$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: LIPCVRGRNTbHID6e2ttJLwJY6JpCK9BHZQHH7M5gcXM= Subject key identifier: 4C:04:54:EE:3F:30:7E:EA:37:E5:EF:50:F0:22:08:BD:50:7E:DA:1D Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 0946 Signing time: Sat 06 Sep 2025 20:23:28 +0000 Manifest this update: Sat 06 Sep 2025 20:23:27 +0000 Manifest next update: Sat 13 Sep 2025 20:23:27 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: +kNHISfAGJ/UGpEuRWvclAUZUDv/oIHjEmjbtsrjZWU=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Sep 6 20:23:27 2025 GMT Not After : Sep 13 20:23:27 2025 GMT Subject: CN=68bc9840-36e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:c8:aa:bb:72:ee:01:3a:3e:c9:9f:10:e4: 35:8e:9d:d7:5e:99:c6:da:f8:6d:14:d6:e3:12:08: 3c:37:be:2a:f0:a4:4a:0b:18:e0:11:a9:2a:37:d3: ed:de:fc:57:7d:e5:90:c7:15:ed:38:e9:b5:29:aa: 77:23:1b:bc:29:cc:9a:3b:36:d3:a2:00:d0:b0:2b: d8:6c:7c:a8:87:46:29:5d:be:5d:b7:b6:4a:b5:29: a6:c2:95:e1:7c:24:d1:5d:d9:27:47:cf:cb:9b:57: 92:82:74:56:10:9e:23:7b:05:38:ec:eb:46:56:73: 49:67:fc:b0:34:47:87:a8:48:5b:c3:76:63:24:af: cc:02:3f:fe:71:41:58:d5:44:53:4a:ef:f6:b6:3d: ca:d8:59:9e:dd:66:60:56:0e:1d:bc:b9:6d:8d:5c: fe:90:d3:3e:4f:f3:39:b7:3a:7c:49:0c:32:68:88: 08:b0:b8:77:8f:32:d9:10:99:7a:24:bc:c1:a0:17: 8b:6e:c1:5b:fb:6c:32:9e:05:77:cc:40:c4:a9:3a: 9e:50:a1:5d:3e:b5:e8:bb:ef:19:04:ee:16:1f:8e: 9d:25:28:52:30:32:81:3f:79:93:5b:48:8d:50:e4: d5:86:44:b9:01:7f:d0:f8:99:0d:64:ee:c3:e4:57: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:04:54:EE:3F:30:7E:EA:37:E5:EF:50:F0:22:08:BD:50:7E:DA:1D X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:87:2e:9a:82:fe:94:5b:34:07:c5:8f:06:1a:1f:d3:e1:2f: 40:29:77:06:ae:89:f8:dd:6f:b2:28:8e:e0:ec:df:e3:0e:41: 9d:89:d3:7f:7a:cc:a5:04:fc:c5:c4:11:34:2d:c5:b3:27:7f: 97:f0:e9:3f:1d:73:ea:19:72:47:93:af:cb:de:67:99:da:16: cf:a0:8c:d7:38:70:5a:84:4e:d8:51:76:4f:d2:36:20:29:2e: f4:50:64:ca:bc:79:48:c1:07:5c:28:fb:73:2c:a3:87:a8:68: d1:9a:6a:99:6f:6d:ec:1c:88:ac:7b:fd:a9:7d:cf:79:84:a0: 5c:74:dd:ac:52:4f:df:87:f6:e0:4d:07:72:bb:a5:6a:55:3e: 8c:2c:1a:2f:ec:bb:7c:99:82:ef:27:9b:be:51:ec:70:34:15: 7f:4e:9f:f5:e5:c5:0d:fe:19:1d:a8:b3:eb:f0:fa:d4:2c:bd: a9:30:2a:8b:44:c9:4c:c6:7c:2b:6d:3a:97:5f:32:d1:3f:6c: 43:49:1d:c3:f4:7b:33:f7:45:2c:b7:26:5d:de:dd:03:52:8f: 04:21:10:0b:3f:81:f2:d6:49:45:7b:44:b8:20:6a:fa:19:ec: fb:82:29:3e:3b:12:71:b6:f1:85:4e:c6:83:f9:8b:6b:ca:89: 06:16:a9:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwOTA2MjAyMzI3WhcNMjUwOTEzMjAyMzI3WjAYMRYwFAYD VQQDEw02OGJjOTg0MC0zNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwnIqrty7gE6PsmfEOQ1jp3XXpnG2vhtFNbjEgg8N74q8KRKCxjgEakqN9Pt 3vxXfeWQxxXtOOm1Kap3Ixu8KcyaOzbTogDQsCvYbHyoh0YpXb5dt7ZKtSmmwpXh fCTRXdknR8/Lm1eSgnRWEJ4jewU47OtGVnNJZ/ywNEeHqEhbw3ZjJK/MAj/+cUFY 1URTSu/2tj3K2Fme3WZgVg4dvLltjVz+kNM+T/M5tzp8SQwyaIgIsLh3jzLZEJl6 JLzBoBeLbsFb+2wyngV3zEDEqTqeUKFdPrXou+8ZBO4WH46dJShSMDKBP3mTW0iN UOTVhkS5AX/Q+JkNZO7D5Fc3mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwEVO4/ MH7qN+XvUPAiCL1QftodMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7hy6agv6UWzQHxY8GGh/T4S9AKXcGron43W+yKI7g7N/jDkGdidN/ esylBPzFxBE0LcWzJ3+X8Ok/HXPqGXJHk6/L3meZ2hbPoIzXOHBahE7YUXZP0jYg KS70UGTKvHlIwQdcKPtzLKOHqGjRmmqZb23sHIise/2pfc95hKBcdN2sUk/fh/bg TQdyu6VqVT6MLBov7Lt8mYLvJ5u+UexwNBV/Tp/15cUN/hkdqLPr8PrULL2pMCqL RMlMxnwrbTqXXzLRP2xDSR3D9Hsz90UstyZd3t0DUo8EIRALP4Hy1klFe0S4IGr6 Gez7gik+OxJxtvGFTsaD+YtryokGFqmL -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:30 2025 by rpki-client