$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft File: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json) Hash identifier: XQRe7kEtlqrH0EB7EVpg1tAnBs6r03amgU4eDl3+024= Subject key identifier: F5:7D:94:74:92:AE:3F:EC:05:D9:87:2C:B3:6B:4D:98:E8:0F:00:39 Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD Certificate issuer: /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft Manifest number: 3B Signing time: Sun 07 Sep 2025 08:03:28 +0000 Manifest this update: Sun 07 Sep 2025 08:03:27 +0000 Manifest next update: Sun 14 Sep 2025 08:03:27 +0000 Files and hashes: 1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: pls/3SjxVPUcBGrKgVfRkPbzIfT9S2Mtjm/Da6RjpWw=) 2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Validity Not Before: Sep 7 08:03:27 2025 GMT Not After : Sep 14 08:03:27 2025 GMT Subject: CN=68bd3c4f-6fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:c7:8c:4c:ce:4c:f2:f2:d4:a1:17:d0:21: c2:de:c5:ef:9b:62:c4:b2:fe:66:28:0a:b1:f4:86: 88:bd:41:56:c7:a9:54:18:c2:a7:fb:03:c4:f8:8b: 7f:65:84:ca:62:e0:ff:ae:5e:18:2e:36:c2:06:0b: 56:bd:f5:b1:6a:1a:e8:5b:0f:65:18:a3:f1:5e:d1: 9e:e5:2b:89:7a:65:95:9c:77:2c:a7:a6:35:1d:9d: 48:b3:00:82:1f:ee:de:65:8d:cd:cd:c6:fc:44:78: ed:5d:16:63:40:51:89:ca:e1:39:7e:b4:39:e2:c6: 3d:d1:25:0c:d3:b4:92:af:4e:2f:34:7d:38:1e:27: 61:45:1e:49:d9:c6:ae:89:36:d7:0a:fe:fd:38:b0: e8:a0:c5:3c:a1:f9:16:63:9c:b7:95:b7:c2:35:57: ff:a1:18:80:d4:f6:0e:1f:32:5b:41:45:e6:e1:79: 03:10:03:d0:8c:ab:8a:e0:5e:d0:5b:79:b7:ad:20: 3d:8e:ac:69:ba:86:ec:91:c9:15:f2:f1:30:59:21: 66:c0:62:b6:e7:84:50:1d:82:14:df:02:71:c8:16: 1d:66:d3:e2:af:9c:52:9f:c2:91:8c:d9:29:ca:18: cb:21:26:f0:3b:fc:cb:f0:d5:42:da:56:e0:85:11: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7D:94:74:92:AE:3F:EC:05:D9:87:2C:B3:6B:4D:98:E8:0F:00:39 X509v3 Authority Key Identifier: keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8c:87:6f:06:45:cf:bd:71:f6:b3:f9:b1:70:bd:76:84:3b: b5:a1:61:f9:c5:56:ba:46:4f:54:8a:c4:b8:a3:e9:c6:a8:6e: 7c:c6:7e:ad:08:a9:ce:85:31:a5:a8:ca:7a:77:90:2a:cf:25: d5:ec:f0:ad:38:bc:06:89:7b:09:04:d6:4f:49:ed:34:ac:24: 3b:e9:d6:46:9f:61:34:45:6f:42:bf:e6:44:39:85:81:13:94: 75:ea:9d:12:18:06:5c:5d:e2:62:05:be:d8:88:a3:9b:08:1a: da:f9:d2:40:d0:dc:50:d9:65:94:c5:75:b0:ce:ac:30:7f:cb: de:86:bd:dc:4a:f5:fc:c1:6a:59:c4:5b:b4:53:e2:db:aa:77: ac:83:52:05:dd:27:f8:2b:00:d2:39:e1:8a:b1:87:6a:50:74: 81:1a:6c:02:14:6d:f2:32:a8:fe:00:df:7f:fa:15:8f:40:13: 03:6d:c7:b7:45:43:e2:8b:c8:73:ca:03:1e:d3:56:c2:bc:2c: a0:f2:35:cf:88:ce:6f:9e:56:43:32:6d:09:04:27:01:23:74: fb:a0:b0:4c:b9:c5:66:5f:d3:50:79:23:db:c2:53:6e:45:e0: 9d:8a:6f:cc:f6:6b:1e:26:b4:4c:2b:9a:18:22:7b:d5:f8:55: 95:b7:37:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODM5RTExMC8GA1UEBRMoQzEyMTA5RjU1QzU1ODczQTQxQzM3NzgzNzJGQjA5QTBC NzQwRDJDRDAeFw0yNTA5MDcwODAzMjdaFw0yNTA5MTQwODAzMjdaMBgxFjAUBgNV BAMTDTY4YmQzYzRmLTZmY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIEMeMTM5M8vLUoRfQIcLexe+bYsSy/mYoCrH0hoi9QVbHqVQYwqf7A8T4i39l hMpi4P+uXhguNsIGC1a99bFqGuhbD2UYo/Fe0Z7lK4l6ZZWcdyynpjUdnUizAIIf 7t5ljc3NxvxEeO1dFmNAUYnK4Tl+tDnixj3RJQzTtJKvTi80fTgeJ2FFHknZxq6J NtcK/v04sOigxTyh+RZjnLeVt8I1V/+hGIDU9g4fMltBRebheQMQA9CMq4rgXtBb ebetID2OrGm6huyRyRXy8TBZIWbAYrbnhFAdghTfAnHIFh1m0+KvnFKfwpGM2SnK GMshJvA7/Mvw1ULaVuCFEZUnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9X2UdJKu P+wF2Ycss2tNmOgPADkwHwYDVR0jBBgwFoAUwSEJ9VxVhzpBw3eDcvsJoLdA0s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MzlFLzM0NUQwNTg2MzM2 ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1NFSjlWeFZoenBCdzNlRGN2c0pvTGRBMHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MzlFLzM0NUQwNTg2MzM2ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpw QnczZURjdnNKb0xkQTBzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGeMh28GRc+9cfaz+bFwvXaEO7WhYfnFVrpGT1SKxLij6caobnzGfq0I qc6FMaWoynp3kCrPJdXs8K04vAaJewkE1k9J7TSsJDvp1kafYTRFb0K/5kQ5hYET lHXqnRIYBlxd4mIFvtiIo5sIGtr50kDQ3FDZZZTFdbDOrDB/y96GvdxK9fzBalnE W7RT4tuqd6yDUgXdJ/grANI54Yqxh2pQdIEabAIUbfIyqP4A33/6FY9AEwNtx7dF Q+KLyHPKAx7TVsK8LKDyNc+Izm+eVkMybQkEJwEjdPugsEy5xWZf01B5I9vCU25F 4J2Kb8z2ax4mtEwrmhgie9X4VZW3NyE= -----END CERTIFICATE-----Generated at Tue Sep 9 08:00:18 2025 by rpki-client