$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft File: WU96C6m9HBOGhHzoljlj_k5xY2w.mft (raw, json) Hash identifier: P8CZ87ggC+FLLs/U401QUXxBaV5l6SxMO/3JFY6agxo= Subject key identifier: D4:6B:22:1C:A1:5E:13:9F:A3:A0:9A:AC:27:BC:1F:3A:67:3F:4C:4D Authority key identifier: 59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C Certificate issuer: /CN=A91FFEDB/serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Certificate serial: 0222 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft Manifest number: 021D Signing time: Fri 05 Sep 2025 02:23:17 +0000 Manifest this update: Fri 05 Sep 2025 02:23:17 +0000 Manifest next update: Fri 12 Sep 2025 02:23:17 +0000 Files and hashes: 1: WU96C6m9HBOGhHzoljlj_k5xY2w.crl (hash: 1/UzJlEBc2BtjC5xW68usbmiSEF/Q2e0uFsNBSEtgwY=) 2: 3CE5C23A550611ED96C8F350C4F9AE02.roa (hash: tljXT8G1BNgl+pD66knbjuh1b8kVzEqRHqexSVNncjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=594F7A0BA9BD1C1386847CE8963963FE4E71636C Validity Not Before: Sep 5 02:23:17 2025 GMT Not After : Sep 12 02:23:17 2025 GMT Subject: CN=68ba4995-e559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:9f:55:66:61:07:71:c1:bc:36:e2:b8:d5: 03:33:13:5c:f8:86:8d:56:45:fc:fd:9f:e8:03:43: d1:3d:0a:5e:e0:64:ef:0e:6a:d0:25:01:f7:48:ad: 4d:bd:3a:fd:09:fe:f3:dc:1a:be:b7:c5:43:65:8b: 17:64:e2:ea:4e:94:7b:5c:d7:da:f3:ac:5b:36:76: 7b:31:62:6d:b4:a3:3d:70:42:37:6b:85:09:59:b4: 2b:b5:5b:78:f0:8c:8b:c8:bc:37:c4:0b:f6:d3:d1: 7b:98:55:b3:91:0b:a4:4a:4c:42:32:a1:4a:a6:b0: 62:ff:a6:a5:38:22:59:59:ac:89:dd:3b:9c:0a:70: c7:2b:6f:4d:6e:fd:0a:cf:ad:2d:aa:16:5c:87:a0: ee:c5:f3:0d:99:08:28:34:ea:47:4d:6f:94:53:81: 29:6d:bf:a6:54:ca:0e:82:52:c1:b3:ec:a2:77:cf: 97:a8:a3:43:da:4e:55:26:11:9b:45:15:91:51:56: 11:a8:a4:3a:59:d1:88:da:1b:d6:d3:6c:72:b0:d6: f5:d4:56:2f:e2:36:8c:bb:79:77:ae:0a:89:1e:72: e0:28:37:87:da:b9:ba:6d:cb:92:79:db:bb:06:0c: 16:6a:ce:1c:56:15:06:93:c7:48:ba:32:50:09:89: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6B:22:1C:A1:5E:13:9F:A3:A0:9A:AC:27:BC:1F:3A:67:3F:4C:4D X509v3 Authority Key Identifier: keyid:59:4F:7A:0B:A9:BD:1C:13:86:84:7C:E8:96:39:63:FE:4E:71:63:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WU96C6m9HBOGhHzoljlj_k5xY2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/34D5D7E6550211ED964B7A4AC4F9AE02/WU96C6m9HBOGhHzoljlj_k5xY2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:32:8a:35:e0:19:7d:89:72:a4:e1:96:f0:be:61:51:ef:13: 7c:15:e8:3b:3f:93:3a:04:ce:d0:f1:b1:07:49:1a:f3:45:10: 91:0c:40:fa:07:bc:19:62:94:02:cd:a7:12:ab:0c:a8:9b:e6: 75:b0:27:d8:7f:93:7e:09:76:9c:b2:60:2e:41:ff:d5:27:2e: bb:10:56:a7:96:18:2e:f4:b4:c2:b6:48:33:c7:e0:ff:05:d9: 1d:d3:bb:08:bc:87:ce:60:10:35:0f:3d:9b:2b:16:48:d7:9a: 7e:be:23:2a:a0:71:95:4b:a4:5a:7e:d8:9f:e6:19:88:01:78: 99:e4:9c:c5:2b:8f:37:17:80:49:21:51:e2:4e:92:2e:eb:aa: dc:76:5f:31:1c:c2:3d:32:76:10:48:b2:30:ac:02:21:7f:00: d4:ad:3b:4d:a2:7b:aa:d0:9b:6a:7f:4d:90:90:80:a3:7f:ec: 28:2c:3b:bc:8a:88:7b:ca:b2:42:f8:ae:a6:87:9c:6f:ae:b1: e0:75:cd:1a:a1:4d:f4:ec:e0:77:c7:93:a7:58:ea:9c:d5:79: c3:2e:6f:c3:0c:fa:fb:38:b2:11:78:4e:bf:ef:aa:59:96:52: 8e:a5:e8:66:dd:3d:2c:0a:f9:6d:5e:c3:d0:86:e0:99:09:0e: 9f:b0:3f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDU5NEY3QTBCQTlCRDFDMTM4Njg0N0NFODk2Mzk2M0ZF NEU3MTYzNkMwHhcNMjUwOTA1MDIyMzE3WhcNMjUwOTEyMDIyMzE3WjAYMRYwFAYD VQQDEw02OGJhNDk5NS1lNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf6fVWZhB3HBvDbiuNUDMxNc+IaNVkX8/Z/oA0PRPQpe4GTvDmrQJQH3SK1N vTr9Cf7z3Bq+t8VDZYsXZOLqTpR7XNfa86xbNnZ7MWJttKM9cEI3a4UJWbQrtVt4 8IyLyLw3xAv209F7mFWzkQukSkxCMqFKprBi/6alOCJZWayJ3TucCnDHK29Nbv0K z60tqhZch6DuxfMNmQgoNOpHTW+UU4Epbb+mVMoOglLBs+yid8+XqKND2k5VJhGb RRWRUVYRqKQ6WdGI2hvW02xysNb11FYv4jaMu3l3rgqJHnLgKDeH2rm6bcuSedu7 BgwWas4cVhUGk8dIujJQCYnWtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNRrIhyh XhOfo6CarCe8HzpnP0xNMB8GA1UdIwQYMBaAFFlPegupvRwThoR86JY5Y/5OcWNs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zNEQ1RDdFNjU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhCT0doSHpvbGpsal9rNXhZ MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dVOTZDNm05SEJPR2hIem9samxqX2s1eFkydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zNEQ1RDdFNjU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9XVTk2QzZtOUhC T0doSHpvbGpsal9rNXhZMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4Moo14Bl9iXKk4ZbwvmFR7xN8Feg7P5M6BM7Q8bEHSRrzRRCRDED6 B7wZYpQCzacSqwyom+Z1sCfYf5N+CXacsmAuQf/VJy67EFanlhgu9LTCtkgzx+D/ Bdkd07sIvIfOYBA1Dz2bKxZI15p+viMqoHGVS6Raftif5hmIAXiZ5JzFK483F4BJ IVHiTpIu66rcdl8xHMI9MnYQSLIwrAIhfwDUrTtNonuq0Jtqf02QkICjf+woLDu8 ioh7yrJC+K6mh5xvrrHgdc0aoU307OB3x5OnWOqc1XnDLm/DDPr7OLIReE6/76pZ llKOpehm3T0sCvltXsPQhuCZCQ6fsD/w -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:11 2025 by rpki-client