$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft File: WECNLJ73mVEabl1w-C7IaZbzE_Q.mft (raw, json) Hash identifier: FnIRVLs77Y57Qfk8LV0NvTGvfUby1K5GZKV2OYCwMvw= Subject key identifier: 40:5A:F5:AB:96:03:82:58:0C:A4:ED:0F:C2:E9:75:83:49:11:17:74 Authority key identifier: 58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 Certificate issuer: /CN=A91B85B2/serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Certificate serial: 06CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft Manifest number: 06C1 Signing time: Thu 24 Apr 2025 21:55:17 +0000 Manifest this update: Thu 24 Apr 2025 21:55:16 +0000 Manifest next update: Thu 01 May 2025 21:55:16 +0000 Files and hashes: 1: WECNLJ73mVEabl1w-C7IaZbzE_Q.crl (hash: lNyb8eY8uXPP/6sWDTdUdTKzN2oXgWCJVfMTEyrvgyU=) 2: E4A690EE5AC211EFAB8E8C16C4F9AE02.roa (hash: HLY05ebeHAtJDynZ8me2Y2C5RnqZ102UvmuTDf9sJCY=) 3: 3DD34804574A11EBB748600AC4F9AE02.roa (hash: DfemyX/xIQ4GwH9xKpPchh2dJwYny+kmeqQr/W+Rj/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B85B2, serialNumber=58408D2C9EF799511A6E5D70F82EC86996F313F4 Validity Not Before: Apr 24 21:55:16 2025 GMT Not After : May 1 21:55:16 2025 GMT Subject: CN=680ab344-a13d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:af:fb:0d:ca:85:d5:b9:4d:83:a8:c8:3f: 1b:0c:4e:f0:a9:ca:c5:4e:3e:15:a9:16:25:4a:f0: a3:b5:be:7d:e3:fe:1c:a5:56:75:34:f2:8d:ae:c7: 4f:db:3a:1f:0a:ae:f9:fd:85:07:75:88:3b:43:f4: 59:0f:b5:7d:42:3f:c2:aa:78:4b:45:6d:bc:9e:d5: fd:b3:69:d7:70:3b:45:32:8c:67:c3:72:d8:ea:ed: 97:bd:7e:17:dc:ff:de:a3:99:0a:d0:b2:f8:6c:97: 32:a9:15:84:be:04:a4:b3:5d:33:db:05:d3:4f:ea: a7:56:1e:c6:39:e6:c6:ab:6a:4b:96:d2:12:de:6a: cc:85:dd:f0:ec:41:b4:f2:74:a5:65:20:74:1a:ac: c5:88:f9:c0:dc:95:8b:b9:86:96:14:3c:13:a4:63: 5f:43:f4:83:f3:85:1d:62:62:3e:8c:f8:0c:a2:ae: 3c:0c:2a:8a:c0:25:9d:31:31:99:02:0b:93:4d:e3: c7:40:9b:5e:4b:ac:19:ef:d1:3f:ca:f1:2a:8a:68: 6c:ef:81:84:21:15:26:49:77:01:52:1c:62:54:06: e5:e8:5b:5f:2e:1b:b3:ad:f9:58:13:7f:eb:73:c5: 88:96:fe:e8:24:6e:94:5a:86:d4:68:93:b7:48:a3: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5A:F5:AB:96:03:82:58:0C:A4:ED:0F:C2:E9:75:83:49:11:17:74 X509v3 Authority Key Identifier: keyid:58:40:8D:2C:9E:F7:99:51:1A:6E:5D:70:F8:2E:C8:69:96:F3:13:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WECNLJ73mVEabl1w-C7IaZbzE_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85B2/208FF9D2574911EBBB23D509C4F9AE02/WECNLJ73mVEabl1w-C7IaZbzE_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:79:fc:c5:7e:0c:99:d0:5a:56:12:d1:1f:45:b2:b3:6e:4c: 