$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft File: WuNh62BrXTFvDpWX3WjN25xvYAU.mft (raw, json) Hash identifier: xFJ5aPE6XijNECEYfctZJNuVhaJZnID3LrfAxMjVJ24= Subject key identifier: CE:47:28:1D:36:52:48:B9:3C:65:F8:E5:1E:92:2C:AE:A4:06:A3:88 Authority key identifier: 5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 Certificate issuer: /CN=A91A6990/serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Certificate serial: 0B3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft Manifest number: 0B38 Signing time: Fri 18 Jul 2025 19:23:41 +0000 Manifest this update: Fri 18 Jul 2025 19:23:40 +0000 Manifest next update: Fri 25 Jul 2025 19:23:40 +0000 Files and hashes: 1: WuNh62BrXTFvDpWX3WjN25xvYAU.crl (hash: Ca59eRzL4KGyKTtWn65x6y9tq2DlazQXM1LM2arYej4=) 2: BFE023663DD911EA89EB0782C4F9AE02.roa (hash: thbx7wB2Yko7c9vVEn1C7De9utHqQJCytkIE+aVUcMQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6990, serialNumber=5AE361EB606B5D316F0E9597DD68CDDB9C6F6005 Validity Not Before: Jul 18 19:23:40 2025 GMT Not After : Jul 25 19:23:40 2025 GMT Subject: CN=687a9f3c-1976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:ae:16:9c:a1:56:a2:ef:68:ae:9d:5e:cb: 43:73:26:e0:3a:7b:ef:5d:89:3c:80:26:84:9d:dd: 48:96:ac:47:c9:d5:96:38:82:90:d1:44:ed:e5:f8: d2:96:ab:65:2d:83:e2:22:77:89:45:ac:6c:5e:7e: a1:75:3d:e7:e3:08:bd:5c:a4:7f:34:f2:71:51:e2: e0:0b:8e:5f:47:b7:32:12:47:3d:fd:b2:54:34:fa: bc:5b:91:7b:c6:ec:f8:fc:0a:88:a8:eb:b5:7d:eb: 66:2f:8c:f7:12:7d:1d:52:b5:ca:e7:6f:25:d0:eb: 5d:0b:87:dc:23:6e:7d:46:9d:c8:7c:68:cf:79:bf: 30:a8:c4:4d:fc:91:1c:3c:8a:22:00:25:db:63:21: 93:2a:47:52:38:4e:c6:d7:63:06:c0:5e:bd:01:86: da:64:7c:24:b0:9f:54:a3:1a:3c:3d:77:10:67:91: 27:75:2a:01:87:90:eb:09:22:0f:b4:32:e6:07:bc: 22:9c:f7:c2:2e:0c:b3:83:f7:10:9d:8a:11:8b:3d: 33:ab:0e:7b:8f:2b:85:c9:b9:ec:82:f4:c6:87:5c: 67:77:90:a0:1f:a5:ec:56:fd:d2:22:19:f1:b9:8f: 7e:66:52:fb:ee:26:04:44:da:fb:c7:b3:19:02:88: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:47:28:1D:36:52:48:B9:3C:65:F8:E5:1E:92:2C:AE:A4:06:A3:88 X509v3 Authority Key Identifier: keyid:5A:E3:61:EB:60:6B:5D:31:6F:0E:95:97:DD:68:CD:DB:9C:6F:60:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WuNh62BrXTFvDpWX3WjN25xvYAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6990/42145F983DD811EA9F16957CC4F9AE02/WuNh62BrXTFvDpWX3WjN25xvYAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:9e:c1:a4:c4:2e:b4:7b:7f:6e:e2:d0:5b:4f:6c:9d:9e:0f: 