$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft File: WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json) Hash identifier: sNP8BbvJuK9abJRsbuOu3gddqnJXSYUZHF1RRZ0AY8k= Subject key identifier: B6:1C:37:80:22:33:69:0A:07:33:1B:F8:73:FA:49:6B:70:1E:85:49 Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft Manifest number: 1B Signing time: Tue 05 Aug 2025 08:31:28 +0000 Manifest this update: Tue 05 Aug 2025 08:31:27 +0000 Manifest next update: Tue 12 Aug 2025 08:31:27 +0000 Files and hashes: 1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: ukuXWDNzfUmncOEumD7gNrlsrD6Hq+U2LHYrsh49gFQ=) 2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: Bm8WKhY+hNcg+fjUuluI2/RvbnR7gkU6ugwO04YyI/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Validity Not Before: Aug 5 08:31:27 2025 GMT Not After : Aug 12 08:31:27 2025 GMT Subject: CN=6891c160-f669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:21:f2:83:9f:7e:f2:16:01:fb:ab:f8:f2:0c: 74:91:e7:9e:e2:6d:6f:26:c8:bf:f9:1f:c3:4d:64: 14:b4:3a:ea:58:1c:f8:b8:89:6c:2d:1f:4b:64:c0: e1:02:03:60:50:b6:09:62:5c:7c:fc:7f:76:e4:5a: 00:5f:26:10:5a:0c:da:79:92:6a:93:ec:f3:3e:28: 86:7b:56:ec:94:44:1e:a2:8f:e9:a8:5b:cb:98:b8: 71:40:80:c0:de:66:74:a4:72:4f:f3:6e:43:b9:79: 65:d6:9e:58:cc:89:3c:f3:b3:a4:15:0b:c7:b1:6e: 72:6a:f4:77:b2:f3:89:47:f4:bd:73:d6:14:58:a4: 64:49:74:aa:dd:84:8a:3f:30:6c:bb:6c:2c:c2:f7: 30:dd:84:cb:04:fc:58:12:1b:28:3e:c7:64:46:17: be:47:6d:1d:6d:ea:64:4f:53:af:41:36:45:e7:03: 65:bc:b1:84:09:60:c7:46:4a:f0:e2:3a:b3:d5:25: 04:c1:ee:84:8e:b7:8a:be:e8:82:7c:65:11:1d:5a: b3:1c:c4:e1:e9:33:ce:c0:f0:2b:79:33:9e:d1:83: d9:4b:b2:4c:c7:46:cd:74:a2:9f:43:97:18:e0:37: d5:49:5e:6b:ce:c8:4b:bd:4f:6b:ad:d5:04:83:f0: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1C:37:80:22:33:69:0A:07:33:1B:F8:73:FA:49:6B:70:1E:85:49 X509v3 Authority Key Identifier: keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:89:15:2f:a4:ac:13:60:65:22:c7:81:b8:6d:89:fe:d7:25: 81:9e:9e:da:0b:37:91:b8:aa:ce:a7:2a:54:9f:9f:85:4c:89: 0d:35:23:5d:26:0b:70:4f:2b:14:a1:35:57:32:ff:5e:be:87: bd:70:96:ce:4c:06:1a:9f:5c:ff:6e:b5:1e:cd:92:80:b2:10: 6c:47:94:e8:d2:7d:2a:50:6c:3a:d7:41:b3:9c:ec:72:5b:d1: 2c:c4:91:99:24:f0:3c:53:3a:63:1b:9b:31:bb:54:36:14:00: d5:03:f2:81:b8:92:48:13:31:2c:a4:7a:df:00:c4:23:79:28: 8a:5b:f1:cb:be:1b:21:df:53:f8:c5:41:14:0f:96:e2:9a:b3: d4:b2:20:a1:5c:ed:86:b1:9c:f7:1b:33:ae:f4:11:95:3a:e4: e6:a2:c8:d6:31:12:95:a1:87:86:74:fa:cf:f6:87:d9:97:51: 07:79:92:9e:7c:8a:83:bd:13:d8:30:67:a0:e0:48:27:4b:ca: b6:71:3b:e5:eb:33:8d:89:5b:43:af:78:e7:32:ef:e2:3a:40: 8b:32:0b:3c:5b:97:d9:5c:b1:99:48:30:98:2e:cc:4a:cd:8b: 05:44:d8:73:cc:13:28:3b:94:12:e9:26:79:b8:24:66:d8:4c: 3e:35:8d:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTZDNzExMC8GA1UEBRMoNThBMjFFN0IyM0ZBRjIxQjg5RDM0MjcwRUI1NkY3NDQ5 QzIzOTk4NjAeFw0yNTA4MDUwODMxMjdaFw0yNTA4MTIwODMxMjdaMBgxFjAUBgNV BAMTDTY4OTFjMTYwLWY2NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJIfKDn37yFgH7q/jyDHSR557ibW8myL/5H8NNZBS0OupYHPi4iWwtH0tkwOEC A2BQtgliXHz8f3bkWgBfJhBaDNp5kmqT7PM+KIZ7VuyURB6ij+moW8uYuHFAgMDe ZnSkck/zbkO5eWXWnljMiTzzs6QVC8exbnJq9Hey84lH9L1z1hRYpGRJdKrdhIo/ MGy7bCzC9zDdhMsE/FgSGyg+x2RGF75HbR1t6mRPU69BNkXnA2W8sYQJYMdGSvDi OrPVJQTB7oSOt4q+6IJ8ZREdWrMcxOHpM87A8Ct5M57Rg9lLskzHRs10op9Dlxjg N9VJXmvOyEu9T2ut1QSD8NEXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUthw3gCIz aQoHMxv4c/pJa3AehUkwHwYDVR0jBBgwFoAUWKIeeyP68huJ00Jw61b3RJwjmYYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3Lzg1REVEQUQ4NTBB NTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1SjAwSnc2MWIzUkp3am1Z WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0tJZWV5UDY4aHVKMDBKdzYxYjNSSndqbVlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NkM3Lzg1REVEQUQ4NTBBNTExRjBCMkQxREU0RkM0RjlBRTAyL1dLSWVleVA2OGh1 SjAwSnc2MWIzUkp3am1ZWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmJFS+krBNgZSLHgbhtif7XJYGentoLN5G4qs6nKlSfn4VMiQ01I10m C3BPKxShNVcy/16+h71wls5MBhqfXP9utR7NkoCyEGxHlOjSfSpQbDrXQbOc7HJb 0SzEkZkk8DxTOmMbmzG7VDYUANUD8oG4kkgTMSyket8AxCN5KIpb8cu+GyHfU/jF QRQPluKas9SyIKFc7YaxnPcbM670EZU65OaiyNYxEpWhh4Z0+s/2h9mXUQd5kp58 ioO9E9gwZ6DgSCdLyrZxO+XrM42JW0OveOcy7+I6QIsyCzxbl9lcsZlIMJguzErN iwVE2HPMEyg7lBLpJnm4JGbYTD41jRE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:19 2025 by rpki-client