$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: ZvexA260N1Qsncx9n1k4LdRP74XnhwGGMrcwzsZbGgc= Subject key identifier: 06:2A:E2:B0:39:22:0E:6A:2D:DB:4A:77:85:6E:B6:BC:ED:83:31:DF Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 24 Signing time: Sat 23 Aug 2025 08:02:54 +0000 Manifest this update: Sat 23 Aug 2025 08:02:53 +0000 Manifest next update: Sat 30 Aug 2025 08:02:53 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: Zt/wExhojtuavHbeA5bwseLvN0XGBTKJpBsVzBy7SCo=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Aug 23 08:02:53 2025 GMT Not After : Aug 30 08:02:53 2025 GMT Subject: CN=68a975ae-30f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:bf:17:ec:c8:b5:51:5e:d0:e2:e7:5c:b3: 67:d6:ce:5a:24:4e:74:4f:73:8e:a0:a2:8d:51:3a: cf:42:83:b2:73:26:fd:d3:3e:67:36:b2:95:1d:81: 91:e9:fd:c0:59:9d:20:17:4a:be:50:4d:d4:6d:a4: fd:94:b3:9b:9c:14:df:b3:5e:be:df:9e:70:4f:38: e6:5f:24:b3:78:dd:5d:7a:59:74:b1:b7:c2:0e:73: fe:b6:72:3f:29:b6:c3:ae:70:44:17:ff:23:98:02: f3:54:11:36:17:b7:20:aa:e3:db:f8:df:6d:fc:bc: 9f:d9:f2:bc:35:7f:75:d1:f9:6c:5c:93:c1:9f:6a: 02:2a:ca:d3:be:89:2c:3d:9f:45:0c:e2:6e:40:fa: 10:fb:45:6b:23:b9:4c:c4:1e:0c:2a:a4:61:57:1d: df:28:8a:c9:47:93:ef:a3:d3:a2:c1:ca:1c:78:9f: c5:56:81:ac:e8:14:04:88:a3:10:12:86:54:5e:fc: 9c:93:e0:f5:25:3f:13:9d:c3:c8:f7:3e:9d:ae:7a: d1:be:60:55:0a:ac:f2:74:16:87:a0:25:9f:a3:db: e1:a7:67:c1:de:fe:29:b6:a3:db:e7:2c:20:0e:5e: 5e:c1:27:70:a9:2f:1f:ed:d7:35:2a:84:7a:a8:11: 59:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2A:E2:B0:39:22:0E:6A:2D:DB:4A:77:85:6E:B6:BC:ED:83:31:DF X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:4a:2d:fc:0a:fd:bd:48:9a:1d:ad:e5:08:42:95:0c:3a:74: 90:e3:3a:34:80:83:f5:21:bf:24:3c:89:73:3d:96:2d:53:a1: 39:ff:70:f3:89:c1:7a:32:2e:30:4d:86:d6:9d:39:cb:4b:64: ff:2a:91:97:c8:a1:c1:a3:15:82:af:c5:17:30:1c:b3:1d:27: ae:ad:c8:07:de:f7:63:18:ee:90:fe:c4:a3:fa:11:ed:2e:07: 69:6b:37:d1:e2:ab:21:86:0e:3c:8e:f7:9e:5c:df:10:cd:69: 50:6c:0d:8b:1e:5d:7b:50:02:6c:ba:71:ac:a4:68:0a:49:07: 8a:45:e5:b5:5f:f4:3e:32:86:d1:00:fe:0e:71:6b:e5:26:82: 0f:32:38:fe:8a:5f:8f:8a:ef:f5:7d:cc:8d:9a:d6:57:6e:8c: 74:c1:b4:e1:9a:ef:7c:67:df:ed:07:11:fd:44:0d:09:b9:90: ba:72:7e:d6:71:12:b7:97:14:50:25:6b:2c:93:ce:14:77:a2: 67:1e:de:9d:3d:30:56:8e:fd:22:ed:ac:62:18:c5:16:8c:b9: 64:fd:98:0b:4b:b0:43:37:a4:ee:c4:14:7b:d9:ab:c7:44:73: a0:72:e5:72:5c:ce:0d:ab:02:3b:70:a4:83:9f:4f:38:71:f1: 25:16:e3:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTA4MjMwODAyNTNaFw0yNTA4MzAwODAyNTNaMBgxFjAUBgNV BAMTDTY4YTk3NWFlLTMwZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIiL8X7Mi1UV7Q4udcs2fWzlokTnRPc46goo1ROs9Cg7JzJv3TPmc2spUdgZHp /cBZnSAXSr5QTdRtpP2Us5ucFN+zXr7fnnBPOOZfJLN43V16WXSxt8IOc/62cj8p tsOucEQX/yOYAvNUETYXtyCq49v43238vJ/Z8rw1f3XR+Wxck8GfagIqytO+iSw9 n0UM4m5A+hD7RWsjuUzEHgwqpGFXHd8oislHk++j06LByhx4n8VWgazoFASIoxAS hlRe/JyT4PUlPxOdw8j3Pp2uetG+YFUKrPJ0FoegJZ+j2+GnZ8He/im2o9vnLCAO Xl7BJ3CpLx/t1zUqhHqoEVlNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBirisDki Dmot20p3hW62vO2DMd8wHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKdKLfwK/b1Imh2t5QhClQw6dJDjOjSAg/UhvyQ8iXM9li1ToTn/cPOJ wXoyLjBNhtadOctLZP8qkZfIocGjFYKvxRcwHLMdJ66tyAfe92MY7pD+xKP6Ee0u B2lrN9HiqyGGDjyO955c3xDNaVBsDYseXXtQAmy6caykaApJB4pF5bVf9D4yhtEA /g5xa+Umgg8yOP6KX4+K7/V9zI2a1ldujHTBtOGa73xn3+0HEf1EDQm5kLpyftZx EreXFFAlayyTzhR3omce3p09MFaO/SLtrGIYxRaMuWT9mAtLsEM3pO7EFHvZq8dE c6By5XJczg2rAjtwpIOfTzhx8SUW49s= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:58 2025 by rpki-client