$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: dB8OE3vAA49QL834wPOmXuq5R291Xpxba74mP41Oh5E= Subject key identifier: D1:F8:26:DE:49:BB:15:9C:F8:92:B6:19:16:E6:47:E8:9B:D1:46:53 Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 01B5 Signing time: Mon 21 Jul 2025 03:09:34 +0000 Manifest this update: Mon 21 Jul 2025 03:09:34 +0000 Manifest next update: Mon 28 Jul 2025 03:09:34 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: ZgKsOSmh1PZ04tGBtpRxtUTjXBTRshfN2DHMtD3O/Bc=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: HHXQFb70LXf16l4S8JzNbd5w8LQr3pgR5z+FBqxSlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: Jul 21 03:09:34 2025 GMT Not After : Jul 28 03:09:34 2025 GMT Subject: CN=687daf6e-5be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:28:8d:41:aa:6f:65:9b:6c:d2:ce:f6:91: a0:3a:50:7b:70:fb:a5:d5:25:90:41:8a:81:ee:93: 13:b3:9c:a6:31:ef:09:47:33:cb:9f:ea:b2:b0:b8: 50:d6:74:3a:a3:37:a3:41:81:54:49:e1:6a:a3:3f: ba:0b:8b:14:79:14:65:46:5d:a3:83:69:c6:69:ff: 22:3b:ed:6e:e4:57:b6:4a:71:d5:42:33:c3:5c:e3: 00:8b:8b:8c:bd:e8:f6:93:93:c1:50:24:f5:c7:6d: 13:2f:0c:ed:48:fe:b9:0b:ec:65:98:11:e2:32:c5: b9:06:c9:ca:2a:ef:aa:57:65:b2:49:08:a2:d6:ff: 5d:ba:ee:23:c7:4d:d1:25:1b:d9:af:e1:2a:c4:19: 16:97:5b:4c:71:66:cc:5f:f9:b0:96:60:fc:36:25: 85:64:25:3c:93:f4:11:7b:ba:eb:00:ae:43:d0:ba: 37:58:a6:f6:cf:92:b1:dd:47:e9:0d:d1:6e:c0:3b: 41:11:af:3c:3b:db:75:07:d8:96:9e:9e:31:af:53: a7:94:de:a4:7b:3f:30:8c:4a:6c:e4:4e:69:d7:f6: a4:53:ef:06:ec:4e:9c:c9:94:8b:b7:f7:0d:87:a0: 50:a6:74:e9:6b:b6:74:88:d4:e0:3f:da:33:af:d3: bc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:26:DE:49:BB:15:9C:F8:92:B6:19:16:E6:47:E8:9B:D1:46:53 X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d5:23:73:d1:25:e9:d7:08:26:0d:7d:71:dc:a1:d1:04:42: 2c:78:74:00:9d:e0:13:d6:11:3e:27:1b:33:4b:78:0b:bc:1a: 7e:f1:85:a4:b8:03:71:ff:bc:ce:9b:fb:b4:07:a8:95:81:be: 79:bb:8d:7b:e7:b7:f5:49:67:91:a5:ae:be:95:c8:83:d9:55: ea:25:4c:70:9c:97:3a:15:10:34:f6:cd:9c:36:f7:e3:8f:d6: d2:f1:b5:89:4b:79:d0:46:d0:3a:3e:4c:b1:f4:cf:5c:c4:af: 26:82:19:4a:4d:ed:da:2a:05:c0:55:6e:1c:cf:4e:1b:e4:38: 75:d2:c7:a3:60:99:68:55:fb:a2:15:1c:d8:d5:59:3d:54:84: 01:00:b2:c1:1b:15:ff:35:6b:24:3b:68:cf:a0:70:f0:a4:26: f0:d3:6e:b0:d9:f0:ff:82:74:25:a4:0e:35:d6:26:64:53:c1: 27:55:b1:21:9b:96:37:14:d1:b6:6c:0a:5d:7f:ca:e6:a1:fa: 06:cc:78:26:eb:87:02:64:f4:94:38:a7:d4:b2:d2:f9:fa:42: 58:c8:56:5e:1c:80:3d:87:52:22:f0:17:4b:05:0c:31:7b:4e: e9:d3:13:d8:73:1f:12:2b:d0:38:c0:3a:6e:12:f0:d7:f2:f2: 28:03:74:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjUwNzIxMDMwOTM0WhcNMjUwNzI4MDMwOTM0WjAYMRYwFAYD VQQDEw02ODdkYWY2ZS01YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfgojUGqb2WbbNLO9pGgOlB7cPul1SWQQYqB7pMTs5ymMe8JRzPLn+qysLhQ 1nQ6ozejQYFUSeFqoz+6C4sUeRRlRl2jg2nGaf8iO+1u5Fe2SnHVQjPDXOMAi4uM vej2k5PBUCT1x20TLwztSP65C+xlmBHiMsW5BsnKKu+qV2WySQii1v9duu4jx03R JRvZr+EqxBkWl1tMcWbMX/mwlmD8NiWFZCU8k/QRe7rrAK5D0Lo3WKb2z5Kx3Ufp DdFuwDtBEa88O9t1B9iWnp4xr1OnlN6kez8wjEps5E5p1/akU+8G7E6cyZSLt/cN h6BQpnTpa7Z0iNTgP9ozr9O8wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH4Jt5J uxWc+JK2GRbmR+ib0UZTMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1SNz0SXp1wgmDX1x3KHRBEIseHQAneAT1hE+JxszS3gLvBp+8YWk uANx/7zOm/u0B6iVgb55u41757f1SWeRpa6+lciD2VXqJUxwnJc6FRA09s2cNvfj j9bS8bWJS3nQRtA6Pkyx9M9cxK8mghlKTe3aKgXAVW4cz04b5Dh10sejYJloVfui FRzY1Vk9VIQBALLBGxX/NWskO2jPoHDwpCbw026w2fD/gnQlpA411iZkU8EnVbEh m5Y3FNG2bApdf8rmofoGzHgm64cCZPSUOKfUstL5+kJYyFZeHIA9h1Ii8BdLBQwx e07p0xPYcx8SK9A4wDpuEvDX8vIoA3RO -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:24 2025 by rpki-client