$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json) Hash identifier: qdyk8PxKGqhQ+lSy8wSve0JZQBG+3IbQ1p1n4fiqlEg= Subject key identifier: A0:B3:7B:91:98:02:F0:57:B6:B5:46:AF:C3:23:55:93:C5:86:0E:FA Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft Manifest number: 01F8 Signing time: Tue 09 Sep 2025 02:35:15 +0000 Manifest this update: Tue 09 Sep 2025 02:35:15 +0000 Manifest next update: Tue 16 Sep 2025 02:35:15 +0000 Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: Fdlz+LsUZx45P3/y/T9JwVYneH0jSbbLYJ9Wr8yF6FA=) 2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: oOyEu7HdLHeRDgmI/hlcMUg6eiIlRVxLKBMf9ShkBXw=) 3: 58A53DF483EB11F083FC5148C4F9AE02.roa (hash: gHzhXWPrMjpB1xHZWRltAYhKlgAf5L30L7o2Q9t3Hyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Sep 9 02:35:15 2025 GMT Not After : Sep 16 02:35:15 2025 GMT Subject: CN=68bf9263-b50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:b4:58:85:fd:08:26:d1:bb:dd:ed:46:af: 1f:90:15:8a:44:69:64:00:c9:15:a9:06:eb:85:de: 16:0d:f2:76:96:41:07:33:4d:a8:f2:5b:b0:ff:fd: 8d:2d:91:0a:c8:1f:98:e1:20:f8:fd:5e:eb:93:ed: e6:6b:16:81:d4:58:9b:9d:52:95:a9:e8:7e:e2:cf: 6b:39:81:bd:c3:00:5d:eb:68:32:62:89:4a:33:33: 2d:b3:2f:97:f4:9c:9f:17:65:8e:d8:b6:26:d7:98: 88:b3:c6:c9:28:ed:da:3c:8c:13:d3:cf:59:69:f6: bf:a8:5c:76:f7:09:99:6f:d6:71:dc:78:23:57:79: a4:3a:36:ba:07:ef:2e:3b:8a:82:26:39:70:87:0f: 17:31:71:f8:37:9e:57:8e:93:61:b2:d0:48:38:59: 76:0c:96:51:ca:7b:61:2c:de:0e:64:09:9a:5c:8d: 53:f0:26:56:cd:36:fd:5a:8c:33:8e:5c:32:15:5f: 5c:8d:48:5e:e4:fc:41:9e:00:af:b0:21:93:3c:96: 49:cc:d4:fa:6b:af:e8:35:26:69:61:e7:37:61:27: 4c:eb:c2:16:06:32:43:8f:0d:84:05:87:4e:5f:1f: 9c:57:16:a9:98:ae:0f:25:65:55:dd:2e:25:7d:f1: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:7B:91:98:02:F0:57:B6:B5:46:AF:C3:23:55:93:C5:86:0E:FA X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:0f:98:a2:24:52:c1:f1:76:54:90:c0:eb:bc:79:b0:06:01: 8c:01:f2:4b:d3:09:40:5d:56:8f:94:a9:1f:12:39:f2:78:b6: e9:01:8d:81:29:86:1f:50:6d:02:16:91:09:1a:51:13:93:5f: e6:fa:2c:19:ff:1e:e2:de:cc:34:43:f3:93:48:68:2d:fb:e9: 8b:c9:b8:a3:93:82:bc:06:2f:94:3d:12:44:68:05:64:76:27: 8a:ee:9b:39:2b:c9:ee:5f:83:d7:50:fc:f6:ac:ca:a8:38:42: 82:0b:2e:a2:79:be:89:81:e8:f2:1d:3a:af:38:99:0e:f6:58: cf:6d:6e:a3:12:42:e0:32:ae:65:a7:d1:2d:7b:91:6d:3e:54: 86:8c:87:8b:8e:81:d1:60:30:4d:5f:ab:29:c8:30:a2:81:23: a3:0b:20:9b:c7:b8:27:c7:18:d4:bf:a7:dd:19:64:07:4e:65: d9:3a:1c:37:8c:9d:ea:b4:69:fe:d0:6b:66:99:9b:49:02:37: c1:9e:17:10:d0:a0:98:30:e7:49:26:c9:3f:50:1f:6a:81:46: a1:84:a1:22:41:1c:20:ce:b1:36:7f:ec:18:c3:ab:5e:06:dc: b9:bc:bc:36:c4:97:1e:c8:cb:0a:8b:8f:4f:d7:ea:b4:f4:51: 00:e2:8f:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUwOTA5MDIzNTE1WhcNMjUwOTE2MDIzNTE1WjAYMRYwFAYD VQQDEw02OGJmOTI2My1iNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnW0WIX9CCbRu93tRq8fkBWKRGlkAMkVqQbrhd4WDfJ2lkEHM02o8luw//2N LZEKyB+Y4SD4/V7rk+3maxaB1FibnVKVqeh+4s9rOYG9wwBd62gyYolKMzMtsy+X 9JyfF2WO2LYm15iIs8bJKO3aPIwT089Zafa/qFx29wmZb9Zx3HgjV3mkOja6B+8u O4qCJjlwhw8XMXH4N55XjpNhstBIOFl2DJZRynthLN4OZAmaXI1T8CZWzTb9Wowz jlwyFV9cjUhe5PxBngCvsCGTPJZJzNT6a6/oNSZpYec3YSdM68IWBjJDjw2EBYdO Xx+cVxapmK4PJWVV3S4lffG0qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCze5GY AvBXtrVGr8MjVZPFhg76MB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuD5iiJFLB8XZUkMDrvHmwBgGMAfJL0wlAXVaPlKkfEjnyeLbpAY2B KYYfUG0CFpEJGlETk1/m+iwZ/x7i3sw0Q/OTSGgt++mLybijk4K8Bi+UPRJEaAVk dieK7ps5K8nuX4PXUPz2rMqoOEKCCy6ieb6JgejyHTqvOJkO9ljPbW6jEkLgMq5l p9Ete5FtPlSGjIeLjoHRYDBNX6spyDCigSOjCyCbx7gnxxjUv6fdGWQHTmXZOhw3 jJ3qtGn+0GtmmZtJAjfBnhcQ0KCYMOdJJsk/UB9qgUahhKEiQRwgzrE2f+wYw6te Bty5vLw2xJceyMsKi49P1+q09FEA4o+E -----END CERTIFICATE-----Generated at Wed Sep 10 13:31:58 2025 by rpki-client