$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: SwkDhx/rV9Djs3sxXqw/KkhFDG1B/+XPZyihBGm6isM= Subject key identifier: 4A:2B:1C:E8:5F:D2:B8:99:96:AD:DD:A9:DB:77:B2:86:CC:94:5E:71 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 138A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 1369 Signing time: Thu 24 Apr 2025 17:01:24 +0000 Manifest this update: Thu 24 Apr 2025 17:01:23 +0000 Manifest next update: Thu 01 May 2025 17:01:23 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: 2IJzkC6k5vzfcWgGVPS/0p7JVBDCN8Sh0rFguRZyytU=) 2: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: WJIW7/5aYkkVFVY9R0KtJZquDdQN3OhnT/M95kjVAHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5002 (0x138a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Apr 24 17:01:23 2025 GMT Not After : May 1 17:01:23 2025 GMT Subject: CN=680a6e64-ef0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c8:15:0d:e4:91:92:1d:55:aa:2b:e3:db:d9: 59:81:ed:d7:27:74:dc:f1:8a:cf:3b:bd:93:02:48: bd:bc:8c:95:fe:bd:8c:91:90:82:85:d9:b5:58:52: 59:b9:8a:67:6c:b2:9a:b1:96:07:98:de:bf:7e:b4: 0f:8b:ce:8e:75:14:60:cd:84:b1:b1:42:0f:d5:12: 93:a3:32:d8:6a:e6:6f:f6:0b:63:dc:93:c4:bb:33: 3c:3f:e1:84:db:1a:41:d4:c2:66:12:7d:2d:6e:8f: 44:36:74:27:67:f6:f0:11:09:0b:45:27:c2:62:9b: d1:3e:ac:94:d8:23:0f:e3:c8:a1:e7:25:85:45:f0: 0a:b0:21:5f:d0:8c:fe:90:71:11:3e:04:21:65:9f: 25:c6:76:fe:bd:77:79:b4:71:1e:7a:94:16:86:13: fe:3d:f4:c1:9c:79:e1:c7:c1:a3:6a:a5:1d:4c:de: 09:18:74:2e:07:a5:4a:3f:bc:96:46:1c:79:b1:e4: a2:45:c0:1c:31:c6:87:af:65:b7:55:a2:8b:f8:5f: b1:57:80:7f:39:f6:a4:54:44:2b:3f:d4:f3:5f:3a: 73:57:16:3a:9f:6c:ca:af:52:74:91:a7:17:8a:67: ab:70:1d:6b:36:ea:56:8e:33:11:e2:25:c6:f4:42: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2B:1C:E8:5F:D2:B8:99:96:AD:DD:A9:DB:77:B2:86:CC:94:5E:71 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:df:9b:8e:f2:1f:ce:35:c4:d1:81:04:a0:42:32:26:f9:b1: 83:19:94:83:b4:f9:41:fd:70:7a:bb:c8:c1:b8:1a:3b:c1:1e: 7c:3c:e7:92:96:2f:08:97:a5:b7:9a:6c:e4:88:54:6a:a3:f5: b2:9f:b4:ea:e7:2a:2c:95:49:eb:6e:56:73:2e:d4:14:71:c3: 3c:18:13:dd:31:88:b8:c8:0d:66:03:a1:47:55:39:d5:f7:63: 96:8f:92:09:04:50:b4:71:b9:04:bc:14:45:cf:0d:64:0c:52: 38:1e:be:56:49:0b:85:2c:69:aa:de:bf:53:aa:74:5f:b6:84: 34:67:63:38:20:57:17:41:5a:82:d8:a3:39:c0:db:db:14:94: 9d:c1:79:24:92:bc:75:c4:71:f1:9c:f3:9c:17:67:0c:5f:4e: 8c:6b:af:b6:a1:dd:b6:40:e3:6c:24:56:a4:13:d5:0c:16:7c: d1:4d:ca:cc:be:e9:0c:2e:5e:d2:41:a8:8d:8f:d4:3e:a6:43: a7:5f:d6:f9:5f:69:ab:f1:fe:0f:9b:e2:b8:16:0f:30:ed:67: 46:17:f3:81:44:11:14:83:23:91:f9:2d:27:e3:82:63:86:f3: b6:ea:44:c4:17:22:16:82:47:1f:dd:a9:f8:05:f0:c4:ac:2d: 64:98:5c:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjUwNDI0MTcwMTIzWhcNMjUwNTAxMTcwMTIzWjAYMRYwFAYD VQQDEw02ODBhNmU2NC1lZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8gVDeSRkh1Vqivj29lZge3XJ3Tc8YrPO72TAki9vIyV/r2MkZCChdm1WFJZ uYpnbLKasZYHmN6/frQPi86OdRRgzYSxsUIP1RKTozLYauZv9gtj3JPEuzM8P+GE 2xpB1MJmEn0tbo9ENnQnZ/bwEQkLRSfCYpvRPqyU2CMP48ih5yWFRfAKsCFf0Iz+ kHERPgQhZZ8lxnb+vXd5tHEeepQWhhP+PfTBnHnhx8GjaqUdTN4JGHQuB6VKP7yW Rhx5seSiRcAcMcaHr2W3VaKL+F+xV4B/OfakVEQrP9TzXzpzVxY6n2zKr1J0kacX imercB1rNupWjjMR4iXG9EKfpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEorHOhf 0riZlq3dqdt3sobMlF5xMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB735uO8h/ONcTRgQSgQjIm+bGDGZSDtPlB/XB6u8jBuBo7wR58POeS li8Il6W3mmzkiFRqo/Wyn7Tq5yoslUnrblZzLtQUccM8GBPdMYi4yA1mA6FHVTnV 92OWj5IJBFC0cbkEvBRFzw1kDFI4Hr5WSQuFLGmq3r9TqnRftoQ0Z2M4IFcXQVqC 2KM5wNvbFJSdwXkkkrx1xHHxnPOcF2cMX06Ma6+2od22QONsJFakE9UMFnzRTcrM vukMLl7SQaiNj9Q+pkOnX9b5X2mr8f4Pm+K4Fg8w7WdGF/OBRBEUgyOR+S0n44Jj hvO26kTEFyIWgkcf3an4BfDErC1kmFz3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:28:35 2025 by rpki-client