$ rpki-client -vvf rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft File: WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft (raw, json) Hash identifier: AyQXWVw/Y+nRiE5IvKUzByPVjCjxy/XDDXJSzq98nOc= Subject key identifier: 7E:B5:FF:3E:AB:D6:E3:C7:CE:AB:54:17:C3:68:16:1F:A8:EE:48:7A Authority key identifier: 59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 Certificate issuer: /CN=A91275A6/serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft Manifest number: 01E4 Signing time: Sat 23 Aug 2025 02:46:37 +0000 Manifest this update: Sat 23 Aug 2025 02:46:36 +0000 Manifest next update: Sat 30 Aug 2025 02:46:36 +0000 Files and hashes: 1: WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl (hash: oDPgRu2qJAw4/nb15Wqs/A+iW6qmAWdz88gvhDWW4Xg=) 2: 8FA08DC29C8511EDB3506E5AC4F9AE02.roa (hash: Op5FiTtFCqiSuAmQrIrvzBwaHPhkdRDyeJuZKNddGfc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:46:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275A6, serialNumber=590FA3C67000E96985791E6355AD1F6DAD5C1876 Validity Not Before: Aug 23 02:46:36 2025 GMT Not After : Aug 30 02:46:36 2025 GMT Subject: CN=68a92b8d-16ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:83:80:c8:c5:af:fa:d5:a3:99:dd:ee:2e: ed:45:88:82:00:7c:78:40:96:4d:1a:8b:ee:a7:53: 16:9c:9c:ef:14:38:b5:1d:d9:ab:95:04:48:24:40: dd:05:94:31:b2:8a:06:25:40:20:2e:25:8e:9f:28: 57:ee:c4:d0:5c:f9:7c:31:b0:6b:b8:98:2d:6e:59: 8f:cc:03:a9:10:d3:09:05:90:4e:cf:b2:d0:66:15: 42:16:a3:76:33:aa:8f:7c:b6:80:c0:c3:4b:11:8a: bd:22:61:2d:da:d3:b7:93:63:43:20:b7:7d:3d:1d: b1:84:d8:7e:3c:03:9f:b5:8e:c4:c6:29:8a:60:cc: 70:e0:4d:a4:c2:ce:b6:f8:9a:bd:3e:db:ce:32:1c: 67:48:cc:ae:f6:d0:02:fd:05:3c:aa:ab:13:72:51: 1c:d1:ba:0b:30:b3:d1:a2:b8:34:c3:cb:6f:d9:f5: dc:e8:4c:72:17:95:7d:17:1c:ba:34:cd:f2:a4:a2: b0:0a:98:b9:ae:ec:2e:a3:9b:4a:ee:a1:1a:b2:60: 24:ef:0b:43:9f:e6:9a:4a:2a:f8:a1:68:08:f5:86: a5:50:3b:b2:5c:72:51:6f:ac:49:c6:bb:13:d9:06: 4a:fc:e8:49:3f:ee:3c:70:f4:15:f0:50:6d:b5:c0: 19:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B5:FF:3E:AB:D6:E3:C7:CE:AB:54:17:C3:68:16:1F:A8:EE:48:7A X509v3 Authority Key Identifier: keyid:59:0F:A3:C6:70:00:E9:69:85:79:1E:63:55:AD:1F:6D:AD:5C:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WQ-jxnAA6WmFeR5jVa0fba1cGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275A6/CA86944A9C5D11ED97B3F548C4F9AE02/WQ-jxnAA6WmFeR5jVa0fba1cGHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:bc:fa:60:34:40:4e:9f:a9:b2:43:4f:07:3f:49:f5:4a:ce: