$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: mU6zEwqL/mYIxgP0/NG9/ulR/uWGkeAJN3/CMdKIMr8= Subject key identifier: 54:BE:41:FE:18:18:FE:5C:49:2F:CB:1F:D3:AF:C9:95:1E:D8:57:68 Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0B51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0B4A Signing time: Fri 22 Aug 2025 19:17:07 +0000 Manifest this update: Fri 22 Aug 2025 19:17:07 +0000 Manifest next update: Fri 29 Aug 2025 19:17:07 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: MK0zAScwRhOrStNll+vxntaCh5L+3AYXVJkBlaRplHY=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: thbx7wB2Yko7c9vVEn1C7De9utHqQJCytkIE+aVUcMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2897 (0xb51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: Aug 22 19:17:07 2025 GMT Not After : Aug 29 19:17:07 2025 GMT Subject: CN=68a8c233-eba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:78:87:bb:ea:e1:bf:39:3d:91:f8:57:e1: 73:29:76:4d:d8:55:9b:9e:9a:7d:9f:3e:b6:ce:4f: c5:7d:44:42:dc:4c:18:db:cb:78:8e:63:7a:01:67: e3:ce:62:1c:02:21:1a:f6:23:fc:53:5d:1e:f5:91: 42:fb:70:f3:1c:52:8f:44:92:db:1b:4c:2a:8c:a4: f2:02:e0:a4:3c:e1:a0:6f:61:46:8c:f1:b5:6e:0e: 49:c9:0f:f8:33:ba:31:10:26:11:2c:4c:fa:46:5d: c6:9b:21:53:5d:ee:7b:a6:d3:67:01:63:b5:78:7e: f0:a9:8b:e3:f8:cd:9c:95:a9:b5:2e:f4:cd:28:d9: b1:1a:7e:ad:c2:c4:d1:19:66:1a:7d:f6:57:98:26: 74:92:4a:e6:ca:79:bd:22:c7:0f:1c:c3:95:cf:04: af:9e:50:4c:55:c3:7e:87:e6:88:f1:f6:9d:25:6d: cf:04:62:5f:ad:e5:2f:63:1a:ef:67:ba:c4:a9:9c: 64:fa:4e:64:36:d4:c5:9f:6a:1f:fa:bc:9c:5f:6d: fb:55:d3:b2:e9:28:5f:80:45:b4:20:d4:65:a0:bf: 8e:dc:8c:56:59:b2:c8:a3:34:62:31:32:16:4a:48: bf:7f:43:e5:09:32:3c:c2:47:88:77:a6:b9:20:6e: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BE:41:FE:18:18:FE:5C:49:2F:CB:1F:D3:AF:C9:95:1E:D8:57:68 X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:66:bc:ee:9c:fa:94:49:e1:cb:4d:be:2c:27:46:ba:cc:1d: 9c:a6:14:df:df:7e:38:16:86:0a:0f:3d:e3:4a:13:64:0f:5d: 69:24:45:a7:37:16:a9:69:af:e4:5b:0d:02:13:7a:b2:3a:32: 82:9b:30:b7:5e:d5:cb:83:72:a3:f5:64:c1:7e:71:aa:3c:84: f7:e5:8d:7b:da:aa:47:7b:11:bd:8f:8e:8c:94:5a:92:54:85: 25:44:bd:f1:af:8b:9d:82:aa:f2:8d:9f:b7:d9:a7:69:ce:1d: 56:6d:27:0b:e1:ee:d8:18:31:09:9a:bc:e5:63:ee:4d:21:19: 2a:66:d7:38:47:9f:18:08:43:37:09:50:10:8f:72:ba:83:2c: e8:82:57:fb:52:13:e1:7d:86:df:7c:b8:25:7b:90:71:bd:89: 64:be:c8:6f:c6:95:1c:ee:9b:b6:26:32:cc:b9:1e:e0:47:b2: e9:5c:fe:e5:2e:8f:4f:98:87:a0:9f:5e:d6:94:82:9b:0c:14: 36:05:6d:77:68:e8:93:f4:5c:c4:88:6f:4d:1d:9b:9e:50:50: 46:76:6f:a8:c9:9b:5d:36:5c:d7:12:58:20:d6:b9:3e:3e:57: 6b:36:b2:ac:12:a6:38:1a:1b:5f:cc:aa:57:da:12:a5:44:33: d1:37:fb:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjUwODIyMTkxNzA3WhcNMjUwODI5MTkxNzA3WjAYMRYwFAYD VQQDEw02OGE4YzIzMy1lYmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUp4h7vq4b85PZH4V+FzKXZN2FWbnpp9nz62zk/FfURC3EwY28t4jmN6AWfj zmIcAiEa9iP8U10e9ZFC+3DzHFKPRJLbG0wqjKTyAuCkPOGgb2FGjPG1bg5JyQ/4 M7oxECYRLEz6Rl3GmyFTXe57ptNnAWO1eH7wqYvj+M2clam1LvTNKNmxGn6twsTR GWYaffZXmCZ0kkrmynm9IscPHMOVzwSvnlBMVcN+h+aI8fadJW3PBGJfreUvYxrv Z7rEqZxk+k5kNtTFn2of+rycX237VdOy6ShfgEW0INRloL+O3IxWWbLIozRiMTIW Ski/f0PlCTI8wkeId6a5IG5cSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS+Qf4Y GP5cSS/LH9OvyZUe2FdoMB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoZrzunPqUSeHLTb4sJ0a6zB2cphTf3344FoYKDz3jShNkD11pJEWn Nxapaa/kWw0CE3qyOjKCmzC3XtXLg3Kj9WTBfnGqPIT35Y172qpHexG9j46MlFqS VIUlRL3xr4udgqryjZ+32adpzh1WbScL4e7YGDEJmrzlY+5NIRkqZtc4R58YCEM3 CVAQj3K6gyzoglf7UhPhfYbffLgle5BxvYlkvshvxpUc7pu2JjLMuR7gR7LpXP7l Lo9PmIegn17WlIKbDBQ2BW13aOiT9FzEiG9NHZueUFBGdm+oyZtdNlzXElgg1rk+ PldrNrKsEqY4GhtfzKpX2hKlRDPRN/s+ -----END CERTIFICATE-----Generated at Sun Aug 24 07:15:06 2025 by rpki-client