$ rpki-client -vvf rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft File: wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft (raw, json) Hash identifier: qdgUd4ofH2J4ZaJQ2yq4r5uYw5ig0ARqeG/MlSA5/Dc= Subject key identifier: FF:48:9C:39:3F:13:FF:3C:9D:D2:DC:46:76:B8:D9:6A:11:F8:65:6B Authority key identifier: C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 Certificate issuer: /CN=A91365B9/serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft Manifest number: 03BC Signing time: Sat 23 Aug 2025 00:54:42 +0000 Manifest this update: Sat 23 Aug 2025 00:54:42 +0000 Manifest next update: Sat 30 Aug 2025 00:54:42 +0000 Files and hashes: 1: wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl (hash: rq/L9u7OzewysMkGrFT8W63WjMmn+fuy1vxq50bcH6A=) 2: AFF4E1F89EB711EC8210607DC4F9AE02.roa (hash: l4NiEiTB+02p0Uj+cCqIOLwgHYhCmg6R+xhxmoCEOiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91365B9, serialNumber=C2A2EB4CF9102778A42E15CCD20A584EDCEDC272 Validity Not Before: Aug 23 00:54:42 2025 GMT Not After : Aug 30 00:54:42 2025 GMT Subject: CN=68a91152-ca77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:3f:6e:87:b1:35:b1:d0:a1:0a:6d:70:1a: 77:88:7d:b8:7b:9a:28:45:1c:e9:31:ab:27:2c:75: ab:6c:b5:b3:3c:42:1e:8c:d1:83:46:89:d5:e3:33: 6d:20:8e:f6:c4:9b:89:0f:8e:c3:5e:da:c8:81:aa: 97:6a:aa:33:17:7a:a5:94:07:9e:20:82:60:69:4f: 53:4a:32:34:b0:3b:49:60:ce:55:3b:d6:74:c2:98: 26:32:87:6c:a0:35:4b:e3:aa:d8:29:88:e4:f6:ee: db:67:90:0b:8b:36:4d:b7:82:ba:a7:fc:cc:66:7f: 1e:b0:87:37:8e:7b:66:10:a7:32:46:3c:b5:9a:2f: e8:d4:d6:af:2a:ad:94:64:2d:96:35:8b:99:99:52: 8f:b6:d1:d8:5f:35:2c:07:43:2a:b5:18:3c:d6:52: 1c:6a:4d:2d:8c:af:2f:d4:a8:ad:d2:6e:d7:71:43: 16:3a:5f:d3:80:96:0c:43:35:b3:c1:4b:c5:dc:53: e9:4e:54:d6:1a:8d:15:aa:cb:a7:c0:96:d0:f0:2e: d1:b3:87:1f:7f:c4:5a:77:06:06:dd:91:9e:59:40: fe:d1:4c:fb:27:48:2f:81:11:f1:be:3f:f9:8a:a5: ea:23:83:6e:fa:79:01:1e:c9:ea:b7:38:c0:12:71: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:48:9C:39:3F:13:FF:3C:9D:D2:DC:46:76:B8:D9:6A:11:F8:65:6B X509v3 Authority Key Identifier: keyid:C2:A2:EB:4C:F9:10:27:78:A4:2E:15:CC:D2:0A:58:4E:DC:ED:C2:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wqLrTPkQJ3ikLhXM0gpYTtztwnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91365B9/745D77029EB411ECBF0E1477C4F9AE02/wqLrTPkQJ3ikLhXM0gpYTtztwnI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:72:6a:db:d8:30:33:44:4c:f4:03:fd:7e:41:8e:bc:fd:6b: 