$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: 3RWQR1WlbMe8YTR7PsIf42wbrXCn8bNqZ56pH4FCtio= Subject key identifier: 44:28:FD:0D:51:96:4C:5E:D0:51:A3:CB:9D:57:2D:1E:52:A3:C7:3D Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 09C1 Signing time: Sun 10 Aug 2025 20:01:58 +0000 Manifest this update: Sun 10 Aug 2025 20:01:57 +0000 Manifest next update: Sun 17 Aug 2025 20:01:57 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: hrnJIic1ky7mRzujTUHd37i/MaprvH6gnXxHxKrpcns=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Aug 10 20:01:57 2025 GMT Not After : Aug 17 20:01:57 2025 GMT Subject: CN=6898fab6-b7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:cb:73:b8:d9:cd:b6:a3:56:68:01:96:10: d4:67:1b:99:51:6d:10:ce:84:ba:f9:d7:81:71:0a: c6:60:c0:f3:d4:16:0d:93:d4:56:a7:45:0c:2c:36: 7d:9a:3b:93:19:c3:54:00:e0:0a:65:59:47:e1:21: e2:5a:03:f5:9a:b8:99:1d:4d:6b:72:b2:59:d5:b3: 99:ac:54:1c:c4:66:75:4a:bf:c8:57:aa:11:19:b0: ce:7f:2b:33:60:fd:aa:e5:85:91:3a:ca:bc:e0:d3: 1c:4f:d8:8d:71:29:06:19:26:1a:d7:95:f2:9d:b6: 26:12:19:48:2f:60:e1:f9:f5:56:31:f4:4f:0e:a1: 32:f0:02:ab:f0:84:16:c2:1d:49:f6:5d:28:f7:6e: d6:39:3b:1e:ff:72:ae:f5:63:84:15:7a:69:d7:a2: e5:db:c7:23:07:1a:4e:e4:3f:ed:c6:20:1f:89:86: 00:ac:51:d8:d6:75:88:ff:67:0a:78:75:dc:af:7a: 9e:9c:d3:32:3d:b4:d8:09:54:ac:84:7e:e9:14:54: 47:44:b4:f9:58:84:4f:6d:ff:2a:4d:e9:b2:4a:e3: 7e:13:c5:33:40:14:9d:d5:7a:2f:e1:c6:47:6a:10: cb:dc:cd:42:06:04:1c:b4:5b:9d:55:0d:f0:36:d9: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:28:FD:0D:51:96:4C:5E:D0:51:A3:CB:9D:57:2D:1E:52:A3:C7:3D X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:84:1f:15:93:b8:e4:3d:5f:7d:4c:e5:6b:76:94:25:0b:20: 05:c4:49:19:1d:42:2d:1f:ac:0d:db:c9:04:9a:6b:e0:9f:4a: a0:e8:35:70:66:e5:e7:b6:70:2b:3c:84:71:96:b1:84:07:04: 4d:e7:e0:eb:11:8d:8c:09:c4:20:db:81:8a:c8:0e:4e:9c:0a: b3:a0:1b:dc:09:22:71:23:23:3e:2e:e3:6b:fe:1b:dd:50:3d: 57:f5:6e:6c:84:02:87:ef:9a:70:77:79:eb:58:58:f9:e8:58: f9:d6:75:6a:60:98:90:99:c4:a0:c1:d5:2f:75:5a:24:e9:e0: 56:45:4e:4a:df:97:2a:07:e7:a9:bb:a6:7a:a1:c9:14:5d:bc: d5:5b:74:dd:1a:6e:7b:10:fd:c4:83:be:21:51:d4:2c:1f:11: da:ef:8e:d4:e8:60:fb:61:10:9f:10:ba:3f:90:78:f2:d0:59: 88:fd:fa:85:45:ac:ee:35:8e:29:0f:54:f4:37:c6:00:d1:96: 5f:90:13:05:b7:86:91:5f:07:d8:33:cd:bc:7c:f7:8c:82:a3: db:08:1c:28:0c:c0:f5:32:91:74:4a:31:61:36:9e:f7:b2:a7: f9:67:a7:df:5d:5c:32:82:a8:88:c5:26:9d:4c:d3:3a:54:4b: e6:78:cb:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUwODEwMjAwMTU3WhcNMjUwODE3MjAwMTU3WjAYMRYwFAYD VQQDEw02ODk4ZmFiNi1iN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ajLc7jZzbajVmgBlhDUZxuZUW0QzoS6+deBcQrGYMDz1BYNk9RWp0UMLDZ9 mjuTGcNUAOAKZVlH4SHiWgP1mriZHU1rcrJZ1bOZrFQcxGZ1Sr/IV6oRGbDOfysz YP2q5YWROsq84NMcT9iNcSkGGSYa15XynbYmEhlIL2Dh+fVWMfRPDqEy8AKr8IQW wh1J9l0o927WOTse/3Ku9WOEFXpp16Ll28cjBxpO5D/txiAfiYYArFHY1nWI/2cK eHXcr3qenNMyPbTYCVSshH7pFFRHRLT5WIRPbf8qTemySuN+E8UzQBSd1Xov4cZH ahDL3M1CBgQctFudVQ3wNtnHZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQo/Q1R lkxe0FGjy51XLR5So8c9MB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWhB8Vk7jkPV99TOVrdpQlCyAFxEkZHUItH6wN28kEmmvgn0qg6DVw ZuXntnArPIRxlrGEBwRN5+DrEY2MCcQg24GKyA5OnAqzoBvcCSJxIyM+LuNr/hvd UD1X9W5shAKH75pwd3nrWFj56Fj51nVqYJiQmcSgwdUvdVok6eBWRU5K35cqB+ep u6Z6ockUXbzVW3TdGm57EP3Eg74hUdQsHxHa747U6GD7YRCfELo/kHjy0FmI/fqF RazuNY4pD1T0N8YA0ZZfkBMFt4aRXwfYM828fPeMgqPbCBwoDMD1MpF0SjFhNp73 sqf5Z6ffXVwygqiIxSadTNM6VEvmeMuy -----END CERTIFICATE-----Generated at Mon Aug 11 08:55:28 2025 by rpki-client