$ rpki-client -vvf rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft File: WCInA0DzKvjXCSJhC3CA_DQXes8.mft (raw, json) Hash identifier: VPYhcE9B+S9z6jWWowI/1bFIiMWL8mIEp0UWqcT1PbI= Subject key identifier: 80:9D:4D:94:95:C3:45:68:4E:FA:A7:6E:93:C0:88:98:6D:5B:B8:0B Authority key identifier: 58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF Certificate issuer: /CN=A91F742D/serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft Manifest number: 05AF Signing time: Tue 16 Sep 2025 23:30:06 +0000 Manifest this update: Tue 16 Sep 2025 23:30:05 +0000 Manifest next update: Tue 23 Sep 2025 23:30:05 +0000 Files and hashes: 1: WCInA0DzKvjXCSJhC3CA_DQXes8.crl (hash: riJN43X8qMQ2hKCKnQ1OorWirgncoMiVh+gCl+UEItM=) 2: 78423A52DE2911EB9B09A334C4F9AE02.roa (hash: eAEKnlDfmbmvzyOLqZ04+l0qIxLGX9JSF33CVH6hcIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 23:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F742D, serialNumber=5822270340F32AF8D70922610B7080FC34177ACF Validity Not Before: Sep 16 23:30:05 2025 GMT Not After : Sep 23 23:30:05 2025 GMT Subject: CN=68c9f2fd-f902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:ea:c0:6e:d5:e8:55:b8:10:68:e8:d0:d3: 43:36:e2:c7:4c:36:0e:f6:32:6f:ae:cd:4f:af:e5: a6:f6:b9:36:2b:43:0b:02:c0:e2:30:fd:57:f3:cb: c7:c2:61:93:11:81:e1:88:03:c5:11:fa:ba:9f:c5: a2:39:c3:ff:82:76:99:56:78:78:3e:61:94:d6:5d: 5d:07:11:7b:40:d4:a6:91:75:3f:21:78:b8:98:4d: 82:4b:b8:23:ef:2d:66:1a:d1:8f:60:4b:71:15:d7: dc:ba:8f:56:8b:78:c2:da:5c:6e:d7:aa:01:d2:90: 2c:52:54:01:f7:8f:b6:b6:d4:b4:40:25:fd:af:26: 4a:a1:a2:33:12:8e:43:de:d3:ae:62:bb:6a:6c:38: ad:85:2d:4a:43:8a:16:cc:e6:03:7e:37:03:eb:a3: aa:c4:9a:9a:a7:62:dc:c4:b9:49:16:d9:c7:2f:a3: 98:a5:e1:23:7e:6d:76:84:e6:39:77:b7:cd:1e:e1: 7f:fd:be:82:3e:45:9e:4b:55:db:54:26:9b:ff:84: fb:b4:c2:0a:30:a8:26:27:f8:55:f0:91:56:da:13: 68:d4:35:ba:91:c9:b4:fe:14:76:b9:5a:60:ed:ed: 5c:23:ca:17:fa:2c:49:83:cf:d1:b9:e1:b0:e6:fe: 5c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9D:4D:94:95:C3:45:68:4E:FA:A7:6E:93:C0:88:98:6D:5B:B8:0B X509v3 Authority Key Identifier: keyid:58:22:27:03:40:F3:2A:F8:D7:09:22:61:0B:70:80:FC:34:17:7A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCInA0DzKvjXCSJhC3CA_DQXes8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F742D/E2AF9B76DE2611EB9CFF2A2FC4F9AE02/WCInA0DzKvjXCSJhC3CA_DQXes8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:59:36:ed:0d:59:24:7f:b8:a9:a6:0f:3e:ea:7a:29:ef:ab: 