$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: vKCQOyIKPpRmhk3/pHxT8wULg+8P+s/juZOTUOkIFQ8= Subject key identifier: 56:38:90:8E:E1:58:EF:DC:12:7A:E9:92:9F:DF:9B:2E:64:13:F5:D6 Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: C9 Signing time: Sat 23 Aug 2025 05:54:15 +0000 Manifest this update: Sat 23 Aug 2025 05:54:15 +0000 Manifest next update: Sat 30 Aug 2025 05:54:15 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: ugOj8s5jyMxEDH+/8fUuz64M+1CoUjiyst8DwX61gDc=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: EOPx00rRZjGS/73Br0xTrWoW0kA4+3+SpewBHZe+BK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Aug 23 05:54:15 2025 GMT Not After : Aug 30 05:54:15 2025 GMT Subject: CN=68a95787-f10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:e2:10:eb:3a:1a:d7:38:ce:0a:71:1d:61: 2f:ab:c9:1f:b4:99:a6:6b:b9:01:5d:ec:38:40:d3: 6f:4c:4a:d7:7b:fe:a9:d5:93:64:5a:0b:6e:1a:77: 20:92:51:0a:80:82:54:6a:ee:59:08:7b:e5:3c:d7: f7:8b:db:77:06:f3:27:0f:bc:3f:11:5c:ce:19:32: e4:d3:b2:77:f4:cf:cf:18:c5:28:33:06:49:b1:af: 10:5a:c9:20:e9:a0:88:f7:0c:6b:5c:67:52:5e:bb: d3:a5:d0:4a:be:22:e5:cc:7e:b4:11:ed:df:45:f9: ac:3f:0c:b2:d3:ea:da:68:c3:cd:bb:3d:d3:ef:c8: 78:5e:53:0c:b2:5a:eb:d9:e0:24:64:0f:f6:f3:a7: 9a:55:ae:a7:11:50:99:78:db:b4:e4:18:d7:05:cd: 2d:e6:34:21:9c:99:9d:bf:29:c4:a6:17:85:47:a4: cc:17:c5:78:a8:77:53:ff:a3:95:59:e7:5d:3a:aa: b9:a7:43:5a:fa:e3:d4:2a:e2:92:44:57:c7:0b:9d: cd:42:a4:32:e0:51:7b:d8:4a:cd:54:81:04:6a:42: f8:79:a9:6a:d1:ef:53:5b:e0:e9:c5:dc:3d:50:58: 8b:0b:3d:12:10:64:a0:c8:8f:8d:bb:38:0b:62:63: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:38:90:8E:E1:58:EF:DC:12:7A:E9:92:9F:DF:9B:2E:64:13:F5:D6 X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:29:76:8d:7d:45:27:42:de:32:31:5b:09:d5:b0:d7:d3:57: 9b:45:49:9a:5c:3b:47:90:45:ef:ae:bf:12:78:9d:6a:5e:aa: f6:be:f1:af:23:b7:15:70:70:a7:93:a0:a3:38:88:58:52:d4: ef:3d:7d:80:3d:d5:e8:c5:8f:48:f4:60:e3:f5:be:5d:f1:17: 87:96:04:86:1c:72:bf:e8:79:58:c2:49:91:1d:f9:1f:f8:93: de:00:8d:f2:a5:87:66:88:4a:69:87:ae:06:8c:be:3f:0d:56: 0b:c7:dd:c3:ae:a4:0f:e6:41:b3:3c:b3:56:ce:de:c7:83:a8: 0c:35:24:d8:13:76:d8:02:45:5e:0b:ca:af:ef:d5:18:ca:71: d8:11:1f:83:3f:38:f6:51:24:99:bf:d1:46:cf:20:a1:be:61: 22:f4:d5:e2:3f:25:dc:9f:74:91:38:c6:32:ac:15:7a:96:4e: 7a:e2:86:e3:5e:9c:92:17:45:eb:d5:45:89:f0:20:49:e9:52: c8:f5:6a:cb:63:d7:69:51:25:2b:19:c0:ce:64:c9:4d:66:e4: 24:e8:27:a1:d3:f1:bc:06:86:4a:9b:b3:7a:3c:4a:59:dc:53: 1f:13:8d:ad:d3:36:9f:10:f2:b8:0a:86:5c:29:26:e3:3e:c6: a1:89:2d:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUwODIzMDU1NDE1WhcNMjUwODMwMDU1NDE1WjAYMRYwFAYD VQQDEw02OGE5NTc4Ny1mMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8XiEOs6Gtc4zgpxHWEvq8kftJmma7kBXew4QNNvTErXe/6p1ZNkWgtuGncg klEKgIJUau5ZCHvlPNf3i9t3BvMnD7w/EVzOGTLk07J39M/PGMUoMwZJsa8QWskg 6aCI9wxrXGdSXrvTpdBKviLlzH60Ee3fRfmsPwyy0+raaMPNuz3T78h4XlMMslrr 2eAkZA/286eaVa6nEVCZeNu05BjXBc0t5jQhnJmdvynEpheFR6TMF8V4qHdT/6OV WeddOqq5p0Na+uPUKuKSRFfHC53NQqQy4FF72ErNVIEEakL4ealq0e9TW+Dpxdw9 UFiLCz0SEGSgyI+NuzgLYmMyfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFY4kI7h WO/cEnrpkp/fmy5kE/XWMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeKXaNfUUnQt4yMVsJ1bDX01ebRUmaXDtHkEXvrr8SeJ1qXqr2vvGv I7cVcHCnk6CjOIhYUtTvPX2APdXoxY9I9GDj9b5d8ReHlgSGHHK/6HlYwkmRHfkf +JPeAI3ypYdmiEpph64GjL4/DVYLx93DrqQP5kGzPLNWzt7Hg6gMNSTYE3bYAkVe C8qv79UYynHYER+DPzj2USSZv9FGzyChvmEi9NXiPyXcn3SROMYyrBV6lk564obj XpySF0Xr1UWJ8CBJ6VLI9WrLY9dpUSUrGcDOZMlNZuQk6Ceh0/G8BoZKm7N6PEpZ 3FMfE42t0zafEPK4CoZcKSbjPsahiS1n -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:02 2025 by rpki-client