$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: VuTJjHBSEBLXDgqCNFWzKeAb9pd4nadyfbJKQ4kkJrQ= Subject key identifier: 8C:23:66:FD:68:D1:81:66:75:9A:AB:A4:2D:FF:79:FF:BE:FE:14:9C Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 07D3 Signing time: Fri 22 Aug 2025 21:15:13 +0000 Manifest this update: Fri 22 Aug 2025 21:15:12 +0000 Manifest next update: Fri 29 Aug 2025 21:15:12 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: D8pdxJJ/fNYtXVSQjWz9OwIvaz6xoCbcjy93PNbTG9c=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: ciOpG8qRab9sKkVmGRn2hy7gpdalC9pHnHF+YnHZNHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Aug 22 21:15:12 2025 GMT Not After : Aug 29 21:15:12 2025 GMT Subject: CN=68a8dde0-90ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:be:18:a8:2c:ce:14:ef:68:78:c9:90:18: 54:be:a8:18:61:fb:4b:b8:1c:e7:f5:2c:9b:b7:da: a7:64:da:01:2c:72:ef:dd:4c:d1:7f:a5:4e:ce:95: a1:0b:38:11:49:80:f4:02:ec:ba:2a:61:c6:96:51: 32:58:53:73:53:2a:77:a6:f1:5c:e9:f2:f3:c3:0b: 6a:7a:7f:2a:9e:d7:a2:45:bb:93:0b:7d:e3:13:d6: 8b:52:b2:01:52:10:5c:ec:d7:b7:47:36:42:46:56: e7:f2:d3:e5:6a:64:27:5e:5e:f2:6f:3e:84:27:76: f3:29:fa:17:72:3d:a5:a1:65:44:5c:db:ce:b8:8c: 45:70:06:9c:68:d9:92:3e:a2:3a:54:30:6b:46:ca: 5a:83:b4:c5:3b:40:19:5a:47:fc:f2:4a:33:e0:55: 1a:0c:3c:4b:35:0a:88:b6:65:53:cc:6d:4b:94:39: 6d:12:4a:6e:b0:f0:1e:6d:6e:c5:40:4c:ef:ff:a0: 37:15:3b:f2:3e:ca:99:6a:d8:38:46:0f:ff:da:f6: 5d:78:7d:62:af:7a:b6:ca:5e:bc:80:5a:04:6b:fd: 50:71:0a:5e:cf:7d:41:e9:31:00:66:93:4b:8c:9f: 2b:46:81:cf:8b:95:39:fe:e6:79:d3:70:a3:2d:54: dd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:23:66:FD:68:D1:81:66:75:9A:AB:A4:2D:FF:79:FF:BE:FE:14:9C X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:39:7e:62:16:fa:34:81:57:58:bb:d3:89:42:e2:8e:38:fe: b9:e3:ec:07:aa:46:c1:60:91:69:82:1f:3c:ff:9a:54:5c:71: cb:b2:70:04:43:7c:bd:9d:df:6c:74:3e:1f:ac:a7:c6:39:0d: a8:38:96:d9:8a:c4:fd:80:14:99:9d:ca:3c:ad:cb:7e:d3:09: d6:69:c0:1a:b2:66:0b:5d:58:04:58:8e:5d:8e:28:6c:46:5e: 56:45:7f:77:a4:e8:e5:be:76:92:67:59:a8:22:4f:c9:98:79: 4c:6d:01:a9:ab:77:13:bc:b7:66:09:0d:75:d5:d7:74:91:80: b0:e6:60:40:08:e9:91:59:8a:93:bd:1a:0f:2d:31:28:8f:01: a5:54:9a:2b:05:c8:c5:6c:ba:df:9d:c5:ea:a2:36:b3:13:f6: 6c:de:e8:64:32:b4:ad:d0:f5:47:64:dc:85:b6:e9:3b:03:f0: 4f:a8:bd:62:ca:c1:9e:e8:00:b6:62:4f:28:4e:3a:c2:71:5a: e8:b4:97:ca:7a:a2:ec:c5:63:de:9d:27:12:bc:01:c0:b0:3a: 57:0d:9c:25:e3:17:dd:b0:16:ac:f4:39:26:75:66:48:be:b7: 31:9a:5a:c3:ff:75:98:5b:7c:7f:62:e5:d0:ff:d1:6b:aa:81: 70:5a:7a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjUwODIyMjExNTEyWhcNMjUwODI5MjExNTEyWjAYMRYwFAYD VQQDEw02OGE4ZGRlMC05MGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU2+GKgszhTvaHjJkBhUvqgYYftLuBzn9Sybt9qnZNoBLHLv3UzRf6VOzpWh CzgRSYD0Auy6KmHGllEyWFNzUyp3pvFc6fLzwwtqen8qnteiRbuTC33jE9aLUrIB UhBc7Ne3RzZCRlbn8tPlamQnXl7ybz6EJ3bzKfoXcj2loWVEXNvOuIxFcAacaNmS PqI6VDBrRspag7TFO0AZWkf88koz4FUaDDxLNQqItmVTzG1LlDltEkpusPAebW7F QEzv/6A3FTvyPsqZatg4Rg//2vZdeH1ir3q2yl68gFoEa/1QcQpez31B6TEAZpNL jJ8rRoHPi5U5/uZ503CjLVTd4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwjZv1o 0YFmdZqrpC3/ef++/hScMB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYOX5iFvo0gVdYu9OJQuKOOP654+wHqkbBYJFpgh88/5pUXHHLsnAE Q3y9nd9sdD4frKfGOQ2oOJbZisT9gBSZnco8rct+0wnWacAasmYLXVgEWI5djihs Rl5WRX93pOjlvnaSZ1moIk/JmHlMbQGpq3cTvLdmCQ111dd0kYCw5mBACOmRWYqT vRoPLTEojwGlVJorBcjFbLrfncXqojazE/Zs3uhkMrSt0PVHZNyFtuk7A/BPqL1i ysGe6AC2Yk8oTjrCcVrotJfKeqLsxWPenScSvAHAsDpXDZwl4xfdsBas9DkmdWZI vrcxmlrD/3WYW3x/YuXQ/9FrqoFwWnr0 -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:43 2025 by rpki-client