$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft File: wHHWGUmidyqcROW18GMBiuCuEtc.mft (raw, json) Hash identifier: TqMwSnAOK+rmXsQIo1I8iTZ+aGouGvfHU8Lb0W0McyM= Subject key identifier: 00:EB:E0:83:BD:EA:CC:B8:83:6C:24:D0:71:08:54:34:3B:58:94:3E Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 Certificate issuer: /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Certificate serial: 0B0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft Manifest number: 0B03 Signing time: Sun 24 Aug 2025 19:20:55 +0000 Manifest this update: Sun 24 Aug 2025 19:20:55 +0000 Manifest next update: Sun 31 Aug 2025 19:20:55 +0000 Files and hashes: 1: wHHWGUmidyqcROW18GMBiuCuEtc.crl (hash: malf24A1HjGpRgJVcfsxTOmQaBc8VYHYJjKnVp8OZgo=) 2: 5A56D82CEE9711EA9A99063CC4F9AE02.roa (hash: NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2829 (0xb0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7 Validity Not Before: Aug 24 19:20:55 2025 GMT Not After : Aug 31 19:20:55 2025 GMT Subject: CN=68ab6617-b97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:b7:3b:2f:7a:95:07:82:c3:a9:0f:0f:6e: f2:cc:14:6c:70:ea:8e:77:ac:44:5e:61:56:c9:51: f5:62:e0:da:11:33:54:98:a5:bf:42:a0:e2:47:79: 9c:c6:b4:eb:98:79:b2:50:cb:ed:66:33:77:5f:45: c2:33:7c:48:67:c6:33:9b:11:c4:e6:03:e4:ec:80: 1e:9d:eb:dd:4e:d6:26:df:78:8a:9b:fa:b8:50:6a: 52:f7:76:cc:ae:ce:eb:f3:c9:1a:7e:03:5c:e9:85: 92:e2:21:b3:66:c5:9f:dc:76:1b:c0:ae:93:eb:2b: 88:5c:73:cf:b8:e7:35:cf:51:44:61:6d:1f:fe:f1: a2:d3:e1:4e:54:c5:10:45:15:8c:a8:e0:b2:cc:65: 1e:db:4c:9c:a2:8c:81:4d:5d:96:df:c8:f3:05:15: 1b:58:ea:30:1a:34:a6:45:11:cc:c8:a3:1c:7e:4c: f3:e8:b9:0f:e9:ca:b6:e8:0b:3f:11:34:3e:e7:99: d5:96:b3:9c:e7:50:4a:18:d0:af:ec:0c:e2:fe:b0: 6e:68:20:1d:d3:62:a4:62:5b:bc:d4:3c:79:37:7f: 24:b6:ff:a2:fe:7c:b0:0a:79:eb:22:a2:0e:0c:82: 95:b2:9e:08:af:8d:59:d4:8f:1c:1f:0a:be:e2:5e: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:E0:83:BD:EA:CC:B8:83:6C:24:D0:71:08:54:34:3B:58:94:3E X509v3 Authority Key Identifier: keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:dc:d5:cc:ff:97:93:d0:4d:5a:69:f0:57:21:91:32:6a:28: e7:9d:ba:31:aa:7f:ec:8b:79:f3:a1:27:2b:6e:0d:0b:26:98: c2:3f:ec:77:ad:36:0d:e5:37:b3:f4:85:e0:6f:92:10:f6:5b: fe:51:16:e7:12:ca:c5:62:84:f4:9b:e5:d9:1d:3f:8d:9c:64: b5:63:30:a0:28:77:a6:41:fe:0c:43:1d:e0:ce:f7:74:91:16: 8e:19:23:60:67:40:c4:3c:20:f6:02:f2:9a:ab:52:72:4e:55: 4f:5f:e0:91:df:b3:5a:f4:7e:69:b2:31:59:2b:d6:c4:c6:75: 74:41:2a:33:04:fa:5c:87:f5:95:7c:64:09:1b:8f:b1:e0:e9: f5:a5:43:2e:1d:07:cb:9e:ef:5b:ba:e4:87:71:7f:30:33:43: 9e:bc:1c:4e:8a:c4:f3:6b:5e:71:5f:44:a3:d2:67:74:0a:9f: 74:69:59:11:41:5f:1b:bb:6f:01:f5:b5:71:70:d0:35:85:15: e7:48:8d:fc:28:54:2d:27:a9:b9:c3:0c:91:81:16:56:88:6c: f9:4f:93:0b:60:cd:77:1a:c0:1c:ad:47:36:8b:9c:1e:7c:72: 98:6f:10:c7:65:96:ef:b3:6b:51:c7:4c:26:e6:95:25:96:20: cd:9e:bd:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY0MkExMTAvBgNVBAUTKEMwNzFENjE5NDlBMjc3MkE5QzQ0RTVCNUYwNjMwMThB RTBBRTEyRDcwHhcNMjUwODI0MTkyMDU1WhcNMjUwODMxMTkyMDU1WjAYMRYwFAYD VQQDEw02OGFiNjYxNy1iOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5q3Oy96lQeCw6kPD27yzBRscOqOd6xEXmFWyVH1YuDaETNUmKW/QqDiR3mc xrTrmHmyUMvtZjN3X0XCM3xIZ8YzmxHE5gPk7IAenevdTtYm33iKm/q4UGpS93bM rs7r88kafgNc6YWS4iGzZsWf3HYbwK6T6yuIXHPPuOc1z1FEYW0f/vGi0+FOVMUQ RRWMqOCyzGUe20ycooyBTV2W38jzBRUbWOowGjSmRRHMyKMcfkzz6LkP6cq26As/ ETQ+55nVlrOc51BKGNCv7Azi/rBuaCAd02KkYlu81Dx5N38ktv+i/nywCnnrIqIO DIKVsp4Ir41Z1I8cHwq+4l4jJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADr4IO9 6sy4g2wk0HEIVDQ7WJQ+MB8GA1UdIwQYMBaAFMBx1hlJoncqnETltfBjAYrgrhLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjQyQS8xQjIwNTU3RTRC QkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5cWNST1cxOEdNQml1Q3VF dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dISFdHVW1pZHlxY1JPVzE4R01CaXVDdUV0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjQyQS8xQjIwNTU3RTRCQkUxMUVBQkMyN0E1NDdDNEY5QUUwMi93SEhXR1VtaWR5 cWNST1cxOEdNQml1Q3VFdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB03NXM/5eT0E1aafBXIZEyaijnnboxqn/si3nzoScrbg0LJpjCP+x3 rTYN5Tez9IXgb5IQ9lv+URbnEsrFYoT0m+XZHT+NnGS1YzCgKHemQf4MQx3gzvd0 kRaOGSNgZ0DEPCD2AvKaq1JyTlVPX+CR37Na9H5psjFZK9bExnV0QSozBPpch/WV fGQJG4+x4On1pUMuHQfLnu9buuSHcX8wM0OevBxOisTza15xX0Sj0md0Cp90aVkR QV8bu28B9bVxcNA1hRXnSI38KFQtJ6m5wwyRgRZWiGz5T5MLYM13GsAcrUc2i5we fHKYbxDHZZbvs2tRx0wm5pUlliDNnr0E -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:11 2025 by rpki-client