$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: ii1gZ85Eiu/ucmwzbsOKX6qom4ecfgwaATFA7Brzf74= Subject key identifier: 6C:24:67:15:5D:56:47:54:75:79:AF:73:8F:1A:CB:DC:DD:5C:70:A9 Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 079C Signing time: Mon 30 Jun 2025 21:31:43 +0000 Manifest this update: Mon 30 Jun 2025 21:31:42 +0000 Manifest next update: Mon 07 Jul 2025 21:31:42 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: vmm7Xj5pbYHkS1ORQycm4RTROkUmbbjlNfAb7bym+9E=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: /CO3yu+8isjuDc/p5etccwYJHfw/FsP334mLJY5Rh+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: Jun 30 21:31:42 2025 GMT Not After : Jul 7 21:31:42 2025 GMT Subject: CN=6863023e-9710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f7:27:5c:bc:96:2d:f1:f1:ed:52:f9:42:7e: eb:87:9b:93:0f:5a:88:42:7e:ae:79:ca:b2:93:60: de:02:78:d7:a9:e2:cc:4c:87:cf:17:54:bc:cf:bb: a7:b8:95:00:22:46:59:3e:6f:32:7c:c9:f5:36:1a: c2:df:f4:88:e9:7c:3c:85:aa:c7:1a:b7:6c:94:de: 48:57:77:2f:14:8e:84:7d:e3:ca:a8:12:14:d6:bb: c3:f7:93:6e:27:8a:ea:fc:c0:83:b8:14:25:76:a6: a0:2f:c4:b9:a9:7b:32:0c:cb:35:69:17:1e:00:8d: e3:31:c8:60:4b:4d:7c:e4:53:c6:47:95:a0:ed:b5: 61:5f:48:bd:8d:cc:28:19:74:ea:17:44:13:20:d4: f1:39:14:a6:6b:05:30:95:da:4f:46:6b:fc:de:5e: 8c:98:7a:d4:51:93:f2:a8:1c:5d:b8:ee:6c:c2:f5: cd:e4:38:e0:93:2e:71:ea:79:f0:09:75:04:c4:d9: df:a7:05:fd:dc:ac:1c:a7:b9:cb:16:61:cc:ae:51: 75:8a:4f:41:05:78:62:38:54:38:1c:45:be:c9:41: 95:0c:ed:de:1b:5b:aa:e0:9c:37:3c:97:6d:d0:8f: ea:db:62:c8:62:44:36:e0:a6:69:a6:66:c2:b3:87: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:24:67:15:5D:56:47:54:75:79:AF:73:8F:1A:CB:DC:DD:5C:70:A9 X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:65:1d:f7:ea:10:b0:48:51:20:bf:ad:93:7e:4b:f8:c2: 45:82:48:83:ad:77:55:f8:a7:0b:7d:ac:15:56:14:16:8b:db: 38:e1:24:f6:d5:09:57:f5:be:e9:4b:c5:1d:d5:29:ff:5b:ec: 84:87:12:8a:45:eb:4b:51:c2:e7:5b:34:66:d3:41:91:25:2f: 6b:20:96:30:41:47:cd:e2:13:6e:08:04:0c:72:54:97:ca:b4: 6e:69:e1:11:90:e0:54:3a:74:aa:5b:bb:f5:40:03:39:f0:f7: 72:e3:e8:d3:bf:60:f2:39:b2:ba:8e:eb:b2:8e:7b:90:67:9d: 04:9e:de:eb:1e:7f:10:6c:08:be:a4:66:5f:06:5e:ba:06:f2: c2:67:6b:e5:f3:e9:0c:7f:1b:27:74:9c:09:47:5b:ef:5d:f6: 17:aa:8b:cb:1a:c0:67:72:e7:b9:3d:4e:00:e2:99:96:ab:a7: f5:7e:0e:d7:a5:d3:bf:f1:a5:31:3b:63:23:d1:b5:c2:a7:d6: c4:e2:a4:a9:7a:17:58:43:3d:34:d9:b1:53:72:25:ad:54:af: 57:aa:1c:9c:ae:bc:36:c5:a5:1b:a7:78:de:f5:c7:46:6a:15: 1a:92:c2:6b:ca:bb:b4:b0:aa:7c:2f:cc:7c:57:8d:be:e0:47: 70:1d:83:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUwNjMwMjEzMTQyWhcNMjUwNzA3MjEzMTQyWjAYMRYwFAYD VQQDEw02ODYzMDIzZS05NzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6/cnXLyWLfHx7VL5Qn7rh5uTD1qIQn6uecqyk2DeAnjXqeLMTIfPF1S8z7un uJUAIkZZPm8yfMn1NhrC3/SI6Xw8harHGrdslN5IV3cvFI6EfePKqBIU1rvD95Nu J4rq/MCDuBQldqagL8S5qXsyDMs1aRceAI3jMchgS0185FPGR5Wg7bVhX0i9jcwo GXTqF0QTINTxORSmawUwldpPRmv83l6MmHrUUZPyqBxduO5swvXN5Djgky5x6nnw CXUExNnfpwX93Kwcp7nLFmHMrlF1ik9BBXhiOFQ4HEW+yUGVDO3eG1uq4Jw3PJdt 0I/q22LIYkQ24KZppmbCs4daIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwkZxVd VkdUdXmvc48ay9zdXHCpMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBdGUd9+oQsEhRIL+tk35L+MJFgkiDrXdV+KcLfawVVhQWi9s44ST2 1QlX9b7pS8Ud1Sn/W+yEhxKKRetLUcLnWzRm00GRJS9rIJYwQUfN4hNuCAQMclSX yrRuaeERkOBUOnSqW7v1QAM58Pdy4+jTv2DyObK6juuyjnuQZ50Ent7rHn8QbAi+ pGZfBl66BvLCZ2vl8+kMfxsndJwJR1vvXfYXqovLGsBncue5PU4A4pmWq6f1fg7X pdO/8aUxO2Mj0bXCp9bE4qSpehdYQz002bFTciWtVK9Xqhycrrw2xaUbp3je9cdG ahUaksJryru0sKp8L8x8V42+4EdwHYMo -----END CERTIFICATE-----Generated at Wed Jul 2 07:28:46 2025 by rpki-client