$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: 6sZFnanz8+AgY6cs+zblw8NVEa6B2LM3Od8guU5fHTY= Subject key identifier: 66:FE:31:F4:D0:8B:8F:53:42:BE:9B:B2:CB:40:0E:30:79:67:28:8D Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 078C Signing time: Fri 30 May 2025 21:35:16 +0000 Manifest this update: Fri 30 May 2025 21:35:15 +0000 Manifest next update: Fri 06 Jun 2025 21:35:15 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: Wz87pTBZVARc1qkjMEmWcfIy3qJXouJ373DbrQqIzt4=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: /CO3yu+8isjuDc/p5etccwYJHfw/FsP334mLJY5Rh+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: May 30 21:35:15 2025 GMT Not After : Jun 6 21:35:15 2025 GMT Subject: CN=683a2494-e8b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:aa:f5:45:6f:2f:6b:77:cf:b5:3f:06:a9: 1b:8f:25:64:d7:33:cf:7b:62:00:75:3e:43:7a:49: db:d6:47:68:85:2c:18:3e:9d:cb:b1:26:c5:d5:9e: 2b:a0:67:9c:0d:80:bf:48:8f:5c:e6:b1:05:25:4b: 26:0d:22:d9:ed:19:82:2e:8c:93:55:b7:83:2d:1b: 71:4d:f1:44:44:26:36:f6:a9:f5:2c:24:d1:5b:c4: 5c:10:ac:e3:07:4e:83:0b:2e:d2:7f:9b:9c:bd:70: 60:f7:23:51:0e:df:ef:82:5d:28:8d:25:8b:6c:2a: 94:1a:76:45:59:4d:00:8a:46:57:bc:a2:23:71:e5: c8:e9:93:f5:06:90:75:03:c6:f3:cf:30:f4:4f:a6: 57:ca:9a:22:9c:5a:1e:e1:1d:96:e2:df:de:87:0b: 5c:d4:c4:1b:de:8f:74:35:c2:61:c6:d6:fa:63:f5: 14:bb:fb:0e:15:ba:9d:d0:86:6b:53:cb:9c:bb:52: ce:21:f1:fc:67:a1:03:4d:ce:9c:50:4f:6d:f5:88: 45:c5:82:c0:b6:01:45:da:89:7c:f0:af:b4:9e:e7: 19:8c:91:a7:08:9c:24:01:ba:5e:4c:63:22:c4:d8: a2:36:c4:6f:62:d2:be:94:8b:dc:a5:18:03:60:16: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FE:31:F4:D0:8B:8F:53:42:BE:9B:B2:CB:40:0E:30:79:67:28:8D X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:01:42:3d:30:82:f3:25:43:94:d8:e7:34:2c:f1:40:0d:1c: 7d:49:2e:c7:b6:a3:d0:2c:00:41:b4:28:e0:8f:76:80:e9:2b: e9:52:c0:2a:a7:51:45:28:7f:13:c9:35:70:ec:3f:27:e5:ae: 39:2e:37:d0:6d:83:6d:cc:c4:c0:25:94:f5:ff:ce:07:df:b2: 55:e2:66:23:0b:02:62:cf:d2:fe:54:d6:7d:6d:3a:7b:3f:18: d6:25:db:5c:64:9e:45:38:21:7b:54:be:f1:e0:71:a8:85:dd: 33:16:e5:77:e4:0a:89:0e:b4:62:e1:05:c6:93:88:ae:6a:58: da:22:78:ca:65:e6:43:8a:f5:b5:46:ed:02:9c:df:70:cf:53: 31:4c:30:a0:86:25:b3:08:62:33:6b:24:11:25:98:42:96:dc: 7a:ad:f9:b1:fa:56:0b:62:9d:4c:63:03:7e:dc:0b:ea:19:ec: d1:3b:9c:ad:63:30:5c:b4:67:1e:2b:f0:91:f3:b9:75:48:d5: bc:dc:9a:0f:39:d8:f6:ab:13:3d:df:9b:56:eb:da:54:7c:33: 37:c1:26:a7:a7:e7:a8:86:8d:2c:41:61:1f:4e:a6:bf:24:42: d5:73:f2:84:47:aa:47:fa:2b:22:3e:0b:d1:4e:c6:2a:cd:b7: 4c:be:53:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUwNTMwMjEzNTE1WhcNMjUwNjA2MjEzNTE1WjAYMRYwFAYD VQQDEw02ODNhMjQ5NC1lOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41+q9UVvL2t3z7U/BqkbjyVk1zPPe2IAdT5Deknb1kdohSwYPp3LsSbF1Z4r oGecDYC/SI9c5rEFJUsmDSLZ7RmCLoyTVbeDLRtxTfFERCY29qn1LCTRW8RcEKzj B06DCy7Sf5ucvXBg9yNRDt/vgl0ojSWLbCqUGnZFWU0AikZXvKIjceXI6ZP1BpB1 A8bzzzD0T6ZXypoinFoe4R2W4t/ehwtc1MQb3o90NcJhxtb6Y/UUu/sOFbqd0IZr U8ucu1LOIfH8Z6EDTc6cUE9t9YhFxYLAtgFF2ol88K+0nucZjJGnCJwkAbpeTGMi xNiiNsRvYtK+lIvcpRgDYBZXtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGb+MfTQ i49TQr6bsstADjB5ZyiNMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXAUI9MILzJUOU2Oc0LPFADRx9SS7HtqPQLABBtCjgj3aA6SvpUsAq p1FFKH8TyTVw7D8n5a45LjfQbYNtzMTAJZT1/84H37JV4mYjCwJiz9L+VNZ9bTp7 PxjWJdtcZJ5FOCF7VL7x4HGohd0zFuV35AqJDrRi4QXGk4iualjaInjKZeZDivW1 Ru0CnN9wz1MxTDCghiWzCGIzayQRJZhCltx6rfmx+lYLYp1MYwN+3AvqGezRO5yt YzBctGceK/CR87l1SNW83JoPOdj2qxM935tW69pUfDM3wSanp+eoho0sQWEfTqa/ JELVc/KER6pH+isiPgvRTsYqzbdMvlPP -----END CERTIFICATE-----Generated at Sat May 31 16:49:14 2025 by rpki-client