$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: srC2CMVKT8IDdmP1qREFARUsJ5s11eUZPU39RIqKpe4= Subject key identifier: D8:C5:41:79:8B:58:CF:8C:34:3E:CF:5C:F1:EB:EE:E4:2A:FE:05:B1 Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 0399 Signing time: Sat 23 Aug 2025 01:05:23 +0000 Manifest this update: Sat 23 Aug 2025 01:05:22 +0000 Manifest next update: Sat 30 Aug 2025 01:05:22 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: gpJQqMkO/TSEDn+l3YG2AQ0Qr6t0AfC9DiKTU1601Oo=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: nfR34cWIXlmbnxZObF117xAPX2RJTODqf4QtFwTlL+c=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: uBqvI5dq8qNrDbHw4p02iYakpWTkn0S51P6ziID2+EI=) 4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: scTIVhqGYW6GoZyvhCkZ72zHa5qMbQB5MWHuWvi79lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Aug 23 01:05:22 2025 GMT Not After : Aug 30 01:05:22 2025 GMT Subject: CN=68a913d2-b5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:fc:c9:e4:e8:04:86:37:0c:41:2f:ac:8c: be:54:ab:94:3d:37:7e:6f:99:0a:fa:9b:57:0c:a1: e7:cf:ad:ab:dc:14:fc:f9:15:53:27:4b:f7:dc:c0: 68:cb:6e:2f:37:c1:af:6b:1a:fb:2b:3f:95:af:4c: 77:5c:b5:c8:a1:9c:c5:b6:8a:d9:eb:70:55:91:f1: 6f:d1:ac:9d:00:0a:a6:e8:90:d2:8f:50:79:f8:9b: d7:d0:b2:3b:97:cb:58:37:3f:c9:79:dd:61:f8:5d: 6f:08:d8:4c:a4:e5:05:6e:ae:92:1d:d8:6d:4a:03: b8:1e:76:e4:89:dd:35:64:71:25:79:67:b5:36:0f: f9:f0:c5:11:dd:5e:50:6a:60:7a:b3:11:c4:f8:26: de:69:a4:a1:89:b3:80:87:ac:24:bc:96:61:6e:94: 4c:f8:5c:6b:39:bb:d8:ac:fb:39:8f:10:9a:cc:c2: 01:b7:a0:e3:2e:10:79:3a:e8:8d:be:ee:d4:8a:aa: 20:68:08:2d:fb:04:ba:b3:5b:f0:81:28:d8:a9:08: 35:a9:17:94:4f:81:f6:18:41:5d:69:ae:ac:dd:e0: 8b:ef:75:68:7e:31:d8:a9:b0:49:1b:a6:3d:53:d1: e6:b2:32:2f:9b:94:b9:77:4e:f9:4d:a8:5f:65:7b: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C5:41:79:8B:58:CF:8C:34:3E:CF:5C:F1:EB:EE:E4:2A:FE:05:B1 X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b5:3c:49:c5:bf:b9:47:27:67:2f:d4:a5:aa:85:bf:3a:6b: 84:0d:84:80:7e:8f:76:17:d7:29:5c:b2:3f:c8:9e:8c:7e:65: 37:53:0d:e3:d9:38:61:7e:90:8b:7b:a6:f2:f6:57:ba:b7:d3: 9e:1b:2d:94:41:68:95:df:11:1d:cf:df:cc:75:88:45:52:45: 6d:e6:44:4e:c7:ac:0f:ba:fb:9f:cc:f1:01:9a:dc:7f:90:c2: 7f:c5:88:c9:e8:5c:ad:7c:d5:d2:63:d6:76:c8:89:02:9e:9f: 02:4a:ec:c6:22:da:c9:eb:bc:df:a7:8c:bb:0f:61:57:1c:08: 93:42:db:98:0f:8f:fb:18:ae:31:2f:bd:be:64:33:25:66:6c: 3a:b6:5f:33:18:2a:ad:f4:da:4b:9f:0e:d0:e7:c7:36:56:70: 14:74:3f:0f:f0:c7:1a:85:7a:95:32:ec:80:b0:63:c0:d9:07: 04:83:74:f4:25:5f:8b:77:10:59:40:7a:7f:28:38:54:0b:70: 2b:6b:21:1a:61:ae:8b:5e:bb:91:72:b8:6f:fc:74:c2:67:df: b5:c2:b3:c6:5f:cf:ce:16:5e:6b:ac:0d:1e:f9:2b:26:51:ef: 62:f7:f8:25:72:69:9d:66:21:c9:cc:c4:46:93:88:d7:b6:c8: da:f2:70:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjUwODIzMDEwNTIyWhcNMjUwODMwMDEwNTIyWjAYMRYwFAYD VQQDEw02OGE5MTNkMi1iNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzb8yeToBIY3DEEvrIy+VKuUPTd+b5kK+ptXDKHnz62r3BT8+RVTJ0v33MBo y24vN8Gvaxr7Kz+Vr0x3XLXIoZzFtorZ63BVkfFv0aydAAqm6JDSj1B5+JvX0LI7 l8tYNz/Jed1h+F1vCNhMpOUFbq6SHdhtSgO4Hnbkid01ZHEleWe1Ng/58MUR3V5Q amB6sxHE+CbeaaShibOAh6wkvJZhbpRM+FxrObvYrPs5jxCazMIBt6DjLhB5OuiN vu7UiqogaAgt+wS6s1vwgSjYqQg1qReUT4H2GEFdaa6s3eCL73VofjHYqbBJG6Y9 U9HmsjIvm5S5d075TahfZXtnwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjFQXmL WM+MND7PXPHr7uQq/gWxMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBitTxJxb+5RydnL9SlqoW/OmuEDYSAfo92F9cpXLI/yJ6MfmU3Uw3j 2ThhfpCLe6by9le6t9OeGy2UQWiV3xEdz9/MdYhFUkVt5kROx6wPuvufzPEBmtx/ kMJ/xYjJ6FytfNXSY9Z2yIkCnp8CSuzGItrJ67zfp4y7D2FXHAiTQtuYD4/7GK4x L72+ZDMlZmw6tl8zGCqt9NpLnw7Q58c2VnAUdD8P8McahXqVMuyAsGPA2QcEg3T0 JV+LdxBZQHp/KDhUC3ArayEaYa6LXruRcrhv/HTCZ9+1wrPGX8/OFl5rrA0e+Ssm Ue9i9/glcmmdZiHJzMRGk4jXtsja8nAg -----END CERTIFICATE-----Generated at Sat Aug 23 17:44:52 2025 by rpki-client