$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft File: WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json) Hash identifier: imM6+o+/JPGb7393VLMkg7y6JNhOP0Z3bqRXf706MzQ= Subject key identifier: D1:B8:D4:D1:19:95:D1:74:37:DF:5D:3F:95:D3:F8:A6:5B:73:11:F7 Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 Certificate issuer: /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft Manifest number: 06C9 Signing time: Sat 10 May 2025 21:43:29 +0000 Manifest this update: Sat 10 May 2025 21:43:29 +0000 Manifest next update: Sat 17 May 2025 21:43:29 +0000 Files and hashes: 1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: 1X/1ZImBY6p1v9k0KkTl2dbcFRxEw307ciFgOcbBjhc=) 2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=) 3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Validity Not Before: May 10 21:43:29 2025 GMT Not After : May 17 21:43:29 2025 GMT Subject: CN=681fc881-bc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:e1:c3:f7:94:86:ae:55:f2:a7:35:08:a7: b4:e6:03:36:c0:0c:9c:d7:f9:78:d6:46:cb:ed:3b: d4:d7:b7:4e:42:a8:9a:a0:74:68:67:11:9c:48:0e: 25:bf:80:f6:10:2d:d8:fc:c7:46:b1:49:f2:01:58: 25:27:56:72:3c:f2:a1:2b:3f:e4:d7:5e:10:24:fc: f8:38:4c:23:18:77:e0:3a:d4:77:fb:6a:b4:4b:7f: d9:8b:45:35:ba:80:c8:23:f3:ab:c9:e7:e1:70:f1: 44:80:7e:30:52:ea:2e:c2:0b:6d:3d:bc:db:b8:98: 74:1d:17:fc:b4:33:5c:6f:e7:88:7b:6d:e7:50:30: 10:4f:df:9f:6d:9a:3e:f9:d2:c9:37:5c:13:76:cd: c7:de:81:69:ea:03:9c:55:2f:5e:01:20:0f:2d:e4: 33:70:3a:9e:da:6c:d2:95:cc:ae:17:c3:98:57:e3: 52:d6:69:44:21:3c:b1:97:f3:f7:18:1d:2f:87:22: 64:be:0b:5d:66:71:14:1d:04:44:d4:52:75:7b:a8: 1c:1e:8f:85:b3:c6:b3:4d:81:94:e3:a8:05:bd:39: 38:92:32:02:87:96:a8:fe:ec:07:37:5a:3e:6e:0a: 11:54:25:bb:cf:9e:35:aa:81:44:ef:dc:a9:90:13: 5b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B8:D4:D1:19:95:D1:74:37:DF:5D:3F:95:D3:F8:A6:5B:73:11:F7 X509v3 Authority Key Identifier: keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:5f:a9:0b:29:f1:64:29:74:21:d5:d0:dd:e7:70:5f:ff:d3: 16:a4:2b:d8:09:62:73:db:66:28:1f:c3:9c:c0:43:59:d4:cc: 42:cb:0e:23:06:ff:21:04:a1:46:bb:b1:4a:de:6f:9e:c6:7b: 2f:2f:3d:91:5e:fe:c5:22:2c:1e:70:0d:d0:74:dd:08:c8:3d: 0d:b1:f0:9b:2d:9e:d7:0c:b5:6e:f3:c1:75:2b:9b:61:0b:50: 34:09:26:76:d9:bf:7e:4d:34:77:3a:7f:6b:97:e6:23:f8:a9: 5d:7d:b9:6d:d8:f7:87:cc:63:e2:59:c9:36:16:43:55:9c:cf: de:17:7c:6f:27:d6:c1:9a:16:77:ed:f7:9c:7d:62:21:84:b8: 03:8a:3f:3d:c2:6a:52:05:5f:37:60:1a:46:20:6e:ed:e5:07: 56:a2:30:b7:05:19:e4:94:52:1b:49:03:7a:b6:6c:17:e2:50: d2:c0:04:7b:8f:f1:ae:b8:39:d9:3a:19:79:3b:78:c8:f5:6f: 25:4a:39:96:d6:d9:9b:c2:70:10:f4:64:3a:8b:59:3c:0d:7a: dc:cd:ab:28:ad:48:ee:68:10:b1:35:b9:3b:1c:f3:be:d0:12: 50:85:f6:7c:2d:a0:09:c2:6e:31:04:6d:5d:0d:da:4d:05:9b: 6e:79:47:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1QjIxMTAvBgNVBAUTKDU4NDA4RDJDOUVGNzk5NTExQTZFNUQ3MEY4MkVDODY5 OTZGMzEzRjQwHhcNMjUwNTEwMjE0MzI5WhcNMjUwNTE3MjE0MzI5WjAYMRYwFAYD VQQDEw02ODFmYzg4MS1iYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdnhw/eUhq5V8qc1CKe05gM2wAyc1/l41kbL7TvU17dOQqiaoHRoZxGcSA4l v4D2EC3Y/MdGsUnyAVglJ1ZyPPKhKz/k114QJPz4OEwjGHfgOtR3+2q0S3/Zi0U1 uoDII/OryefhcPFEgH4wUuouwgttPbzbuJh0HRf8tDNcb+eIe23nUDAQT9+fbZo+ +dLJN1wTds3H3oFp6gOcVS9eASAPLeQzcDqe2mzSlcyuF8OYV+NS1mlEITyxl/P3 GB0vhyJkvgtdZnEUHQRE1FJ1e6gcHo+Fs8azTYGU46gFvTk4kjICh5ao/uwHN1o+ bgoRVCW7z541qoFE79ypkBNbEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG41NEZ ldF0N99dP5XT+KZbcxH3MB8GA1UdIwQYMBaAFFhAjSye95lRGm5dcPguyGmW8xP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVCMi8yMDhGRjlEMjU3 NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21WRWFibDF3LUM3SWFaYnpF X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dFQ05MSjczbVZFYWJsMXctQzdJYVpiekVfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVCMi8yMDhGRjlEMjU3NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21W RWFibDF3LUM3SWFaYnpFX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnX6kLKfFkKXQh1dDd53Bf/9MWpCvYCWJz22YoH8OcwENZ1MxCyw4j Bv8hBKFGu7FK3m+exnsvLz2RXv7FIiwecA3QdN0IyD0NsfCbLZ7XDLVu88F1K5th C1A0CSZ22b9+TTR3On9rl+Yj+Kldfblt2PeHzGPiWck2FkNVnM/eF3xvJ9bBmhZ3 7fecfWIhhLgDij89wmpSBV83YBpGIG7t5QdWojC3BRnklFIbSQN6tmwX4lDSwAR7 j/GuuDnZOhl5O3jI9W8lSjmW1tmbwnAQ9GQ6i1k8DXrczasorUjuaBCxNbk7HPO+ 0BJQhfZ8LaAJwm4xBG1dDdpNBZtueUdI -----END CERTIFICATE-----Generated at Mon May 12 17:47:42 2025 by rpki-client