$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft File: WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft (raw, json) Hash identifier: OxY8kdjIJGKEvVR09FFxVjGIXlU+TBO5ub3umeHuhTY= Subject key identifier: 3B:08:2C:6C:14:A9:8D:45:44:DA:26:4F:6A:25:9F:A4:F7:04:6D:BB Authority key identifier: 5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D Certificate issuer: /CN=A91C5F25/serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft Manifest number: 05CE Signing time: Tue 16 Sep 2025 23:24:12 +0000 Manifest this update: Tue 16 Sep 2025 23:24:12 +0000 Manifest next update: Tue 23 Sep 2025 23:24:12 +0000 Files and hashes: 1: WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl (hash: ODdBxAoA44YBLCM8Kzo0eKQPcoyMbR7DKI1fLxjrClI=) 2: 92C1EB1E044111ECA6AF2D4BC4F9AE02.roa (hash: 1L+jLLrprvKBkFZBr/XRqOG/ctfBn+soIRnPIIukpBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5F25, serialNumber=5A68441FB9D1B790FC6C799E395101D92760967D Validity Not Before: Sep 16 23:24:12 2025 GMT Not After : Sep 23 23:24:12 2025 GMT Subject: CN=68c9f19c-7d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:d6:c0:fa:28:78:e8:38:78:a3:a8:90:4f: 94:fe:c9:e3:ed:3e:05:ea:9c:fc:82:f5:b6:26:74: bf:8e:5d:3e:76:15:7a:e9:3a:78:bc:8a:db:37:49: dc:48:97:8e:7f:f1:76:d3:44:30:4a:06:ff:7e:93: 30:c8:bc:5f:77:06:67:a4:3d:a4:62:83:52:06:14: e2:c9:8e:ba:db:84:e3:e2:b5:a9:c8:22:81:54:ef: 16:a9:99:ed:33:bd:ad:b1:21:dc:ec:ce:cd:9c:7a: f0:65:66:1a:8c:d3:bc:59:0e:2e:9d:22:d6:17:c2: 6b:69:54:34:f4:02:cc:69:bb:f4:be:ce:46:07:ea: 53:4c:81:82:1b:be:6a:3f:e3:9e:64:e6:01:01:99: 53:78:5f:c4:34:e3:ec:e2:98:d9:ce:17:47:fa:78: b8:38:a2:02:97:1b:a9:e5:1f:7e:48:31:f1:88:c0: 6e:f7:0e:e3:80:e5:f1:fe:a6:12:fd:39:73:d2:40: 64:50:19:7a:08:79:4b:11:cb:dd:78:5a:4a:01:94: 08:b8:42:5c:76:15:c3:89:ed:56:5a:a9:4f:79:f2: f6:8d:ea:6a:ea:d2:15:03:67:07:7e:de:f1:b5:ed: 01:3f:ca:b1:05:9a:8d:11:a5:94:c8:8a:76:7c:be: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:08:2C:6C:14:A9:8D:45:44:DA:26:4F:6A:25:9F:A4:F7:04:6D:BB X509v3 Authority Key Identifier: keyid:5A:68:44:1F:B9:D1:B7:90:FC:6C:79:9E:39:51:01:D9:27:60:96:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WmhEH7nRt5D8bHmeOVEB2Sdgln0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5F25/F8ED8B8AD35B11EB8B711E17C4F9AE02/WmhEH7nRt5D8bHmeOVEB2Sdgln0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b2:9e:a8:2f:6b:67:21:c7:0d:77:db:92:0d:95:29:54:88: 