$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft File: whEvRNRFjxhc25rZqRr4KQZInMY.mft (raw, json) Hash identifier: RY6ZhW0MO4cGTZKT4tXwSwf2lLi+OPk/+VqhM+XoxcQ= Subject key identifier: C2:7A:C9:7D:E7:E0:86:5B:67:7A:65:A2:8C:F9:2B:21:ED:6F:72:0D Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 Certificate issuer: /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft Manifest number: 0112 Signing time: Sat 19 Jul 2025 05:08:25 +0000 Manifest this update: Sat 19 Jul 2025 05:08:24 +0000 Manifest next update: Sat 26 Jul 2025 05:08:24 +0000 Files and hashes: 1: whEvRNRFjxhc25rZqRr4KQZInMY.crl (hash: nv8NCpQOFue0gXlPdDLGDP6AtuCt/T9FTUYJ1pFdhPg=) 2: 7FC75E34C4B211EEB684BF7FC4F9AE02.roa (hash: ENR1qEuttVnNRROdOyzWRsQ7bm7evUlkAyBRhI4KcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6 Validity Not Before: Jul 19 05:08:24 2025 GMT Not After : Jul 26 05:08:24 2025 GMT Subject: CN=687b2848-013d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:88:95:64:c0:69:ab:10:2a:0f:10:64:d4: 6b:60:76:a5:63:af:bd:12:c1:07:a5:22:04:29:a1: 2a:5a:18:32:28:9f:4a:1a:81:97:b6:1f:51:a9:62: 2f:ae:67:f4:ba:26:69:44:6f:02:b7:cb:14:87:3d: 9e:72:4f:97:f3:ad:88:cd:7b:4b:99:1e:50:a4:86: b2:e6:2a:17:b4:61:01:09:d7:42:15:3e:0f:4c:b1: 59:69:2e:66:73:c2:be:de:56:7c:4a:85:1a:bf:0a: b1:58:4d:72:3b:b1:4e:02:dd:3c:1d:97:5a:e5:46: f3:27:4e:04:4c:e3:d5:ef:82:23:54:1a:94:7f:3b: ce:35:af:65:d0:7e:86:83:1e:c8:e5:27:1d:b5:c8: e0:3d:7e:89:69:9f:47:3d:d8:1e:62:af:c9:3b:87: 61:05:47:4a:5f:84:ae:39:23:0f:55:ba:70:0e:b7: 44:82:22:1d:5c:c3:de:a9:76:fb:fd:9a:64:c7:09: 95:95:16:47:7a:d7:fd:13:b1:64:fb:60:b4:07:58: c2:a6:e6:13:80:79:a9:d9:91:9d:e1:89:2a:df:ff: 9c:31:ec:3d:3e:46:08:67:c3:61:2a:91:d9:18:2d: 28:b3:92:aa:f3:4c:70:99:19:80:6e:2d:15:c8:5d: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:7A:C9:7D:E7:E0:86:5B:67:7A:65:A2:8C:F9:2B:21:ED:6F:72:0D X509v3 Authority Key Identifier: keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:89:c4:78:b0:bf:11:eb:d2:51:47:bb:17:bd:ee:74:b6:47: e6:10:4d:b3:cc:26:27:01:4d:73:31:55:ce:79:c9:7c:2c:db: ce:3e:48:c2:ef:e0:8d:6f:ab:6e:5e:97:a2:50:a2:37:a0:be: 70:6b:51:78:5b:0f:a8:64:f2:91:9e:63:8b:00:35:7e:c1:29: 4e:23:64:7c:2e:b9:dc:49:df:9a:15:d7:e6:2f:b0:37:80:d8: fb:a9:2d:33:9e:2d:77:b1:e3:45:42:26:61:15:8f:af:cb:2a: 78:3b:9d:0d:ea:4d:00:a3:c2:a1:7d:67:39:f4:5c:96:b9:bd: 7e:5b:23:71:47:5b:2b:30:93:fe:9a:9a:ff:1f:2a:d5:d6:c3: 1c:18:c2:1a:07:54:b6:5e:84:23:2b:ff:d6:6e:17:b3:ff:a8: 25:4d:13:01:ca:f0:7f:7c:3c:c0:e1:e0:ec:da:18:aa:f2:40: ca:71:5f:07:13:5c:39:57:9b:6b:27:8f:d9:a7:bb:29:e8:af: 05:e6:5d:28:9a:28:bf:24:aa:2e:4b:ae:48:f7:11:35:54:8e: a3:62:af:78:4e:6a:3d:e8:2a:71:2b:8c:f4:a2:ad:a8:13:43: 24:be:39:90:b9:28:f6:23:39:b0:02:84:68:86:a6:75:cc:64: 91:18:dd:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEMyMTEyRjQ0RDQ0NThGMTg1Q0RCOUFEOUE5MUFGODI5 MDY0ODlDQzYwHhcNMjUwNzE5MDUwODI0WhcNMjUwNzI2MDUwODI0WjAYMRYwFAYD VQQDEw02ODdiMjg0OC0wMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCuIlWTAaasQKg8QZNRrYHalY6+9EsEHpSIEKaEqWhgyKJ9KGoGXth9RqWIv rmf0uiZpRG8Ct8sUhz2eck+X862IzXtLmR5QpIay5ioXtGEBCddCFT4PTLFZaS5m c8K+3lZ8SoUavwqxWE1yO7FOAt08HZda5UbzJ04ETOPV74IjVBqUfzvONa9l0H6G gx7I5ScdtcjgPX6JaZ9HPdgeYq/JO4dhBUdKX4SuOSMPVbpwDrdEgiIdXMPeqXb7 /ZpkxwmVlRZHetf9E7Fk+2C0B1jCpuYTgHmp2ZGd4Ykq3/+cMew9PkYIZ8NhKpHZ GC0os5Kq80xwmRmAbi0VyF00ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJ6yX3n 4IZbZ3plooz5KyHtb3INMB8GA1UdIwQYMBaAFMIRL0TURY8YXNua2aka+CkGSJzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri84N0MzNDU0Q0M0 NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4aGMyNXJacVJyNEtRWklu TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3doRXZSTlJGanhoYzI1clpxUnI0S1FaSW5NWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri84N0MzNDU0Q0M0NUYxMUVFODI4MUNDN0RDNEY5QUUwMi93aEV2Uk5SRmp4 aGMyNXJacVJyNEtRWkluTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbicR4sL8R69JRR7sXve50tkfmEE2zzCYnAU1zMVXOecl8LNvOPkjC 7+CNb6tuXpeiUKI3oL5wa1F4Ww+oZPKRnmOLADV+wSlOI2R8LrncSd+aFdfmL7A3 gNj7qS0zni13seNFQiZhFY+vyyp4O50N6k0Ao8KhfWc59FyWub1+WyNxR1srMJP+ mpr/HyrV1sMcGMIaB1S2XoQjK//Wbhez/6glTRMByvB/fDzA4eDs2hiq8kDKcV8H E1w5V5trJ4/Zp7sp6K8F5l0omii/JKouS65I9xE1VI6jYq94Tmo96CpxK4z0oq2o E0MkvjmQuSj2IzmwAoRohqZ1zGSRGN1R -----END CERTIFICATE-----Generated at Sun Jul 20 06:35:10 2025 by rpki-client