$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json) Hash identifier: 0JW9vHY167rQ1ix2O+PrqGZRpuXU2o3QbUxuTQCUttQ= Subject key identifier: 8D:0F:EC:61:73:A7:77:F9:EB:27:6D:F9:9D:AD:54:B4:E6:CF:DC:48 Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft Manifest number: 01AC Signing time: Sun 07 Sep 2025 03:33:23 +0000 Manifest this update: Sun 07 Sep 2025 03:33:22 +0000 Manifest next update: Sun 14 Sep 2025 03:33:22 +0000 Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: 8Kc5OGxNa0MNvpomfMhducbxwVpdk/ehe6T5K+0XteM=) 2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: 8ZblnQqgZaVcYhyWuN1Kamrq7TDNsWfBjoF0ALIbTZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Validity Not Before: Sep 7 03:33:22 2025 GMT Not After : Sep 14 03:33:22 2025 GMT Subject: CN=68bcfd02-c4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:24:47:f3:f3:98:97:3d:b0:c8:5c:b1:28:08: 66:05:81:27:2b:ff:14:a6:f6:a3:44:ce:6e:92:a8: 7d:c0:52:83:fe:82:89:fd:df:d8:f7:fc:84:41:ca: 44:3a:ee:85:b7:01:31:8f:d6:e5:ef:1f:3b:df:d0: 74:4e:27:c9:50:82:81:95:48:8e:8d:b2:71:1d:9e: ec:12:e5:80:f7:ef:a7:a8:b9:cd:a0:46:a8:19:fe: 90:87:ef:02:d1:ba:01:88:d1:29:02:6a:d4:1a:a5: 89:41:b2:a7:61:b6:02:56:49:91:4d:fb:da:bc:70: 99:ec:46:fb:ef:a0:86:ae:7f:34:64:17:36:21:4f: 91:43:c3:92:b2:fe:79:04:b3:63:76:c2:49:18:0b: 5a:57:17:de:4d:ed:87:b9:a1:38:14:34:df:11:d7: 9a:2c:29:e4:46:dd:56:54:13:b1:02:31:81:57:31: d6:25:0d:3b:34:da:12:57:41:4f:b0:af:dd:e8:6e: 86:10:b2:f4:fb:84:8c:a0:09:38:0b:0a:cb:7b:92: 88:c3:ce:99:7f:1c:48:3e:f5:e7:c3:51:e3:99:47: 75:19:47:84:d2:0e:29:0b:4c:44:1c:86:b1:d8:40: c9:7a:ac:bb:29:f5:a2:fa:68:c1:63:b9:a7:e5:73: 9b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0F:EC:61:73:A7:77:F9:EB:27:6D:F9:9D:AD:54:B4:E6:CF:DC:48 X509v3 Authority Key Identifier: keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:27:37:24:df:77:57:16:2d:73:da:fb:fc:1b:52:a0:63:b9: 1b:56:af:e9:34:2c:6e:17:7d:e9:e7:3f:ec:cb:9e:2b:03:33: c7:46:13:1c:69:20:d3:12:50:23:42:36:c0:a9:59:07:72:e3: 51:51:c8:6b:01:f0:61:5a:27:dc:1d:ae:05:9a:74:b3:2b:0d: f8:f3:13:be:db:b4:cb:4d:6f:24:ef:66:a3:7e:84:23:7b:77: 2f:1c:e8:80:9c:cf:1d:d8:58:3e:b8:72:39:51:15:17:0f:71: 31:f0:13:4e:45:6a:85:fb:10:2a:81:c1:f5:25:59:8a:bb:04: 07:1a:9b:27:bf:2f:24:02:a2:43:3a:40:b9:bd:59:a0:21:e3: 45:d2:23:4d:84:5e:40:e7:81:7d:72:eb:bc:83:3c:b0:00:05: 12:97:f5:0e:2e:93:4d:d4:7f:fa:aa:a4:86:25:a2:21:f7:38: f7:00:35:38:23:27:2e:83:76:e5:12:8c:2f:ea:6e:96:de:f3: 69:6b:0d:6e:a7:21:a2:e9:56:12:9e:14:86:f8:48:00:53:d2: b0:4b:03:33:22:94:b8:a9:b4:5e:6d:63:24:b2:a5:6f:cb:09: b9:c3:82:e1:06:7e:91:45:73:0e:5e:36:34:7f:47:cc:2f:61: b3:c6:89:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC MDMxOTI2NjIwHhcNMjUwOTA3MDMzMzIyWhcNMjUwOTE0MDMzMzIyWjAYMRYwFAYD VQQDEw02OGJjZmQwMi1jNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iRH8/OYlz2wyFyxKAhmBYEnK/8UpvajRM5ukqh9wFKD/oKJ/d/Y9/yEQcpE Ou6FtwExj9bl7x8739B0TifJUIKBlUiOjbJxHZ7sEuWA9++nqLnNoEaoGf6Qh+8C 0boBiNEpAmrUGqWJQbKnYbYCVkmRTfvavHCZ7Eb776CGrn80ZBc2IU+RQ8OSsv55 BLNjdsJJGAtaVxfeTe2HuaE4FDTfEdeaLCnkRt1WVBOxAjGBVzHWJQ07NNoSV0FP sK/d6G6GELL0+4SMoAk4CwrLe5KIw86ZfxxIPvXnw1HjmUd1GUeE0g4pC0xEHIax 2EDJeqy7KfWi+mjBY7mn5XObewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0P7GFz p3f56ydt+Z2tVLTmz9xIMB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuJzck33dXFi1z2vv8G1KgY7kbVq/pNCxuF33p5z/sy54rAzPHRhMc aSDTElAjQjbAqVkHcuNRUchrAfBhWifcHa4FmnSzKw348xO+27TLTW8k72ajfoQj e3cvHOiAnM8d2Fg+uHI5URUXD3Ex8BNORWqF+xAqgcH1JVmKuwQHGpsnvy8kAqJD OkC5vVmgIeNF0iNNhF5A54F9cuu8gzywAAUSl/UOLpNN1H/6qqSGJaIh9zj3ADU4 Iycug3blEowv6m6W3vNpaw1upyGi6VYSnhSG+EgAU9KwSwMzIpS4qbRebWMksqVv ywm5w4LhBn6RRXMOXjY0f0fML2Gzxokr -----END CERTIFICATE-----Generated at Mon Sep 8 14:32:21 2025 by rpki-client