$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json) Hash identifier: 4dFm4P13XLJvTj3LZGKXHlm/3d1dbMkAimeYHyvWaLs= Subject key identifier: AC:AE:D2:B5:1B:10:1B:42:E2:4B:08:6E:5C:00:81:27:83:79:F7:B7 Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Certificate serial: 06E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft Manifest number: 2CC7 Signing time: Wed 20 Aug 2025 15:45:22 +0000 Manifest this update: Wed 20 Aug 2025 15:45:22 +0000 Manifest next update: Wed 27 Aug 2025 15:45:22 +0000 Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: /gebf0XE8zjmA4B+NCmgupAbrM4fnQMQPpoY1S5pHKk=) 2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: yv4yXxdZSOzS3VJoLoyhG//bnrtF6VAnh10WOZtqxtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 15:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Validity Not Before: Aug 20 15:45:22 2025 GMT Not After : Aug 27 15:45:22 2025 GMT Subject: CN=68a5ed92-592a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:6f:48:d8:96:02:ce:21:5a:e9:95:08:07: c4:ae:6a:e5:90:da:7e:48:18:d9:d0:de:f9:e2:58: 64:a2:c9:44:f6:12:a8:a4:fc:2d:dc:40:d4:df:8f: 3e:24:32:71:09:6e:a4:c6:c6:c4:fb:11:c5:4d:55: 2d:8d:bc:eb:fb:b1:57:4b:30:c5:5b:02:06:6f:60: 26:c9:39:e5:21:47:6e:b7:ae:f7:47:c7:03:89:dd: c3:c8:89:c3:5b:f5:f2:2f:cb:97:8d:36:6d:34:95: 5e:d2:56:a4:1e:c7:ec:83:ca:03:81:67:a0:ec:60: d8:b5:38:19:5a:1e:2d:31:c2:d7:f7:38:85:b2:ea: a3:28:54:e3:3d:b6:c1:1e:c4:a0:c9:ab:7f:0b:06: b7:bc:9b:f9:a4:68:df:60:0a:ea:b2:1f:52:58:47: 77:cf:9f:4a:63:0c:55:66:fa:7c:26:63:27:4b:70: 33:3e:e1:95:f4:20:2f:1d:17:05:af:ae:fc:c4:0c: 2d:c0:59:a5:10:b6:0d:ae:80:d5:ad:40:77:d3:75: 87:37:45:99:1a:ae:fc:d7:b4:ba:64:a8:ef:dd:d3: 49:3f:7c:13:18:2e:57:67:85:d1:d5:5c:79:f8:68: ae:8a:1e:8f:47:78:07:7b:6a:06:c0:eb:d2:8a:e9: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AE:D2:B5:1B:10:1B:42:E2:4B:08:6E:5C:00:81:27:83:79:F7:B7 X509v3 Authority Key Identifier: keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:66:d7:f7:d2:da:7f:f0:b7:c3:a7:ef:7e:58:a4:b1:00:d7: 03:12:af:cf:fb:60:e8:62:39:36:15:93:34:c6:31:47:ae:b1: 4f:97:c5:34:c2:01:52:6f:9b:df:bf:54:63:b2:9f:ee:b8:53: cf:12:ce:63:fb:b8:f4:9b:b4:bd:4d:57:5e:dc:fa:fa:b7:a6: 9d:64:20:1b:5f:c6:97:8c:8c:70:30:b2:83:95:97:5e:7a:06: 04:0d:30:82:b0:2f:1c:14:69:6f:42:e4:c1:3b:68:c8:fe:c1: a2:de:c9:76:da:a5:82:9f:5d:cf:43:2d:53:16:77:01:a4:7d: e9:0e:90:40:67:be:d1:a1:3e:23:87:38:10:8a:25:58:34:57: 2b:47:b4:0a:9e:cb:ca:95:b8:16:7c:64:7f:b9:f4:1e:7e:8f: 68:2d:02:69:92:53:f3:24:f7:ef:d2:93:af:41:64:05:e8:5f: e1:3e:86:68:af:e7:24:bf:e3:c3:7a:88:ce:b1:10:56:59:e8: 60:f2:2f:1b:3d:2d:8d:30:a2:2b:a8:b9:61:17:cd:fb:d2:30: 85:fb:32:b2:38:dc:2e:5c:22:ed:71:4c:17:eb:ea:8e:78:93: a0:33:77:b3:39:4d:2f:2f:ff:2e:cb:b7:35:2d:1b:d3:89:f9: b7:31:63:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy NTFCNDk2RDcwHhcNMjUwODIwMTU0NTIyWhcNMjUwODI3MTU0NTIyWjAYMRYwFAYD VQQDEw02OGE1ZWQ5Mi01OTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpdvSNiWAs4hWumVCAfErmrlkNp+SBjZ0N754lhkoslE9hKopPwt3EDU348+ JDJxCW6kxsbE+xHFTVUtjbzr+7FXSzDFWwIGb2AmyTnlIUdut673R8cDid3DyInD W/XyL8uXjTZtNJVe0lakHsfsg8oDgWeg7GDYtTgZWh4tMcLX9ziFsuqjKFTjPbbB HsSgyat/Cwa3vJv5pGjfYArqsh9SWEd3z59KYwxVZvp8JmMnS3AzPuGV9CAvHRcF r678xAwtwFmlELYNroDVrUB303WHN0WZGq7817S6ZKjv3dNJP3wTGC5XZ4XR1Vx5 +Giuih6PR3gHe2oGwOvSiun7ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyu0rUb EBtC4ksIblwAgSeDefe3MB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ YUl3bGlReDRRZk1sRzBsdGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsZtf30tp/8LfDp+9+WKSxANcDEq/P+2DoYjk2FZM0xjFHrrFPl8U0 wgFSb5vfv1Rjsp/uuFPPEs5j+7j0m7S9TVde3Pr6t6adZCAbX8aXjIxwMLKDlZde egYEDTCCsC8cFGlvQuTBO2jI/sGi3sl22qWCn13PQy1TFncBpH3pDpBAZ77RoT4j hzgQiiVYNFcrR7QKnsvKlbgWfGR/ufQefo9oLQJpklPzJPfv0pOvQWQF6F/hPoZo r+ckv+PDeojOsRBWWehg8i8bPS2NMKIrqLlhF8370jCF+zKyONwuXCLtcUwX6+qO eJOgM3ezOU0vL/8uy7c1LRvTifm3MWP9 -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:12 2025 by rpki-client