$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: mb2fldxvvgvAc4paAjD5G7ECzDyTgqTfOa0Pdcv6A6k= Subject key identifier: B1:32:33:0D:1D:14:0D:57:50:DD:1E:15:8A:A7:66:72:D4:E4:2E:A6 Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 05B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 05AF Signing time: Fri 18 Jul 2025 23:28:29 +0000 Manifest this update: Fri 18 Jul 2025 23:28:28 +0000 Manifest next update: Fri 25 Jul 2025 23:28:28 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: nM5p/frzNXKfycEVRQXyeDfeCH/dFKpyNhzE4aks2NQ=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1461 (0x5b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: Jul 18 23:28:28 2025 GMT Not After : Jul 25 23:28:28 2025 GMT Subject: CN=687ad89c-71e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:23:c9:ae:63:d6:9b:8a:6c:a2:2f:44:67: 9d:8e:91:d7:2b:a3:92:0c:9a:3a:45:50:7e:2d:a7: ce:df:79:e9:54:db:b5:d1:76:69:67:67:c7:d5:be: 3f:bd:d6:8f:4f:11:d9:fd:23:09:f1:5f:6a:28:77: 58:30:9b:94:a2:c8:8f:8d:49:44:9d:e7:d8:4f:21: df:eb:c6:a1:72:1e:52:3f:21:b3:76:88:d8:a5:3e: 0b:6d:25:fb:cb:4f:71:82:8f:2c:9b:6f:72:3d:5a: 75:7e:16:f1:e8:5c:1b:2e:72:f2:d7:9f:35:4d:2e: 02:d3:e6:15:85:dd:03:1d:5e:1f:d6:a0:81:c3:fe: b1:f6:ea:49:4a:e7:cf:dd:ad:3c:13:65:1b:e7:10: ff:8c:fb:a2:bd:97:a0:72:38:13:47:a8:b3:c6:41: f4:f6:72:e2:5a:30:7b:84:f8:dc:e7:8c:bf:82:61: 9f:b9:ca:ce:b3:31:e6:41:47:db:4e:7e:b3:0c:45: 80:bb:ea:23:43:74:39:7d:2b:d7:89:c3:3d:bc:69: 99:74:56:ac:a7:e4:6f:57:57:58:8e:a0:5d:76:aa: 45:b3:f6:40:b7:a3:74:23:3f:00:76:7c:a4:c0:01: 45:0d:80:c3:03:82:c1:83:6f:f9:1c:04:da:15:b2: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:32:33:0D:1D:14:0D:57:50:DD:1E:15:8A:A7:66:72:D4:E4:2E:A6 X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2c:bd:c8:da:66:f9:67:13:13:72:fc:9a:42:7f:96:85:ae: 1f:a5:33:c1:50:93:de:33:b4:17:40:2a:2f:39:5a:37:54:16: 74:e3:6a:8f:7c:3e:1e:56:39:f8:47:bb:f0:43:8a:9b:b8:9b: bd:48:65:91:7b:dd:c6:c1:25:c1:c6:cc:e7:96:18:2a:03:5d: e2:49:83:c9:22:4e:9c:b5:95:b2:d2:65:aa:2a:ce:9c:a6:2c: b0:ff:db:83:b9:bf:fb:39:80:75:06:12:a9:ae:56:3e:f5:2e: 6f:cf:e6:88:19:95:00:84:42:af:35:8f:dd:a5:11:5a:35:47: 20:da:ac:bc:a9:5f:aa:e1:da:22:50:47:f4:be:e6:d7:47:16: ca:3a:d8:c5:ae:24:4f:85:91:29:be:00:e1:fa:ad:ea:df:9f: c9:31:5c:f7:27:8f:9e:91:84:62:7b:fb:5c:de:18:93:ce:d6: 40:3e:dc:02:54:c3:ed:08:78:fc:2a:a5:4f:3f:8d:88:e5:aa: 65:23:f7:40:f3:45:e0:d0:25:43:49:d1:bb:98:8b:75:df:b5: 88:a6:4c:06:dc:73:a4:81:08:83:03:de:41:52:71:4c:87:41: 23:d9:3b:11:b8:f0:8d:77:7d:ce:e5:fd:c8:e1:63:b0:8d:e0: fd:f8:fe:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjUwNzE4MjMyODI4WhcNMjUwNzI1MjMyODI4WjAYMRYwFAYD VQQDEw02ODdhZDg5Yy03MWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtacjya5j1puKbKIvRGedjpHXK6OSDJo6RVB+LafO33npVNu10XZpZ2fH1b4/ vdaPTxHZ/SMJ8V9qKHdYMJuUosiPjUlEnefYTyHf68ahch5SPyGzdojYpT4LbSX7 y09xgo8sm29yPVp1fhbx6FwbLnLy1581TS4C0+YVhd0DHV4f1qCBw/6x9upJSufP 3a08E2Ub5xD/jPuivZegcjgTR6izxkH09nLiWjB7hPjc54y/gmGfucrOszHmQUfb Tn6zDEWAu+ojQ3Q5fSvXicM9vGmZdFasp+RvV1dYjqBddqpFs/ZAt6N0Iz8Adnyk wAFFDYDDA4LBg2/5HATaFbJrPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEyMw0d FA1XUN0eFYqnZnLU5C6mMB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoLL3I2mb5ZxMTcvyaQn+Wha4fpTPBUJPeM7QXQCovOVo3VBZ042qP fD4eVjn4R7vwQ4qbuJu9SGWRe93GwSXBxsznlhgqA13iSYPJIk6ctZWy0mWqKs6c piyw/9uDub/7OYB1BhKprlY+9S5vz+aIGZUAhEKvNY/dpRFaNUcg2qy8qV+q4doi UEf0vubXRxbKOtjFriRPhZEpvgDh+q3q35/JMVz3J4+ekYRie/tc3hiTztZAPtwC VMPtCHj8KqVPP42I5aplI/dA80Xg0CVDSdG7mIt137WIpkwG3HOkgQiDA95BUnFM h0Ej2TsRuPCNd33O5f3I4WOwjeD9+P6O -----END CERTIFICATE-----Generated at Sun Jul 20 03:16:44 2025 by rpki-client