a9:43:85:4e:57:a5:bf:49:2b:ab:eb:e1:be:a9:09:1f:10:50: b0:c5:7a:ae:5b:20:5f:2c:45:9e:c3:52:d6:76:da:03:d4:0e: 66:9f:f0:f7:54:d8:2d:45:2e:10:6f:4f:d7:7a:6a:ac:92:30: 39:1c:07:c3:4f:29:62:49:9c:13:d6:f4:a2:aa:68:4c:3e:db: 32:3b:f2:2f:58:9b:cb:c1:fb:08:2e:9c:ea:b6:4e:08:1f:a0: ea:08:cd:4e:15:1d:77:ab:c1:02:d1:e8:b2:b4:ec:4b:fb:be: f1:4c:b4:be:68:b6:ad:7f:60:24:9d:8b:38:51:b2:c9:f9:b3: 66:e2:52:26:2c:cb:1d:19:7c:04:b4:73:61:78:9d:6c:5e:3d: 62:ab:c6:1d:b2:c6:f8:e7:0e:21:71:13:69:11:32:a0:09:3b: d1:a9:45:9b:35:d3:c0:37:3d:6d:8b:17:19:e9:37:4c:2a:98: 64:fb:af:29:4e:52:2f:8c:c4:1a:dd:46:20:98:97:a2:6d:8a: 06:25:f3:4c:b3:58:ce:8d:29:e3:b5:0a:ed:41:d9:4a:c4:de: b4:09:22:6c:56:09:e4:92:c7:48:5c:b5:ee:45:9d:97:9b:66: a3:a1:9b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1QTYxMTAvBgNVBAUTKDU5MEZBM0M2NzAwMEU5Njk4NTc5MUU2MzU1QUQxRjZE QUQ1QzE4NzYwHhcNMjUwODIzMDI0NjM2WhcNMjUwODMwMDI0NjM2WjAYMRYwFAYD VQQDEw02OGE5MmI4ZC0xNmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJGDgMjFr/rVo5nd7i7tRYiCAHx4QJZNGovup1MWnJzvFDi1HdmrlQRIJEDd BZQxsooGJUAgLiWOnyhX7sTQXPl8MbBruJgtblmPzAOpENMJBZBOz7LQZhVCFqN2 M6qPfLaAwMNLEYq9ImEt2tO3k2NDILd9PR2xhNh+PAOftY7EximKYMxw4E2kws62 +Jq9PtvOMhxnSMyu9tAC/QU8qqsTclEc0boLMLPRorg0w8tv2fXc6ExyF5V9Fxy6 NM3ypKKwCpi5ruwuo5tK7qEasmAk7wtDn+aaSir4oWgI9YalUDuyXHJRb6xJxrsT 2QZK/OhJP+48cPQV8FBttcAZpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH61/z6r 1uPHzqtUF8NoFh+o7kh6MB8GA1UdIwQYMBaAFFkPo8ZwAOlphXkeY1WtH22tXBh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVBNi9DQTg2OTQ0QTlD NUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZXbUZlUjVqVmEwZmJhMWNH SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dRLWp4bkFBNldtRmVSNWpWYTBmYmExY0dIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVBNi9DQTg2OTQ0QTlDNUQxMUVEOTdCM0Y1NDhDNEY5QUUwMi9XUS1qeG5BQTZX bUZlUjVqVmEwZmJhMWNHSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABvPpgNEBOn6myQ08HP0n1Ss6pQ4VOV6W/SSur6+G+qQkfEFCwxXqu WyBfLEWew1LWdtoD1A5mn/D3VNgtRS4Qb0/XemqskjA5HAfDTyliSZwT1vSiqmhM PtsyO/IvWJvLwfsILpzqtk4IH6DqCM1OFR13q8EC0eiytOxL+77xTLS+aLatf2Ak nYs4UbLJ+bNm4lImLMsdGXwEtHNheJ1sXj1iq8Ydssb45w4hcRNpETKgCTvRqUWb NdPANz1tixcZ6TdMKphk+68pTlIvjMQa3UYgmJeibYoGJfNMs1jOjSnjtQrtQdlK xN60CSJsVgnkksdIXLXuRZ2Xm2ajoZtZ -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:48 2025 by rpki-client