$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft File: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft (raw, json) Hash identifier: LImIP+8UmYgpXvUnZ/J/KxiueHDkr5yB31O6C/cHhCE= Subject key identifier: 04:D7:25:C0:89:9E:1F:52:10:FE:A0:18:1C:45:88:E4:05:07:7F:47 Authority key identifier: 5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 Certificate issuer: /CN=A91425C3/serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft Manifest number: 0C Signing time: Sat 09 Aug 2025 08:39:19 +0000 Manifest this update: Sat 09 Aug 2025 08:39:19 +0000 Manifest next update: Sat 16 Aug 2025 08:39:19 +0000 Files and hashes: 1: Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl (hash: ct3BS42sL3O771xv7TOf8dnz+lL78kWZ2PT/vkuLr0w=) 2: 44E524C6660611F0AC01FC4FC4F9AE02.roa (hash: bHIMWlurNqBIRWjjG4aQFJYKcLjVhjX4C0j7SqX+rCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=5AFBB9CBBC6546BD551D172630190AE81A9AF127 Validity Not Before: Aug 9 08:39:19 2025 GMT Not After : Aug 16 08:39:19 2025 GMT Subject: CN=68970937-0a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:02:a6:ab:08:3d:78:ec:ad:aa:7e:f3:d6: 47:21:97:46:42:e9:69:82:d6:72:5b:80:ed:a4:59: 39:af:40:fc:00:93:94:07:61:f6:75:e9:a3:36:fb: c6:6c:13:e4:a7:53:86:90:ed:7e:c0:e5:bd:89:48: 52:52:0e:03:d7:bd:00:a1:6b:40:61:f4:42:2b:ba: e7:2f:e9:cd:0c:ed:e8:e0:80:f6:df:26:40:5f:01: ad:e9:42:3c:f2:fb:90:bd:2c:75:c3:45:41:45:86: c9:f5:96:f9:59:79:fd:97:8e:a1:48:8d:b1:ad:59: af:04:c6:8a:eb:8d:1e:60:e3:33:7e:4b:e3:48:ad: bb:4f:0e:84:cc:00:6a:28:28:d2:72:6a:76:ba:b4: c9:6e:e3:3e:60:c8:d4:33:bd:76:b2:18:0f:4b:b3: f3:a4:71:3d:2e:a5:ba:fd:4a:13:ed:d4:fb:e0:89: 9e:b7:b2:d1:e7:f6:c9:f1:60:06:ff:b8:ae:80:dc: 9d:61:9e:78:f5:6e:28:e3:e3:5e:80:bb:dd:15:f1: 9f:dd:0a:65:54:14:02:b6:fe:4c:66:5d:f0:bc:26: 14:d9:4a:e7:f6:17:00:41:d4:8a:d0:22:b1:1a:00: c2:99:74:3e:63:72:af:63:8b:2d:b2:2a:f1:cc:aa: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D7:25:C0:89:9E:1F:52:10:FE:A0:18:1C:45:88:E4:05:07:7F:47 X509v3 Authority Key Identifier: keyid:5A:FB:B9:CB:BC:65:46:BD:55:1D:17:26:30:19:0A:E8:1A:9A:F1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2C9714EE660411F0A4C5192BC4F9AE02/Wvu5y7xlRr1VHRcmMBkK6Bqa8Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:38:b6:07:a6:2b:40:66:19:18:67:20:89:5e:20:8c:f6:66: 52:54:78:7a:ba:35:73:0d:ba:b3:94:6b:03:75:92:b6:fa:37: 5a:35:e0:4f:09:07:88:41:64:16:cd:41:18:48:53:63:5d:59: df:7b:fb:0e:7e:03:ad:55:ab:22:27:be:51:d9:c9:00:c6:6c: 20:7e:87:89:e8:3c:13:9e:21:d9:52:9a:b9:20:76:fe:d9:7f: dd:42:f6:38:02:b5:ad:ae:2b:6b:e0:34:c6:78:67:e4:32:99: be:57:12:ac:92:d9:bf:89:3c:ae:5e:28:67:2f:10:59:cd:37: 2f:22:69:67:dc:f3:14:48:be:c2:68:6c:6f:83:60:ec:f0:32: aa:42:74:8a:39:09:4d:98:63:13:a1:e8:12:b3:01:26:11:fe: 3e:71:d3:b9:56:ea:4d:0e:e5:0d:55:10:dc:6b:1f:72:49:9a: 21:fc:f9:1b:f0:00:9d:e4:01:e2:83:e4:5a:75:1d:5d:42:76: 24:94:74:b1:be:f2:f4:39:c7:3d:63:49:9c:f1:ba:cc:75:14: e7:86:c1:3c:8a:59:1d:24:c5:bd:c6:8a:55:d3:fd:bb:a0:02: ce:55:53:2b:25:0c:a9:0e:37:91:34:ee:2b:f4:bb:19:20:ef: 0d:f5:c9:74 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoNUFGQkI5Q0JCQzY1NDZCRDU1MUQxNzI2MzAxOTBBRTgx QTlBRjEyNzAeFw0yNTA4MDkwODM5MTlaFw0yNTA4MTYwODM5MTlaMBgxFjAUBgNV BAMTDTY4OTcwOTM3LTBhNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSiAKmqwg9eOytqn7z1kchl0ZC6WmC1nJbgO2kWTmvQPwAk5QHYfZ16aM2+8Zs E+SnU4aQ7X7A5b2JSFJSDgPXvQCha0Bh9EIruucv6c0M7ejggPbfJkBfAa3pQjzy +5C9LHXDRUFFhsn1lvlZef2XjqFIjbGtWa8ExorrjR5g4zN+S+NIrbtPDoTMAGoo KNJyana6tMlu4z5gyNQzvXayGA9Ls/OkcT0upbr9ShPt1PvgiZ63stHn9snxYAb/ uK6A3J1hnnj1bijj416Au90V8Z/dCmVUFAK2/kxmXfC8JhTZSuf2FwBB1IrQIrEa AMKZdD5jcq9jiy2yKvHMqrGtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBNclwIme H1IQ/qAYHEWI5AUHf0cwHwYDVR0jBBgwFoAUWvu5y7xlRr1VHRcmMBkK6Bqa8Scw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzJDOTcxNEVFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL1d2dTV5N3hsUnIxVkhSY21NQmtLNkJxYThT Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV3Z1NXk3eGxScjFWSFJjbU1Ca0s2QnFhOFNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NUMzLzJDOTcxNEVFNjYwNDExRjBBNEM1MTkyQkM0RjlBRTAyL1d2dTV5N3hsUnIx VkhSY21NQmtLNkJxYThTYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKs4tgemK0BmGRhnIIleIIz2ZlJUeHq6NXMNurOUawN1krb6N1o14E8J B4hBZBbNQRhIU2NdWd97+w5+A61VqyInvlHZyQDGbCB+h4noPBOeIdlSmrkgdv7Z f91C9jgCta2uK2vgNMZ4Z+Qymb5XEqyS2b+JPK5eKGcvEFnNNy8iaWfc8xRIvsJo bG+DYOzwMqpCdIo5CU2YYxOh6BKzASYR/j5x07lW6k0O5Q1VENxrH3JJmiH8+Rvw AJ3kAeKD5Fp1HV1CdiSUdLG+8vQ5xz1jSZzxusx1FOeGwTyKWR0kxb3GilXT/bug As5VUyslDKkON5E07iv0uxkg7w31yXQ= -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:33 2025 by rpki-client