:5A:AB:F1:29:97:2B:18:DF:E7:E7:CD Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 07A5 Signing time: Fri 18 Jul 2025 21:33:06 +0000 Manifest this update: Fri 18 Jul 2025 21:33:05 +0000 Manifest next update: Fri 25 Jul 2025 21:33:05 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: DK1PC9TiDdX7l6bF/AdNPIEkkIO0vA2CoCHJDTpSm7Y=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: /CO3yu+8isjuDc/p5etccwYJHfw/FsP334mLJY5Rh+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: Jul 18 21:33:05 2025 GMT Not After : Jul 25 21:33:05 2025 GMT Subject: CN=687abd92-f52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ec:36:20:dc:6d:9c:ec:30:28:7d:e2:f0:c6: 26:8d:c6:3a:02:65:47:16:83:8f:8e:68:f4:f1:ed: 4f:da:0f:4b:9e:f7:7a:92:74:35:bf:75:62:91:93: 6d:61:a3:4c:82:70:32:d7:61:4e:a4:de:60:1b:fc: f1:2c:27:eb:e6:84:53:29:59:09:50:4f:4f:76:cf: f2:2a:bc:1c:db:f7:2f:d4:28:61:71:3d:28:56:97: cf:00:3d:fd:19:32:f6:d6:0e:98:5b:8f:1d:5e:80: 88:00:08:ff:da:c3:21:d4:96:c3:98:47:f2:82:33: 8e:80:9b:89:12:36:b0:0c:98:e5:f9:fb:c4:ce:84: 2b:06:b0:95:9c:aa:81:26:34:d0:49:ea:47:ce:53: 9f:9a:ea:5e:ed:58:e6:83:b1:21:00:02:1b:59:94: f7:96:63:45:7c:ed:9f:0f:c3:21:a7:a2:c7:c9:5f: 80:30:df:39:cc:89:9f:5b:26:22:17:2e:d0:85:96: 7a:f7:bd:ab:72:9e:bb:b5:98:3f:b5:0a:35:81:d2: a8:ae:3e:fd:30:82:a1:f7:f2:06:f6:9e:aa:fe:01: fc:46:43:0e:dc:90:88:4b:df:19:01:5e:39:52:51: 77:1d:36:3b:fb:f8:95:6b:36:dc:ea:53:5c:c4:3a: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:41:3E:FF:0B:24:B1:2E:62:5A:AB:F1:29:97:2B:18:DF:E7:E7:CD X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9a:a1:49:01:1a:e1:7f:99:49:b3:88:67:e3:2f:06:b4:98: 6b:73:87:c7:c7:64:f8:43:1c:24:c4:f4:3e:b8:3c:ee:81:5b: cc:bf:c8:5f:1a:a2:3a:6b:fe:eb:07:51:df:30:74:a1:86:de: 24:da:65:72:14:8e:6b:9a:af:9a:c6:75:95:76:3a:c4:dc:f2: f7:dd:f2:51:fe:fa:e6:f4:c8:2f:30:19:d9:b7:b5:f9:19:34: 99:48:bd:af:ef:ec:54:6d:c6:dd:31:e9:d3:70:62:ba:da:3f: c2:89:56:95:83:af:41:b2:da:81:6f:04:80:3c:d4:1d:62:bd: 43:d3:42:a3:45:c0:08:6d:45:97:0b:28:b3:65:60:50:ea:9c: 24:1c:49:b0:61:45:d9:a5:c8:6a:41:86:7b:2e:85:7e:51:7d: e6:9d:89:92:12:87:82:88:81:7b:54:f8:2c:e9:97:5d:1d:b0: b1:5d:2d:b5:b4:b7:d5:91:2a:95:92:0b:15:40:c9:bf:c0:99: 25:01:04:be:f1:ff:df:12:98:66:aa:d6:0d:b9:56:5a:6d:c4: f9:8e:ec:bb:cb:b0:13:f3:ca:8a:5e:58:8d:41:bc:33:58:e9: 26:fd:15:ad:77:8e:e3:c0:7e:75:30:0e:70:be:90:e6:ab:5f: a5:4e:11:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUwNzE4MjEzMzA1WhcNMjUwNzI1MjEzMzA1WjAYMRYwFAYD VQQDEw02ODdhYmQ5Mi1mNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ew2INxtnOwwKH3i8MYmjcY6AmVHFoOPjmj08e1P2g9Lnvd6knQ1v3VikZNt YaNMgnAy12FOpN5gG/zxLCfr5oRTKVkJUE9Pds/yKrwc2/cv1ChhcT0oVpfPAD39 GTL21g6YW48dXoCIAAj/2sMh1JbDmEfygjOOgJuJEjawDJjl+fvEzoQrBrCVnKqB JjTQSepHzlOfmupe7Vjmg7EhAAIbWZT3lmNFfO2fD8Mhp6LHyV+AMN85zImfWyYi Fy7QhZZ6972rcp67tZg/tQo1gdKorj79MIKh9/IG9p6q/gH8RkMO3JCIS98ZAV45 UlF3HTY7+/iVazbc6lNcxDp5NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5BPv8L JLEuYlqr8SmXKxjf5+fNMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrmqFJARrhf5lJs4hn4y8GtJhrc4fHx2T4QxwkxPQ+uDzugVvMv8hf GqI6a/7rB1HfMHShht4k2mVyFI5rmq+axnWVdjrE3PL33fJR/vrm9MgvMBnZt7X5 GTSZSL2v7+xUbcbdMenTcGK62j/CiVaVg69BstqBbwSAPNQdYr1D00KjRcAIbUWX CyizZWBQ6pwkHEmwYUXZpchqQYZ7LoV+UX3mnYmSEoeCiIF7VPgs6ZddHbCxXS21 tLfVkSqVkgsVQMm/wJklAQS+8f/fEphmqtYNuVZabcT5juy7y7AT88qKXliNQbwz WOkm/RWtd47jwH51MA5wvpDmq1+lThEe -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:14 2025 by rpki-client