$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft File: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json) Hash identifier: I9hxkl58sbiqx76TMNJvSEdK7/yr3QDrbhXufhSDEq0= Subject key identifier: 1A:0C:04:42:C6:CA:F5:D4:11:CD:E2:BC:7C:4D:9E:6B:9E:96:E1:07 Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Certificate serial: 0C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft Manifest number: 0C1A Signing time: Fri 22 Aug 2025 18:55:08 +0000 Manifest this update: Fri 22 Aug 2025 18:55:07 +0000 Manifest next update: Fri 29 Aug 2025 18:55:07 +0000 Files and hashes: 1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: yvq+Qx4tE6dcX/6ux29T7siVPGZdyvE7MMLRMoh23wA=) 2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: h8cq7eEqWj3L5NzXqfHs5Ge3X0txZ1Fjij9Lq2hQUOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3131 (0xc3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7E85, serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Validity Not Before: Aug 22 18:55:07 2025 GMT Not After : Aug 29 18:55:07 2025 GMT Subject: CN=68a8bd0c-8741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:15:d4:4c:1f:fd:75:45:39:0f:b8:4c:c1:88: 0e:e4:e6:0b:8c:74:75:b6:4f:a6:f7:eb:ef:36:f2: 9a:61:3c:44:7d:e5:e6:fd:87:64:ed:84:6f:91:55: a0:47:71:7b:26:4d:99:0f:1b:e2:34:b5:9a:cf:54: 8c:b1:90:ef:54:7f:c6:28:9d:38:96:88:f8:e8:30: c0:35:6c:ea:34:50:71:d6:3c:1a:1b:61:d6:3b:17: a4:fb:b6:30:e6:6d:bb:bd:e1:f0:53:75:cc:c1:86: 36:96:2c:ba:1d:09:26:2b:a7:e6:12:50:bd:c8:06: e1:b3:df:ee:c9:4c:18:4c:99:de:1a:46:bc:11:ea: f1:dc:40:3b:d3:d8:67:db:c7:98:4b:12:38:f3:92: d0:d6:dc:ed:35:ee:67:e8:20:f8:51:6c:3e:fe:dc: 88:b8:c3:df:75:8d:44:6e:04:82:1e:06:f8:08:93: cb:84:f5:36:3d:b8:59:42:78:3d:de:18:71:7a:2b: 72:be:54:9e:1d:31:00:64:d3:82:ef:ff:a6:e3:e2: 1c:ab:d3:c3:0f:ac:5c:46:66:3b:a1:4a:b9:a5:80: ac:a0:45:ab:5e:b5:91:7c:f5:0a:a2:56:6a:f1:1a: 20:3b:ab:48:56:6b:9b:94:6f:c5:86:2a:6b:de:57: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0C:04:42:C6:CA:F5:D4:11:CD:E2:BC:7C:4D:9E:6B:9E:96:E1:07 X509v3 Authority Key Identifier: keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:72:15:63:9f:b9:c7:3e:a6:f7:f3:fb:f2:5f:5b:75:b6:b6: 11:9b:8e:ea:f5:c6:7d:01:b5:fa:0a:4f:8b:66:15:20:27:db: d8:c9:da:12:a7:d9:71:be:49:cc:8d:47:93:e6:01:d3:2d:fe: d2:61:0c:01:c4:4d:28:a5:bb:76:9e:6d:2f:5f:4a:72:ab:8a: 6d:3c:bb:ef:f2:0d:fa:97:fb:15:93:d9:bf:8e:d3:c3:36:b9: ae:bc:1e:ba:32:cd:49:d7:30:a4:85:b4:2a:31:47:fd:97:9f: c5:a3:fd:b2:91:86:6e:fd:66:62:67:89:c0:b5:e0:b6:70:1b: 3a:e1:48:f3:c9:ea:cb:07:82:e6:29:69:8f:48:2b:74:8e:7c: df:67:6c:4e:bd:bc:07:1f:30:62:70:fa:92:83:c5:82:60:60: 1f:3e:cb:02:ad:05:27:c3:2e:12:39:c7:1e:e6:b9:c1:58:90: 27:6f:af:47:8a:b6:71:cc:d2:8e:68:76:d1:53:2c:51:21:47: 07:eb:e6:6a:bb:b7:37:e0:1c:b5:d6:41:98:d6:b8:8e:9b:5c: 25:ac:c7:1e:0e:8b:47:f3:42:a6:7e:36:d2:f8:c9:4a:46:11: 60:10:09:92:5b:87:ef:86:bd:51:8c:c8:52:9e:c9:64:da:d0: 2b:82:09:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0 NTUzRUU4ODYwHhcNMjUwODIyMTg1NTA3WhcNMjUwODI5MTg1NTA3WjAYMRYwFAYD VQQDEw02OGE4YmQwYy04NzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RXUTB/9dUU5D7hMwYgO5OYLjHR1tk+m9+vvNvKaYTxEfeXm/Ydk7YRvkVWg R3F7Jk2ZDxviNLWaz1SMsZDvVH/GKJ04loj46DDANWzqNFBx1jwaG2HWOxek+7Yw 5m27veHwU3XMwYY2liy6HQkmK6fmElC9yAbhs9/uyUwYTJneGka8Eerx3EA709hn 28eYSxI485LQ1tztNe5n6CD4UWw+/tyIuMPfdY1EbgSCHgb4CJPLhPU2PbhZQng9 3hhxeityvlSeHTEAZNOC7/+m4+Icq9PDD6xcRmY7oUq5pYCsoEWrXrWRfPUKolZq 8RogO6tIVmublG/Fhipr3lco4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoMBELG yvXUEc3ivHxNnmueluEHMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0U4NS9CMkUwRTVBRTFDMzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03 WjZZM21ySGdyMUZGVS02SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbchVjn7nHPqb38/vyX1t1trYRm47q9cZ9AbX6Ck+LZhUgJ9vYydoS p9lxvknMjUeT5gHTLf7SYQwBxE0opbt2nm0vX0pyq4ptPLvv8g36l/sVk9m/jtPD NrmuvB66Ms1J1zCkhbQqMUf9l5/Fo/2ykYZu/WZiZ4nAteC2cBs64UjzyerLB4Lm KWmPSCt0jnzfZ2xOvbwHHzBicPqSg8WCYGAfPssCrQUnwy4SOcce5rnBWJAnb69H irZxzNKOaHbRUyxRIUcH6+Zqu7c34By11kGY1riOm1wlrMceDotH80KmfjbS+MlK RhFgEAmSW4fvhr1RjMhSnslk2tArggnC -----END CERTIFICATE-----Generated at Sat Aug 23 20:36:21 2025 by rpki-client