$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: oTiW8G4TzF8xcKPYL234hqw4UBFlpVAC+brVi+zgm3U= Subject key identifier: B4:D9:B1:AE:33:55:8E:BD:A0:0E:62:3E:F7:57:F6:EB:F9:72:94:75 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 13A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 1382 Signing time: Thu 12 Jun 2025 16:56:08 +0000 Manifest this update: Thu 12 Jun 2025 16:56:08 +0000 Manifest next update: Thu 19 Jun 2025 16:56:08 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: Ik3D7PB5kV4SdsXwdRsLRIJeB2xgKpxsnKYpwqa1JbE=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5027 (0x13a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Jun 12 16:56:08 2025 GMT Not After : Jun 19 16:56:08 2025 GMT Subject: CN=684b06a8-1481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3f:3c:19:29:a4:11:46:6f:6f:ab:c3:95:35: ae:42:78:22:59:c3:88:15:a2:1d:16:72:18:e2:2d: 36:f2:63:e5:83:d8:77:70:a4:d2:f7:47:f8:66:5a: 95:ad:b3:28:35:10:96:de:1a:82:d5:ec:b1:b4:33: 0d:7e:d2:99:d2:cc:af:5d:c3:de:ca:f4:aa:9a:1b: 52:a6:a1:7b:d9:22:96:f7:a6:1d:43:44:b3:cf:28: 0b:4a:02:ef:51:59:25:32:93:76:e1:8b:40:90:a0: 3b:84:95:c0:f2:12:a4:aa:96:d4:dc:1a:d4:4d:dd: 5f:e6:28:3a:88:13:a0:b4:8c:ff:31:fa:9e:4c:13: d1:1c:48:29:a7:96:05:35:d5:52:14:80:a8:09:6a: 81:15:ba:27:4b:01:c6:34:0b:83:38:b9:ed:2f:85: 11:85:e9:68:0a:af:e5:90:55:fb:41:6f:bf:6b:11: 8d:f6:a2:f7:04:b1:26:92:2d:72:a1:d7:f3:55:ee: 69:f4:fd:58:30:2a:2a:5f:61:49:4a:66:2d:12:e4: 83:2d:36:7a:a2:c0:f5:25:52:16:cc:fc:2a:d4:c2: b0:6b:03:78:9e:b1:70:6e:d1:4f:e4:39:6c:fb:26: ad:8b:00:1e:42:54:55:a4:ee:3e:22:80:5b:a4:93: c2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D9:B1:AE:33:55:8E:BD:A0:0E:62:3E:F7:57:F6:EB:F9:72:94:75 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bd:91:40:fc:b2:9d:d6:28:5c:d1:2e:97:1b:8a:d1:b6:f5: d7:a6:91:b3:01:1e:df:40:2c:2b:63:a6:30:00:22:f5:df:c1: a4:e9:ba:63:a5:ca:f9:83:8a:fd:31:71:cf:1f:30:a7:95:5f: 8c:c7:85:c2:a0:33:4a:68:22:8c:d2:c5:b3:2e:99:d8:7d:29: 00:1d:20:90:82:62:c8:2b:7d:d8:da:34:8f:c6:f3:ca:5a:a9: c3:15:95:c1:40:31:38:75:c0:8b:6d:e2:49:69:ce:cd:53:57: 5c:66:a6:9e:e2:b5:fe:05:30:2d:f8:28:3a:17:d9:61:ca:d1: 0a:01:5c:21:f8:d5:3c:8f:a3:e2:be:6d:96:47:ef:a9:87:e6: b0:e2:d6:52:03:f2:02:6f:35:3d:e7:31:78:a6:34:52:4c:1f: 97:53:97:e8:22:ef:37:bc:dc:b3:24:ed:c2:9e:ff:ed:de:cd: 14:37:5b:f5:a8:11:10:b1:e1:16:ac:0f:b9:74:2c:cc:d2:f1: 3f:c8:4a:7c:ed:46:fc:ad:bc:d5:72:e7:f7:96:f6:1c:f7:1b: 08:c2:04:59:f0:26:a7:d9:03:8a:17:4b:62:85:7e:8c:1c:35: 59:da:71:32:1c:28:99:4f:9d:34:65:65:60:f9:43:fb:72:3d: 66:bf:cf:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUwNjEyMTY1NjA4WhcNMjUwNjE5MTY1NjA4WjAYMRYwFAYD VQQDEw02ODRiMDZhOC0xNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T88GSmkEUZvb6vDlTWuQngiWcOIFaIdFnIY4i028mPlg9h3cKTS90f4ZlqV rbMoNRCW3hqC1eyxtDMNftKZ0syvXcPeyvSqmhtSpqF72SKW96YdQ0SzzygLSgLv UVklMpN24YtAkKA7hJXA8hKkqpbU3BrUTd1f5ig6iBOgtIz/MfqeTBPRHEgpp5YF NdVSFICoCWqBFbonSwHGNAuDOLntL4URheloCq/lkFX7QW+/axGN9qL3BLEmki1y odfzVe5p9P1YMCoqX2FJSmYtEuSDLTZ6osD1JVIWzPwq1MKwawN4nrFwbtFP5Dls +yatiwAeQlRVpO4+IoBbpJPCpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLTZsa4z VY69oA5iPvdX9uv5cpR1MB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPvZFA/LKd1ihc0S6XG4rRtvXXppGzAR7fQCwrY6YwACL138Gk6bpj pcr5g4r9MXHPHzCnlV+Mx4XCoDNKaCKM0sWzLpnYfSkAHSCQgmLIK33Y2jSPxvPK WqnDFZXBQDE4dcCLbeJJac7NU1dcZqae4rX+BTAt+Cg6F9lhytEKAVwh+NU8j6Pi vm2WR++ph+aw4tZSA/ICbzU95zF4pjRSTB+XU5foIu83vNyzJO3Cnv/t3s0UN1v1 qBEQseEWrA+5dCzM0vE/yEp87Ub8rbzVcuf3lvYc9xsIwgRZ8Can2QOKF0tihX6M HDVZ2nEyHCiZT500ZWVg+UP7cj1mv8+O -----END CERTIFICATE-----Generated at Sat Jun 14 15:31:04 2025 by rpki-client