$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft File: wekLXRHZAbDQSjQmCADU4p8cYqw.mft (raw, json) Hash identifier: WwMV+0RVJE1uMNzXWUl4S6xHuPQzKJB3LiaA0Q4p1nk= Subject key identifier: B6:D3:81:E9:A5:9B:5B:60:66:01:10:3D:34:6A:C6:5B:A3:C8:C4:00 Authority key identifier: C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC Certificate issuer: /CN=A91CB3A5/serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft Manifest number: 0783 Signing time: Sat 10 May 2025 21:02:39 +0000 Manifest this update: Sat 10 May 2025 21:02:39 +0000 Manifest next update: Sat 17 May 2025 21:02:39 +0000 Files and hashes: 1: wekLXRHZAbDQSjQmCADU4p8cYqw.crl (hash: CXQXZaZvytUYGR2SyT+mIx3uq1wOoNMBDTg/i13T3rk=) 2: 5B213DB20F8D11EBACF1BE19C4F9AE02.roa (hash: /CO3yu+8isjuDc/p5etccwYJHfw/FsP334mLJY5Rh+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB3A5, serialNumber=C1E90B5D11D901B0D04A34260800D4E29F1C62AC Validity Not Before: May 10 21:02:39 2025 GMT Not After : May 17 21:02:39 2025 GMT Subject: CN=681fbeef-2928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:61:43:77:1e:8a:d8:bb:bc:22:97:44:ad: 09:74:00:65:44:54:1c:f5:cf:98:24:d1:52:e3:3f: e6:d1:dc:77:37:c4:42:79:fa:8c:7d:30:52:29:66: 2f:ad:47:be:50:5f:f2:34:d3:e1:ce:6d:bf:96:5d: b8:a3:90:5e:b4:c8:d7:4d:54:f6:ec:3c:a3:2c:ac: 45:ef:52:eb:b0:6d:11:59:b6:b8:a8:ff:77:dd:6b: 06:43:fa:86:09:5b:4e:84:f1:c7:02:99:e0:92:a8: aa:58:79:98:a5:02:d0:a2:dd:13:c3:34:6c:c6:c2: 37:be:1f:0c:e6:20:b8:d7:46:c3:48:10:56:3d:88: 56:58:28:67:12:94:da:7e:d6:76:7e:66:77:0e:8a: e3:ec:89:f3:c8:16:4f:ac:1c:00:cf:fa:26:7b:a6: fa:3c:2d:a4:26:fe:d8:27:69:a7:01:cc:2e:bf:dc: ba:a4:72:6c:7b:8a:7d:13:7f:04:fc:90:ad:33:1b: fc:d3:2e:99:b0:00:6c:b2:8d:01:ee:19:7c:a9:03: f7:4e:b9:35:e1:28:23:2e:ef:7d:f3:2e:58:36:c0: d1:c2:77:22:72:c4:4b:3f:ab:77:35:fb:4f:d0:51: 91:9c:17:81:fe:da:a3:3d:fe:46:75:bb:88:91:a1: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:81:E9:A5:9B:5B:60:66:01:10:3D:34:6A:C6:5B:A3:C8:C4:00 X509v3 Authority Key Identifier: keyid:C1:E9:0B:5D:11:D9:01:B0:D0:4A:34:26:08:00:D4:E2:9F:1C:62:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wekLXRHZAbDQSjQmCADU4p8cYqw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB3A5/445984380C6B11EBB32D8418C4F9AE02/wekLXRHZAbDQSjQmCADU4p8cYqw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:c4:ff:5e:a0:29:4b:90:c1:56:22:b4:4a:35:78:4d:0b:92: 