$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft File: wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft (raw, json) Hash identifier: zNWQFs1xdDoBBNhcFv0qPyVynlJz7rTeIRLAS8NYh9k= Subject key identifier: DB:0D:3E:F1:D3:3A:DD:74:AB:9E:C9:71:87:98:9B:4F:BD:E0:7E:4A Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED Certificate issuer: /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft Manifest number: 8E Signing time: Fri 05 Sep 2025 05:55:35 +0000 Manifest this update: Fri 05 Sep 2025 05:55:34 +0000 Manifest next update: Fri 12 Sep 2025 05:55:34 +0000 Files and hashes: 1: wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl (hash: aYnpcVkPpOrKjP+AT42CED8qkMWcTKMapclKPSaqqvg=) 2: 1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (hash: aY02E3irzGto2CDBM82Hws7+3Xp8gIBSyGbYsCwSjsk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED Validity Not Before: Sep 5 05:55:34 2025 GMT Not After : Sep 12 05:55:34 2025 GMT Subject: CN=68ba7b57-fae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:c1:59:b8:32:b2:4f:b1:34:28:27:c5:0d: 9d:89:3d:ab:b7:0a:37:ee:7b:22:f9:f0:2b:60:b3: de:ef:b2:78:f6:53:f2:d0:ce:69:e6:d0:ee:87:c3: aa:b9:d7:a3:22:23:bf:cd:42:00:8f:87:b5:49:26: 13:94:96:58:6a:9d:81:e6:c5:77:de:52:d1:0f:41: 63:42:14:dd:ff:51:28:58:2f:56:14:91:b7:b8:45: 84:84:98:52:85:24:de:2a:94:b8:5a:cf:f6:61:1f: 6c:0e:cd:ac:9d:b5:a8:c5:42:9b:c5:29:f1:48:ce: ea:7e:cf:5a:f6:e9:bc:9a:14:ac:09:4a:26:7a:0b: 19:73:5f:38:c4:88:bc:66:61:05:e7:6b:cb:75:82: 9d:d3:80:a4:52:69:ea:ae:d5:3d:c6:5d:79:0f:b4: d5:47:b8:33:3e:c6:5e:40:6a:65:6b:e4:95:c2:d4: c7:3e:89:5c:21:ef:0c:c4:ad:de:b4:e7:88:43:a4: f9:9d:e2:71:52:18:67:8a:ea:a2:da:a4:03:30:96: 21:57:9f:4f:23:33:10:a4:02:20:c0:03:ef:f2:e5: ef:b8:69:75:7d:6b:b6:74:e8:02:19:44:e4:3b:7f: 97:b4:5f:fb:42:b3:9a:f5:9f:dd:18:7b:ee:7b:73: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0D:3E:F1:D3:3A:DD:74:AB:9E:C9:71:87:98:9B:4F:BD:E0:7E:4A X509v3 Authority Key Identifier: keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dd:13:a9:13:cd:b1:ef:36:c6:82:31:10:51:25:73:38:3f: 85:c5:28:bb:c6:0c:28:86:17:00:3b:29:01:d1:a5:9b:4b:cb: 66:18:d9:fb:4a:be:89:91:cc:40:14:74:d3:81:b9:d9:d1:c5: a0:6d:51:2c:46:c9:7e:17:48:b0:f9:b2:64:14:90:2a:0c:93: 03:2a:53:81:6a:9f:e3:8b:94:33:61:f2:95:21:04:0b:b4:f9: 81:1b:83:1a:18:e0:4a:58:ff:3e:43:9c:e3:83:b8:c1:bc:d8: ea:58:ca:ba:93:2c:42:2b:20:fa:a7:36:3f:1f:a0:1f:96:be: 3d:34:09:2d:b3:47:50:fa:54:a5:30:4e:7d:2d:16:5c:7a:fd: 60:aa:6c:f9:72:6f:af:4b:4b:f5:03:18:31:6b:8c:1e:c5:6f: d8:23:7d:9d:fa:99:a1:c1:b6:b5:c9:4e:a9:9f:6a:b4:27:65: bd:6d:c8:7e:8a:44:a1:3b:45:6b:0d:ca:4c:bd:67:d2:51:1f: 70:f8:cd:c9:1a:d4:ab:0f:ed:da:f4:e4:94:1f:d8:5c:60:45: 7b:95:50:5b:c2:39:c0:0e:fb:4a:b7:da:a2:d6:ed:f0:4c:08: 09:b9:13:c6:c2:dc:44:21:14:cb:b2:25:ca:5a:ee:00:eb:77: d4:de:4a:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE2MTgxMTAvBgNVBAUTKEMxM0E4QUJENTcwNDNBQUZBNThGNTg1M0JFMkZBQkNB OUYyNkYwRUQwHhcNMjUwOTA1MDU1NTM0WhcNMjUwOTEyMDU1NTM0WjAYMRYwFAYD VQQDEw02OGJhN2I1Ny1mYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxHBWbgysk+xNCgnxQ2diT2rtwo37nsi+fArYLPe77J49lPy0M5p5tDuh8Oq udejIiO/zUIAj4e1SSYTlJZYap2B5sV33lLRD0FjQhTd/1EoWC9WFJG3uEWEhJhS hSTeKpS4Ws/2YR9sDs2snbWoxUKbxSnxSM7qfs9a9um8mhSsCUomegsZc184xIi8 ZmEF52vLdYKd04CkUmnqrtU9xl15D7TVR7gzPsZeQGpla+SVwtTHPolcIe8MxK3e tOeIQ6T5neJxUhhniuqi2qQDMJYhV59PIzMQpAIgwAPv8uXvuGl1fWu2dOgCGUTk O3+XtF/7QrOa9Z/dGHvue3M4fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsNPvHT Ot10q57JcYeYm0+94H5KMB8GA1UdIwQYMBaAFME6ir1XBDqvpY9YU74vq8qfJvDt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTYxOC9FNkY2NkREMkJF QzMxMUVGQUZEQzFEMjlDNEY5QUUwMi93VHFLdlZjRU9xLWxqMWhUdmktcnlwOG04 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dUcUt2VmNFT3EtbGoxaFR2aS1yeXA4bThPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTYxOC9FNkY2NkREMkJFQzMxMUVGQUZEQzFEMjlDNEY5QUUwMi93VHFLdlZjRU9x LWxqMWhUdmktcnlwOG04TzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/3ROpE82x7zbGgjEQUSVzOD+FxSi7xgwohhcAOykB0aWbS8tmGNn7 Sr6JkcxAFHTTgbnZ0cWgbVEsRsl+F0iw+bJkFJAqDJMDKlOBap/ji5QzYfKVIQQL tPmBG4MaGOBKWP8+Q5zjg7jBvNjqWMq6kyxCKyD6pzY/H6Aflr49NAkts0dQ+lSl ME59LRZcev1gqmz5cm+vS0v1Axgxa4wexW/YI32d+pmhwba1yU6pn2q0J2W9bch+ ikShO0VrDcpMvWfSUR9w+M3JGtSrD+3a9OSUH9hcYEV7lVBbwjnADvtKt9qi1u3w TAgJuRPGwtxEIRTLsiXKWu4A63fU3kqG -----END CERTIFICATE-----Generated at Sat Sep 6 21:41:22 2025 by rpki-client