$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft File: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json) Hash identifier: IFhNhdgHLpUbUe+t+WZRnGmK8Nz0tlP7mXG5HRnX+Y8= Subject key identifier: DC:33:AA:D3:B1:F7:A7:B6:02:BE:13:76:8E:F1:DA:29:5F:82:29:1B Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Certificate serial: 0C3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft Manifest number: 0C1B Signing time: Sun 24 Aug 2025 18:46:36 +0000 Manifest this update: Sun 24 Aug 2025 18:46:35 +0000 Manifest next update: Sun 31 Aug 2025 18:46:35 +0000 Files and hashes: 1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: URO5rKAVTT1sTMMt/VihJQlSIId5cSRdtGyS9JF54pg=) 2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: h8cq7eEqWj3L5NzXqfHs5Ge3X0txZ1Fjij9Lq2hQUOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3132 (0xc3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7E85, serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Validity Not Before: Aug 24 18:46:35 2025 GMT Not After : Aug 31 18:46:35 2025 GMT Subject: CN=68ab5e0c-4f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:3b:0d:9a:85:a9:97:b2:1a:2e:b5:59:45: fe:e9:99:24:0d:8b:84:93:10:6a:1f:ea:9c:f8:d3: c8:76:72:61:e7:00:c0:91:ca:cb:be:a7:2e:5e:1c: e1:2a:01:9d:7e:6c:a0:fc:ef:8d:ee:15:ca:4b:a1: 51:ab:c4:d4:3f:2e:0b:34:60:a1:95:e8:02:ea:fc: 69:29:6b:ce:73:10:33:42:76:0b:5f:cf:ab:82:da: 5c:2d:fe:16:71:2c:48:96:bc:75:b6:98:31:22:10: 09:8e:22:d3:1c:5c:57:76:9c:99:1e:fc:08:7c:9d: e3:b6:34:f8:3d:72:6f:05:b5:1c:40:96:58:c2:b0: 4a:52:0b:1d:87:b5:c9:88:ee:ec:64:28:22:22:2d: 74:13:b0:fd:e0:df:bf:9f:e8:8c:cd:35:dd:82:d9: b4:f2:02:6c:84:0f:11:2d:76:26:7e:25:72:00:4d: 74:e1:a9:0f:b9:35:ee:3c:43:ae:db:c4:92:67:ed: 69:33:3b:f5:fb:09:b8:0a:22:95:be:d3:da:6a:7b: be:2e:19:c2:6b:af:74:ef:01:4f:ad:b5:23:66:05: f7:30:a3:f3:ab:36:c1:2e:b1:e9:ce:01:90:73:d5: 11:30:97:84:7f:12:53:68:3a:6e:61:81:8e:1b:d9: c2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:33:AA:D3:B1:F7:A7:B6:02:BE:13:76:8E:F1:DA:29:5F:82:29:1B X509v3 Authority Key Identifier: keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6b:e4:af:ea:a5:0c:87:b2:41:4b:86:38:a5:31:0d:14:af: ca:86:ad:ae:0f:44:bc:53:c7:af:df:c1:b9:98:65:8b:b0:94: 4e:e0:64:d2:cc:3c:e5:b2:84:c2:e7:ad:a5:08:47:5c:58:8a: 9e:86:d2:24:12:b2:52:6b:aa:ff:d2:83:da:31:06:26:22:e6: ab:45:c0:26:62:d5:69:21:f9:82:c0:9f:c8:25:73:be:7e:2a: 66:d2:b6:f8:00:09:ee:ad:ac:c5:8b:2e:5c:d6:6c:5b:cb:eb: f9:ce:0f:99:b7:a6:34:22:13:80:2d:35:b0:13:e8:01:c4:d3: a2:80:53:f6:50:d8:13:76:c1:26:9a:a5:9c:7a:3f:bd:52:ee: 27:03:50:65:fc:51:7a:8c:4e:df:4f:90:7f:9d:88:00:5e:65: 65:3f:05:8d:6b:cb:f4:8c:7e:ed:1c:b3:92:1f:13:ca:1c:3c: 1e:3b:12:c8:1d:74:9b:e5:a9:54:bf:9f:e0:97:85:34:26:a7: 4d:14:ba:1a:e6:a0:3b:10:e4:5f:8f:ea:99:f9:a8:dc:4e:ba: 47:88:7e:d3:ce:95:46:f5:38:7b:c0:03:c2:4c:2d:4f:64:24: 44:69:eb:3b:6d:d3:86:d8:44:a3:8c:d5:09:b2:8c:31:0a:a0: 11:65:74:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0 NTUzRUU4ODYwHhcNMjUwODI0MTg0NjM1WhcNMjUwODMxMTg0NjM1WjAYMRYwFAYD VQQDEw02OGFiNWUwYy00ZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb87DZqFqZeyGi61WUX+6ZkkDYuEkxBqH+qc+NPIdnJh5wDAkcrLvqcuXhzh KgGdfmyg/O+N7hXKS6FRq8TUPy4LNGChlegC6vxpKWvOcxAzQnYLX8+rgtpcLf4W cSxIlrx1tpgxIhAJjiLTHFxXdpyZHvwIfJ3jtjT4PXJvBbUcQJZYwrBKUgsdh7XJ iO7sZCgiIi10E7D94N+/n+iMzTXdgtm08gJshA8RLXYmfiVyAE104akPuTXuPEOu 28SSZ+1pMzv1+wm4CiKVvtPaanu+LhnCa6907wFPrbUjZgX3MKPzqzbBLrHpzgGQ c9URMJeEfxJTaDpuYYGOG9nCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwzqtOx 96e2Ar4Tdo7x2ilfgikbMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0U4NS9CMkUwRTVBRTFDMzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03 WjZZM21ySGdyMUZGVS02SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaa+Sv6qUMh7JBS4Y4pTENFK/Khq2uD0S8U8ev38G5mGWLsJRO4GTS zDzlsoTC562lCEdcWIqehtIkErJSa6r/0oPaMQYmIuarRcAmYtVpIfmCwJ/IJXO+ fipm0rb4AAnurazFiy5c1mxby+v5zg+Zt6Y0IhOALTWwE+gBxNOigFP2UNgTdsEm mqWcej+9Uu4nA1Bl/FF6jE7fT5B/nYgAXmVlPwWNa8v0jH7tHLOSHxPKHDweOxLI HXSb5alUv5/gl4U0JqdNFLoa5qA7EORfj+qZ+ajcTrpHiH7TzpVG9Th7wAPCTC1P ZCREaes7bdOG2ESjjNUJsowxCqARZXSP -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:11 2025 by rpki-client