56:18:af:2c:75:d1:25:09:bc:dd:cf:22:b3:ff:3e:da:9c:a8: e9:b4:70:89:33:43:d3:18:b1:6c:e0:45:99:79:7a:c8:16:6a: f7:83:6c:ba:df:0f:1f:c1:31:86:03:6a:e1:38:83:4b:4d:93: 9e:34:3b:bc:50:28:9d:03:40:81:7c:cc:ed:33:0a:4b:9c:44: 04:17:ab:83:53:22:01:26:d1:b4:4f:e8:ff:e2:72:22:27:46: 15:12:19:42:5d:c5:11:81:47:a2:4d:c7:33:fb:eb:29:d8:05: d0:15:bc:1e:d3:13:47:46:b9:10:bb:93:3d:17:af:81:03:28: fc:ab:93:8d:b3:07:e1:34:ec:6f:3b:ce:aa:fd:48:38:c1:d7: 45:56:6f:fd:bc:55:f5:9d:20:6d:1f:a6:75:e2:85:8a:e4:1e: c8:f8:3b:e9:f8:43:fd:c9:17:46:0d:96:bb:f6:25:d6:c6:ca: e5:f4:a8:22:22:87:2c:20:73:a6:d4:f6:88:cd:52:a2:9f:ff: 55:a2:a6:86:97:5d:e5:62:95:67:ed:e1:6e:29:bb:8e:95:13: 7f:69:90:dd:2b:b1:bf:37:34:a8:10:b9:a6:a1:04:47:f9:e0: 96:84:a2:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IzQTUxMTAvBgNVBAUTKEMxRTkwQjVEMTFEOTAxQjBEMDRBMzQyNjA4MDBENEUy OUYxQzYyQUMwHhcNMjUwNTEwMjEwMjM5WhcNMjUwNTE3MjEwMjM5WjAYMRYwFAYD VQQDEw02ODFmYmVlZi0yOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09xhQ3ceiti7vCKXRK0JdABlRFQc9c+YJNFS4z/m0dx3N8RCefqMfTBSKWYv rUe+UF/yNNPhzm2/ll24o5BetMjXTVT27DyjLKxF71LrsG0RWba4qP933WsGQ/qG CVtOhPHHApngkqiqWHmYpQLQot0TwzRsxsI3vh8M5iC410bDSBBWPYhWWChnEpTa ftZ2fmZ3Dorj7InzyBZPrBwAz/ome6b6PC2kJv7YJ2mnAcwuv9y6pHJse4p9E38E /JCtMxv80y6ZsABsso0B7hl8qQP3Trk14SgjLu998y5YNsDRwncicsRLP6t3NftP 0FGRnBeB/tqjPf5GdbuIkaE0OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbTgeml m1tgZgEQPTRqxlujyMQAMB8GA1UdIwQYMBaAFMHpC10R2QGw0Eo0JggA1OKfHGKs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjNBNS80NDU5ODQzODBD NkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFiRFFTalFtQ0FEVTRwOGNZ cXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dla0xYUkhaQWJEUVNqUW1DQURVNHA4Y1lxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjNBNS80NDU5ODQzODBDNkIxMUVCQjMyRDg0MThDNEY5QUUwMi93ZWtMWFJIWkFi RFFTalFtQ0FEVTRwOGNZcXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQxP9eoClLkMFWIrRKNXhNC5JWGK8sddElCbzdzyKz/z7anKjptHCJ M0PTGLFs4EWZeXrIFmr3g2y63w8fwTGGA2rhOINLTZOeNDu8UCidA0CBfMztMwpL nEQEF6uDUyIBJtG0T+j/4nIiJ0YVEhlCXcURgUeiTccz++sp2AXQFbwe0xNHRrkQ u5M9F6+BAyj8q5ONswfhNOxvO86q/Ug4wddFVm/9vFX1nSBtH6Z14oWK5B7I+Dvp +EP9yRdGDZa79iXWxsrl9KgiIocsIHOm1PaIzVKin/9VoqaGl13lYpVn7eFuKbuO lRN/aZDdK7G/NzSoELmmoQRH+eCWhKIX -----END CERTIFICATE-----Generated at Mon May 12 04:20:09 2025 by rpki-client