$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: TXXSqSOEmQRpAOqW7qkwjM6d4dMlNq7CkC/th1aYT6E= Subject key identifier: BC:DA:5D:1C:4D:E1:ED:7E:94:F5:ED:04:57:D1:4F:5C:8D:0B:7E:41 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 093E Signing time: Fri 22 Aug 2025 20:20:24 +0000 Manifest this update: Fri 22 Aug 2025 20:20:24 +0000 Manifest next update: Fri 29 Aug 2025 20:20:24 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: nDtnnpFCGEAFS/+6cFsr58d5EPmv9SdAWmICO/t2s4E=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Aug 22 20:20:24 2025 GMT Not After : Aug 29 20:20:24 2025 GMT Subject: CN=68a8d108-2e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:25:2f:e2:86:0f:c2:f1:76:69:22:12:cf: f7:21:bc:1f:28:25:a7:81:ba:e0:3b:3b:84:f7:45: 2c:dc:11:88:c9:d9:a4:da:4b:15:23:8f:a8:06:fc: 98:ed:5c:c9:f5:76:71:e3:9c:b8:e2:96:88:e4:af: ac:f3:ea:41:6a:67:9e:b0:b8:af:e0:b7:cf:af:89: be:f7:6c:09:1a:18:6c:3c:b9:70:85:ff:e7:26:6f: b3:0c:1d:46:93:0c:4b:7d:9d:95:2c:bb:6a:d0:81: d8:06:56:a7:ac:a6:2e:67:95:67:c8:cb:91:7f:cf: c7:2a:da:bd:b4:ed:63:4d:83:64:c0:a9:9b:b8:42: d0:62:6e:ae:3a:0f:fd:bb:77:a0:a5:af:ab:46:db: 7f:b0:df:81:a5:23:62:47:61:c2:34:19:44:10:5d: 4c:d5:10:bf:8f:6d:09:ff:05:71:00:e5:83:ae:0f: 7b:76:49:f0:72:94:94:2d:ae:76:cb:d0:85:fc:96: 4d:a0:7e:54:cf:09:40:b7:c2:97:ae:41:5e:86:85: 2d:e9:8a:ae:89:6b:9d:ad:8c:eb:9c:ef:ed:3a:f6: 2f:5f:17:3e:db:aa:26:78:c3:3b:6e:98:8a:64:d9: 82:ef:2c:48:30:1a:f6:3f:82:c2:cf:a4:4c:b2:e5: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:5D:1C:4D:E1:ED:7E:94:F5:ED:04:57:D1:4F:5C:8D:0B:7E:41 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:02:86:6f:65:d6:20:67:27:49:f0:38:28:39:25:a9:c1:42: 2f:17:e8:24:30:27:02:a4:bc:13:ac:49:73:64:f9:17:ac:a3: f6:03:c0:47:67:ef:fc:2c:99:d6:d7:f1:df:5b:7a:da:2e:4b: 12:c3:d4:a0:d7:58:16:e5:b5:3c:08:f7:77:f5:a7:bd:46:0f: ff:11:30:48:b2:ad:ed:b0:05:99:6d:76:8f:89:77:97:e3:f1: fe:25:87:26:a6:fd:32:11:07:ea:07:b2:b7:48:4e:8b:95:8b: 28:4e:13:a5:85:9a:55:2c:ea:d7:9a:ad:32:7f:53:34:2b:45: 5d:a3:39:12:f6:e3:e5:84:46:1e:8c:89:57:c8:ab:72:2f:7e: 17:88:16:32:13:15:50:3e:33:b7:d4:8b:c9:f1:e5:9f:70:55: 8f:93:64:13:1f:4d:b8:bb:a7:72:42:ce:bd:98:6f:e1:88:b0: 9f:b2:65:03:94:53:a1:b0:b1:9a:a3:05:87:02:0b:90:83:72: ce:2b:53:ad:28:2d:4c:1c:3f:5e:84:14:86:87:df:d3:8b:2d: cb:58:d8:e4:20:72:c3:4b:c4:72:76:e1:9b:74:b2:08:ea:39: c5:5f:06:e6:7c:e0:b3:13:21:3e:45:9b:fd:1f:0b:8c:f0:fb: a7:8b:64:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwODIyMjAyMDI0WhcNMjUwODI5MjAyMDI0WjAYMRYwFAYD VQQDEw02OGE4ZDEwOC0yZTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FslL+KGD8LxdmkiEs/3IbwfKCWngbrgOzuE90Us3BGIydmk2ksVI4+oBvyY 7VzJ9XZx45y44paI5K+s8+pBameesLiv4LfPr4m+92wJGhhsPLlwhf/nJm+zDB1G kwxLfZ2VLLtq0IHYBlanrKYuZ5VnyMuRf8/HKtq9tO1jTYNkwKmbuELQYm6uOg/9 u3egpa+rRtt/sN+BpSNiR2HCNBlEEF1M1RC/j20J/wVxAOWDrg97dknwcpSULa52 y9CF/JZNoH5UzwlAt8KXrkFehoUt6YquiWudrYzrnO/tOvYvXxc+26omeMM7bpiK ZNmC7yxIMBr2P4LCz6RMsuXkuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzaXRxN 4e1+lPXtBFfRT1yNC35BMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvAoZvZdYgZydJ8DgoOSWpwUIvF+gkMCcCpLwTrElzZPkXrKP2A8BH Z+/8LJnW1/HfW3raLksSw9Sg11gW5bU8CPd39ae9Rg//ETBIsq3tsAWZbXaPiXeX 4/H+JYcmpv0yEQfqB7K3SE6LlYsoThOlhZpVLOrXmq0yf1M0K0VdozkS9uPlhEYe jIlXyKtyL34XiBYyExVQPjO31IvJ8eWfcFWPk2QTH024u6dyQs69mG/hiLCfsmUD lFOhsLGaowWHAguQg3LOK1OtKC1MHD9ehBSGh9/Tiy3LWNjkIHLDS8RyduGbdLII 6jnFXwbmfOCzEyE+RZv9HwuM8Puni2Qu -----END CERTIFICATE-----Generated at Sat Aug 23 21:21:16 2025 by rpki-client