$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: pItdSLiQMzHZvfWM3AkY1jINVl+mAdfXuS6/AiMlqd0= Subject key identifier: 1A:03:B9:29:53:C5:39:A4:B4:38:4D:D9:AA:F1:AA:CB:21:99:54:F5 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 05CA Signing time: Sat 06 Sep 2025 23:23:27 +0000 Manifest this update: Sat 06 Sep 2025 23:23:27 +0000 Manifest next update: Sat 13 Sep 2025 23:23:27 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: FKH2Bwahp1RX6oRoiygNKaN6Ilv/G+b83XhkGqcmsyI=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: Gc4mTCPUdqsBkKm2JhVYgTwfshOEbNkn17lOcZFZIzM=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: 2CCQESvocpfwmEybaJ8bYgcDotITBOYZN57oNNZ0pLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Sep 6 23:23:27 2025 GMT Not After : Sep 13 23:23:27 2025 GMT Subject: CN=68bcc26f-258e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:05:d0:04:c0:43:58:30:47:e7:cc:41:cb:91: f2:df:4a:ca:60:61:ab:6e:a6:9c:d6:47:62:e7:f8: 04:1d:7b:80:3d:eb:77:c7:ea:42:e9:e2:01:09:c2: 83:2d:91:a0:f4:5e:be:92:76:f0:96:86:43:95:c3: e2:13:f5:ad:8f:33:50:dc:01:0d:25:b0:ba:4c:4e: 68:25:d3:30:0a:59:ac:7f:b9:61:de:64:4d:4c:1e: 3b:85:8d:1d:8f:ef:eb:85:08:b0:88:07:68:96:1d: 4c:72:cb:de:9d:dd:10:5a:89:bc:53:c3:b9:e2:db: 34:02:51:23:19:a7:2a:b3:bf:35:c2:99:46:34:7e: 92:06:32:b8:5b:66:7a:c2:45:80:96:92:e7:e3:9e: bb:37:6e:b9:ac:4f:62:0e:72:e2:e9:c6:98:65:5a: 6c:d8:50:0e:6a:92:b8:1b:ee:c1:1b:f4:56:f0:ae: e0:1c:ff:6f:1b:f3:0d:40:07:96:d3:39:cf:2d:22: 38:18:32:4b:a5:81:be:28:70:3e:0c:28:d3:aa:c5: c6:3f:14:27:56:c4:9e:9e:ae:71:62:6d:57:a8:d8: 07:29:4c:dd:24:0e:c0:a4:a8:be:c9:04:bb:f5:f2: 18:16:9f:9e:f5:e2:fc:1a:8a:14:0c:2b:35:29:fe: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:B9:29:53:C5:39:A4:B4:38:4D:D9:AA:F1:AA:CB:21:99:54:F5 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:b9:c4:f2:fc:25:d9:d1:8f:25:33:4f:de:0f:05:00:78:59: fc:37:4b:df:81:44:79:33:9f:f3:f2:9e:4d:3d:2d:ee:6c:05: 8c:3e:67:37:05:c7:fd:85:4a:7b:c9:21:3a:e7:41:e9:75:d3: 5b:ed:bd:cf:c5:1a:e4:78:0e:87:28:af:0d:ba:ca:2d:6b:9b: 19:00:39:4d:62:e1:0e:d7:7b:96:b5:41:aa:a0:1d:9b:94:1d: 58:0a:cc:6d:91:10:18:dd:29:0a:54:f0:09:d7:a9:93:62:35: ff:97:b3:ed:92:6c:78:b4:49:58:91:43:06:ed:68:c5:a8:01: 81:7c:8c:2f:e3:3e:22:be:f7:c5:09:96:56:3b:79:a2:5a:d0: 36:1d:ff:27:a0:f9:b7:86:12:98:32:80:fc:79:25:42:fa:d4: 73:5a:d0:1f:46:01:e0:b3:04:78:5d:a3:0f:fe:9c:62:2b:29: 61:62:8b:75:33:08:31:76:2e:0e:b3:a6:cf:66:73:dc:a0:3c: c4:36:58:cd:39:5d:04:00:40:be:bb:0c:58:80:99:05:af:b2: fb:80:e0:30:72:b7:e1:92:b5:da:4c:19:3c:dc:aa:1c:2f:56: ff:d4:89:ea:fb:cf:fa:f8:09:28:88:c4:e3:ea:44:16:7c:7e: 76:60:9c:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjUwOTA2MjMyMzI3WhcNMjUwOTEzMjMyMzI3WjAYMRYwFAYD VQQDEw02OGJjYzI2Zi0yNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QXQBMBDWDBH58xBy5Hy30rKYGGrbqac1kdi5/gEHXuAPet3x+pC6eIBCcKD LZGg9F6+knbwloZDlcPiE/WtjzNQ3AENJbC6TE5oJdMwClmsf7lh3mRNTB47hY0d j+/rhQiwiAdolh1Mcsvend0QWom8U8O54ts0AlEjGacqs781wplGNH6SBjK4W2Z6 wkWAlpLn4567N265rE9iDnLi6caYZVps2FAOapK4G+7BG/RW8K7gHP9vG/MNQAeW 0znPLSI4GDJLpYG+KHA+DCjTqsXGPxQnVsSenq5xYm1XqNgHKUzdJA7ApKi+yQS7 9fIYFp+e9eL8GooUDCs1Kf4BnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBoDuSlT xTmktDhN2arxqsshmVT1MB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqucTy/CXZ0Y8lM0/eDwUAeFn8N0vfgUR5M5/z8p5NPS3ubAWMPmc3 Bcf9hUp7ySE650HpddNb7b3PxRrkeA6HKK8Nusota5sZADlNYuEO13uWtUGqoB2b lB1YCsxtkRAY3SkKVPAJ16mTYjX/l7Ptkmx4tElYkUMG7WjFqAGBfIwv4z4ivvfF CZZWO3miWtA2Hf8noPm3hhKYMoD8eSVC+tRzWtAfRgHgswR4XaMP/pxiKylhYot1 Mwgxdi4Os6bPZnPcoDzENljNOV0EAEC+uwxYgJkFr7L7gOAwcrfhkrXaTBk83Koc L1b/1Inq+8/6+AkoiMTj6kQWfH52YJzt -----END CERTIFICATE-----Generated at Mon Sep 8 04:19:53 2025 by rpki-client