78:a2:04:20:3d:b2:e0:2b:7e:dc:9b:6d:71:ae:92:5a:83:0e: bc:c5:ce:93:54:d3:fa:5e:34:c0:3c:10:80:b5:75:55:7c:dc: 27:b4:33:e7:11:2f:45:25:47:59:b2:1e:53:f8:aa:35:0c:02: d0:19:cf:0f:2d:67:57:00:f2:22:2b:34:36:1e:ec:96:45:9f: df:3e:82:e9:b4:4d:2b:85:ee:3b:03:ac:b5:77:aa:45:ee:63: b8:53:d5:79:22:31:f7:d0:70:2f:3f:f8:fc:09:f0:11:3e:6d: d3:99:73:3f:3e:81:fe:e5:a1:6c:9d:4b:37:40:88:98:90:66: 5b:5d:11:e6:8a:5d:bf:5b:60:e6:2a:77:31:33:e0:f9:a8:ff: 39:1d:51:ff:df:16:19:31:d3:77:64:52:b1:5e:8b:a8:8a:e3: a1:e2:50:82:23:9c:29:e6:89:bc:9d:11:9b:91:6f:45:ac:0e: ac:80:73:4b:4c:ca:5d:06:78:4b:54:54:c8:76:ee:38:32:75: 03:48:9c:91:e7:7a:da:b8:40:18:7c:f7:98:41:fb:75:a3:de: 7d:54:35:74:bc:50:3a:1f:bd:4f:0a:da:f7:3d:24:58:08:09: 21:55:a6:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5OTAxMTAvBgNVBAUTKDVBRTM2MUVCNjA2QjVEMzE2RjBFOTU5N0RENjhDRERC OUM2RjYwMDUwHhcNMjUwNzE4MTkyMzQwWhcNMjUwNzI1MTkyMzQwWjAYMRYwFAYD VQQDEw02ODdhOWYzYy0xOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0xmuFpyhVqLvaK6dXstDcybgOnvvXYk8gCaEnd1IlqxHydWWOIKQ0UTt5fjS lqtlLYPiIneJRaxsXn6hdT3n4wi9XKR/NPJxUeLgC45fR7cyEkc9/bJUNPq8W5F7 xuz4/AqIqOu1fetmL4z3En0dUrXK528l0OtdC4fcI259Rp3IfGjPeb8wqMRN/JEc PIoiACXbYyGTKkdSOE7G12MGwF69AYbaZHwksJ9Uoxo8PXcQZ5EndSoBh5DrCSIP tDLmB7winPfCLgyzg/cQnYoRiz0zqw57jyuFybnsgvTGh1xnd5CgH6XsVv3SIhnx uY9+ZlL77iYERNr7x7MZAohbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5HKB02 Uki5PGX45R6SLK6kBqOIMB8GA1UdIwQYMBaAFFrjYetga10xbw6Vl91ozducb2AF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk5MC80MjE0NUY5ODNE RDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhURnZEcFdYM1dqTjI1eHZZ QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1Tmg2MkJyWFRGdkRwV1gzV2pOMjV4dllBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk5MC80MjE0NUY5ODNERDgxMUVBOUYxNjk1N0NDNEY5QUUwMi9XdU5oNjJCclhU RnZEcFdYM1dqTjI1eHZZQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgnsGkxC60e39u4tBbT2ydng94ogQgPbLgK37cm21xrpJagw68xc6T VNP6XjTAPBCAtXVVfNwntDPnES9FJUdZsh5T+Ko1DALQGc8PLWdXAPIiKzQ2HuyW RZ/fPoLptE0rhe47A6y1d6pF7mO4U9V5IjH30HAvP/j8CfARPm3TmXM/PoH+5aFs nUs3QIiYkGZbXRHmil2/W2DmKncxM+D5qP85HVH/3xYZMdN3ZFKxXouoiuOh4lCC I5wp5om8nRGbkW9FrA6sgHNLTMpdBnhLVFTIdu44MnUDSJyR53rauEAYfPeYQft1 o959VDV0vFA6H71PCtr3PSRYCAkhVaYj -----END CERTIFICATE-----Generated at Sun Jul 20 07:11:47 2025 by rpki-client