5b:f4:4b:d2:8f:fc:6c:3d:af:b4:b6:fb:e8:77:9a:b7:ee:1f: e5:ab:68:72:45:b6:aa:ff:31:e5:0e:45:32:d7:c8:61:96:37: f8:bf:8d:82:5e:93:bf:38:da:3a:83:a1:20:e2:62:70:17:45: b1:10:08:7e:0a:53:50:5a:23:cf:8a:a1:e0:92:95:5d:0f:62: b5:64:bd:bb:78:6a:d7:80:eb:cb:f5:d2:38:03:e1:27:97:c3: 65:96:a2:18:7e:48:1a:61:3e:3a:c1:be:54:f3:dc:93:32:44: b8:5b:da:f3:07:c9:d4:37:99:c4:6e:3a:12:e6:c1:22:24:70: 90:f8:29:7c:26:59:b5:f9:f5:c1:03:d6:2e:56:bf:00:83:64: e2:d3:79:2c:f0:bc:fc:0a:89:2e:28:c6:db:89:15:95:96:35: f2:b1:ba:e9:b0:09:ef:10:98:b1:3d:82:34:65:03:c7:91:40: c8:4e:b5:00:34:63:7f:04:13:4c:43:4d:8e:ab:0f:ae:5b:69: 1f:5a:3a:17:d4:38:4f:70:8e:ea:69:09:59:97:f7:59:54:24: 29:55:48:c1:29:76:96:79:4e:8e:84:13:86:b5:92:7d:47:29: 77:03:18:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVGMjUxMTAvBgNVBAUTKDVBNjg0NDFGQjlEMUI3OTBGQzZDNzk5RTM5NTEwMUQ5 Mjc2MDk2N0QwHhcNMjUwOTE2MjMyNDEyWhcNMjUwOTIzMjMyNDEyWjAYMRYwFAYD VQQDEw02OGM5ZjE5Yy03ZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8PWwPooeOg4eKOokE+U/snj7T4F6pz8gvW2JnS/jl0+dhV66Tp4vIrbN0nc SJeOf/F200QwSgb/fpMwyLxfdwZnpD2kYoNSBhTiyY6624Tj4rWpyCKBVO8WqZnt M72tsSHc7M7NnHrwZWYajNO8WQ4unSLWF8JraVQ09ALMabv0vs5GB+pTTIGCG75q P+OeZOYBAZlTeF/ENOPs4pjZzhdH+ni4OKIClxup5R9+SDHxiMBu9w7jgOXx/qYS /Tlz0kBkUBl6CHlLEcvdeFpKAZQIuEJcdhXDie1WWqlPefL2jepq6tIVA2cHft7x te0BP8qxBZqNEaWUyIp2fL6C3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsILGwU qY1FRNomT2oln6T3BG27MB8GA1UdIwQYMBaAFFpoRB+50beQ/Gx5njlRAdknYJZ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUYyNS9GOEVEOEI4QUQz NUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1RDhiSG1lT1ZFQjJTZGds bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dtaEVIN25SdDVEOGJIbWVPVkVCMlNkZ2xuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUYyNS9GOEVEOEI4QUQzNUIxMUVCOEI3MTFFMTdDNEY5QUUwMi9XbWhFSDduUnQ1 RDhiSG1lT1ZFQjJTZGdsbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbsp6oL2tnIccNd9uSDZUpVIhb9EvSj/xsPa+0tvvod5q37h/lq2hy Rbaq/zHlDkUy18hhljf4v42CXpO/ONo6g6Eg4mJwF0WxEAh+ClNQWiPPiqHgkpVd D2K1ZL27eGrXgOvL9dI4A+Enl8NllqIYfkgaYT46wb5U89yTMkS4W9rzB8nUN5nE bjoS5sEiJHCQ+Cl8Jlm1+fXBA9YuVr8Ag2Ti03ks8Lz8CokuKMbbiRWVljXysbrp sAnvEJixPYI0ZQPHkUDITrUANGN/BBNMQ02Oqw+uW2kfWjoX1DhPcI7qaQlZl/dZ VCQpVUjBKXaWeU6OhBOGtZJ9Ryl3Axib -----END CERTIFICATE-----Generated at Thu Sep 18 23:40:12 2025 by rpki-client