$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: WhQVJMJC0XwEBWM00qogccTsT/BFytHG63pqN3I/mbo= Subject key identifier: DB:EF:BE:B2:62:7B:9D:B6:C0:EE:16:E5:33:C3:43:08:62:1B:0C:71 Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 01E2 Signing time: Tue 22 Jul 2025 17:02:59 +0000 Manifest this update: Tue 22 Jul 2025 17:02:58 +0000 Manifest next update: Tue 29 Jul 2025 17:02:58 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: iQ78pAkXGuy1mutpg72tloBncb4DoTJ3GNVc2kaJNso=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Jul 22 17:02:58 2025 GMT Not After : Jul 29 17:02:58 2025 GMT Subject: CN=687fc443-b5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:61:7c:86:e9:37:45:86:8d:87:28:65:2c: 2d:f2:54:30:7f:a3:1f:69:8d:07:df:bf:6b:eb:7a: 32:45:96:70:f9:c3:7e:a6:4d:46:6c:42:98:2a:1a: a2:10:c0:a6:fe:d5:c7:82:4c:5c:d2:9b:09:38:4a: 7a:0b:26:36:e9:9b:93:5a:57:91:50:5a:35:03:9f: d9:f9:88:ca:58:bd:b4:68:08:7e:9d:6a:dc:dd:af: 98:3f:1f:61:c9:ae:51:06:78:a0:67:95:f9:cc:4a: e0:79:41:f9:c9:a8:b2:85:8d:f5:23:70:ca:51:91: 70:6a:82:d6:d9:1c:c2:7a:b6:97:f5:a2:c9:2d:c7: 36:f5:f0:a0:10:fb:32:9d:9b:8c:01:f2:cc:d1:03: 77:f6:0b:ad:26:1b:71:1d:b8:a2:0c:26:4e:06:02: c4:b4:72:32:f8:5a:d1:8a:87:da:8f:dd:79:b8:29: cf:cb:79:81:3b:02:7e:74:fa:22:01:d5:0a:22:3a: 3d:8b:b0:9c:a2:bd:9a:e4:fa:ff:61:a7:d3:5b:65: 83:de:60:70:fc:a2:f4:df:4c:59:53:76:a5:e8:23: 6b:fb:3e:b4:d2:b0:4c:68:14:40:e5:b8:77:66:b4: 78:7e:e3:7a:e9:ab:d2:39:5a:02:00:e5:b7:a0:b7: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EF:BE:B2:62:7B:9D:B6:C0:EE:16:E5:33:C3:43:08:62:1B:0C:71 X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:c1:9f:94:dd:ef:b5:42:00:0e:59:bf:f9:51:95:27:d7:92: f2:68:b1:97:36:fb:c8:aa:1b:4a:83:fa:28:02:17:80:e7:c9: b3:d4:2c:ef:a7:06:e4:64:5f:ea:97:6e:5f:4f:20:d8:b6:98: 4a:6b:08:f8:eb:9d:5e:6e:68:b1:e5:cb:4e:ca:a3:c6:dc:7f: cf:48:52:6c:64:8f:e6:15:ba:a9:82:e7:d1:91:10:b7:b2:36: 90:28:32:a6:77:e9:47:b4:1a:03:10:3a:d3:76:c0:4c:e1:08: f0:59:7a:34:a8:bc:a5:89:8c:8c:c6:23:c4:05:fd:85:7c:47: 6a:03:1b:f4:07:5b:4a:bf:ac:ae:23:c6:a2:f5:f4:5d:62:80: c1:b6:0b:aa:d4:6b:6d:be:7b:87:99:b5:6d:ed:0b:9d:1f:8c: 9d:2d:c1:9e:90:66:a3:7e:18:f1:42:02:4d:82:c9:bd:25:16: 99:67:bc:b9:c6:dc:b3:60:99:18:a0:7d:fb:46:25:b2:10:bf: 56:b2:a1:63:08:35:35:2f:af:fe:75:9d:60:bc:7b:42:ab:18: 7d:0d:ce:67:94:25:5b:9f:bd:f2:dd:aa:1e:fc:68:46:0e:7b: a7:05:1a:b5:49:5a:10:08:45:ce:86:88:76:be:57:62:78:59: af:e4:c5:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUwNzIyMTcwMjU4WhcNMjUwNzI5MTcwMjU4WjAYMRYwFAYD VQQDEw02ODdmYzQ0My1iNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuythfIbpN0WGjYcoZSwt8lQwf6MfaY0H379r63oyRZZw+cN+pk1GbEKYKhqi EMCm/tXHgkxc0psJOEp6CyY26ZuTWleRUFo1A5/Z+YjKWL20aAh+nWrc3a+YPx9h ya5RBnigZ5X5zErgeUH5yaiyhY31I3DKUZFwaoLW2RzCeraX9aLJLcc29fCgEPsy nZuMAfLM0QN39gutJhtxHbiiDCZOBgLEtHIy+FrRiofaj915uCnPy3mBOwJ+dPoi AdUKIjo9i7Ccor2a5Pr/YafTW2WD3mBw/KL030xZU3al6CNr+z600rBMaBRA5bh3 ZrR4fuN66avSOVoCAOW3oLfZ4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvvvrJi e522wO4W5TPDQwhiGwxxMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7wZ+U3e+1QgAOWb/5UZUn15LyaLGXNvvIqhtKg/ooAheA58mz1Czv pwbkZF/ql25fTyDYtphKawj4651ebmix5ctOyqPG3H/PSFJsZI/mFbqpgufRkRC3 sjaQKDKmd+lHtBoDEDrTdsBM4QjwWXo0qLyliYyMxiPEBf2FfEdqAxv0B1tKv6yu I8ai9fRdYoDBtguq1GttvnuHmbVt7QudH4ydLcGekGajfhjxQgJNgsm9JRaZZ7y5 xtyzYJkYoH37RiWyEL9WsqFjCDU1L6/+dZ1gvHtCqxh9Dc5nlCVbn73y3aoe/GhG DnunBRq1SVoQCEXOhoh2vldieFmv5MWK -----END CERTIFICATE-----Generated at Wed Jul 23 12:52:38 2025 by rpki-client