$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft File: WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json) Hash identifier: l9cNJiIImwimSsPCnfeoe1/lAJqW/C1L4JVI3koxi14= Subject key identifier: 81:0B:E0:09:92:65:8C:B0:E6:80:12:23:9C:48:A3:06:E2:1E:3A:20 Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft Manifest number: 2A Signing time: Wed 03 Sep 2025 08:21:55 +0000 Manifest this update: Wed 03 Sep 2025 08:21:54 +0000 Manifest next update: Wed 10 Sep 2025 08:21:54 +0000 Files and hashes: 1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: MTvOZUin7S0GVbpwiDN6IwtyB9EvIgwdg6BqXI60/1s=) 2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: Bm8WKhY+hNcg+fjUuluI2/RvbnR7gkU6ugwO04YyI/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Validity Not Before: Sep 3 08:21:54 2025 GMT Not After : Sep 10 08:21:54 2025 GMT Subject: CN=68b7faa3-43c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:95:ed:bf:e7:61:6c:2d:0d:c2:6e:04:5d: dd:53:69:00:63:e9:24:db:47:3a:c6:67:e0:31:88: 02:3f:aa:48:a6:ad:26:d0:e2:87:f2:d2:ba:33:4f: 5d:55:e8:25:73:34:e7:28:15:ea:5b:e7:6c:f0:b2: 9f:a7:bc:7b:9b:dd:87:ef:dd:e0:5f:51:4f:e6:1f: ce:f4:1a:79:a1:f6:bd:c5:29:01:29:fc:b4:c7:28: 3d:84:b7:61:65:9b:99:f3:41:61:28:b7:11:54:09: 9f:68:46:b2:c7:51:62:3d:ec:d3:a6:25:66:d0:99: 8e:91:f4:27:fd:a1:62:12:ef:52:35:4b:ce:85:fd: be:d8:ef:38:9d:c0:e6:a4:05:12:41:64:7e:3c:fa: da:27:73:9a:57:4d:f2:c9:c9:78:cd:40:04:9c:8c: 79:a9:5d:e8:c7:09:ca:50:a0:83:53:78:eb:aa:15: ee:35:10:b2:d8:98:f3:a1:74:31:6e:54:28:d3:66: 79:93:d4:12:d6:0b:04:6f:f3:2d:35:45:60:57:2b: 93:df:14:43:2e:10:4d:de:08:32:83:d0:af:fa:28: 16:6f:ad:78:20:18:11:41:a8:60:8a:e7:43:d1:17: a3:86:a8:fe:45:dc:08:a4:75:d9:04:75:3c:bc:4a: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0B:E0:09:92:65:8C:B0:E6:80:12:23:9C:48:A3:06:E2:1E:3A:20 X509v3 Authority Key Identifier: keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b1:4f:76:75:57:ad:6b:b9:d2:95:fd:b4:1b:be:72:e6:be: dc:a9:24:be:c1:67:cb:57:3b:c6:5e:aa:ef:94:7b:51:f4:54: a3:1d:d2:37:5f:65:6f:ad:0b:10:26:a6:8b:9a:32:57:a8:ec: 5e:6c:1d:8b:19:7a:fc:93:41:73:95:22:dd:af:35:9e:44:d9: 7e:07:51:8b:d9:b6:f5:9a:23:cd:c4:41:51:ef:46:fe:4e:6b: ee:d1:9e:e6:40:43:75:78:b9:d7:b8:e8:6a:85:d6:7f:26:ce: 1e:11:d8:b1:eb:58:60:d2:c5:f1:18:71:4d:74:a9:88:2c:1a: 75:4b:73:6e:56:d8:5d:eb:09:f8:d2:7a:cf:8e:8c:1d:83:82: d7:b9:51:8e:fd:f0:50:f5:34:87:29:b9:6b:8a:ce:34:c4:33: 12:96:43:b0:38:0b:22:ba:b4:51:ec:5b:9f:89:61:1d:b5:15: aa:1d:4c:83:27:37:b5:4b:8d:b2:34:5d:ba:5d:1e:32:d3:b3: 03:3f:ae:e2:8c:9d:c0:5a:2d:fa:39:96:49:54:45:00:c3:09: 23:52:66:dd:bd:3b:a6:f1:02:0e:14:60:69:db:00:38:35:bf: fb:fc:4b:04:ea:12:c9:79:36:67:cc:1c:c7:5b:38:36:85:b9: 1c:d0:b2:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTZDNzExMC8GA1UEBRMoNThBMjFFN0IyM0ZBRjIxQjg5RDM0MjcwRUI1NkY3NDQ5 QzIzOTk4NjAeFw0yNTA5MDMwODIxNTRaFw0yNTA5MTAwODIxNTRaMBgxFjAUBgNV BAMTDTY4YjdmYWEzLTQzYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNJZXtv+dhbC0Nwm4EXd1TaQBj6STbRzrGZ+AxiAI/qkimrSbQ4ofy0rozT11V 6CVzNOcoFepb52zwsp+nvHub3Yfv3eBfUU/mH870Gnmh9r3FKQEp/LTHKD2Et2Fl m5nzQWEotxFUCZ9oRrLHUWI97NOmJWbQmY6R9Cf9oWIS71I1S86F/b7Y7zidwOak BRJBZH48+tonc5pXTfLJyXjNQAScjHmpXejHCcpQoINTeOuqFe41ELLYmPOhdDFu VCjTZnmT1BLWCwRv8y01RWBXK5PfFEMuEE3eCDKD0K/6KBZvrXggGBFBqGCK50PR F6OGqP5F3AikddkEdTy8ShTrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgQvgCZJl jLDmgBIjnEijBuIeOiAwHwYDVR0jBBgwFoAUWKIeeyP68huJ00Jw61b3RJwjmYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3Lzg1REVEQUQ4NTBB NTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1SjAwSnc2MWIzUkp3am1Z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0tJZWV5UDY4aHVKMDBKdzYxYjNSSndqbVlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NkM3Lzg1REVEQUQ4NTBBNTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1 SjAwSnc2MWIzUkp3am1ZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA2xT3Z1V61rudKV/bQbvnLmvtypJL7BZ8tXO8Zequ+Ue1H0VKMd0jdf ZW+tCxAmpouaMleo7F5sHYsZevyTQXOVIt2vNZ5E2X4HUYvZtvWaI83EQVHvRv5O a+7RnuZAQ3V4ude46GqF1n8mzh4R2LHrWGDSxfEYcU10qYgsGnVLc25W2F3rCfjS es+OjB2Dgte5UY798FD1NIcpuWuKzjTEMxKWQ7A4CyK6tFHsW5+JYR21FaodTIMn N7VLjbI0XbpdHjLTswM/ruKMncBaLfo5lklURQDDCSNSZt29O6bxAg4UYGnbADg1 v/v8SwTqEsl5NmfMHMdbODaFuRzQsuA= -----END CERTIFICATE-----Generated at Thu Sep 4 14:18:02 2025 by rpki-client