$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft File: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft (raw, json) Hash identifier: P1LGH/8IyDJN0BqWXmKqVCwfg4LnBbjhKIexVdWidsA= Subject key identifier: 2E:CB:A7:40:77:15:63:99:7A:8E:05:C7:86:89:F9:66:42:0F:AA:65 Authority key identifier: C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD Certificate issuer: /CN=A91E2176/serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Certificate serial: 088F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft Manifest number: 088B Signing time: Fri 22 Aug 2025 20:43:36 +0000 Manifest this update: Fri 22 Aug 2025 20:43:35 +0000 Manifest next update: Fri 29 Aug 2025 20:43:35 +0000 Files and hashes: 1: wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl (hash: XNCqA0nHUhT76FMBkF/RtAxFW5OjMmUNlvI7RnB0AMU=) 2: 4A9F953EE29611EF8E06890AC4F9AE02.roa (hash: fNPLKF71ZTVQ5uNDC/DjhFOj01PgekvHafBfAP7X73I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2176, serialNumber=C09D12C7CA2EB4D35CA50A939D3D9CBE817E39AD Validity Not Before: Aug 22 20:43:35 2025 GMT Not After : Aug 29 20:43:35 2025 GMT Subject: CN=68a8d678-d75f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:41:06:55:23:81:95:08:74:de:5e:39:bc: 8d:96:66:e7:2d:c1:2e:ae:38:4f:70:66:33:e7:7f: ca:d7:16:80:98:d2:0a:cc:1b:f4:46:20:54:58:ab: 2e:39:a8:e1:2b:94:ac:87:bb:bf:f0:fa:dc:8b:af: 6d:d9:72:87:4f:b1:f8:c7:f0:f6:ef:f2:f6:e8:45: 3b:74:f4:f6:36:74:61:76:34:06:66:08:c3:fb:44: 08:ff:d7:84:57:c1:da:06:1c:b5:49:fe:59:67:ee: 47:a1:7a:23:f6:7e:4a:be:66:23:05:76:6f:9b:c2: 4d:a8:c8:49:21:dd:9f:bd:7f:4b:d3:38:b4:c5:cd: 2e:80:a3:e6:7e:88:fa:4a:e7:20:d7:5b:45:51:51: 55:7b:dd:c4:92:42:81:59:4d:57:ad:16:52:cd:9c: 9d:1e:59:80:19:2a:00:ba:a5:0f:2a:ea:49:91:65: c0:d7:d4:c2:a4:69:20:a4:2c:08:b8:48:57:a3:08: df:63:13:ac:ea:ac:52:3a:11:7f:74:63:91:ba:f8: e2:1b:45:d4:74:02:ed:fb:c6:1b:7b:34:1a:d0:1b: 83:64:d7:11:91:ac:76:6e:c7:ef:74:c3:1b:fb:74: 0c:8d:66:f0:5c:44:e1:c2:2d:34:7d:20:20:e6:42: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CB:A7:40:77:15:63:99:7A:8E:05:C7:86:89:F9:66:42:0F:AA:65 X509v3 Authority Key Identifier: keyid:C0:9D:12:C7:CA:2E:B4:D3:5C:A5:0A:93:9D:3D:9C:BE:81:7E:39:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2176/88AB8E94C6FF11EA8252E109C4F9AE02/wJ0Sx8outNNcpQqTnT2cvoF-Oa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f9:92:ae:04:6c:14:c3:42:43:03:45:60:8a:42:8b:37:16: 12:5b:96:d7:ca:1b:b8:0c:a9:69:35:59:bd:b2:2c:38:55:da: 5a:59:ac:af:78:26:1c:65:05:e2:6c:83:dd:c9:c5:28:34:a9: 1d:cf:81:48:68:e2:2c:94:c5:ff:20:3b:0a:75:86:5f:8a:2f: 97:81:99:b0:11:08:f5:36:12:a1:01:41:0b:3d:08:63:1c:33: b3:2e:01:81:9a:53:f3:66:be:81:5c:1f:9b:3e:94:98:7e:85: 8a:56:02:90:77:77:32:f2:d4:93:e9:d0:8a:ad:00:06:d6:9b: 08:49:07:26:3e:11:bf:b1:25:b8:53:10:6a:3c:33:df:5d:a6: 8a:03:e4:40:0d:49:96:7e:39:f4:6a:9f:bd:69:9e:66:af:5f: 39:a0:c3:a8:47:52:3f:09:37:f6:3d:40:34:22:78:03:2e:f2: 4a:42:33:d9:b0:08:c4:78:40:2e:1d:40:07:d3:ef:f2:8e:78: f2:98:f3:5c:7e:02:a9:02:c3:3e:d4:0d:27:c0:d5:75:91:61: 7b:7e:5b:a2:f3:ed:9c:3d:ca:35:61:91:e8:28:1f:59:46:f9: 08:3d:27:cd:bb:df:0c:10:68:c8:f6:9a:5b:9b:bc:2a:a1:84: d2:55:66:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIxNzYxMTAvBgNVBAUTKEMwOUQxMkM3Q0EyRUI0RDM1Q0E1MEE5MzlEM0Q5Q0JF ODE3RTM5QUQwHhcNMjUwODIyMjA0MzM1WhcNMjUwODI5MjA0MzM1WjAYMRYwFAYD VQQDEw02OGE4ZDY3OC1kNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSdBBlUjgZUIdN5eObyNlmbnLcEurjhPcGYz53/K1xaAmNIKzBv0RiBUWKsu OajhK5Ssh7u/8Prci69t2XKHT7H4x/D27/L26EU7dPT2NnRhdjQGZgjD+0QI/9eE V8HaBhy1Sf5ZZ+5HoXoj9n5KvmYjBXZvm8JNqMhJId2fvX9L0zi0xc0ugKPmfoj6 Sucg11tFUVFVe93EkkKBWU1XrRZSzZydHlmAGSoAuqUPKupJkWXA19TCpGkgpCwI uEhXowjfYxOs6qxSOhF/dGORuvjiG0XUdALt+8YbezQa0BuDZNcRkax2bsfvdMMb +3QMjWbwXEThwi00fSAg5kK+UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7Lp0B3 FWOZeo4Fx4aJ+WZCD6plMB8GA1UdIwQYMBaAFMCdEsfKLrTTXKUKk509nL6Bfjmt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjE3Ni84OEFCOEU5NEM2 RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXROTmNwUXFUblQyY3ZvRi1P YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dKMFN4OG91dE5OY3BRcVRuVDJjdm9GLU9hMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjE3Ni84OEFCOEU5NEM2RkYxMUVBODI1MkUxMDlDNEY5QUUwMi93SjBTeDhvdXRO TmNwUXFUblQyY3ZvRi1PYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/+ZKuBGwUw0JDA0VgikKLNxYSW5bXyhu4DKlpNVm9siw4VdpaWayv eCYcZQXibIPdycUoNKkdz4FIaOIslMX/IDsKdYZfii+XgZmwEQj1NhKhAUELPQhj HDOzLgGBmlPzZr6BXB+bPpSYfoWKVgKQd3cy8tST6dCKrQAG1psISQcmPhG/sSW4 UxBqPDPfXaaKA+RADUmWfjn0ap+9aZ5mr185oMOoR1I/CTf2PUA0IngDLvJKQjPZ sAjEeEAuHUAH0+/yjnjymPNcfgKpAsM+1A0nwNV1kWF7flui8+2cPco1YZHoKB9Z RvkIPSfNu98MEGjI9ppbm7wqoYTSVWbM -----END CERTIFICATE-----Generated at Sat Aug 23 22:19:05 2025 by rpki-client