$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft File: WCfkvYcCd-3w6xBWOptBweS-fIE.mft (raw, json) Hash identifier: fAqe2U2e9KEl89xceu8oYLSBXV0OkjkJPyZnfBwi28I= Subject key identifier: 71:98:01:06:E1:C7:74:E9:88:D9:35:ED:83:21:4D:AE:D1:B6:05:2B Authority key identifier: 58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 Certificate issuer: /CN=A91A7D85/serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Certificate serial: 0B94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft Manifest number: 0B7D Signing time: Fri 08 Aug 2025 19:18:16 +0000 Manifest this update: Fri 08 Aug 2025 19:18:15 +0000 Manifest next update: Fri 15 Aug 2025 19:18:15 +0000 Files and hashes: 1: WCfkvYcCd-3w6xBWOptBweS-fIE.crl (hash: nYKsGKuyWETqrEFK55DNSqz+vxovoFt4IHdCST6VXXs=) 2: D8FCAB6C750611EFAE4AA240C4F9AE02.roa (hash: XzA6WsRC9hlvmM64zUMDU/N8Gy2E6OXsLGweclcpbig=) 3: 4CDACDE4623711EA981B4B0DC4F9AE02.roa (hash: 88hI432trJEvkk5tFX685ctlcqYgD99t/33EyCKQ5Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2964 (0xb94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7D85, serialNumber=5827E4BD870277EDF0EB10563A9B41C1E4BE7C81 Validity Not Before: Aug 8 19:18:15 2025 GMT Not After : Aug 15 19:18:15 2025 GMT Subject: CN=68964d78-5c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:a4:a6:bc:fb:bc:fc:33:1b:16:06:d9:74: f2:56:be:ce:7e:63:b2:5d:6c:f3:97:91:63:ce:10: 6c:99:d5:7e:85:73:e8:6e:d6:23:62:01:22:8f:15: ed:82:ad:c6:0f:b9:31:ff:d6:84:45:3b:78:36:82: 88:7c:a2:ae:39:f4:04:2b:52:ac:5d:60:77:c2:34: ec:09:30:1a:96:95:8d:88:08:de:8c:73:a6:c4:54: 1a:f3:86:19:66:a5:b6:35:ee:9f:98:fe:9e:b5:57: ff:ec:a1:2d:46:8e:21:aa:36:a0:83:d3:ca:01:8a: 64:25:88:93:70:29:91:ac:3f:ad:6e:c7:b6:04:ad: a3:45:f3:07:5c:35:82:ad:41:bf:4d:3c:04:0a:62: d7:74:78:4b:74:74:a3:b2:78:b5:23:5a:85:4a:50: 42:57:fe:07:2f:72:10:6b:19:a5:53:ff:e2:32:4a: 1f:72:02:37:32:16:07:e6:bc:40:ed:f4:53:f7:25: 1f:31:b6:31:dd:b0:b1:91:33:f6:24:58:6c:c7:a0: 6d:c3:6f:fa:03:19:6e:a3:f1:4b:9f:ca:f7:f1:ae: 80:a1:f9:67:08:be:44:9d:f0:6e:14:1f:b8:8d:97: 34:05:61:4a:7f:de:9b:15:15:b4:79:15:71:9c:5f: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:98:01:06:E1:C7:74:E9:88:D9:35:ED:83:21:4D:AE:D1:B6:05:2B X509v3 Authority Key Identifier: keyid:58:27:E4:BD:87:02:77:ED:F0:EB:10:56:3A:9B:41:C1:E4:BE:7C:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WCfkvYcCd-3w6xBWOptBweS-fIE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7D85/62CED48E33E211EAA4932884C4F9AE02/WCfkvYcCd-3w6xBWOptBweS-fIE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f2:85:0e:eb:48:fa:55:f8:b3:06:23:8d:86:43:0b:93:3b: bd:3a:f8:49:a4:7e:6a:83:d2:db:fa:fb:41:9a:6b:1d:e6:54: 24:80:28:a8:f3:b8:d3:3b:42:f3:45:9c:9f:73:b1:fe:6a:fa: 7d:7d:d7:15:6a:b3:2d:0b:b7:32:d8:64:eb:a7:ba:fb:bb:84: 69:b6:9f:10:0b:ed:68:c2:b8:18:b9:22:4b:6c:dd:c9:33:7d: 98:25:fe:3c:95:a1:5a:79:af:ba:4c:3e:21:e9:31:6d:de:0b: f8:c6:bb:3c:85:2c:55:21:8b:10:22:6d:4a:e5:83:3c:77:71: 3f:39:58:e8:7d:11:77:74:73:26:29:5f:8d:4a:ec:6a:23:54: 4f:6c:94:47:7d:63:48:04:70:cc:23:8f:e5:09:8d:05:9f:1f: ad:aa:65:8b:22:83:f6:e1:0d:7b:05:2c:e9:03:d4:f9:1f:d6: 80:3c:d8:8c:14:3b:dd:70:f2:03:b8:34:14:1d:24:b9:11:03: 07:f8:f7:58:14:e5:08:07:5d:1d:9a:08:c1:63:59:ba:00:f7: 74:97:8c:66:9d:75:ba:bd:3b:14:d7:25:1d:e2:10:e7:8f:35: 7f:f2:f1:62:80:81:44:e2:d0:da:c5:8a:df:c5:0c:fd:cc:ce: cd:e1:55:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdEODUxMTAvBgNVBAUTKDU4MjdFNEJEODcwMjc3RURGMEVCMTA1NjNBOUI0MUMx RTRCRTdDODEwHhcNMjUwODA4MTkxODE1WhcNMjUwODE1MTkxODE1WjAYMRYwFAYD VQQDEw02ODk2NGQ3OC01YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2T2kprz7vPwzGxYG2XTyVr7OfmOyXWzzl5FjzhBsmdV+hXPobtYjYgEijxXt gq3GD7kx/9aERTt4NoKIfKKuOfQEK1KsXWB3wjTsCTAalpWNiAjejHOmxFQa84YZ ZqW2Ne6fmP6etVf/7KEtRo4hqjagg9PKAYpkJYiTcCmRrD+tbse2BK2jRfMHXDWC rUG/TTwECmLXdHhLdHSjsni1I1qFSlBCV/4HL3IQaxmlU//iMkofcgI3MhYH5rxA 7fRT9yUfMbYx3bCxkTP2JFhsx6Btw2/6Axluo/FLn8r38a6AoflnCL5EnfBuFB+4 jZc0BWFKf96bFRW0eRVxnF+X1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGYAQbh x3TpiNk17YMhTa7RtgUrMB8GA1UdIwQYMBaAFFgn5L2HAnft8OsQVjqbQcHkvnyB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Q4NS82MkNFRDQ4RTMz RTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2QtM3c2eEJXT3B0QndlUy1m SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dDZmt2WWNDZC0zdzZ4QldPcHRCd2VTLWZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0Q4NS82MkNFRDQ4RTMzRTIxMUVBQTQ5MzI4ODRDNEY5QUUwMi9XQ2ZrdlljQ2Qt M3c2eEJXT3B0QndlUy1mSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP8oUO60j6VfizBiONhkMLkzu9OvhJpH5qg9Lb+vtBmmsd5lQkgCio 87jTO0LzRZyfc7H+avp9fdcVarMtC7cy2GTrp7r7u4Rptp8QC+1owrgYuSJLbN3J M32YJf48laFaea+6TD4h6TFt3gv4xrs8hSxVIYsQIm1K5YM8d3E/OVjofRF3dHMm KV+NSuxqI1RPbJRHfWNIBHDMI4/lCY0Fnx+tqmWLIoP24Q17BSzpA9T5H9aAPNiM FDvdcPIDuDQUHSS5EQMH+PdYFOUIB10dmgjBY1m6APd0l4xmnXW6vTsU1yUd4hDn jzV/8vFigIFE4tDaxYrfxQz9zM7N4VWF -----END CERTIFICATE-----Generated at Sun Aug 10 05:41:56 2025 by rpki-client