$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: WvZwTFhkTxKvsqut3Mk80MRs3/uOSEgjw6vcOAaqTCk= Subject key identifier: 80:2D:D4:B5:72:C4:32:85:FA:CF:41:D6:81:6B:CC:33:CC:84:6F:73 Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0B0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0B02 Signing time: Fri 22 Aug 2025 19:29:01 +0000 Manifest this update: Fri 22 Aug 2025 19:29:00 +0000 Manifest next update: Fri 29 Aug 2025 19:29:00 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: sBtBJN9zxPt2OWdkbht05XgwycqInzDZD1U0ZN6kRjg=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2828 (0xb0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Aug 22 19:29:00 2025 GMT Not After : Aug 29 19:29:00 2025 GMT Subject: CN=68a8c4fd-f73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a1:bd:78:65:4b:4a:d0:56:45:ce:77:eb:d9: df:5c:b4:ca:c0:f6:67:74:b4:2b:b9:81:61:49:19: 59:0f:6a:71:31:e6:01:f9:cc:69:eb:9c:97:c8:f7: bd:af:81:41:8e:6e:6c:9b:74:23:26:57:83:5d:b8: 9a:7d:7f:02:33:58:31:e7:79:21:43:d6:7c:ed:a0: 21:e6:bd:02:11:0d:7b:88:1a:de:f8:e4:1a:a4:c2: 6f:de:26:1d:d8:94:df:06:97:ef:68:48:c4:19:cf: 84:5e:b7:1f:da:ad:d7:b5:6d:d1:5b:93:dd:75:02: b6:15:4c:dc:d5:fd:c0:3a:f6:87:0b:b9:dd:a2:b5: 21:a1:a6:76:c0:f4:8e:04:82:cb:23:6e:9b:bc:44: 2d:71:62:aa:2a:6f:2b:21:e6:5e:bf:c9:23:d5:f7: a2:dc:68:61:b6:6b:69:74:a0:31:9d:39:2f:74:51: f0:5a:95:a9:fa:c6:d4:f9:fe:30:c9:79:96:29:18: b7:ca:65:25:e7:f6:22:15:d3:5b:5b:07:e4:0b:1c: 2e:9b:5f:13:35:4e:e6:67:04:c5:ad:57:8a:7c:28: 39:b1:27:07:05:84:0f:c3:0a:a9:4d:d2:c8:7f:ef: b7:e6:96:99:94:0a:9c:bb:90:55:97:8a:2b:c0:ed: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2D:D4:B5:72:C4:32:85:FA:CF:41:D6:81:6B:CC:33:CC:84:6F:73 X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:79:57:b8:38:2c:42:2d:a9:be:a3:a5:64:09:1f:be:b1:24: 39:2a:8a:1e:49:98:7c:a6:0e:0f:fd:ef:92:9a:da:4a:74:27: 0b:ec:70:21:d1:24:e5:94:6b:d0:4c:b7:9c:09:e0:31:58:a1: 30:48:b4:d5:d0:73:c9:74:b6:dd:c8:36:71:45:1c:c2:a9:39: be:56:45:6c:b2:3f:fb:58:d4:92:4e:c2:3a:30:ac:c7:fb:78: 00:eb:cb:15:71:21:48:54:06:49:3b:fe:8d:68:4b:0f:7a:32: d1:05:d4:0b:a5:b0:10:e7:32:2b:4a:0c:ae:d4:0e:7c:31:b8: 5c:19:67:45:e7:14:d5:aa:d5:1f:df:49:bc:08:e6:12:32:49: 15:7a:16:26:16:bc:fd:64:a3:a2:36:ef:bd:50:c4:04:a4:86: 8c:5c:3c:c8:c5:ba:0e:29:aa:80:eb:59:be:b2:60:5a:f4:4c: 42:41:fd:4b:e3:4f:6e:57:2d:42:93:5f:83:08:ef:57:53:5d: 4d:a4:b3:ce:17:45:01:aa:32:bd:92:ca:30:dc:f4:ea:56:2f: a9:21:98:eb:1f:85:e1:c6:f0:24:7d:d1:39:2d:ba:6c:54:7d: 38:0d:e5:31:41:39:8f:01:bc:fe:06:94:d3:17:94:51:c1:44: b1:cd:e2:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjUwODIyMTkyOTAwWhcNMjUwODI5MTkyOTAwWjAYMRYwFAYD VQQDEw02OGE4YzRmZC1mNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aG9eGVLStBWRc5369nfXLTKwPZndLQruYFhSRlZD2pxMeYB+cxp65yXyPe9 r4FBjm5sm3QjJleDXbiafX8CM1gx53khQ9Z87aAh5r0CEQ17iBre+OQapMJv3iYd 2JTfBpfvaEjEGc+EXrcf2q3XtW3RW5PddQK2FUzc1f3AOvaHC7ndorUhoaZ2wPSO BILLI26bvEQtcWKqKm8rIeZev8kj1fei3GhhtmtpdKAxnTkvdFHwWpWp+sbU+f4w yXmWKRi3ymUl5/YiFdNbWwfkCxwum18TNU7mZwTFrVeKfCg5sScHBYQPwwqpTdLI f++35paZlAqcu5BVl4orwO0OeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAt1LVy xDKF+s9B1oFrzDPMhG9zMB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOeVe4OCxCLam+o6VkCR++sSQ5KooeSZh8pg4P/e+SmtpKdCcL7HAh 0STllGvQTLecCeAxWKEwSLTV0HPJdLbdyDZxRRzCqTm+VkVssj/7WNSSTsI6MKzH +3gA68sVcSFIVAZJO/6NaEsPejLRBdQLpbAQ5zIrSgyu1A58MbhcGWdF5xTVqtUf 30m8COYSMkkVehYmFrz9ZKOiNu+9UMQEpIaMXDzIxboOKaqA61m+smBa9ExCQf1L 409uVy1Ck1+DCO9XU11NpLPOF0UBqjK9ksow3PTqVi+pIZjrH4XhxvAkfdE5Lbps VH04DeUxQTmPAbz+BpTTF5RRwUSxzeIa -----END CERTIFICATE-----Generated at Sun Aug 24 02:39:11 2025 by rpki-client