$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: vi+55fvINO5r+BxjJo4F9MufztqgMzrmuBwKmP/O0yo= Subject key identifier: 3E:DE:5F:20:AB:F7:42:F3:A7:30:6D:91:A8:24:F5:5A:35:38:FA:10 Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: 0124 Signing time: Sat 23 Aug 2025 04:52:15 +0000 Manifest this update: Sat 23 Aug 2025 04:52:14 +0000 Manifest next update: Sat 30 Aug 2025 04:52:14 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: vzAl4UkMLwpMQjMQVwZ5u3OVHdLDyfJfdcJWBT0hNKk=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Validity Not Before: Aug 23 04:52:14 2025 GMT Not After : Aug 30 04:52:14 2025 GMT Subject: CN=68a948ff-eaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:dd:6a:5e:c5:f7:ad:da:d7:54:07:71:d9: 80:eb:f8:87:d4:31:3e:c6:91:82:b6:87:53:e1:d3: c2:bb:42:e1:d3:05:d7:73:ec:b1:63:b4:2c:9a:12: 38:20:7d:31:c4:d1:d8:02:e4:7b:7d:84:13:2e:9d: a6:b2:41:99:09:2f:b4:e6:68:f8:ad:50:3f:05:c5: 97:ea:19:9b:94:02:89:f6:49:c8:8b:07:cc:91:17: 17:77:17:b8:0d:a6:0d:1c:32:1a:11:ba:47:3e:31: ab:d8:0d:f7:ec:4c:c1:5c:2f:6e:b1:83:b0:f2:f9: 6d:c8:df:2e:d1:66:10:f6:f6:26:9e:dc:ed:24:0b: 6b:88:66:e1:01:9b:3a:3f:f5:4e:81:a3:b6:18:5a: 42:29:2a:6e:d4:a1:e8:67:63:56:0e:28:f9:8e:84: 8d:e7:50:f4:bf:dc:cc:46:58:5f:14:5c:bb:6f:78: af:72:9e:cf:a4:96:3e:4a:14:47:b1:5c:0e:46:11: 65:b2:92:14:b1:82:ae:58:01:06:45:80:17:54:32: c2:a0:93:03:7f:1d:8f:0a:63:37:f9:e5:d9:4a:ee: e3:87:98:4a:a9:fe:c8:ce:b5:07:4b:a2:ad:d4:81: f5:59:48:80:5c:65:86:57:af:42:84:b5:99:ba:ed: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DE:5F:20:AB:F7:42:F3:A7:30:6D:91:A8:24:F5:5A:35:38:FA:10 X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a3:79:ab:ca:92:7f:0f:c7:9f:68:62:2f:25:52:5f:1a:86: 77:52:53:28:17:5d:c4:e8:86:88:d5:b0:f6:35:c2:a2:09:96: 14:4f:79:70:ae:c2:d9:bc:5f:01:3f:a6:dd:1a:bc:ad:31:07: a0:d9:d6:58:d9:3e:40:37:f7:c1:78:53:97:bb:37:19:61:dc: d7:00:bd:35:42:87:4e:da:36:dc:78:da:fd:6e:71:2f:8c:5d: 15:4a:66:45:74:9d:9f:1f:56:86:2d:0c:88:04:3f:37:d4:ac: 61:d2:0e:6b:74:c3:aa:07:e1:94:1d:aa:21:c3:ea:94:9f:e0: 76:4a:18:00:cd:8b:02:af:db:d2:ca:f3:e8:f7:85:e5:01:06: a5:13:43:c9:3e:31:5c:32:c8:a0:8b:d4:49:75:88:06:70:48: 69:21:0c:5d:c6:0f:b3:a8:95:e5:c2:12:75:cd:fc:e0:f5:c3: 57:77:27:2f:ab:ed:3c:db:77:c5:0a:ee:17:91:6c:1d:3e:a3: 38:42:4a:6b:04:f7:b1:f3:36:f9:b6:99:88:09:ac:89:7a:36: b1:99:41:56:c5:98:21:c5:4f:a8:08:5a:2e:78:81:0e:44:6a: d9:2d:cd:a2:61:60:a8:b4:51:41:d6:15:f9:45:68:08:a9:cc: 19:64:46:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5 MDY0ODlDQzYwHhcNMjUwODIzMDQ1MjE0WhcNMjUwODMwMDQ1MjE0WjAYMRYwFAYD VQQDEw02OGE5NDhmZi1lYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwg7dal7F963a11QHcdmA6/iH1DE+xpGCtodT4dPCu0Lh0wXXc+yxY7QsmhI4 IH0xxNHYAuR7fYQTLp2mskGZCS+05mj4rVA/BcWX6hmblAKJ9knIiwfMkRcXdxe4 DaYNHDIaEbpHPjGr2A337EzBXC9usYOw8vltyN8u0WYQ9vYmntztJAtriGbhAZs6 P/VOgaO2GFpCKSpu1KHoZ2NWDij5joSN51D0v9zMRlhfFFy7b3ivcp7PpJY+ShRH sVwORhFlspIUsYKuWAEGRYAXVDLCoJMDfx2PCmM3+eXZSu7jh5hKqf7IzrUHS6Kt 1IH1WUiAXGWGV69ChLWZuu2qjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7eXyCr 90LzpzBtkagk9Vo1OPoQMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0 NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri84N0MzNDU0Q0M0NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4 aGMyNXJacVJyNEtRWkluTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbo3mrypJ/D8efaGIvJVJfGoZ3UlMoF13E6IaI1bD2NcKiCZYUT3lw rsLZvF8BP6bdGrytMQeg2dZY2T5AN/fBeFOXuzcZYdzXAL01QodO2jbceNr9bnEv jF0VSmZFdJ2fH1aGLQyIBD831Kxh0g5rdMOqB+GUHaohw+qUn+B2ShgAzYsCr9vS yvPo94XlAQalE0PJPjFcMsigi9RJdYgGcEhpIQxdxg+zqJXlwhJ1zfzg9cNXdycv q+0823fFCu4XkWwdPqM4QkprBPex8zb5tpmICayJejaxmUFWxZghxU+oCFoueIEO RGrZLc2iYWCotFFB1hX5RWgIqcwZZEaU -----END CERTIFICATE-----Generated at Sun Aug 24 07:20:27 2025 by rpki-client