$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: /vAunTEASAylgvP5mVKhZTj6mOCF302lI0tUiIwApHM= Subject key identifier: C0:76:DF:84:65:E6:86:CC:B7:0A:A8:25:56:05:14:47:06:5B:EF:48 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 01C4 Signing time: Tue 05 Aug 2025 03:34:29 +0000 Manifest this update: Tue 05 Aug 2025 03:34:29 +0000 Manifest next update: Tue 12 Aug 2025 03:34:29 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: aaPpEIybKiEY2NiRX+UkuDBBNeFeaxWHLtzglBG++Bk=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: QaySh+U2ImR7fI4OfAXAG1QKvLn5LnVgI5Wmw5xhFUc=) 3: AD88248C1FBE11EE97342E64C4F9AE02.roa (hash: GPafla64VUamN9CnaYJ2F+XELitJmP/fVhbH40kAovU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Aug 5 03:34:29 2025 GMT Not After : Aug 12 03:34:29 2025 GMT Subject: CN=68917bc5-c772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:b8:85:66:6d:eb:46:95:8c:fc:de:f4:ff: 87:eb:1a:cc:51:0b:18:11:b4:fe:17:72:b3:c1:f3: b3:39:62:44:b2:26:bb:7b:21:7c:b1:31:46:24:08: 6b:3c:59:1e:a9:e7:5d:0e:b4:fa:93:ad:c7:7a:53: 0d:1d:76:0e:87:6d:31:f5:6d:c6:b2:65:20:7d:9d: da:e5:84:08:30:95:54:99:de:77:0c:de:47:2e:fc: 7b:b3:6a:dc:71:91:c9:34:c2:0f:64:0c:cd:28:4c: 3e:a9:a2:ee:26:5b:9b:53:45:1f:57:c3:c0:86:01: d7:25:8f:a4:ba:28:b2:83:24:48:93:18:84:ce:01: fe:14:ee:24:40:bd:6b:54:24:c8:fb:67:ee:09:e6: a6:c3:e8:39:6c:65:23:59:ed:e0:db:b1:f4:ac:a8: 16:79:68:60:4e:ac:ae:80:bd:f6:55:fe:de:7f:f7: e0:84:b5:c3:61:37:de:71:08:2a:40:c5:ac:af:6c: 87:20:5b:be:9a:49:0b:6a:96:8d:91:16:be:fb:c3: d2:38:e6:57:98:d6:2f:5e:9b:f4:f1:4d:ae:37:7a: 65:31:42:96:67:57:86:1d:be:22:86:2c:fc:ba:48: 23:20:dd:6b:8d:5a:53:74:09:16:8b:73:5a:95:cd: 77:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:76:DF:84:65:E6:86:CC:B7:0A:A8:25:56:05:14:47:06:5B:EF:48 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:46:9a:44:c1:3c:7d:9e:6a:96:7f:e9:c0:a0:57:22:b5:99: 06:13:e4:2d:56:dc:ea:b0:7b:08:bd:3a:a8:3d:96:03:19:4b: ad:4e:e8:bb:82:82:77:ce:23:5f:a0:ba:57:78:f0:d4:49:96: 3b:ee:2c:e6:29:39:80:24:2c:4a:55:e7:a5:c2:cd:a7:de:a5: d9:86:1a:3d:fb:50:3b:a9:b0:c5:b1:4d:51:c8:8a:0b:8f:3a: c0:1a:c1:ed:58:e6:6f:c3:77:71:29:cf:4a:d9:05:41:70:20: e6:6e:03:ab:eb:1a:b1:a3:72:ee:fd:3e:fb:88:c5:65:c3:a4: 13:67:15:5f:43:7e:48:b4:76:4d:9f:73:b8:b9:8f:39:29:62: bb:98:c8:0f:f8:76:b1:aa:f1:09:34:7f:df:bc:0c:77:03:5b: 89:36:ec:4e:76:b2:d8:c9:58:4a:5e:f0:8e:50:1d:44:5a:3c: cf:9e:01:4d:4f:6e:d8:13:6e:af:4e:80:3f:ba:8a:59:1d:48: 65:63:62:68:e2:00:50:f5:4a:94:e4:54:8e:04:6c:de:b6:09: b6:15:cf:e6:77:44:f2:55:b5:4b:95:8d:4a:f5:ed:df:08:43: 3c:cb:99:0d:77:7b:fa:75:aa:06:d2:a0:70:b5:f1:b6:f3:e6: 93:dc:2a:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjUwODA1MDMzNDI5WhcNMjUwODEyMDMzNDI5WjAYMRYwFAYD VQQDEw02ODkxN2JjNS1jNzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApY64hWZt60aVjPze9P+H6xrMUQsYEbT+F3KzwfOzOWJEsia7eyF8sTFGJAhr PFkeqeddDrT6k63HelMNHXYOh20x9W3GsmUgfZ3a5YQIMJVUmd53DN5HLvx7s2rc cZHJNMIPZAzNKEw+qaLuJlubU0UfV8PAhgHXJY+kuiiygyRIkxiEzgH+FO4kQL1r VCTI+2fuCeamw+g5bGUjWe3g27H0rKgWeWhgTqyugL32Vf7ef/fghLXDYTfecQgq QMWsr2yHIFu+mkkLapaNkRa++8PSOOZXmNYvXpv08U2uN3plMUKWZ1eGHb4ihiz8 ukgjIN1rjVpTdAkWi3Nalc13hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMB234Rl 5obMtwqoJVYFFEcGW+9IMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkRppEwTx9nmqWf+nAoFcitZkGE+QtVtzqsHsIvTqoPZYDGUutTui7 goJ3ziNfoLpXePDUSZY77izmKTmAJCxKVeelws2n3qXZhho9+1A7qbDFsU1RyIoL jzrAGsHtWOZvw3dxKc9K2QVBcCDmbgOr6xqxo3Lu/T77iMVlw6QTZxVfQ35ItHZN n3O4uY85KWK7mMgP+HaxqvEJNH/fvAx3A1uJNuxOdrLYyVhKXvCOUB1EWjzPngFN T27YE26vToA/uopZHUhlY2Jo4gBQ9UqU5FSOBGzetgm2Fc/md0TyVbVLlY1K9e3f CEM8y5kNd3v6daoG0qBwtfG28+aT3CoU -----END CERTIFICATE-----Generated at Wed Aug 6 11:20:18 2025 by rpki-client