$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json) Hash identifier: NctqkbMFs1UiTjAVTfT4HdOT4M2+nhwgfGljLvlT0Bg= Subject key identifier: 7C:C0:45:73:04:F1:BD:15:5B:EC:4A:01:78:3D:80:77:81:FF:40:7C Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft Manifest number: 01A4 Signing time: Sat 23 Aug 2025 03:23:21 +0000 Manifest this update: Sat 23 Aug 2025 03:23:20 +0000 Manifest next update: Sat 30 Aug 2025 03:23:20 +0000 Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: emLJhvw0pr+STItAXDnSnLiMqnQEn4/DlOFFuMp2vvA=) 2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: 8ZblnQqgZaVcYhyWuN1Kamrq7TDNsWfBjoF0ALIbTZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Validity Not Before: Aug 23 03:23:20 2025 GMT Not After : Aug 30 03:23:20 2025 GMT Subject: CN=68a93428-379a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:b6:a7:c9:fc:59:1e:71:2f:70:74:45:25: c8:01:0d:42:db:08:f8:2d:bd:c2:59:6c:87:68:73: 81:ea:af:f1:b9:d0:cc:c7:71:c2:af:42:c3:47:91: 28:02:5e:5d:77:71:b2:44:11:d8:95:f3:f6:95:91: a5:7c:08:3e:f5:8f:c2:68:72:64:24:03:2f:42:d4: e2:e8:3c:6b:fe:b7:e0:b0:6e:71:03:a0:a3:b1:2e: a3:9e:df:49:2e:3a:d8:a3:fd:3b:24:a8:a8:9e:29: c5:81:cc:df:51:b4:e4:b5:a4:18:85:69:c0:dd:af: 38:25:2d:dd:e7:89:ec:11:f6:dd:c4:a6:db:5a:40: d6:a0:a3:d7:c2:e8:a2:2c:1c:12:6e:d4:00:1a:fc: 55:3f:1f:7d:e4:cd:46:c2:de:f5:8e:c1:bd:cb:9c: 7c:5f:3e:bf:a4:6a:a4:a8:15:6e:6d:36:18:41:a4: 45:31:b2:d3:f2:92:33:99:a0:c2:f8:ca:34:d7:70: b1:48:6a:1e:4f:91:12:20:4e:f3:b2:d8:bd:ad:40: 26:0e:c7:e2:24:bf:6b:3a:5e:ec:f7:ae:ab:4c:0d: 52:37:05:0c:e8:2a:67:16:02:0e:b3:da:94:f9:7c: cf:c5:1e:80:28:19:9b:be:e0:49:c7:d4:57:f8:43: a2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C0:45:73:04:F1:BD:15:5B:EC:4A:01:78:3D:80:77:81:FF:40:7C X509v3 Authority Key Identifier: keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:50:9e:16:55:c7:bd:c9:66:85:42:85:97:85:09:69:6d:cc: 10:02:67:4e:0e:0d:f0:48:5a:79:bd:ec:cd:05:82:6a:49:25: 88:ba:63:86:5f:ff:bd:a2:43:9c:ac:3f:f4:b1:b5:7f:c1:42: d7:5a:27:94:bc:96:fe:61:e3:ab:69:00:f3:a3:4c:02:3b:30: f2:d2:15:f1:07:56:d1:f1:f6:ee:06:c9:99:b3:62:dc:44:e4: 25:ca:87:c0:d2:55:7e:5b:21:e9:07:29:32:75:11:cb:fe:7e: 67:92:d8:34:59:59:63:41:00:ad:6f:90:ee:ec:e2:06:f0:7c: e8:8d:b6:b0:f9:06:ba:62:03:b7:0c:6e:70:31:68:ce:40:4b: be:a0:f1:f3:5c:67:04:b1:4c:1a:37:1c:8a:a0:62:2b:be:1e: 18:f2:4c:11:65:8c:d3:92:8a:57:4d:2b:59:38:ea:dc:00:40: 9f:2f:34:6b:6d:73:e4:33:f2:cb:b4:f4:66:be:11:11:8b:17: 25:d4:5c:c4:6a:5a:02:b1:da:8a:cf:f6:33:79:44:fa:6b:68: 3e:c6:56:58:f3:1c:dd:50:5b:a6:01:3d:3a:c7:47:f9:3c:f1: 21:b1:af:31:fe:e9:61:85:1a:46:cc:9e:25:25:d3:fe:3a:e4: 6b:cf:3c:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC MDMxOTI2NjIwHhcNMjUwODIzMDMyMzIwWhcNMjUwODMwMDMyMzIwWjAYMRYwFAYD VQQDEw02OGE5MzQyOC0zNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuca2p8n8WR5xL3B0RSXIAQ1C2wj4Lb3CWWyHaHOB6q/xudDMx3HCr0LDR5Eo Al5dd3GyRBHYlfP2lZGlfAg+9Y/CaHJkJAMvQtTi6Dxr/rfgsG5xA6CjsS6jnt9J LjrYo/07JKioninFgczfUbTktaQYhWnA3a84JS3d54nsEfbdxKbbWkDWoKPXwuii LBwSbtQAGvxVPx995M1Gwt71jsG9y5x8Xz6/pGqkqBVubTYYQaRFMbLT8pIzmaDC +Mo013CxSGoeT5ESIE7zsti9rUAmDsfiJL9rOl7s966rTA1SNwUM6CpnFgIOs9qU +XzPxR6AKBmbvuBJx9RX+EOiNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzARXME 8b0VW+xKAXg9gHeB/0B8MB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZUJ4WVce9yWaFQoWXhQlpbcwQAmdODg3wSFp5vezNBYJqSSWIumOG X/+9okOcrD/0sbV/wULXWieUvJb+YeOraQDzo0wCOzDy0hXxB1bR8fbuBsmZs2Lc ROQlyofA0lV+WyHpBykydRHL/n5nktg0WVljQQCtb5Du7OIG8Hzojbaw+Qa6YgO3 DG5wMWjOQEu+oPHzXGcEsUwaNxyKoGIrvh4Y8kwRZYzTkopXTStZOOrcAECfLzRr bXPkM/LLtPRmvhERixcl1FzEaloCsdqKz/YzeUT6a2g+xlZY8xzdUFumAT06x0f5 PPEhsa8x/ulhhRpGzJ4lJdP+OuRrzzz0 -----END CERTIFICATE-----Generated at Sat Aug 23 15:40:56 2025 by rpki-client