$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: omrmYRaH0kbfxWqJ6W1C8B6VLYIr15KQv3WOxEZKemc= Subject key identifier: A5:B7:C5:BB:2D:71:1E:62:F8:0D:BD:56:33:25:FC:07:04:F4:BA:DD Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 01F2 Signing time: Fri 22 Aug 2025 17:01:29 +0000 Manifest this update: Fri 22 Aug 2025 17:01:29 +0000 Manifest next update: Fri 29 Aug 2025 17:01:29 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: YUjlCk7A2WDDp2R5F3elfJ6lJch42TpKKw1Y3QIA1ak=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Aug 22 17:01:29 2025 GMT Not After : Aug 29 17:01:29 2025 GMT Subject: CN=68a8a269-0d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:39:c2:6f:8d:84:d8:6e:6b:7a:84:41:69: 32:34:2d:15:13:94:f0:d2:72:66:91:aa:6f:6b:df: 73:b6:06:fd:b1:e1:80:a0:e6:50:2d:14:97:28:ab: a9:c7:3e:cd:da:e7:1d:62:91:23:f7:f8:55:e9:8d: 4f:08:09:5f:fe:5e:3b:33:8f:7c:27:42:5a:5e:11: 26:a3:6e:4f:1f:e7:a7:41:5b:9f:3a:bb:45:ba:3a: a7:ef:e4:5f:37:40:61:a2:de:88:da:94:c9:f7:20: 67:03:2b:5a:02:43:32:3c:8e:77:7d:82:9b:44:be: 8d:29:53:98:d6:bb:03:6c:a1:16:03:b8:29:fd:d6: c3:c4:1e:b4:bd:93:85:61:de:4f:22:42:df:c2:0e: 71:fd:f9:ec:89:99:6c:26:ff:96:fd:09:04:2c:ed: f5:41:4a:50:a7:b9:6c:15:66:af:f5:d9:1a:37:f1: 57:ba:cc:de:c9:3a:7c:9f:a6:ef:2b:3b:37:53:90: 45:20:45:8d:72:be:25:00:fa:8e:3c:c6:e1:a1:62: bb:b0:4a:6e:2f:2a:f1:23:e3:9a:02:21:7e:aa:dc: 37:9c:8a:0e:bb:b9:46:40:b5:e4:df:bb:51:84:51: 87:e7:5c:c5:7b:ad:6f:32:9d:15:33:d2:b4:9b:d6: 28:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B7:C5:BB:2D:71:1E:62:F8:0D:BD:56:33:25:FC:07:04:F4:BA:DD X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6f:42:46:23:06:de:f1:2a:60:53:e7:c2:c2:64:91:d9:1d: 08:59:c2:65:a7:f3:28:b9:55:3c:ab:0f:66:01:eb:54:be:12: b8:7b:6f:dd:6b:e5:f4:dd:c9:3d:49:fa:da:19:ba:f6:54:de: ef:27:5a:c5:0b:25:44:72:88:8b:0c:3f:4e:40:3e:31:26:ba: 8d:91:70:74:4f:df:38:d0:7a:d7:d8:40:e5:cd:f1:c0:0c:d4: 66:01:2d:cf:f0:0d:72:34:6b:16:63:e8:fd:14:1a:3c:cf:8f: 15:d9:77:6e:30:45:22:9e:ed:d0:7d:6f:e7:5b:1d:78:6e:b6: 8f:f3:3f:9d:23:a4:fa:cb:f6:c4:e8:99:2d:8e:5e:18:88:2e: a9:30:90:fe:3c:9d:e1:9c:8b:1b:2f:80:00:e5:88:f1:91:85: 6f:68:ba:b2:51:43:16:21:af:c8:63:78:64:95:50:3b:a8:42: 5a:96:d6:c5:f6:d9:61:fb:ae:c9:11:db:bb:c8:38:ff:6d:29: f5:ff:56:c8:73:69:b1:ba:42:63:76:39:44:1b:9d:a2:64:f4: 7a:07:bc:bf:94:70:83:80:72:d6:9c:ac:31:14:1e:c9:61:67: 1c:7d:c4:41:d4:c6:16:7e:f3:7f:35:68:46:fe:43:b9:4f:dc: eb:42:40:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUwODIyMTcwMTI5WhcNMjUwODI5MTcwMTI5WjAYMRYwFAYD VQQDEw02OGE4YTI2OS0wZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lc5wm+NhNhua3qEQWkyNC0VE5Tw0nJmkapva99ztgb9seGAoOZQLRSXKKup xz7N2ucdYpEj9/hV6Y1PCAlf/l47M498J0JaXhEmo25PH+enQVufOrtFujqn7+Rf N0Bhot6I2pTJ9yBnAytaAkMyPI53fYKbRL6NKVOY1rsDbKEWA7gp/dbDxB60vZOF Yd5PIkLfwg5x/fnsiZlsJv+W/QkELO31QUpQp7lsFWav9dkaN/FXuszeyTp8n6bv Kzs3U5BFIEWNcr4lAPqOPMbhoWK7sEpuLyrxI+OaAiF+qtw3nIoOu7lGQLXk37tR hFGH51zFe61vMp0VM9K0m9YoHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKW3xbst cR5i+A29VjMl/AcE9LrdMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrb0JGIwbe8SpgU+fCwmSR2R0IWcJlp/MouVU8qw9mAetUvhK4e2/d a+X03ck9SfraGbr2VN7vJ1rFCyVEcoiLDD9OQD4xJrqNkXB0T9840HrX2EDlzfHA DNRmAS3P8A1yNGsWY+j9FBo8z48V2XduMEUinu3QfW/nWx14braP8z+dI6T6y/bE 6Jktjl4YiC6pMJD+PJ3hnIsbL4AA5YjxkYVvaLqyUUMWIa/IY3hklVA7qEJaltbF 9tlh+67JEdu7yDj/bSn1/1bIc2mxukJjdjlEG52iZPR6B7y/lHCDgHLWnKwxFB7J YWccfcRB1MYWfvN/NWhG/kO5T9zrQkB6 -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:15 2025 by rpki-client