$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft File: Wnot3qYsiQ6QHx3NQEb814zAtBw.mft (raw, json) Hash identifier: NS/dkxPgIzuzUwTWPs0lL0/Zg3N6ha+eIBW2vadOULs= Subject key identifier: 5B:E8:85:7C:9D:3B:E4:2A:3F:D5:55:EC:36:59:F7:90:55:04:BE:CA Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C Certificate issuer: /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Certificate serial: 06BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft Manifest number: 06BA Signing time: Fri 22 Aug 2025 22:15:52 +0000 Manifest this update: Fri 22 Aug 2025 22:15:51 +0000 Manifest next update: Fri 29 Aug 2025 22:15:51 +0000 Files and hashes: 1: Wnot3qYsiQ6QHx3NQEb814zAtBw.crl (hash: Frk5wvrmRydlA8wE0Pv3A2b1x/UGYpw3fXKow/9GfiA=) 2: 7C7FDC646FF711EBA7506161C4F9AE02.roa (hash: +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1727 (0x6bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89AF, serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C Validity Not Before: Aug 22 22:15:51 2025 GMT Not After : Aug 29 22:15:51 2025 GMT Subject: CN=68a8ec17-fc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:6a:1b:38:79:bb:ee:bc:82:bf:1e:76:29: ec:21:11:a4:48:5c:32:a9:1d:5d:c8:6e:c6:f6:14: 89:60:2d:67:f5:ef:54:55:3e:3f:f6:5a:4b:d4:5a: da:ea:0d:82:bd:6b:f5:ad:01:e0:aa:25:74:1b:ab: 43:31:42:5c:69:22:aa:d4:e0:4b:eb:ea:88:6c:71: c6:a6:83:3f:1b:52:50:39:98:81:c5:cb:32:88:03: db:ae:89:3b:69:6d:e5:fe:13:c7:86:05:9b:ef:ee: 71:4a:07:f1:c3:b3:90:30:8a:ec:00:eb:0d:07:93: 75:ca:6f:24:ee:f2:6b:2c:eb:0f:74:9e:49:e3:02: fc:53:d4:c4:9a:98:bc:0e:7c:c8:d0:35:1a:a0:e3: 32:fb:b7:e8:c0:d6:6d:55:a7:44:9d:5c:84:6e:b6: 14:4f:a8:e7:c9:01:18:a3:82:81:03:36:fa:e1:97: 22:6f:6a:8d:74:02:87:94:bc:af:5d:be:f3:9b:b6: a0:74:2e:df:c4:26:0e:c0:9f:56:1e:4c:f2:61:af: 4a:d4:9f:4a:a4:3e:85:9b:b3:30:48:04:a2:ed:5f: 99:0a:42:dd:88:e9:8a:a6:cf:e9:c0:2b:18:ed:4e: 4e:16:58:f8:55:e6:07:6d:2c:04:bb:d3:b5:db:f2: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E8:85:7C:9D:3B:E4:2A:3F:D5:55:EC:36:59:F7:90:55:04:BE:CA X509v3 Authority Key Identifier: keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ce:06:f1:fb:3e:16:73:73:a2:49:a6:0b:fc:b2:e2:5a:e8: d1:98:d5:63:33:73:4e:bd:20:8f:7a:dc:fd:5c:31:ce:5a:96: ab:01:91:7c:95:7e:15:91:b9:cc:8e:e2:10:0a:9c:95:3c:e5: 47:fb:d4:1e:a6:bf:be:fa:22:ed:18:b2:d9:8c:16:6c:00:86: 45:4c:77:df:0b:9c:34:2f:2c:68:97:a2:f1:19:e1:78:7d:e1: 56:02:a5:38:f6:d0:51:82:46:26:64:c8:fb:aa:27:2c:ab:34: 22:1d:2a:c9:60:52:47:d5:11:2f:7b:02:c4:cc:fa:59:dc:11: 32:1a:db:0a:7d:21:2d:dd:31:f2:5b:25:81:69:12:54:1e:01: 67:2c:5c:ef:ce:e1:7a:7e:61:1f:35:4d:a5:03:04:ec:6f:52: 30:18:91:8b:49:9c:02:ad:3f:a6:00:99:f1:62:52:00:60:b4: 43:c1:ac:19:51:88:af:d1:4f:f0:f7:87:42:de:9a:17:63:b8: 88:34:c7:b1:92:d9:c9:93:53:2c:47:ed:1a:b4:42:fa:96:f8: 05:f3:6e:e4:33:d0:9f:0f:82:94:4a:47:f0:24:3d:84:12:6d: d9:6e:b8:89:16:bb:78:58:9b:c5:1b:c2:06:96:37:c7:10:92: 92:d8:d9:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5QUYxMTAvBgNVBAUTKDVBN0EyRERFQTYyQzg5MEU5MDFGMURDRDQwNDZGQ0Q3 OENDMEI0MUMwHhcNMjUwODIyMjIxNTUxWhcNMjUwODI5MjIxNTUxWjAYMRYwFAYD VQQDEw02OGE4ZWMxNy1mYzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXBqGzh5u+68gr8edinsIRGkSFwyqR1dyG7G9hSJYC1n9e9UVT4/9lpL1Fra 6g2CvWv1rQHgqiV0G6tDMUJcaSKq1OBL6+qIbHHGpoM/G1JQOZiBxcsyiAPbrok7 aW3l/hPHhgWb7+5xSgfxw7OQMIrsAOsNB5N1ym8k7vJrLOsPdJ5J4wL8U9TEmpi8 DnzI0DUaoOMy+7fowNZtVadEnVyEbrYUT6jnyQEYo4KBAzb64Zcib2qNdAKHlLyv Xb7zm7agdC7fxCYOwJ9WHkzyYa9K1J9KpD6Fm7MwSASi7V+ZCkLdiOmKps/pwCsY 7U5OFlj4VeYHbSwEu9O12/JMmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvohXyd O+QqP9VV7DZZ95BVBL7KMB8GA1UdIwQYMBaAFFp6Ld6mLIkOkB8dzUBG/NeMwLQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlBRi8xODYwQ0ExQTZG RjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lRNlFIeDNOUUViODE0ekF0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dub3QzcVlzaVE2UUh4M05RRWI4MTR6QXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlBRi8xODYwQ0ExQTZGRjUxMUVCODI2NDYyNUJDNEY5QUUwMi9Xbm90M3FZc2lR NlFIeDNOUUViODE0ekF0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASzgbx+z4Wc3OiSaYL/LLiWujRmNVjM3NOvSCPetz9XDHOWparAZF8 lX4VkbnMjuIQCpyVPOVH+9Qepr+++iLtGLLZjBZsAIZFTHffC5w0Lyxol6LxGeF4 feFWAqU49tBRgkYmZMj7qicsqzQiHSrJYFJH1REvewLEzPpZ3BEyGtsKfSEt3THy WyWBaRJUHgFnLFzvzuF6fmEfNU2lAwTsb1IwGJGLSZwCrT+mAJnxYlIAYLRDwawZ UYiv0U/w94dC3poXY7iINMexktnJk1MsR+0atEL6lvgF827kM9CfD4KUSkfwJD2E Em3ZbriJFrt4WJvFG8IGljfHEJKS2NmN -----END CERTIFICATE-----Generated at Sun Aug 24 08:21:15 2025 by rpki-client