$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: ttbrDNasXsqRJB11S1MPkouNcTWkbfXgKqTvxhCrGYI= Subject key identifier: 54:79:EF:F7:5F:92:32:CE:4A:F2:20:6B:A6:3A:56:12:F1:AA:36:47 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 25 Signing time: Mon 25 Aug 2025 08:21:35 +0000 Manifest this update: Mon 25 Aug 2025 08:21:34 +0000 Manifest next update: Mon 01 Sep 2025 08:21:34 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: jKVfFLuYutQXtsI/P1acWNIMMGBAvm+FdcI6VZXbRtg=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 08:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Aug 25 08:21:34 2025 GMT Not After : Sep 1 08:21:34 2025 GMT Subject: CN=68ac1d0f-ee70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:14:44:08:63:99:88:37:66:68:e4:45:74: cf:fd:95:30:25:da:fe:51:08:f8:08:45:98:7f:b2: 9f:e9:ed:01:05:d0:ed:df:d7:89:95:87:51:35:aa: 2e:04:d2:e8:22:0f:91:2a:a5:34:0b:60:e3:7b:be: fc:91:1e:37:f7:42:66:75:00:13:c6:51:f0:4b:ae: 06:f2:fd:23:fb:59:1e:e3:30:36:45:a3:28:2a:93: aa:14:e2:d5:9a:53:ca:c6:30:d0:57:47:5f:4c:43: f7:66:b9:0e:98:b5:a9:98:93:e2:1c:79:7c:c8:12: 94:02:d2:e1:74:8e:b7:90:33:4f:81:a5:a0:8c:d7: 7f:fe:68:89:62:54:6a:fe:fa:49:54:19:8d:ea:f3: 20:13:19:46:d9:71:e6:42:f5:f1:b2:70:67:87:a9: 34:a3:bc:34:32:db:a5:bf:0f:ea:31:d3:8d:70:61: fe:4b:5d:8d:f6:60:c2:b9:ea:89:45:48:f3:4a:8d: 58:78:45:5a:5f:02:81:c0:34:c5:9a:73:a9:b4:8b: 0a:ad:3c:ad:84:17:a0:b2:d9:f8:5f:a9:e5:e2:bb: 92:17:fc:7d:40:b7:a3:72:ff:3e:92:22:f9:ea:d1: 05:45:f0:50:40:87:12:99:55:fa:32:72:78:a0:61: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:79:EF:F7:5F:92:32:CE:4A:F2:20:6B:A6:3A:56:12:F1:AA:36:47 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6b:c5:cf:fd:f9:c4:6e:fe:0b:c5:a3:7d:22:84:a9:97:58: 52:b8:e9:b6:2b:f7:68:a1:e7:ca:8e:30:25:ae:ea:4c:d9:a7: 92:c5:00:11:54:e0:9d:3f:bf:7c:d8:e1:ec:6b:e9:a9:43:ee: 8a:56:78:14:0c:da:4b:a2:e5:e8:91:6d:6e:09:9c:ec:fd:69: 25:42:57:2f:65:5a:43:00:fd:60:6c:78:f7:4b:c7:94:7a:9e: a7:b2:40:6d:c5:4e:c6:5d:43:b3:14:0d:eb:50:45:9f:c3:2e: 93:87:90:a7:aa:cc:b5:d3:d3:58:6f:0e:a7:cc:73:f7:43:f5: 37:97:b6:cb:8f:ea:ac:a1:be:d4:8d:d8:e8:7c:19:08:e9:f1: f4:5a:22:ba:b7:e9:9e:ce:13:c9:9b:81:9c:67:1d:90:26:de: 1c:0f:36:49:17:54:e5:0e:c5:57:30:d3:97:e0:63:78:fe:64: fe:23:c4:f7:c9:ee:2b:20:52:01:d3:5b:61:f6:73:dd:72:00: bd:13:d3:63:f8:8c:03:1f:b0:96:14:12:04:9f:11:99:bf:f5: 81:34:6f:c9:af:d2:61:36:9a:9e:da:df:e0:f4:8f:56:e2:ea: 76:b2:d0:f0:95:c7:66:4a:10:42:c7:35:82:c9:ff:5a:04:e7: 48:a8:45:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTA4MjUwODIxMzRaFw0yNTA5MDEwODIxMzRaMBgxFjAUBgNV BAMTDTY4YWMxZDBmLWVlNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAJBRECGOZiDdmaORFdM/9lTAl2v5RCPgIRZh/sp/p7QEF0O3f14mVh1E1qi4E 0ugiD5EqpTQLYON7vvyRHjf3QmZ1ABPGUfBLrgby/SP7WR7jMDZFoygqk6oU4tWa U8rGMNBXR19MQ/dmuQ6YtamYk+IceXzIEpQC0uF0jreQM0+BpaCM13/+aIliVGr+ +klUGY3q8yATGUbZceZC9fGycGeHqTSjvDQy26W/D+ox041wYf5LXY32YMK56olF SPNKjVh4RVpfAoHANMWac6m0iwqtPK2EF6Cy2fhfqeXiu5IX/H1At6Ny/z6SIvnq 0QVF8FBAhxKZVfoycnigYXi7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVHnv91+S Ms5K8iBrpjpWEvGqNkcwHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJVrxc/9+cRu/gvFo30ihKmXWFK46bYr92ih58qOMCWu6kzZp5LFABFU 4J0/v3zY4exr6alD7opWeBQM2kui5eiRbW4JnOz9aSVCVy9lWkMA/WBsePdLx5R6 nqeyQG3FTsZdQ7MUDetQRZ/DLpOHkKeqzLXT01hvDqfMc/dD9TeXtsuP6qyhvtSN 2Oh8GQjp8fRaIrq36Z7OE8mbgZxnHZAm3hwPNkkXVOUOxVcw05fgY3j+ZP4jxPfJ 7isgUgHTW2H2c91yAL0T02P4jAMfsJYUEgSfEZm/9YE0b8mv0mE2mp7a3+D0j1bi 6nay0PCVx2ZKEELHNYLJ/1oE50ioRYk= -----END CERTIFICATE-----Generated at Mon Aug 25 23:25:53 2025 by rpki-client