$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft File: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json) Hash identifier: wFsQJW5G5Rgm7TwCqCGmaTux9tqDUdag+qAUM248bhw= Subject key identifier: AC:17:71:35:6D:77:D4:B0:46:75:39:0C:48:F6:7C:29:3A:53:EF:1A Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD Certificate issuer: /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft Manifest number: 2A Signing time: Tue 05 Aug 2025 08:23:46 +0000 Manifest this update: Tue 05 Aug 2025 08:23:46 +0000 Manifest next update: Tue 12 Aug 2025 08:23:46 +0000 Files and hashes: 1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: RxBPXT662usS3pBQGZYFaBWeVNQ80Dq3TrH963waDhA=) 2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Validity Not Before: Aug 5 08:23:46 2025 GMT Not After : Aug 12 08:23:46 2025 GMT Subject: CN=6891bf92-1c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:c3:e4:20:dd:f3:22:a8:71:63:5a:da:cc: 9f:f6:93:32:67:37:0f:11:58:d9:1c:80:33:89:2d: cd:f2:3a:6d:b0:ad:5b:c7:f8:f3:6b:1f:b4:db:ff: fe:ba:2f:63:5a:4a:b3:77:d4:c5:c3:ca:61:51:16: 98:b3:64:19:8b:e7:2d:49:4d:5e:7f:4d:74:46:16: f0:08:02:6e:61:12:4f:63:ce:33:60:48:b8:1e:75: 0e:2b:c0:d1:6c:68:ce:24:81:62:88:e8:92:af:6d: 0a:b1:04:c4:53:96:33:81:be:81:47:6b:25:49:5e: 53:32:01:fb:f9:c2:ea:35:6a:34:44:1d:ce:8a:40: 26:a0:c4:58:a7:fb:8f:42:41:9e:0b:ae:2d:38:78: e9:9e:0c:e5:d4:a5:18:43:ca:44:30:36:c7:b6:06: 3a:e2:b7:a0:c8:32:65:fd:f2:f8:ee:24:ce:c9:16: ca:37:b0:c5:4a:50:f5:d3:84:6f:9f:1a:12:d7:8f: 55:b8:7c:6b:86:74:f6:e9:f9:ef:5c:d1:b7:53:1c: e8:8b:4d:90:93:78:e5:ce:0b:30:02:fe:98:27:0e: b2:9a:ae:20:bc:08:47:5d:81:59:26:f5:fb:23:2b: 39:e5:e3:29:25:3f:dc:c0:3d:29:53:35:e4:2c:1f: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:71:35:6D:77:D4:B0:46:75:39:0C:48:F6:7C:29:3A:53:EF:1A X509v3 Authority Key Identifier: keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:55:94:2a:78:42:28:1e:b6:40:67:83:5c:38:79:dd:b1:3e: 47:dd:07:28:47:b6:24:d8:5c:1c:e7:65:90:00:8d:ba:7e:5a: 8e:8c:84:f4:2e:17:44:93:7d:28:5f:69:67:c4:7a:3c:d6:98: 68:fe:a7:33:49:0e:31:5e:58:e0:b4:79:79:74:6f:f6:94:6f: f6:94:84:42:31:c6:d8:07:c0:74:76:a9:f6:78:70:7a:6e:a8: 34:e3:35:4a:2d:10:f6:77:58:02:b3:52:b6:4a:ce:05:88:9d: 51:c2:3d:69:17:18:81:2c:5b:8f:dd:ea:5d:18:be:c0:ce:ed: 33:c8:d8:93:29:14:2b:bf:e1:45:da:35:57:3e:53:32:52:e0: 7a:7c:8a:6f:bc:93:69:87:a7:ae:76:61:98:99:95:da:6b:0c: 31:b8:bd:83:61:fe:ed:6c:6a:d9:3f:10:4f:00:ab:de:fa:f4: d8:de:f2:38:a9:cb:be:cf:1a:d2:39:2d:ef:65:2f:74:71:aa: 55:0d:9c:d0:31:06:9b:50:41:72:36:7d:81:6c:25:cd:3b:99: d8:d9:2e:4d:7c:78:b2:ed:54:39:a0:57:32:3b:fd:8f:40:ee: 07:08:68:fe:a3:65:be:49:18:97:ac:53:fe:88:5a:1f:67:f3: ea:d2:c2:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODM5RTExMC8GA1UEBRMoQzEyMTA5RjU1QzU1ODczQTQxQzM3NzgzNzJGQjA5QTBC NzQwRDJDRDAeFw0yNTA4MDUwODIzNDZaFw0yNTA4MTIwODIzNDZaMBgxFjAUBgNV BAMTDTY4OTFiZjkyLTFjMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlosPkIN3zIqhxY1razJ/2kzJnNw8RWNkcgDOJLc3yOm2wrVvH+PNrH7Tb//66 L2NaSrN31MXDymFRFpizZBmL5y1JTV5/TXRGFvAIAm5hEk9jzjNgSLgedQ4rwNFs aM4kgWKI6JKvbQqxBMRTljOBvoFHayVJXlMyAfv5wuo1ajREHc6KQCagxFin+49C QZ4Lri04eOmeDOXUpRhDykQwNse2Bjrit6DIMmX98vjuJM7JFso3sMVKUPXThG+f GhLXj1W4fGuGdPbp+e9c0bdTHOiLTZCTeOXOCzAC/pgnDrKariC8CEddgVkm9fsj Kznl4yklP9zAPSlTNeQsHzetAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrBdxNW13 1LBGdTkMSPZ8KTpT7xowHwYDVR0jBBgwFoAUwSEJ9VxVhzpBw3eDcvsJoLdA0s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MzlFLzM0NUQwNTg2MzM2 ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1NFSjlWeFZoenBCdzNlRGN2c0pvTGRBMHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MzlFLzM0NUQwNTg2MzM2ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpw QnczZURjdnNKb0xkQTBzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACVVlCp4QigetkBng1w4ed2xPkfdByhHtiTYXBznZZAAjbp+Wo6MhPQu F0STfShfaWfEejzWmGj+pzNJDjFeWOC0eXl0b/aUb/aUhEIxxtgHwHR2qfZ4cHpu qDTjNUotEPZ3WAKzUrZKzgWInVHCPWkXGIEsW4/d6l0YvsDO7TPI2JMpFCu/4UXa NVc+UzJS4Hp8im+8k2mHp652YZiZldprDDG4vYNh/u1satk/EE8Aq9769Nje8jip y77PGtI5Le9lL3RxqlUNnNAxBptQQXI2fYFsJc07mdjZLk18eLLtVDmgVzI7/Y9A 7gcIaP6jZb5JGJesU/6IWh9n8+rSwkA= -----END CERTIFICATE-----Generated at Wed Aug 6 09:42:30 2025 by rpki-client