$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: FYuplli33IT/WR9xt29kPI7liKQ64V5IqJ6QfaKYS6Y= Subject key identifier: E4:95:53:35:4E:6E:98:BD:FC:94:05:B4:43:C2:F3:96:99:CC:50:9F Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0C45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0C2D Signing time: Fri 22 Aug 2025 18:47:25 +0000 Manifest this update: Fri 22 Aug 2025 18:47:24 +0000 Manifest next update: Fri 29 Aug 2025 18:47:24 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: Y22zgg3+LqVmzjZoMxQhtEydFE8f9guRb8dneDdVsoo=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3141 (0xc45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Aug 22 18:47:24 2025 GMT Not After : Aug 29 18:47:24 2025 GMT Subject: CN=68a8bb3c-65c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:1e:58:b5:c4:6c:e7:2a:bc:86:a3:6a:12: 0f:8c:f3:c3:5a:7c:1a:1b:ba:1c:04:8c:ff:d9:b7: ea:58:92:43:ac:ed:6c:c2:bd:be:0b:63:05:4b:20: 50:98:df:a7:91:bd:9e:82:cd:5f:60:71:f4:2c:36: fd:fe:0b:7b:a5:36:71:20:86:c2:bb:cb:76:20:17: 7e:02:33:be:e1:61:e9:86:00:4e:a5:e1:e5:b0:35: 26:3a:22:d4:ab:09:92:25:41:d4:b3:ef:90:37:c8: aa:9c:0d:a1:1a:ee:62:12:f6:8f:41:af:3d:02:1d: 49:71:17:cd:08:36:be:f6:a7:f1:6b:aa:03:be:2f: 40:b6:f1:de:3b:a9:5d:c4:37:31:46:75:0a:dc:db: fd:f2:70:24:1c:b5:fc:db:d6:b8:9a:37:89:0c:ca: 76:f8:65:f0:d6:bf:41:2e:5c:7c:f5:8c:e3:05:d9: d3:09:4c:7a:ac:24:f1:ed:4d:fe:e6:21:75:c2:7a: 13:16:20:75:e2:36:c8:50:9b:c8:59:15:41:26:41: a5:c4:ef:92:e0:42:a2:56:3c:71:50:10:1b:91:7d: 9f:bf:80:60:9b:0e:5c:3e:df:e0:23:3b:0f:da:a0: 29:bc:f9:23:79:f3:59:ab:f8:94:f0:4f:57:b1:90: 96:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:95:53:35:4E:6E:98:BD:FC:94:05:B4:43:C2:F3:96:99:CC:50:9F X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:75:59:8c:28:32:0d:95:89:b0:a3:52:18:f1:ce:30:eb:53: e9:d6:e1:b4:ae:a7:22:f0:5d:d5:6e:3e:c8:77:b4:e7:21:e2: b5:b2:70:1f:77:84:43:ee:5d:98:33:72:d9:88:43:4e:18:80: 64:b5:d2:7d:6b:97:df:3b:a4:7b:89:c4:78:c6:db:e7:69:2d: f6:44:81:72:00:c2:d8:de:d6:bf:fd:4f:e2:c4:76:08:e2:8f: b1:21:b6:fe:78:59:58:5f:97:f7:25:ce:ec:a1:e9:75:6c:ec: b5:05:8b:54:ff:e8:2c:8f:13:bf:f5:3a:9b:db:f7:ea:2e:90: d5:a3:a6:9d:b7:6d:61:d3:69:ca:5d:c8:48:8f:18:e7:62:c4: 98:80:b2:1a:54:47:c4:77:76:7a:32:ea:55:98:7d:55:ad:90: 7c:d5:f9:37:b5:21:ee:46:cd:b0:f0:e1:27:8b:2d:f9:fe:9d: 20:c4:2f:a6:ad:be:a9:08:c8:20:a8:74:ab:df:55:e3:4d:e3: ac:80:71:e7:1b:44:5b:ee:81:05:e9:49:77:49:ef:a4:5d:54: 17:4c:1e:ea:12:3d:1c:2b:17:0e:33:3b:d7:45:83:09:ed:ef: a8:f2:ae:2f:f3:e4:38:cc:8a:ad:f0:83:df:e8:9b:aa:29:1b: fa:94:e1:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjUwODIyMTg0NzI0WhcNMjUwODI5MTg0NzI0WjAYMRYwFAYD VQQDEw02OGE4YmIzYy02NWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VMeWLXEbOcqvIajahIPjPPDWnwaG7ocBIz/2bfqWJJDrO1swr2+C2MFSyBQ mN+nkb2egs1fYHH0LDb9/gt7pTZxIIbCu8t2IBd+AjO+4WHphgBOpeHlsDUmOiLU qwmSJUHUs++QN8iqnA2hGu5iEvaPQa89Ah1JcRfNCDa+9qfxa6oDvi9AtvHeO6ld xDcxRnUK3Nv98nAkHLX829a4mjeJDMp2+GXw1r9BLlx89YzjBdnTCUx6rCTx7U3+ 5iF1wnoTFiB14jbIUJvIWRVBJkGlxO+S4EKiVjxxUBAbkX2fv4Bgmw5cPt/gIzsP 2qApvPkjefNZq/iU8E9XsZCWqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSVUzVO bpi9/JQFtEPC85aZzFCfMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOdVmMKDINlYmwo1IY8c4w61Pp1uG0rqci8F3Vbj7Id7TnIeK1snAf d4RD7l2YM3LZiENOGIBktdJ9a5ffO6R7icR4xtvnaS32RIFyAMLY3ta//U/ixHYI 4o+xIbb+eFlYX5f3Jc7soel1bOy1BYtU/+gsjxO/9Tqb2/fqLpDVo6adt21h02nK XchIjxjnYsSYgLIaVEfEd3Z6MupVmH1VrZB81fk3tSHuRs2w8OEniy35/p0gxC+m rb6pCMggqHSr31XjTeOsgHHnG0Rb7oEF6Ul3Se+kXVQXTB7qEj0cKxcOMzvXRYMJ 7e+o8q4v8+Q4zIqt8IPf6JuqKRv6lOGz -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:02 2025 by rpki-client