$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json) Hash identifier: f9LCLEzgZ3d+BEBiQHaLn+w4I1ORpzyD3fzIa524Awo= Subject key identifier: FF:9D:40:A5:68:E4:35:4F:32:24:6F:4D:94:27:1E:5F:6A:A2:90:6F Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Certificate serial: 06EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft Manifest number: 2CC8 Signing time: Fri 22 Aug 2025 15:45:15 +0000 Manifest this update: Fri 22 Aug 2025 15:45:14 +0000 Manifest next update: Fri 29 Aug 2025 15:45:14 +0000 Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: 13fAZGur8XRjGuQnXntjEKRTXt+l+Yf8/0yNUGUgpt0=) 2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: yv4yXxdZSOzS3VJoLoyhG//bnrtF6VAnh10WOZtqxtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1770 (0x6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Validity Not Before: Aug 22 15:45:14 2025 GMT Not After : Aug 29 15:45:14 2025 GMT Subject: CN=68a8908b-1d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:d8:f1:7c:02:f3:3c:0d:80:02:be:cc:5f: b4:7f:d9:a4:e7:99:8d:fa:25:d4:db:5f:03:57:d8: 7c:18:67:8b:e0:f3:a4:58:75:14:55:15:3a:92:e5: 80:c8:90:42:bb:b4:69:29:2d:1d:fb:1f:29:1f:d8: 6c:a9:54:e1:62:7c:79:0a:f2:e8:05:64:2e:99:88: b3:62:88:bc:7f:28:03:a0:2a:ab:72:e1:44:75:d1: 4d:0e:54:d1:40:e0:1b:24:38:ea:a3:33:6b:c9:0a: b4:07:c1:7b:83:fe:92:96:a1:3f:a0:08:00:06:3a: 7e:f7:be:d6:ed:89:95:8b:bb:96:42:9f:ff:c8:e8: c5:11:2a:fc:ca:e5:e1:ea:01:66:e3:28:ff:3e:09: 65:87:d9:a7:b4:1f:b3:21:b2:cc:01:44:f5:a1:3a: bf:64:ad:00:ff:13:d2:da:f3:06:da:87:7a:13:96: c6:de:fd:7c:a2:67:9c:13:7f:d2:91:83:2d:63:af: 42:12:7e:5a:14:59:22:1a:f2:27:69:48:b9:8d:92: 77:c3:86:ac:22:96:d9:08:20:a1:33:9a:18:aa:7b: 3c:9d:ac:a9:10:3d:e6:99:50:be:be:1b:d8:81:0f: 84:81:59:6d:e0:ec:92:b6:de:85:02:f4:e9:a4:71: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:40:A5:68:E4:35:4F:32:24:6F:4D:94:27:1E:5F:6A:A2:90:6F X509v3 Authority Key Identifier: keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:3e:eb:25:82:a6:c4:5a:c9:57:46:03:b2:99:78:a4:63:c3: 87:d4:4f:76:55:d1:b8:1c:6e:63:77:69:ec:81:64:f1:f3:ff: ee:05:a1:6b:35:bf:bd:b5:56:95:ad:bf:06:b0:4a:5e:96:04: 80:f0:89:5a:72:65:06:96:58:58:68:cc:73:c2:bc:e9:34:71: 49:ac:ad:e4:7f:ae:b2:eb:04:35:5d:97:e1:e1:d5:de:51:54: 79:97:a9:5c:f3:e5:b4:e5:fb:81:85:8d:94:7a:4c:19:8c:a0: 34:4e:a7:89:bb:b0:de:bb:91:7b:e6:71:a5:41:79:a3:30:d2: 81:aa:1a:72:1c:de:72:d7:df:a3:c2:21:d2:22:2d:03:93:05: 05:e7:5c:8a:a9:72:45:98:f9:5f:f5:a0:41:a5:cf:8f:27:6c: 01:47:ad:3f:d4:d5:87:67:c0:14:33:90:e6:f4:be:00:79:d9: 12:24:44:f1:8a:f4:bc:05:a2:48:3e:90:5a:d7:ff:10:ec:e3: f8:91:f3:f0:0e:84:1c:98:3d:ed:c3:20:1d:87:bf:da:b0:75: bb:08:43:f1:7a:12:c6:f6:9e:e2:32:36:48:17:76:5f:7f:b3: 9b:f1:12:e6:56:99:24:27:19:0b:07:52:19:0c:a5:0e:fd:0f: 86:8a:2b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy NTFCNDk2RDcwHhcNMjUwODIyMTU0NTE0WhcNMjUwODI5MTU0NTE0WjAYMRYwFAYD VQQDEw02OGE4OTA4Yi0xZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/3Y8XwC8zwNgAK+zF+0f9mk55mN+iXU218DV9h8GGeL4POkWHUUVRU6kuWA yJBCu7RpKS0d+x8pH9hsqVThYnx5CvLoBWQumYizYoi8fygDoCqrcuFEddFNDlTR QOAbJDjqozNryQq0B8F7g/6SlqE/oAgABjp+977W7YmVi7uWQp//yOjFESr8yuXh 6gFm4yj/Pgllh9mntB+zIbLMAUT1oTq/ZK0A/xPS2vMG2od6E5bG3v18omecE3/S kYMtY69CEn5aFFkiGvInaUi5jZJ3w4asIpbZCCChM5oYqns8naypED3mmVC+vhvY gQ+EgVlt4OyStt6FAvTppHG53wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+dQKVo 5DVPMiRvTZQnHl9qopBvMB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ YUl3bGlReDRRZk1sRzBsdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgPuslgqbEWslXRgOymXikY8OH1E92VdG4HG5jd2nsgWTx8//uBaFr Nb+9tVaVrb8GsEpelgSA8IlacmUGllhYaMxzwrzpNHFJrK3kf66y6wQ1XZfh4dXe UVR5l6lc8+W05fuBhY2UekwZjKA0TqeJu7Deu5F75nGlQXmjMNKBqhpyHN5y19+j wiHSIi0DkwUF51yKqXJFmPlf9aBBpc+PJ2wBR60/1NWHZ8AUM5Dm9L4AedkSJETx ivS8BaJIPpBa1/8Q7OP4kfPwDoQcmD3twyAdh7/asHW7CEPxehLG9p7iMjZIF3Zf f7Ob8RLmVpkkJxkLB1IZDKUO/Q+GiiuU -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:42 2025 by rpki-client