$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json) Hash identifier: OUfpKmDnHRt1DrdWE4+GMDgm5fC9kesCrxYeeembbi0= Subject key identifier: 4F:CA:C1:76:38:60:24:E4:68:D6:DE:9D:FB:46:5C:EA:CF:04:BF:6A Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft Manifest number: 0152 Signing time: Sat 23 Aug 2025 04:18:39 +0000 Manifest this update: Sat 23 Aug 2025 04:18:39 +0000 Manifest next update: Sat 30 Aug 2025 04:18:39 +0000 Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: r1Un4xb9MrZroozDVD0pCmZ4MlCufZ/+Fhc/YAmPR/s=) 2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: l8sRE2YAPh1eQYlp9y5e6VCbUFJp+lvUI5lEd97/izs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Validity Not Before: Aug 23 04:18:39 2025 GMT Not After : Aug 30 04:18:39 2025 GMT Subject: CN=68a9411f-d8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:38:db:3f:8c:b2:3f:7b:c7:54:04:98:d5: b7:ac:a6:c7:5d:4e:a7:04:28:30:6a:e2:74:af:05: 76:a8:cc:aa:d8:5a:83:69:df:c5:37:31:26:59:c0: c7:bb:3e:c8:63:b3:b9:b2:17:3e:5d:1a:6f:38:a7: 31:80:9b:b1:af:30:44:47:3e:ac:6d:2f:49:ea:cf: f9:00:0d:fa:59:dd:ac:dd:17:0c:e6:e9:c3:17:f1: 55:cc:28:25:de:33:1c:ae:3d:d1:16:c5:2f:e6:46: 28:2a:45:7a:3a:d0:5e:57:86:ed:8b:01:0c:d9:b3: 94:22:12:4c:68:64:9e:8a:90:17:af:89:a8:d3:91: 57:42:c4:a8:b4:c9:fa:12:62:61:83:0c:a5:31:54: 3d:0b:52:01:b7:a7:93:b8:da:bd:95:f7:4d:ac:39: 73:2d:da:6f:8c:8a:6f:18:db:64:1a:df:d0:35:68: bf:0c:40:49:cf:41:7d:ae:8d:e8:3b:fd:41:20:4b: 02:ae:76:6e:91:d8:7c:94:ee:90:89:70:8b:e7:75: 76:ab:14:ae:8b:33:be:53:31:f9:51:4f:6a:5f:09: 27:0d:70:a4:c4:f5:5d:39:32:79:89:b4:b6:a1:d6: e8:73:76:c7:aa:a2:74:26:bf:b0:a9:1f:4a:85:a3: da:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CA:C1:76:38:60:24:E4:68:D6:DE:9D:FB:46:5C:EA:CF:04:BF:6A X509v3 Authority Key Identifier: keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bc:a3:4f:ec:0a:da:b0:45:8d:3d:3f:30:d6:c9:be:41:56: 2c:0c:26:48:6a:77:aa:6e:ab:8d:0b:a6:0d:3c:90:f6:fb:58: 09:13:01:da:6e:78:fa:37:17:37:12:fd:ab:ad:81:f7:44:5f: 51:b9:ee:89:2d:df:5c:94:02:3c:e6:97:37:c4:1d:f9:e1:75: dd:dc:fe:64:8c:23:f3:c4:4b:7e:71:33:2e:38:73:58:3c:60: ce:1f:b5:5b:aa:2f:75:b7:7e:c8:84:66:05:62:87:ab:98:a0: 33:ff:b5:69:a7:00:37:53:80:a5:e3:ae:b4:a5:af:6a:30:33: 7d:0b:99:e9:c7:f9:8f:4f:c6:a3:7a:70:bf:17:53:08:8c:50: da:88:f4:2c:cc:de:2b:72:04:12:10:ba:07:21:ac:98:10:57: 55:af:9f:32:2f:97:cd:10:10:bd:39:2b:cd:89:76:26:7f:1d: 3e:99:f2:77:a5:36:e4:c8:c9:c3:09:53:2e:20:42:a6:24:22: 7e:75:58:28:6e:38:64:2e:7b:ad:91:f6:9a:68:cb:e7:c6:05: 44:30:2f:eb:ba:1d:d5:e3:a8:f5:0b:b0:f0:d4:ba:2c:b9:18: 3d:95:eb:62:66:43:88:14:c0:fb:49:da:6d:98:68:1f:94:3d: 62:fa:ed:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3 NjFGREI1RDgwHhcNMjUwODIzMDQxODM5WhcNMjUwODMwMDQxODM5WjAYMRYwFAYD VQQDEw02OGE5NDExZi1kOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsV442z+Msj97x1QEmNW3rKbHXU6nBCgwauJ0rwV2qMyq2FqDad/FNzEmWcDH uz7IY7O5shc+XRpvOKcxgJuxrzBERz6sbS9J6s/5AA36Wd2s3RcM5unDF/FVzCgl 3jMcrj3RFsUv5kYoKkV6OtBeV4btiwEM2bOUIhJMaGSeipAXr4mo05FXQsSotMn6 EmJhgwylMVQ9C1IBt6eTuNq9lfdNrDlzLdpvjIpvGNtkGt/QNWi/DEBJz0F9ro3o O/1BIEsCrnZukdh8lO6QiXCL53V2qxSuizO+UzH5UU9qXwknDXCkxPVdOTJ5ibS2 odboc3bHqqJ0Jr+wqR9KhaPa9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/KwXY4 YCTkaNbenftGXOrPBL9qMB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5 RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAavKNP7ArasEWNPT8w1sm+QVYsDCZIaneqbquNC6YNPJD2+1gJEwHa bnj6Nxc3Ev2rrYH3RF9Rue6JLd9clAI85pc3xB354XXd3P5kjCPzxEt+cTMuOHNY PGDOH7Vbqi91t37IhGYFYoermKAz/7VppwA3U4Cl4660pa9qMDN9C5npx/mPT8aj enC/F1MIjFDaiPQszN4rcgQSELoHIayYEFdVr58yL5fNEBC9OSvNiXYmfx0+mfJ3 pTbkyMnDCVMuIEKmJCJ+dVgobjhkLnutkfaaaMvnxgVEMC/ruh3V46j1C7Dw1Los uRg9letiZkOIFMD7SdptmGgflD1i+u0M -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:07 2025 by rpki-client