$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft File: WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json) Hash identifier: vGs/gttLjoJVDJD7N8qHHxusW070eOm5t+OaAccSdnw= Subject key identifier: DB:0C:75:E3:AE:E1:21:3A:44:2B:7E:1C:62:B8:8D:BC:DD:1B:65:1D Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 Certificate issuer: /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft Manifest number: 06D3 Signing time: Fri 30 May 2025 22:16:44 +0000 Manifest this update: Fri 30 May 2025 22:16:43 +0000 Manifest next update: Fri 06 Jun 2025 22:16:43 +0000 Files and hashes: 1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: yxr4h8j3C8hQa+Z2hGPtunhZbQjaRm9kzJQyumeE8V4=) 2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=) 3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Validity Not Before: May 30 22:16:43 2025 GMT Not After : Jun 6 22:16:43 2025 GMT Subject: CN=683a2e4c-23a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:06:ab:d6:34:64:8a:6d:38:40:de:de:bd: 57:94:b9:cd:2f:02:35:20:73:df:2a:8d:64:12:dd: 52:fb:73:74:14:11:e8:e6:46:ea:83:5d:65:5d:d7: e4:eb:c2:a3:2c:92:a8:bc:7b:92:c4:84:e5:ba:6f: a0:56:d4:bb:0f:8a:eb:06:7e:05:a1:22:8a:e2:6c: 24:4b:de:2a:24:6c:f6:0c:f5:71:76:6d:d0:ad:f6: e7:8e:f0:9d:db:46:79:1b:1f:82:67:d6:b3:0f:e2: ee:0d:4f:3f:6f:5d:75:04:52:ea:47:f2:7a:be:55: 86:1a:ea:b6:27:ea:b3:12:98:76:69:30:48:7d:33: 05:1e:e8:75:9a:6b:35:77:98:66:97:2c:37:7e:46: 49:97:f9:8f:d6:60:32:78:b9:31:44:93:e8:14:07: e3:6f:e7:37:0a:5f:99:52:f9:9e:fd:4b:4f:3c:5f: 90:c1:e0:3c:bd:50:a4:5e:ed:59:7a:59:3a:0c:69: 78:f9:55:91:b0:05:b1:b8:4c:8b:15:6c:3b:7d:51: ec:10:60:f1:a5:6f:75:bb:31:c4:19:9d:58:76:12: 95:ab:86:b5:78:db:ed:61:f6:3f:98:29:56:13:fe: a0:fc:ca:cb:a8:8e:64:66:2b:4b:71:2c:5f:76:91: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0C:75:E3:AE:E1:21:3A:44:2B:7E:1C:62:B8:8D:BC:DD:1B:65:1D X509v3 Authority Key Identifier: keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:43:b9:2d:06:f6:e6:fb:b9:d8:10:14:5e:3a:76:a2:57:87: 3e:72:cf:81:1e:0d:f3:ec:f9:48:51:a1:fe:02:73:91:34:a4: 6e:b6:23:a6:ec:c2:e6:46:b0:40:fc:f2:33:05:ac:a8:09:4d: bf:f4:b0:a9:4e:fd:41:e2:46:96:d8:c5:44:7d:80:13:24:b1: 5f:99:00:63:4a:f3:84:5d:ff:e9:30:02:6a:e6:88:32:02:c2: 61:84:10:be:04:0e:51:fb:25:f7:7f:44:ca:ba:4e:9e:a1:80: b1:a7:fc:ab:cb:3a:50:b0:54:ea:e5:dc:27:10:b9:fb:11:bf: 26:54:f4:3c:1c:fc:fb:9b:83:c2:a6:fd:e7:41:a1:53:6f:73: 6e:c7:51:00:b1:14:85:6a:69:0d:60:cf:8b:a1:71:e1:b8:70: 48:65:82:32:5f:c4:99:b3:f3:8d:1e:6f:5f:9d:e4:7b:d9:38: 5d:8b:30:ff:ca:89:46:4a:52:bc:6a:d3:77:fd:ed:92:d1:c3: 57:2c:df:8c:da:0c:74:47:a8:38:a2:31:e6:39:4c:ac:97:dc: 4b:8c:97:5b:42:ac:e0:26:95:f2:10:77:09:47:68:4f:b2:58: 8f:22:6f:c0:93:6a:4e:c8:99:d8:1f:d5:d0:2c:16:46:08:b9: 0d:4e:4e:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1QjIxMTAvBgNVBAUTKDU4NDA4RDJDOUVGNzk5NTExQTZFNUQ3MEY4MkVDODY5 OTZGMzEzRjQwHhcNMjUwNTMwMjIxNjQzWhcNMjUwNjA2MjIxNjQzWjAYMRYwFAYD VQQDEw02ODNhMmU0Yy0yM2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRUGq9Y0ZIptOEDe3r1XlLnNLwI1IHPfKo1kEt1S+3N0FBHo5kbqg11lXdfk 68KjLJKovHuSxITlum+gVtS7D4rrBn4FoSKK4mwkS94qJGz2DPVxdm3QrfbnjvCd 20Z5Gx+CZ9azD+LuDU8/b111BFLqR/J6vlWGGuq2J+qzEph2aTBIfTMFHuh1mms1 d5hmlyw3fkZJl/mP1mAyeLkxRJPoFAfjb+c3Cl+ZUvme/UtPPF+QweA8vVCkXu1Z elk6DGl4+VWRsAWxuEyLFWw7fVHsEGDxpW91uzHEGZ1YdhKVq4a1eNvtYfY/mClW E/6g/MrLqI5kZitLcSxfdpFozQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsMdeOu 4SE6RCt+HGK4jbzdG2UdMB8GA1UdIwQYMBaAFFhAjSye95lRGm5dcPguyGmW8xP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVCMi8yMDhGRjlEMjU3 NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21WRWFibDF3LUM3SWFaYnpF X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dFQ05MSjczbVZFYWJsMXctQzdJYVpiekVfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVCMi8yMDhGRjlEMjU3NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21W RWFibDF3LUM3SWFaYnpFX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoQ7ktBvbm+7nYEBReOnaiV4c+cs+BHg3z7PlIUaH+AnORNKRutiOm 7MLmRrBA/PIzBayoCU2/9LCpTv1B4kaW2MVEfYATJLFfmQBjSvOEXf/pMAJq5ogy AsJhhBC+BA5R+yX3f0TKuk6eoYCxp/yryzpQsFTq5dwnELn7Eb8mVPQ8HPz7m4PC pv3nQaFTb3Nux1EAsRSFamkNYM+LoXHhuHBIZYIyX8SZs/ONHm9fneR72ThdizD/ yolGSlK8atN3/e2S0cNXLN+M2gx0R6g4ojHmOUysl9xLjJdbQqzgJpXyEHcJR2hP sliPIm/Ak2pOyJnYH9XQLBZGCLkNTk7T -----END CERTIFICATE-----Generated at Sat May 31 16:43:03 2025 by rpki-client