$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: 3nxQXPuSinYHSNo7uZNuf5r4S6hejZVVmNu8nsUlvrM= Subject key identifier: F3:3F:CD:14:E0:6F:2E:E6:87:44:77:AE:C6:2B:6B:CA:BD:CB:5A:1E Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 13AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 138C Signing time: Wed 02 Jul 2025 17:10:45 +0000 Manifest this update: Wed 02 Jul 2025 17:10:45 +0000 Manifest next update: Wed 09 Jul 2025 17:10:45 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: 7fh4Ljg05Cd5ZCZudC9yDk/6fVSs+Fi6XXp3lCtkT0I=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5037 (0x13ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Jul 2 17:10:45 2025 GMT Not After : Jul 9 17:10:45 2025 GMT Subject: CN=68656815-0dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:03:45:16:e6:10:16:a1:69:b4:2b:7c:d7: 27:32:3d:03:2f:fc:6b:b9:2a:11:63:4f:fc:f5:75: 64:40:51:1b:e8:73:93:38:6e:14:8b:4a:de:65:71: 70:3a:5c:cd:0d:14:ea:95:25:96:38:7a:e6:5c:4d: 57:56:b5:ef:d3:a9:9c:0a:c7:94:05:ed:a5:9b:c0: 45:5c:c6:d6:4d:9a:bf:2d:5f:c3:82:21:10:95:45: a9:49:c6:f2:5c:4b:3d:cf:d8:92:1d:b0:f5:37:b1: fa:e3:0b:8f:4b:a7:f4:c1:14:f6:71:4d:a3:4a:85: 18:ad:83:90:73:5f:c3:71:a7:06:d6:4d:e7:9e:7d: 3f:3d:0c:90:93:e8:c6:bd:65:b5:de:f4:8a:1b:07: 84:c8:c8:de:5f:cc:de:9d:07:36:d4:a8:11:3a:0c: 94:7b:a8:ee:7a:9a:a4:14:6d:1a:60:a3:b9:73:75: 27:51:53:57:12:62:bc:0e:f8:8a:94:b1:34:92:f3: d3:bc:56:19:5b:30:fc:5e:ee:65:40:5c:11:3f:05: 46:f8:83:0a:4c:f7:25:81:55:cb:5a:74:fe:00:1f: 70:6d:44:35:20:61:b9:ca:68:05:7a:81:64:9e:2d: 81:3d:3e:9e:32:96:10:dc:0a:7e:e7:73:0b:b3:0e: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3F:CD:14:E0:6F:2E:E6:87:44:77:AE:C6:2B:6B:CA:BD:CB:5A:1E X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a2:df:be:b8:e1:d4:38:12:6d:ff:dc:fb:0c:a7:6f:60:2a: 7e:90:10:a6:d9:28:1f:02:6f:99:6c:50:60:30:c0:da:5a:46: a2:a3:27:4d:58:a4:6b:cb:63:77:7a:38:e4:6b:e8:35:bc:3e: ac:8e:73:2a:cc:0c:f2:1b:75:c4:56:14:fe:cf:2f:19:28:f0: b9:fb:b6:0b:e3:a4:eb:95:07:17:c5:61:d8:f8:e0:6e:a0:25: d4:72:62:61:40:bd:54:7f:02:c2:a3:e8:d0:0b:29:38:a7:4d: f8:c0:1c:bd:f4:97:90:b7:54:c7:7a:94:0b:dc:8a:96:67:1f: 26:d6:d5:b3:da:31:ce:3e:12:23:50:a9:0c:60:ee:85:6b:ff: b9:d4:dc:e9:c2:53:16:71:5e:5b:67:fd:a3:a9:29:3f:16:3d: cb:c6:3b:5f:70:02:a8:b7:e0:69:bc:29:6b:19:de:22:d7:e0: 23:c8:2d:f1:b5:c2:2a:32:a7:5e:b1:b3:50:3a:d9:9b:cd:f6: 97:77:3b:10:63:5f:a9:52:f6:64:35:f6:b4:43:34:2e:47:97: 9f:ef:29:59:23:fa:e6:7f:c9:65:dc:5c:df:27:2a:ba:e4:4c: 9b:1d:e5:b0:bf:57:f2:0d:dc:47:0e:40:14:37:37:3f:07:25: ae:7b:ae:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUwNzAyMTcxMDQ1WhcNMjUwNzA5MTcxMDQ1WjAYMRYwFAYD VQQDEw02ODY1NjgxNS0wZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPADRRbmEBahabQrfNcnMj0DL/xruSoRY0/89XVkQFEb6HOTOG4Ui0reZXFw OlzNDRTqlSWWOHrmXE1XVrXv06mcCseUBe2lm8BFXMbWTZq/LV/DgiEQlUWpScby XEs9z9iSHbD1N7H64wuPS6f0wRT2cU2jSoUYrYOQc1/DcacG1k3nnn0/PQyQk+jG vWW13vSKGweEyMjeX8zenQc21KgROgyUe6juepqkFG0aYKO5c3UnUVNXEmK8DviK lLE0kvPTvFYZWzD8Xu5lQFwRPwVG+IMKTPclgVXLWnT+AB9wbUQ1IGG5ymgFeoFk ni2BPT6eMpYQ3Ap+53MLsw4r1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPM/zRTg by7mh0R3rsYra8q9y1oeMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtot++uOHUOBJt/9z7DKdvYCp+kBCm2SgfAm+ZbFBgMMDaWkaioydN WKRry2N3ejjka+g1vD6sjnMqzAzyG3XEVhT+zy8ZKPC5+7YL46TrlQcXxWHY+OBu oCXUcmJhQL1UfwLCo+jQCyk4p034wBy99JeQt1THepQL3IqWZx8m1tWz2jHOPhIj UKkMYO6Fa/+51NzpwlMWcV5bZ/2jqSk/Fj3LxjtfcAKot+BpvClrGd4i1+AjyC3x tcIqMqdesbNQOtmbzfaXdzsQY1+pUvZkNfa0QzQuR5ef7ylZI/rmf8ll3FzfJyq6 5EybHeWwv1fyDdxHDkAUNzc/ByWue64h -----END CERTIFICATE-----Generated at Fri Jul 4 15:04:45 2025 by rpki-client