$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: wqFBdJVLTVwB+hGB5Loa2Kew5F4jJ5mfmnywiCsgio8= Subject key identifier: C7:54:1E:D7:9A:DF:40:FE:64:DD:C0:F6:95:AE:F8:E4:0C:57:F6:45 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0C4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0C35 Signing time: Sat 06 Sep 2025 18:48:19 +0000 Manifest this update: Sat 06 Sep 2025 18:48:19 +0000 Manifest next update: Sat 13 Sep 2025 18:48:19 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: ue/IoMHv+iCfxJjf694DIH3gcUvX6tiUrfzPr39xJVA=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: 5Pl69Ojf2kmCxfLr0FSueU3iqe1LbesPtFydiCfx1IQ=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: 5dNjtUvyRJQ8rKds7M86B2djQAg4WheDaP9EfyZTla8=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: bqf4/Z70iNIgP7UdmtL9Kr8ESUyHQDpHnkrIZZGc+Nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3149 (0xc4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Sep 6 18:48:19 2025 GMT Not After : Sep 13 18:48:19 2025 GMT Subject: CN=68bc81f3-d8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:88:55:33:8e:41:57:dd:9c:8d:7a:bc:c2:07: 19:fb:66:93:54:0d:2a:d5:71:a1:33:f7:1d:c8:8f: 71:b9:25:09:1b:0c:c7:0c:1c:5b:83:f7:e9:7f:99: f5:1f:7e:14:38:8b:8a:6d:0a:8e:83:d7:33:52:c4: a0:9a:8b:29:fb:d6:f8:9e:5e:78:b3:08:58:e1:ef: 2c:81:38:a3:ee:63:24:b3:de:92:aa:be:83:e4:88: 19:f2:43:f7:b3:79:86:80:6c:02:47:c7:cd:63:cd: 24:d9:7b:55:64:88:7b:62:56:23:e8:ff:97:4d:6c: e4:af:91:fc:84:61:03:30:e4:96:9b:e1:4f:3c:86: e8:44:31:48:0f:11:c6:39:10:74:bb:db:f0:64:66: d7:ec:89:28:3c:5a:a1:43:ba:43:e9:59:f4:a0:0c: 2e:bc:1d:f2:4d:39:a5:96:3c:06:3a:39:42:80:11: ef:80:03:52:ea:cc:cb:64:da:d9:e8:e1:0c:fd:ed: bf:b2:bf:3d:be:c6:ca:78:8e:72:5b:50:49:66:bc: a3:c8:3a:a7:95:65:23:e9:52:59:eb:7a:cc:3a:10: 4c:ca:56:ad:f9:53:5a:df:06:00:96:ab:5d:d8:83: 01:8b:e2:51:56:55:ca:36:1c:ba:3c:aa:ae:9b:7f: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:54:1E:D7:9A:DF:40:FE:64:DD:C0:F6:95:AE:F8:E4:0C:57:F6:45 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b3:e5:08:d0:f5:ed:5c:8b:99:14:e5:f5:ef:6b:8b:43:85: 4d:24:c8:95:d8:d4:5d:df:8a:ca:d3:e3:fe:b8:f6:72:19:ff: af:7e:3c:4b:e2:62:38:25:35:99:a8:7c:9b:2e:e7:12:c2:d1: 39:81:1e:7f:78:3c:38:dc:b0:a3:d5:3a:45:d5:d5:23:1e:fc: 0c:15:c1:e2:00:51:2f:a5:7d:64:5f:a9:29:e1:f1:1f:66:c4: a0:9c:83:0b:f6:be:32:97:b1:24:e6:3d:a2:55:34:d1:40:d7: b4:36:e8:cc:e5:9f:a1:6e:1f:52:87:bd:c5:28:25:92:30:58: 4f:b8:a2:7a:86:e6:0c:47:b9:66:6e:26:26:da:a8:68:02:51: b5:09:e0:29:0b:0f:cc:9a:57:51:8d:29:82:d6:84:f1:58:a4: 91:b2:81:91:22:65:7b:56:19:30:49:73:66:33:ce:da:aa:7a: 67:8a:2c:cc:62:54:24:ac:ef:6a:3d:0b:66:f1:49:87:ce:81: 92:dc:f9:7f:f8:d8:e8:b0:fd:c8:ef:7b:fc:e6:a1:4b:27:02: 92:0c:2b:f8:41:11:9a:b2:3e:83:22:d5:f5:89:67:b6:8b:d8: 5b:c6:e2:d9:a9:72:f2:cf:df:0d:a9:84:ec:c5:d2:e4:0a:29: 84:92:29:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjUwOTA2MTg0ODE5WhcNMjUwOTEzMTg0ODE5WjAYMRYwFAYD VQQDEw02OGJjODFmMy1kOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YhVM45BV92cjXq8wgcZ+2aTVA0q1XGhM/cdyI9xuSUJGwzHDBxbg/fpf5n1 H34UOIuKbQqOg9czUsSgmosp+9b4nl54swhY4e8sgTij7mMks96Sqr6D5IgZ8kP3 s3mGgGwCR8fNY80k2XtVZIh7YlYj6P+XTWzkr5H8hGEDMOSWm+FPPIboRDFIDxHG ORB0u9vwZGbX7IkoPFqhQ7pD6Vn0oAwuvB3yTTmlljwGOjlCgBHvgANS6szLZNrZ 6OEM/e2/sr89vsbKeI5yW1BJZryjyDqnlWUj6VJZ63rMOhBMylat+VNa3wYAlqtd 2IMBi+JRVlXKNhy6PKqum38B5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdUHtea 30D+ZN3A9pWu+OQMV/ZFMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfs+UI0PXtXIuZFOX172uLQ4VNJMiV2NRd34rK0+P+uPZyGf+vfjxL 4mI4JTWZqHybLucSwtE5gR5/eDw43LCj1TpF1dUjHvwMFcHiAFEvpX1kX6kp4fEf ZsSgnIML9r4yl7Ek5j2iVTTRQNe0NujM5Z+hbh9Sh73FKCWSMFhPuKJ6huYMR7lm biYm2qhoAlG1CeApCw/MmldRjSmC1oTxWKSRsoGRImV7VhkwSXNmM87aqnpniizM YlQkrO9qPQtm8UmHzoGS3Pl/+NjosP3I73v85qFLJwKSDCv4QRGasj6DItX1iWe2 i9hbxuLZqXLyz98NqYTsxdLkCimEkik8 -----END CERTIFICATE-----Generated at Mon Sep 8 10:23:40 2025 by rpki-client