64:e1:a8:42:e5:42:d5:ef:71:9a:6d:28:22:11:f7:90:fb:ad: b5:a9:f1:ce:eb:d7:04:c7:92:97:62:81:b8:a4:7c:ba:09:1a: 1e:4e:13:b9:2c:1d:e7:c2:64:c2:2f:34:ba:d8:8f:7c:99:8f: 48:19:14:aa:78:1a:4e:9f:a1:c5:6d:88:96:20:50:93:a9:c4: 60:4b:e3:88:78:33:e1:d7:da:a6:7a:c5:0e:d0:aa:8d:12:fc: 87:71:98:34:81:58:33:2a:29:1f:d8:1b:18:f5:4d:6f:61:b1: b7:bd:70:1b:f3:98:73:f7:43:c7:05:22:55:17:8e:99:f3:c5: f5:71:b4:80:c5:e9:86:1c:8b:1c:54:12:08:7d:8d:ac:fb:5b: 3f:b4:65:15:bb:a1:6e:13:cc:fd:50:fb:45:b6:4a:51:42:19: f5:c8:1d:5f:dc:77:5f:fb:7f:92:56:e8:bd:c3:75:9f:43:d7: a0:fb:f0:ee:d7:6c:9c:3b:22:62:40:02:70:3e:e5:4a:5a:51: 6e:8f:48:ca:87:da:88:fa:0f:46:1e:a2:15:96:95:fe:0a:51: aa:5b:9a:1a:22:53:64:bb:95:fd:f8:14:45:6a:91:32:2b:cc: 22:ea:6c:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc0MkQxMTAvBgNVBAUTKDU4MjIyNzAzNDBGMzJBRjhENzA5MjI2MTBCNzA4MEZD MzQxNzdBQ0YwHhcNMjUwOTE2MjMzMDA1WhcNMjUwOTIzMjMzMDA1WjAYMRYwFAYD VQQDEw02OGM5ZjJmZC1mOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7rqwG7V6FW4EGjo0NNDNuLHTDYO9jJvrs1Pr+Wm9rk2K0MLAsDiMP1X88vH wmGTEYHhiAPFEfq6n8WiOcP/gnaZVnh4PmGU1l1dBxF7QNSmkXU/IXi4mE2CS7gj 7y1mGtGPYEtxFdfcuo9Wi3jC2lxu16oB0pAsUlQB94+2ttS0QCX9ryZKoaIzEo5D 3tOuYrtqbDithS1KQ4oWzOYDfjcD66OqxJqap2LcxLlJFtnHL6OYpeEjfm12hOY5 d7fNHuF//b6CPkWeS1XbVCab/4T7tMIKMKgmJ/hV8JFW2hNo1DW6kcm0/hR2uVpg 7e1cI8oX+ixJg8/RueGw5v5cXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICdTZSV w0VoTvqnbpPAiJhtW7gLMB8GA1UdIwQYMBaAFFgiJwNA8yr41wkiYQtwgPw0F3rP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzQyRC9FMkFGOUI3NkRF MjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2alhDU0poQzNDQV9EUVhl czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDSW5BMER6S3ZqWENTSmhDM0NBX0RRWGVzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzQyRC9FMkFGOUI3NkRFMjYxMUVCOUNGRjJBMkZDNEY5QUUwMi9XQ0luQTBEekt2 alhDU0poQzNDQV9EUVhlczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNWTbtDVkkf7ippg8+6nop76tk4ahC5ULV73GabSgiEfeQ+621qfHO 69cEx5KXYoG4pHy6CRoeThO5LB3nwmTCLzS62I98mY9IGRSqeBpOn6HFbYiWIFCT qcRgS+OIeDPh19qmesUO0KqNEvyHcZg0gVgzKikf2BsY9U1vYbG3vXAb85hz90PH BSJVF46Z88X1cbSAxemGHIscVBIIfY2s+1s/tGUVu6FuE8z9UPtFtkpRQhn1yB1f 3Hdf+3+SVui9w3WfQ9eg+/Du12ycOyJiQAJwPuVKWlFuj0jKh9qI+g9GHqIVlpX+ ClGqW5oaIlNku5X9+BRFapEyK8wi6mxL -----END CERTIFICATE-----Generated at Thu Sep 18 21:37:28 2025 by rpki-client