$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: gde6IJVq2RxFXgEGB0viFXiwMauQrqtw192N/2xQOnw= Subject key identifier: 83:9E:5E:F5:95:2B:BB:E0:C7:A5:88:89:2F:65:06:04:3D:23:19:AA Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0C42 Signing time: Sat 06 Sep 2025 18:44:42 +0000 Manifest this update: Sat 06 Sep 2025 18:44:41 +0000 Manifest next update: Sat 13 Sep 2025 18:44:41 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: T09ldiziEwFSJC5qsE1h3tEzgBwWTq1WaufPWrJ+NDw=) 2: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: gf3Sdo19qyXM6SMAtIZiiG8nFm/lM81I+lk8U/mxJ0A=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: m3cQPwvPfynkpVZQ6ovTIwwV/a4OxHBn+kGRuN/3tCk=) 4: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: iJYPLuFQNCCH+UvB8S/XoN2BohnkZQZo7wuZ5vZn4KI=) 5: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: OT8lFgnYcC18UV02Y4GD3JZ3PmqRrvihPECOx7skEQw=) 6: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: b4w7QgPcZzJXvh0ZqyON2NEy/TPDBAfSWtVCJWQUkJM=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: +57K4ut0qq2fKWCTFqpHNS42ff+KxP45CLdJafu2rsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Sep 6 18:44:41 2025 GMT Not After : Sep 13 18:44:41 2025 GMT Subject: CN=68bc8119-1b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:a6:b0:bb:04:1d:ec:3a:a8:6e:7a:a3:62: 60:e6:a3:68:d7:94:8d:11:b4:6e:9a:cf:2a:d0:d9: 6a:20:17:8e:a6:5a:c7:0f:9d:4f:e5:f3:7e:80:2e: a3:7f:f8:1c:e6:d5:3a:12:97:4d:8f:38:fc:3c:17: 38:20:88:c3:58:65:33:70:b5:08:62:f2:f0:3a:8d: c0:df:23:01:ba:c8:c9:4d:fa:7c:d4:16:a9:20:58: 12:0b:1f:75:24:e5:29:2b:65:53:f1:fa:05:95:f6: 99:2c:bc:cc:4d:32:62:93:68:51:75:36:fe:0c:af: 06:3f:0f:5f:62:70:c2:61:30:c2:cb:48:11:b9:f8: 92:2a:b0:35:33:3f:73:34:9a:95:02:aa:e3:38:97: 19:d7:dc:b3:a4:c0:77:e2:1e:aa:39:d9:88:6e:8e: c7:c5:32:d2:48:b6:d6:1e:47:7c:93:07:67:50:4e: 12:54:10:7d:91:16:38:b3:42:ae:3a:78:dc:94:52: f0:d1:fd:62:7d:cc:38:3f:a9:8c:7c:89:61:0c:1b: cf:d9:bd:15:74:41:ce:91:ac:9e:ee:72:64:f9:ba: 08:af:fb:2a:0e:6f:67:1e:e3:a8:93:b1:df:d8:00: 08:f0:b5:20:86:66:37:f4:cc:12:f1:d5:4c:40:2b: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9E:5E:F5:95:2B:BB:E0:C7:A5:88:89:2F:65:06:04:3D:23:19:AA X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:77:41:65:d1:23:e6:8c:d9:32:c5:0a:04:2f:63:71:99:58: 8b:1f:c5:0b:96:0e:88:80:86:94:30:f9:22:69:4d:f1:e1:30: 3c:d9:d4:73:63:37:e7:0f:35:30:7d:77:21:c4:db:d5:a9:6e: 37:b8:78:ba:b2:74:77:b9:27:b5:c1:20:20:22:d8:2d:8c:34: 3e:52:9e:da:2f:7b:80:ea:cc:b6:8e:b1:c4:7a:20:a3:3d:a4: 3e:cd:65:bc:52:18:a8:1a:7b:84:77:91:79:90:21:c5:de:db: 15:94:9d:7f:52:e8:9b:04:c6:ee:6d:14:fb:cc:fe:8a:76:5a: 96:27:8d:c4:02:c5:a3:97:60:97:c5:26:49:69:47:b8:92:1b: 3b:a0:ac:67:87:7d:03:1d:65:20:49:4a:21:c1:f7:d4:fd:42: 8b:75:0a:70:84:41:ff:c0:20:7f:29:16:4f:2f:e8:35:fc:0b: eb:2c:6e:81:c7:32:73:61:50:0d:fd:99:df:c8:a2:b6:44:ad: b1:d0:51:71:c9:cd:43:2d:50:a4:b3:75:a8:1c:ca:e1:18:72: 21:d4:24:5b:4b:ef:13:7d:25:0c:77:6d:2e:bd:50:57:14:68: 73:e8:5b:5a:f1:88:ec:5e:c3:4f:4f:a5:53:08:28:d9:2c:34: 0c:51:ba:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjUwOTA2MTg0NDQxWhcNMjUwOTEzMTg0NDQxWjAYMRYwFAYD VQQDEw02OGJjODExOS0xYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHimsLsEHew6qG56o2Jg5qNo15SNEbRums8q0NlqIBeOplrHD51P5fN+gC6j f/gc5tU6EpdNjzj8PBc4IIjDWGUzcLUIYvLwOo3A3yMBusjJTfp81BapIFgSCx91 JOUpK2VT8foFlfaZLLzMTTJik2hRdTb+DK8GPw9fYnDCYTDCy0gRufiSKrA1Mz9z NJqVAqrjOJcZ19yzpMB34h6qOdmIbo7HxTLSSLbWHkd8kwdnUE4SVBB9kRY4s0Ku OnjclFLw0f1ifcw4P6mMfIlhDBvP2b0VdEHOkaye7nJk+boIr/sqDm9nHuOok7Hf 2AAI8LUghmY39MwS8dVMQCvUKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOeXvWV K7vgx6WIiS9lBgQ9IxmqMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1d0Fl0SPmjNkyxQoEL2NxmViLH8ULlg6IgIaUMPkiaU3x4TA82dRz YzfnDzUwfXchxNvVqW43uHi6snR3uSe1wSAgItgtjDQ+Up7aL3uA6sy2jrHEeiCj PaQ+zWW8UhioGnuEd5F5kCHF3tsVlJ1/UuibBMbubRT7zP6KdlqWJ43EAsWjl2CX xSZJaUe4khs7oKxnh30DHWUgSUohwffU/UKLdQpwhEH/wCB/KRZPL+g1/AvrLG6B xzJzYVAN/ZnfyKK2RK2x0FFxyc1DLVCks3WoHMrhGHIh1CRbS+8TfSUMd20uvVBX FGhz6Fta8YjsXsNPT6VTCCjZLDQMUbqu -----END CERTIFICATE-----Generated at Sun Sep 7 14:39:53 2025 by rpki-client