0d:02:8f:4e:ee:11:37:f6:6a:b1:bd:49:94:a2:2e:ae:e8:08: 11:3d:c0:0f:35:22:c8:b6:79:c1:67:c9:b3:b4:86:1c:95:2c: bc:11:9d:9a:3b:28:e5:5a:1a:74:f6:4d:b3:86:80:71:af:24: 29:a7:44:b9:c3:23:a2:1d:71:3d:b4:8d:79:5b:13:50:05:a9: 58:3e:6c:cc:87:d0:47:d4:22:5d:77:2d:52:a1:ec:a2:4d:bc: 17:1a:01:01:b4:c8:d8:48:8f:e2:24:75:cb:ca:ea:d7:46:63: 09:64:3e:74:29:70:40:8a:69:09:ab:bc:dd:e2:ce:66:fe:19: f5:2f:40:cd:50:e5:28:c9:c0:3d:bf:27:5f:8c:41:87:42:7f: e9:9a:b7:56:4b:28:a1:4e:fa:ed:eb:99:55:23:ff:fa:13:ff: dd:51:43:46:b0:64:e6:c3:b4:76:b2:78:00:48:26:dc:e9:ee: 28:85:b3:5c:b8:bf:4b:0b:c7:30:a8:7c:07:8b:c3:c4:fa:ae: 05:be:3d:86:d8:69:05:cc:58:72:f9:2e:3a:50:b4:d2:5d:b0: 32:d3:f6:95:52:17:22:4c:b1:e4:18:4e:e6:4a:55:3f:19:10: d2:0c:26:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg1QjIxMTAvBgNVBAUTKDU4NDA4RDJDOUVGNzk5NTExQTZFNUQ3MEY4MkVDODY5 OTZGMzEzRjQwHhcNMjUwNDI0MjE1NTE2WhcNMjUwNTAxMjE1NTE2WjAYMRYwFAYD VQQDEw02ODBhYjM0NC1hMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX6v+w3KhdW5TYOoyD8bDE7wqcrFTj4VqRYlSvCjtb594/4cpVZ1NPKNrsdP 2zofCq75/YUHdYg7Q/RZD7V9Qj/CqnhLRW28ntX9s2nXcDtFMoxnw3LY6u2XvX4X 3P/eo5kK0LL4bJcyqRWEvgSks10z2wXTT+qnVh7GOebGq2pLltIS3mrMhd3w7EG0 8nSlZSB0GqzFiPnA3JWLuYaWFDwTpGNfQ/SD84UdYmI+jPgMoq48DCqKwCWdMTGZ AguTTePHQJteS6wZ79E/yvEqimhs74GEIRUmSXcBUhxiVAbl6FtfLhuzrflYE3/r c8WIlv7oJG6UWobUaJO3SKMdfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBa9auW A4JYDKTtD8LpdYNJERd0MB8GA1UdIwQYMBaAFFhAjSye95lRGm5dcPguyGmW8xP0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODVCMi8yMDhGRjlEMjU3 NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21WRWFibDF3LUM3SWFaYnpF X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dFQ05MSjczbVZFYWJsMXctQzdJYVpiekVfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODVCMi8yMDhGRjlEMjU3NDkxMUVCQkIyM0Q1MDlDNEY5QUUwMi9XRUNOTEo3M21W RWFibDF3LUM3SWFaYnpFX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJefzFfgyZ0FpWEtEfRbKzbkwNAo9O7hE39mqxvUmUoi6u6AgRPcAP NSLItnnBZ8mztIYclSy8EZ2aOyjlWhp09k2zhoBxryQpp0S5wyOiHXE9tI15WxNQ BalYPmzMh9BH1CJddy1SoeyiTbwXGgEBtMjYSI/iJHXLyurXRmMJZD50KXBAimkJ q7zd4s5m/hn1L0DNUOUoycA9vydfjEGHQn/pmrdWSyihTvrt65lVI//6E//dUUNG sGTmw7R2sngASCbc6e4ohbNcuL9LC8cwqHwHi8PE+q4Fvj2G2GkFzFhy+S46ULTS XbAy0/aVUhciTLHkGE7mSlU/GRDSDCYS -----END CERTIFICATE-----Generated at Sat Apr 26 13:00:36 2025 by rpki-client