$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: xmophynPtYGtzmO7oeEacTd3Peg7MT2vi+KhazcTqTM= Subject key identifier: 66:41:D8:9F:BE:D1:85:E0:91:F5:93:B1:B3:67:55:04:D7:B6:0C:95 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 1B Signing time: Tue 05 Aug 2025 08:36:07 +0000 Manifest this update: Tue 05 Aug 2025 08:36:07 +0000 Manifest next update: Tue 12 Aug 2025 08:36:07 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: 1LPT/uqfzJ/cQ7vbZwp3Iz2CDKXQWc+CCP6e/i9ojLk=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: pc9zaEWdjAnZt0C64GBckmKPloXU3OegJwZo/Bz4Q+U=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Aug 5 08:36:07 2025 GMT Not After : Aug 12 08:36:07 2025 GMT Subject: CN=6891c277-875c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:09:61:c4:51:d4:54:42:14:48:b9:52:f1: 68:37:43:67:bd:05:cb:46:5d:54:3a:ba:cd:ac:47: fd:77:ec:42:91:0e:01:68:43:92:1d:d3:79:ca:21: 07:04:a7:32:0d:b8:6b:72:67:94:4d:10:0a:31:62: 92:13:10:27:c3:a7:87:6a:b2:6b:e3:77:64:3f:6e: 6e:be:0c:45:76:b3:4c:f7:5c:c2:5b:37:91:f3:26: 72:26:9d:8d:d5:3a:00:e7:66:36:37:a6:b7:bd:7a: e9:c2:11:de:be:e4:2e:31:4d:4d:75:34:27:ad:3f: e9:53:d1:b8:e6:21:ac:49:1f:2b:bc:24:da:c8:5a: 57:74:9d:58:d1:5c:ef:8b:da:41:cd:1e:5d:66:dc: 9f:02:0a:d1:b1:ad:9f:34:51:43:dc:5e:ae:6d:12: dd:48:ae:b8:e6:aa:e4:91:7e:d0:1e:bd:0b:e1:d1: 37:b1:3e:55:19:1c:a4:7e:fb:4b:e8:78:2f:e8:77: 47:00:e1:fd:17:e9:05:ab:a8:f2:52:3d:bc:25:4e: 0c:39:5e:2c:45:d2:9e:59:49:5c:19:84:21:03:fc: 81:33:68:a2:8c:87:bb:94:f0:b1:2d:99:0c:66:7a: ae:86:42:62:8a:ef:6e:af:00:12:bd:73:0c:96:16: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:D8:9F:BE:D1:85:E0:91:F5:93:B1:B3:67:55:04:D7:B6:0C:95 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:12:57:b1:6f:91:4b:58:da:e1:09:2c:c9:d8:08:63:49:6a: 82:00:a3:c0:c4:da:4b:dd:f2:4b:02:c4:d4:98:f7:7e:82:96: 3a:42:fb:37:2a:d8:5b:2e:e5:39:cf:78:a3:a4:2b:28:07:c9: 9a:b5:6c:15:e1:d3:32:65:2a:3e:91:cb:52:91:5b:a4:f8:ad: 40:3d:06:0c:9d:66:4b:5c:43:82:f8:1b:ab:48:b6:b1:a7:f8: 28:9d:60:f0:3a:18:09:8e:b7:7b:d8:5e:af:82:2f:36:46:13: 10:b0:42:2d:89:2c:3b:2d:2b:0b:01:8f:9f:0e:6e:89:4a:4c: 01:54:ee:4e:0d:cd:39:65:a3:62:bc:d3:37:83:22:3e:bf:24: 6f:44:6e:a3:d6:c3:49:8b:04:ae:76:57:15:2a:02:f2:ad:92: 17:e5:55:af:a7:f4:0f:7f:6b:69:64:64:6e:56:47:7d:53:4a: 66:2f:4c:7c:eb:45:37:5e:5f:42:37:ab:33:21:45:1a:3a:0a: 06:6a:03:dc:81:dd:ff:a5:6a:9c:58:96:d9:fe:06:ea:2d:65: b7:64:79:df:35:b7:dd:18:0d:11:ef:77:38:e9:3b:1f:62:b8: f9:cf:10:85:69:a7:10:1e:4f:45:00:fc:8c:6e:7b:aa:dd:fb: 21:14:11:9e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTA4MDUwODM2MDdaFw0yNTA4MTIwODM2MDdaMBgxFjAUBgNV BAMTDTY4OTFjMjc3LTg3NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZNwlhxFHUVEIUSLlS8Wg3Q2e9BctGXVQ6us2sR/137EKRDgFoQ5Id03nKIQcE pzINuGtyZ5RNEAoxYpITECfDp4dqsmvjd2Q/bm6+DEV2s0z3XMJbN5HzJnImnY3V OgDnZjY3pre9eunCEd6+5C4xTU11NCetP+lT0bjmIaxJHyu8JNrIWld0nVjRXO+L 2kHNHl1m3J8CCtGxrZ80UUPcXq5tEt1IrrjmquSRftAevQvh0TexPlUZHKR++0vo eC/od0cA4f0X6QWrqPJSPbwlTgw5XixF0p5ZSVwZhCED/IEzaKKMh7uU8LEtmQxm eq6GQmKK726vABK9cwyWFk5tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZkHYn77R heCR9ZOxs2dVBNe2DJUwHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 QTg2L0FDNzA0QzZDNEIxNTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDEx UVM1UUpsQVZ6RVdhTFlwYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHwSV7FvkUtY2uEJLMnYCGNJaoIAo8DE2kvd8ksCxNSY936CljpC+zcq 2Fsu5TnPeKOkKygHyZq1bBXh0zJlKj6Ry1KRW6T4rUA9BgydZktcQ4L4G6tItrGn +CidYPA6GAmOt3vYXq+CLzZGExCwQi2JLDstKwsBj58ObolKTAFU7k4NzTllo2K8 0zeDIj6/JG9EbqPWw0mLBK52VxUqAvKtkhflVa+n9A9/a2lkZG5WR31TSmYvTHzr RTdeX0I3qzMhRRo6CgZqA9yB3f+lapxYltn+BuotZbdked81t90YDRHvdzjpOx9i uPnPEIVppxAeT0UA/Ixue6rd+yEUEZ4= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:01 2025 by rpki-client