$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: 49khsbYSIf10iwgTPSQlOWLboJSVVBBXXOITrWlpd5I= Subject key identifier: 90:9A:11:B0:C2:7F:F9:D0:61:24:57:E8:EC:FA:0A:82:CB:9B:77:EE Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0B84 Signing time: Fri 22 Aug 2025 19:10:31 +0000 Manifest this update: Fri 22 Aug 2025 19:10:31 +0000 Manifest next update: Fri 29 Aug 2025 19:10:31 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: gDw2ySneuEp/IRXULCs4Q6SUfSIK3DP1unTDmJvw+So=) 2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: XzA6WsRC9hlvmM64zUMDU/N8Gy2E6OXsLGweclcpbig=) 3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: 88hI432trJEvkk5tFX685ctlcqYgD99t/33EyCKQ5Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2971 (0xb9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: Aug 22 19:10:31 2025 GMT Not After : Aug 29 19:10:31 2025 GMT Subject: CN=68a8c0a7-9485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3c:df:e0:c3:d2:c0:68:54:f2:d1:9f:e7:12: 70:58:73:15:d1:16:c5:88:12:6c:03:e1:27:14:c1: 46:1a:6f:2f:b5:9c:6d:71:11:85:8d:56:60:07:8c: 20:5b:49:f5:b0:c2:46:c7:dc:81:c9:45:27:28:6c: 3e:62:7c:fc:bb:1f:03:02:12:c0:fc:77:55:85:5c: 78:20:50:16:69:a6:49:32:9c:3d:a6:75:90:6d:8c: 86:a5:af:68:a2:5f:6c:b2:e9:cf:52:38:97:0e:f7: c0:47:73:a2:59:77:60:2a:7f:25:8d:c7:c5:9c:2e: 2b:12:6d:ae:bb:a8:a4:66:97:eb:5b:6d:40:27:d5: 5c:73:d3:22:cf:e9:90:48:43:18:a0:cb:b5:4b:e8: 14:c8:53:e2:88:ed:7c:c5:4f:7e:65:72:cf:f2:7e: f3:c2:ae:b3:36:31:97:da:37:f9:27:9c:f8:b6:4f: ba:bc:04:9b:b9:2a:51:7e:bb:05:73:d9:9a:82:06: 7b:fc:4b:5b:c2:5f:37:12:6b:f2:58:ad:50:75:f7: 7d:de:39:18:31:8a:f7:6d:93:a2:65:8f:53:43:9d: b9:85:43:5c:c9:c7:4e:7f:2a:e0:62:76:d7:43:f8: c5:1d:c0:66:b3:a7:68:5d:67:a0:34:17:ce:12:75: 84:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9A:11:B0:C2:7F:F9:D0:61:24:57:E8:EC:FA:0A:82:CB:9B:77:EE X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0d:b4:3a:5d:cf:30:5a:a6:47:f2:6b:c9:08:87:8a:83:02: 54:9b:e8:58:3e:b6:30:ee:3b:3b:46:63:8d:8a:a0:8a:c1:28: 06:27:b7:28:b1:44:3c:6e:9c:45:35:9f:8c:f1:37:e3:66:5c: 54:96:64:e8:62:a5:cf:0b:cb:65:48:9f:d1:77:39:29:99:6a: 56:71:74:74:8a:19:3c:b6:ea:95:a5:09:91:aa:0a:38:94:2b: fd:b5:d3:df:fd:74:62:53:1a:0d:e5:fb:eb:9a:cc:94:1f:8b: 9a:a9:2c:fb:66:90:9f:c3:08:65:4c:aa:b9:a4:d8:31:81:7d: d5:93:4c:60:12:74:99:24:b0:f9:98:31:e9:70:35:2e:3e:41: 00:22:f7:9b:74:98:a6:b3:dc:52:eb:f6:68:ba:3e:8e:8d:9a: 5e:9e:c9:72:5f:be:75:97:15:6d:4f:f9:f5:54:87:1e:41:d7: 68:93:05:37:8a:35:d7:db:4a:26:54:53:de:97:a6:94:5a:c3: 87:67:f4:e3:37:be:74:3f:88:a7:d6:71:e5:7f:f9:04:ab:9d: 56:2e:44:bb:f0:27:53:5c:4f:8f:95:b8:24:88:5e:ce:61:92: cd:d7:a1:97:c0:d5:88:b6:04:b2:82:ad:86:6f:8a:eb:e7:05: da:75:cb:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjUwODIyMTkxMDMxWhcNMjUwODI5MTkxMDMxWjAYMRYwFAYD VQQDEw02OGE4YzBhNy05NDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzzf4MPSwGhU8tGf5xJwWHMV0RbFiBJsA+EnFMFGGm8vtZxtcRGFjVZgB4wg W0n1sMJGx9yByUUnKGw+Ynz8ux8DAhLA/HdVhVx4IFAWaaZJMpw9pnWQbYyGpa9o ol9ssunPUjiXDvfAR3OiWXdgKn8ljcfFnC4rEm2uu6ikZpfrW21AJ9Vcc9Miz+mQ SEMYoMu1S+gUyFPiiO18xU9+ZXLP8n7zwq6zNjGX2jf5J5z4tk+6vASbuSpRfrsF c9maggZ7/Etbwl83EmvyWK1Qdfd93jkYMYr3bZOiZY9TQ525hUNcycdOfyrgYnbX Q/jFHcBms6doXWegNBfOEnWE6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCaEbDC f/nQYSRX6Oz6CoLLm3fuMB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3DbQ6Xc8wWqZH8mvJCIeKgwJUm+hYPrYw7js7RmONiqCKwSgGJ7co sUQ8bpxFNZ+M8TfjZlxUlmToYqXPC8tlSJ/RdzkpmWpWcXR0ihk8tuqVpQmRqgo4 lCv9tdPf/XRiUxoN5fvrmsyUH4uaqSz7ZpCfwwhlTKq5pNgxgX3Vk0xgEnSZJLD5 mDHpcDUuPkEAIvebdJims9xS6/Zouj6OjZpenslyX751lxVtT/n1VIceQddokwU3 ijXX20omVFPel6aUWsOHZ/TjN750P4in1nHlf/kEq51WLkS78CdTXE+PlbgkiF7O YZLN16GXwNWItgSygq2Gb4rr5wXadcs1 -----END CERTIFICATE-----Generated at Sat Aug 23 19:41:37 2025 by rpki-client