$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: 18woeS7q1E5VtqyKaM5nmN0r7IKPpVsvlDkhxJf0WNw= Subject key identifier: F7:85:5B:32:91:53:1E:FE:A3:03:55:5A:A8:25:01:42:D2:33:D5:89 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 13A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 1383 Signing time: Sat 14 Jun 2025 16:56:35 +0000 Manifest this update: Sat 14 Jun 2025 16:56:34 +0000 Manifest next update: Sat 21 Jun 2025 16:56:34 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: CF8hV8zzJU7WFrFXbwBHV+emqEGT31g2b09aDkDHtpk=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5028 (0x13a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Jun 14 16:56:34 2025 GMT Not After : Jun 21 16:56:34 2025 GMT Subject: CN=684da9c3-eacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:d0:fd:e8:72:3c:f1:38:94:f4:72:e8:da: 96:fb:f9:e6:b5:26:45:9c:d4:53:4f:2a:6f:b6:f5: 94:a8:64:73:53:cc:c8:9d:8e:92:3d:76:a1:b0:ee: d6:bd:8b:ae:ff:23:aa:33:96:d2:76:95:b0:47:ce: 1c:89:86:c3:56:e3:76:6d:d6:47:d5:ad:a3:ed:9f: b7:00:a9:fb:d2:29:f3:67:b5:cc:78:57:fb:f2:8c: ad:42:85:cd:55:c9:1f:42:e5:db:a5:df:64:a2:8d: 63:c7:b0:3c:f8:66:72:99:22:cc:bb:30:07:e5:58: 4e:cb:f7:b9:f7:a1:0d:01:d8:42:90:9c:40:a2:4f: 21:2e:a2:6b:8e:a5:9d:cc:d0:d1:bd:11:9f:3d:d2: 28:6e:03:c1:d5:cc:08:e3:00:17:43:ee:ee:ef:86: 6d:6d:64:72:c7:a3:df:ab:3d:78:74:f2:dc:f4:ee: 71:de:23:29:c4:ab:a1:0b:a7:2f:d1:40:71:95:78: cc:be:a1:0a:88:8c:ca:2a:32:d5:b7:59:15:12:96: bd:c3:3b:80:b2:c5:ea:9a:be:5a:f4:20:e4:53:11: d3:d6:2f:1c:1c:d2:a0:e8:29:4c:7a:48:b9:b0:ad: 43:f7:a7:72:0a:81:29:dc:ae:89:d1:5a:6d:74:ad: e1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:85:5B:32:91:53:1E:FE:A3:03:55:5A:A8:25:01:42:D2:33:D5:89 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:7b:7f:bf:fd:63:50:ee:c7:e1:87:ff:bb:b5:6c:06:37:f1: da:d0:6d:ea:44:f9:e6:77:5b:e2:d5:da:d3:34:c1:a0:88:42: 96:9c:0a:3c:c5:3c:07:ab:c8:6d:36:3d:e2:14:43:98:05:a0: 94:56:73:68:a1:3a:c3:f2:cc:50:91:80:cf:a7:74:d7:bf:54: df:0e:ef:f3:27:45:76:eb:03:5a:86:3c:a4:53:e5:23:7c:ab: d0:1f:50:07:6d:2f:ff:c1:da:23:eb:4a:ec:79:c2:39:a8:18: c9:39:4b:9c:e6:31:27:7f:1e:59:b6:91:34:cd:7d:dc:15:5b: 22:a6:6c:44:14:56:98:32:d8:b7:c4:6e:92:f7:c2:71:cb:01: 33:2b:f7:f8:93:e6:3d:03:0a:75:29:d5:55:c3:04:34:f5:91: 74:8c:2e:9f:45:27:6e:e9:e2:ca:26:d6:73:70:24:ff:ae:37: 17:0c:9c:3b:85:9b:ff:a3:75:88:05:0b:c4:7b:f6:13:54:eb: a4:ef:f3:05:ab:f9:dc:ae:6c:27:54:95:ea:ad:7b:37:0d:73: f7:52:97:37:05:3e:b7:54:72:d5:84:9d:3c:fd:4f:f3:a3:51: 44:ee:ae:1b:c7:4c:1f:92:e3:69:7b:54:09:0a:a9:39:66:2d: b4:95:3f:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUwNjE0MTY1NjM0WhcNMjUwNjIxMTY1NjM0WjAYMRYwFAYD VQQDEw02ODRkYTljMy1lYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzfQ/ehyPPE4lPRy6NqW+/nmtSZFnNRTTypvtvWUqGRzU8zInY6SPXahsO7W vYuu/yOqM5bSdpWwR84ciYbDVuN2bdZH1a2j7Z+3AKn70inzZ7XMeFf78oytQoXN VckfQuXbpd9koo1jx7A8+GZymSLMuzAH5VhOy/e596ENAdhCkJxAok8hLqJrjqWd zNDRvRGfPdIobgPB1cwI4wAXQ+7u74ZtbWRyx6Pfqz14dPLc9O5x3iMpxKuhC6cv 0UBxlXjMvqEKiIzKKjLVt1kVEpa9wzuAssXqmr5a9CDkUxHT1i8cHNKg6ClMeki5 sK1D96dyCoEp3K6J0VptdK3h/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeFWzKR Ux7+owNVWqglAULSM9WJMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBe3+//WNQ7sfhh/+7tWwGN/Ha0G3qRPnmd1vi1drTNMGgiEKWnAo8 xTwHq8htNj3iFEOYBaCUVnNooTrD8sxQkYDPp3TXv1TfDu/zJ0V26wNahjykU+Uj fKvQH1AHbS//wdoj60rsecI5qBjJOUuc5jEnfx5ZtpE0zX3cFVsipmxEFFaYMti3 xG6S98JxywEzK/f4k+Y9Awp1KdVVwwQ09ZF0jC6fRSdu6eLKJtZzcCT/rjcXDJw7 hZv/o3WIBQvEe/YTVOuk7/MFq/ncrmwnVJXqrXs3DXP3Upc3BT63VHLVhJ08/U/z o1FE7q4bx0wfkuNpe1QJCqk5Zi20lT8b -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:06 2025 by rpki-client