$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft File: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft (raw, json) Hash identifier: qq9y7PnvL+EwoKhuP3qjQPOchgfTb9U1HS0y/KC2iH4= Subject key identifier: FF:C7:B2:07:04:33:74:76:92:57:EB:1B:06:2A:35:BF:85:15:B0:B5 Authority key identifier: 5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 Certificate issuer: /CN=A91425C3/serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft Manifest number: 13 Signing time: Sat 23 Aug 2025 08:16:41 +0000 Manifest this update: Sat 23 Aug 2025 08:16:40 +0000 Manifest next update: Sat 30 Aug 2025 08:16:40 +0000 Files and hashes: 1: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl (hash: mR9bJQ2xzbuGJph1QqT12RnV7Li+cT8WMzQfjqbbtwY=) 2: 44E524C6660611F0AC01FC4FC4F9AE02.roa (hash: bHIMWlurNqBIRWjjG4aQFJYKcLjVhjX4C0j7SqX+rCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Validity Not Before: Aug 23 08:16:40 2025 GMT Not After : Aug 30 08:16:40 2025 GMT Subject: CN=68a978e9-5e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:6d:56:b7:a1:d0:6c:6b:d7:8f:5d:4f:f2: 65:d2:78:f2:b3:5c:0a:d5:19:ae:cc:c9:43:7a:20: f5:cd:67:62:da:c6:b2:65:e5:e1:a9:9b:12:a8:8a: 92:4c:50:39:42:ff:a6:b9:73:eb:9d:4c:0d:88:b4: ca:0a:af:64:1e:69:d3:44:53:3b:d3:25:c6:5f:29: fe:11:d2:6c:c7:ec:f6:ba:18:79:df:36:8b:40:44: 87:5c:f8:c9:d2:ed:3a:8c:0f:0c:33:01:6b:61:78: 47:67:36:2d:65:c7:81:81:1b:f9:38:b6:e1:ce:3c: de:e3:7d:3c:91:b7:c8:32:08:44:de:ca:fa:9f:4c: bd:81:ea:30:18:4b:9a:b6:35:57:53:e2:e4:24:2d: 46:04:80:24:a8:fa:b0:83:8d:8a:8e:56:37:8d:0d: 3f:9e:3f:ff:9f:51:d6:e1:e9:2f:97:4e:a6:3c:51: 5f:02:5f:54:70:51:71:2e:5d:d4:de:fa:1f:1c:04: bc:bf:9a:8d:29:62:f2:5f:74:cb:99:40:5b:ce:15: 81:d8:97:41:71:9b:46:19:4b:3f:04:12:a5:b3:16: 18:07:2a:1c:c3:38:59:0f:35:8a:bc:e5:95:8c:05: 22:eb:92:a6:d1:e3:64:e9:3b:2a:42:9f:68:24:11: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C7:B2:07:04:33:74:76:92:57:EB:1B:06:2A:35:BF:85:15:B0:B5 X509v3 Authority Key Identifier: keyid:5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7c:70:be:a0:2f:48:fc:5d:89:38:2f:b5:15:38:4e:80:c6: d7:21:20:93:b2:3a:a9:6a:db:56:24:d5:ad:c3:5f:f3:50:c5: 22:5f:d0:b6:e9:ca:22:de:28:01:99:ee:7e:e2:2e:3a:da:e4: d1:6e:cd:8b:17:95:ba:fc:d8:67:8b:46:c5:40:87:e5:8b:35: 39:b2:0d:2a:9f:d7:24:bd:96:45:01:e2:06:d4:cb:c0:97:96: 6e:6e:19:a8:2e:ce:71:9c:81:11:29:c9:9c:5f:1b:7f:00:9b: 3a:bc:55:2a:62:e7:1f:92:d7:18:6d:a0:20:20:97:b9:9e:b0: ec:9c:53:a3:2d:60:cd:ed:88:6e:69:83:5f:bf:53:d0:10:84: 33:92:af:99:a8:40:9c:eb:f7:dd:69:0c:5a:1a:c7:20:e1:a0: 3f:66:bb:9f:70:7d:49:91:76:e2:2a:f0:ff:c8:88:12:f7:a7: 00:7f:87:61:1c:ea:1d:e9:d4:e2:b2:ce:a8:e7:d6:d9:18:37: b1:1c:33:87:55:9f:66:d9:00:6c:f8:13:5a:3d:85:1b:b6:a4: 76:6b:d8:1c:a6:32:bd:40:55:30:65:ff:d2:81:c5:37:d0:54: 83:4e:79:6e:e7:04:0e:35:cf:58:0c:df:31:56:07:0a:7a:85: d6:73:9a:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoNUFGQkI5Q0JCQzY1NDZCRDU1MUQxNzI2MzAxOTBBRTgx QTlBRjEyNzAeFw0yNTA4MjMwODE2NDBaFw0yNTA4MzAwODE2NDBaMBgxFjAUBgNV BAMTDTY4YTk3OGU5LTVlNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCar21Wt6HQbGvXj11P8mXSePKzXArVGa7MyUN6IPXNZ2LaxrJl5eGpmxKoipJM UDlC/6a5c+udTA2ItMoKr2QeadNEUzvTJcZfKf4R0mzH7Pa6GHnfNotARIdc+MnS 7TqMDwwzAWtheEdnNi1lx4GBG/k4tuHOPN7jfTyRt8gyCETeyvqfTL2B6jAYS5q2 NVdT4uQkLUYEgCSo+rCDjYqOVjeNDT+eP/+fUdbh6S+XTqY8UV8CX1RwUXEuXdTe +h8cBLy/mo0pYvJfdMuZQFvOFYHYl0Fxm0YZSz8EEqWzFhgHKhzDOFkPNYq85ZWM BSLrkqbR42TpOypCn2gkEdMVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/8eyBwQz dHaSV+sbBio1v4UVsLUwHwYDVR0jBBgwFoAUWvu5y7xlRr1VHRcmMBkK6Bqa8Scw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzJDOTcxNEVFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL1d2dTV5N3hsUnIxVkhSY21NQmtLNkJxYThT Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3Z1NXk3eGxScjFWSFJjbU1Ca0s2QnFhOFNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NUMzLzJDOTcxNEVFNjYwNDExRjBBNEM1MTkyQkM0RjlBRTAyL1d2dTV5N3hsUnIx VkhSY21NQmtLNkJxYThTYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGp8cL6gL0j8XYk4L7UVOE6AxtchIJOyOqlq21Yk1a3DX/NQxSJf0Lbp yiLeKAGZ7n7iLjra5NFuzYsXlbr82GeLRsVAh+WLNTmyDSqf1yS9lkUB4gbUy8CX lm5uGaguznGcgREpyZxfG38Amzq8VSpi5x+S1xhtoCAgl7mesOycU6MtYM3tiG5p g1+/U9AQhDOSr5moQJzr991pDFoaxyDhoD9mu59wfUmRduIq8P/IiBL3pwB/h2Ec 6h3p1OKyzqjn1tkYN7EcM4dVn2bZAGz4E1o9hRu2pHZr2BymMr1AVTBl/9KBxTfQ VINOeW7nBA41z1gM3zFWBwp6hdZzmjA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:45 2025 by rpki-client