7b:55:8d:dc:4a:df:86:a3:69:47:5d:39:f0:30:4e:5a:40:59: d8:92:a8:f7:1e:67:6e:db:41:7e:a2:b4:9d:59:81:7b:2f:f3: 6a:70:ed:bc:40:b6:34:4c:60:63:01:51:69:fa:00:63:38:c7: d6:93:9d:91:32:9b:2f:5d:c2:77:14:fb:7c:7c:a8:b9:63:7a: fd:4a:be:82:a6:82:e0:10:ec:c2:b8:2a:88:26:98:5a:4f:bc: 4e:89:62:e9:b4:31:87:fb:14:b0:12:55:56:6e:37:7c:ec:01: 4b:e6:75:cd:26:b4:84:a0:9b:39:6c:aa:ea:48:38:05:6c:53: 98:89:82:8d:6f:94:54:a4:35:87:eb:33:05:9a:fe:80:c2:b3: 11:4f:aa:60:8e:3f:3e:4c:14:21:1b:90:61:1b:50:78:cf:89: 6f:d6:66:45:62:a4:ee:d6:02:7e:65:e1:bd:94:02:84:d8:7e: e3:16:53:5e:1f:5f:ef:21:41:72:87:16:f6:a1:8c:7e:2b:19: f7:75:07:c1:ca:5d:90:d3:6a:b0:0a:69:6a:f3:45:d0:80:95: 32:23:7c:c9:00:c8:88:71:51:c4:7f:5c:f1:95:10:5a:d2:31: 3e:93:11:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY1QjkxMTAvBgNVBAUTKEMyQTJFQjRDRjkxMDI3NzhBNDJFMTVDQ0QyMEE1ODRF RENFREMyNzIwHhcNMjUwODIzMDA1NDQyWhcNMjUwODMwMDA1NDQyWjAYMRYwFAYD VQQDEw02OGE5MTE1Mi1jYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAw/boexNbHQoQptcBp3iH24e5ooRRzpMasnLHWrbLWzPEIejNGDRonV4zNt II72xJuJD47DXtrIgaqXaqozF3qllAeeIIJgaU9TSjI0sDtJYM5VO9Z0wpgmMods oDVL46rYKYjk9u7bZ5ALizZNt4K6p/zMZn8esIc3jntmEKcyRjy1mi/o1NavKq2U ZC2WNYuZmVKPttHYXzUsB0MqtRg81lIcak0tjK8v1Kit0m7XcUMWOl/TgJYMQzWz wUvF3FPpTlTWGo0VqsunwJbQ8C7Rs4cff8RadwYG3ZGeWUD+0Uz7J0gvgRHxvj/5 iqXqI4Nu+nkBHsnqtzjAEnHWpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9InDk/ E/88ndLcRna42WoR+GVrMB8GA1UdIwQYMBaAFMKi60z5ECd4pC4VzNIKWE7c7cJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjVCOS83NDVENzcwMjlF QjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUozaWtMaFhNMGdwWVR0enR3 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dxTHJUUGtRSjNpa0xoWE0wZ3BZVHR6dHduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjVCOS83NDVENzcwMjlFQjQxMUVDQkYwRTE0NzdDNEY5QUUwMi93cUxyVFBrUUoz aWtMaFhNMGdwWVR0enR3bkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRcmrb2DAzREz0A/1+QY68/Wt7VY3cSt+Go2lHXTnwME5aQFnYkqj3 Hmdu20F+orSdWYF7L/NqcO28QLY0TGBjAVFp+gBjOMfWk52RMpsvXcJ3FPt8fKi5 Y3r9Sr6CpoLgEOzCuCqIJphaT7xOiWLptDGH+xSwElVWbjd87AFL5nXNJrSEoJs5 bKrqSDgFbFOYiYKNb5RUpDWH6zMFmv6AwrMRT6pgjj8+TBQhG5BhG1B4z4lv1mZF YqTu1gJ+ZeG9lAKE2H7jFlNeH1/vIUFyhxb2oYx+Kxn3dQfByl2Q02qwCmlq80XQ gJUyI3zJAMiIcVHEf1zxlRBa0jE+kxF4 -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:24 2025 by rpki-client