$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: Gt7wbZuA3IK3scdiay4Gjpd9XMrSivmh17UWeG1jJl4= Subject key identifier: F7:AD:AD:3F:48:EC:41:AE:01:CF:08:8E:7B:04:FC:10:38:56:AA:A7 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 01B1 Signing time: Sun 29 Jun 2025 02:27:39 +0000 Manifest this update: Sun 29 Jun 2025 02:27:38 +0000 Manifest next update: Sun 06 Jul 2025 02:27:38 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: GDwwMfSmAD69ys5D2opSieUzvNAavJSU28xe9goFoac=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=) 3: AD88248C1FBE11EE97342E64C4F9AE02.roa (hash: GPafla64VUamN9CnaYJ2F+XELitJmP/fVhbH40kAovU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Jun 29 02:27:38 2025 GMT Not After : Jul 6 02:27:38 2025 GMT Subject: CN=6860a49b-9059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:b8:ff:67:e5:f7:ed:53:2a:bc:1e:7b:b8: 5a:94:f5:fd:25:74:6c:48:0c:60:44:55:98:d4:2f: e8:e2:9c:9d:e3:59:6e:d3:88:a7:25:2b:8a:34:fd: f7:93:b0:a6:89:d1:ed:0d:d8:ac:41:e9:c1:d0:c8: c1:bd:d9:c2:61:2e:9d:fa:1c:cc:50:70:b7:7a:ef: 70:db:a1:39:be:2b:76:a6:52:b3:62:11:14:44:7e: 80:b7:4f:5d:50:73:42:b0:a7:b4:f7:aa:c8:96:8d: a9:21:d9:38:00:a5:9f:be:8b:66:d2:9e:87:3a:88: 62:e7:f5:bb:e3:a2:37:16:64:7d:80:0c:49:96:de: 7b:ec:0f:9d:79:4c:ec:d4:85:f7:55:5a:63:da:7e: 92:6a:84:07:38:74:f5:fb:4e:7b:a6:15:bf:62:fd: 59:10:73:3c:92:64:a8:e3:73:dd:6b:38:7c:10:66: 55:d4:a7:17:83:5f:ad:bd:f4:40:2a:8f:84:57:64: 4e:6e:f7:f6:6f:cd:01:45:d6:c3:27:70:5f:04:41: 63:65:24:5f:9f:f2:70:8c:7e:b8:cd:cb:06:62:71: 91:d3:83:6e:cc:8f:c8:c0:da:62:2c:59:7f:8f:0a: a0:06:ae:30:7f:0b:92:9e:9e:13:cb:8b:26:73:d6: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AD:AD:3F:48:EC:41:AE:01:CF:08:8E:7B:04:FC:10:38:56:AA:A7 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:0f:a6:9d:c4:a6:8d:47:22:9f:e4:05:bd:38:fb:7f:04:89: 31:6b:6f:43:dc:c1:de:a0:d9:01:b2:63:c6:07:c1:0e:c1:2c: a0:85:3d:51:c4:44:df:d3:fe:0c:ec:d7:9d:6e:42:b8:e6:da: 2a:b1:58:ec:24:c0:9a:05:97:4b:d2:09:ea:af:50:0e:4f:ff: 2c:bd:fa:0e:33:32:36:a6:e3:ed:ce:ed:64:db:bb:c0:e4:d9: 20:b6:cc:67:a1:60:54:5d:8d:cd:85:84:33:25:97:80:07:15: 26:9e:2b:c6:6d:e2:c6:a2:b4:29:64:4e:14:dd:00:53:8b:3d: 1e:1e:00:eb:f0:63:79:b6:4e:85:5e:3f:e9:75:7c:6f:7d:d7: 07:83:1c:73:37:88:36:c2:21:18:1e:37:65:d7:d0:2e:1f:90: 0a:b7:09:57:35:ac:48:60:48:38:7e:74:17:8a:99:28:9e:5f: 1d:76:fd:c9:ab:ee:d1:35:70:5c:a6:6b:25:ec:73:3f:ff:67: 87:0c:26:e4:69:85:6e:34:cb:bd:79:8b:ae:a5:12:60:27:b7: c8:d3:ba:da:c0:b7:0f:a9:35:7a:45:ff:37:41:ff:a5:54:83: 61:1b:ed:95:f9:74:57:31:b0:80:a9:ae:b0:88:f8:6a:76:35: 27:aa:fb:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjUwNjI5MDIyNzM4WhcNMjUwNzA2MDIyNzM4WjAYMRYwFAYD VQQDEw02ODYwYTQ5Yi05MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1+4/2fl9+1TKrwee7halPX9JXRsSAxgRFWY1C/o4pyd41lu04inJSuKNP33 k7CmidHtDdisQenB0MjBvdnCYS6d+hzMUHC3eu9w26E5vit2plKzYhEURH6At09d UHNCsKe096rIlo2pIdk4AKWfvotm0p6HOohi5/W746I3FmR9gAxJlt577A+deUzs 1IX3VVpj2n6SaoQHOHT1+057phW/Yv1ZEHM8kmSo43Pdazh8EGZV1KcXg1+tvfRA Ko+EV2RObvf2b80BRdbDJ3BfBEFjZSRfn/JwjH64zcsGYnGR04NuzI/IwNpiLFl/ jwqgBq4wfwuSnp4Ty4smc9bYfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPetrT9I 7EGuAc8IjnsE/BA4VqqnMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdD6adxKaNRyKf5AW9OPt/BIkxa29D3MHeoNkBsmPGB8EOwSyghT1R xETf0/4M7NedbkK45toqsVjsJMCaBZdL0gnqr1AOT/8svfoOMzI2puPtzu1k27vA 5NkgtsxnoWBUXY3NhYQzJZeABxUmnivGbeLGorQpZE4U3QBTiz0eHgDr8GN5tk6F Xj/pdXxvfdcHgxxzN4g2wiEYHjdl19AuH5AKtwlXNaxIYEg4fnQXipkonl8ddv3J q+7RNXBcpmsl7HM//2eHDCbkaYVuNMu9eYuupRJgJ7fI07rawLcPqTV6Rf83Qf+l VINhG+2V+XRXMbCAqa6wiPhqdjUnqvtW -----END CERTIFICATE-----Generated at Mon Jun 30 18:33:46 2025 by rpki-client