$ rpki-client -vvf rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft File: wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft (raw, json) Hash identifier: DarLVolf+Gz7Dq+ob7gm3VYZ+7evthgYgyAx5Chsxv0= Subject key identifier: 46:D7:9D:E0:EC:B5:23:35:58:AB:A2:A0:FD:16:41:51:9A:C7:5F:B4 Authority key identifier: C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 Certificate issuer: /CN=A91A445C/serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Certificate serial: 300C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft Manifest number: 3003 Signing time: Wed 20 Aug 2025 15:29:26 +0000 Manifest this update: Wed 20 Aug 2025 15:29:26 +0000 Manifest next update: Wed 27 Aug 2025 15:29:26 +0000 Files and hashes: 1: wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl (hash: HFp63Dh21XWbQTEZlKqvhsaTZ2316q4CZaWNfrtJrmI=) 2: 47A21580B6CC11EC98672826C4F9AE02.roa (hash: qjc1TRQ4aj3UWDrfE4OMe7D9VpKX+4bRXdtLVlC/TX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12300 (0x300c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A445C, serialNumber=C0F7D8D6D54163765FF6F3E2FB337FCFE1507219 Validity Not Before: Aug 20 15:29:26 2025 GMT Not After : Aug 27 15:29:26 2025 GMT Subject: CN=68a5e9d6-8e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:9f:13:56:a9:46:e5:b8:14:83:e9:04:39: c7:50:e1:83:b0:8e:05:0b:30:50:06:3a:b5:0b:75: 8c:ac:b5:c9:19:76:ec:b6:6a:4e:f3:e7:98:9a:94: fe:da:f7:bc:5f:05:06:4e:d8:66:31:36:2b:73:bc: 9e:a4:9d:33:f4:39:98:3e:8f:06:37:1d:55:39:80: 7b:37:a7:4b:2b:e5:2d:da:66:e8:7b:3c:82:02:db: 69:e5:55:96:b5:5d:bf:31:50:51:83:69:a3:39:f9: a5:27:a3:d5:d1:58:21:3f:9d:be:50:a8:d7:72:c3: 68:14:cd:b4:21:22:bf:35:5e:bb:26:05:20:91:95: f9:a4:85:40:d4:ee:0c:e6:e0:74:6c:a6:e2:bd:56: f8:12:4c:6a:46:f5:62:5a:c2:cb:7b:74:23:b6:6e: 5e:b5:b4:ed:20:0e:5c:a1:72:8e:0b:19:c2:e3:be: 9f:78:68:2b:32:6d:18:99:c0:9f:3b:c1:33:56:ef: 81:7e:a8:b3:e6:9c:cf:68:99:e1:bd:0d:63:b0:96: c5:73:7a:b7:fb:e0:c0:6e:1b:96:99:ea:16:4d:ba: ed:59:ad:d4:ef:92:7e:cb:10:a9:dd:ab:12:74:6a: 09:2a:af:5d:51:bf:59:c1:1f:0c:da:4c:0a:a8:46: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D7:9D:E0:EC:B5:23:35:58:AB:A2:A0:FD:16:41:51:9A:C7:5F:B4 X509v3 Authority Key Identifier: keyid:C0:F7:D8:D6:D5:41:63:76:5F:F6:F3:E2:FB:33:7F:CF:E1:50:72:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wPfY1tVBY3Zf9vPi-zN_z-FQchk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A445C/5A8AD0880B1811E3B637C6795911EA32/wPfY1tVBY3Zf9vPi-zN_z-FQchk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ac:b1:3b:53:1e:88:6c:b1:e4:b6:48:c3:b7:0f:f5:21:d8: fc:17:9e:00:53:20:6f:e0:42:55:02:96:78:f9:0b:4f:c1:92: bb:43:d5:a8:cf:2f:43:66:1e:07:57:27:6e:cd:83:2d:1b:7d: da:91:2c:b6:45:b6:b7:2f:e0:28:ba:37:b2:8d:5e:9b:7f:0a: 93:35:4a:f1:27:64:98:43:fc:d6:9c:47:70:13:b6:a8:f3:d1: 6b:69:23:d4:b1:6a:35:d9:ce:90:c7:47:45:e7:9f:0a:3f:44: d2:66:64:c0:44:7c:45:48:3f:79:ac:5d:d7:c0:f8:75:3d:24: ff:cf:8c:10:5e:a1:a1:65:e2:90:7a:70:98:0e:00:4d:c1:ec: f5:ba:ad:f2:e5:23:f6:a9:7c:c3:0a:d1:9c:21:73:0c:7b:18: 16:ea:93:5f:c7:fc:2d:39:25:49:30:ce:9f:77:66:e2:bd:27: 80:0e:b1:c3:c6:1f:f6:11:f9:b4:a7:ba:b5:53:7a:7a:f2:64: 08:5d:a4:10:38:8a:36:22:13:06:ad:bc:13:70:a0:8a:56:c6: d2:cd:26:53:d0:7a:bd:8a:a3:70:01:87:0f:73:6c:12:91:69: 8c:a6:4d:30:f9:52:2f:84:2a:33:c2:13:43:c5:2a:2a:07:03: c1:1b:97:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NUMxMTAvBgNVBAUTKEMwRjdEOEQ2RDU0MTYzNzY1RkY2RjNFMkZCMzM3RkNG RTE1MDcyMTkwHhcNMjUwODIwMTUyOTI2WhcNMjUwODI3MTUyOTI2WjAYMRYwFAYD VQQDEw02OGE1ZTlkNi04ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUKfE1apRuW4FIPpBDnHUOGDsI4FCzBQBjq1C3WMrLXJGXbstmpO8+eYmpT+ 2ve8XwUGTthmMTYrc7yepJ0z9DmYPo8GNx1VOYB7N6dLK+Ut2mboezyCAttp5VWW tV2/MVBRg2mjOfmlJ6PV0VghP52+UKjXcsNoFM20ISK/NV67JgUgkZX5pIVA1O4M 5uB0bKbivVb4EkxqRvViWsLLe3Qjtm5etbTtIA5coXKOCxnC476feGgrMm0YmcCf O8EzVu+Bfqiz5pzPaJnhvQ1jsJbFc3q3++DAbhuWmeoWTbrtWa3U75J+yxCp3asS dGoJKq9dUb9ZwR8M2kwKqEZ+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbXneDs tSM1WKuioP0WQVGax1+0MB8GA1UdIwQYMBaAFMD32NbVQWN2X/bz4vszf8/hUHIZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ1Qy81QThBRDA4ODBC MTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkzWmY5dlBpLXpOX3otRlFj aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dQZlkxdFZCWTNaZjl2UGktek5fei1GUWNoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ1Qy81QThBRDA4ODBCMTgxMUUzQjYzN0M2Nzk1OTExRUEzMi93UGZZMXRWQlkz WmY5dlBpLXpOX3otRlFjaGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcrLE7Ux6IbLHktkjDtw/1Idj8F54AUyBv4EJVApZ4+QtPwZK7Q9Wo zy9DZh4HVyduzYMtG33akSy2Rba3L+AoujeyjV6bfwqTNUrxJ2SYQ/zWnEdwE7ao 89FraSPUsWo12c6Qx0dF558KP0TSZmTARHxFSD95rF3XwPh1PST/z4wQXqGhZeKQ enCYDgBNwez1uq3y5SP2qXzDCtGcIXMMexgW6pNfx/wtOSVJMM6fd2bivSeADrHD xh/2Efm0p7q1U3p68mQIXaQQOIo2IhMGrbwTcKCKVsbSzSZT0Hq9iqNwAYcPc2wS kWmMpk0w+VIvhCozwhNDxSoqBwPBG5et -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:44 2025 by rpki-client