$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: 5EI2sd41RSpmOEilCUXPd3y5bZj3A2RaLXGJzvWhct0= Subject key identifier: 4D:22:DF:46:E9:01:B5:19:2B:7D:0F:39:EF:DD:DB:F4:1E:64:C9:1E Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 038D Signing time: Sun 03 Aug 2025 01:26:14 +0000 Manifest this update: Sun 03 Aug 2025 01:26:14 +0000 Manifest next update: Sun 10 Aug 2025 01:26:14 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: Sv9hfFi3NGbeMFzYNu+14U2G3V9IQC9fIDdn/uqeVhU=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hWe9YX01SNRY++LLyLpvdVJBXAjQTAsl1yrwC2O21mY=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: KMxfzJx9x2vyWODkAAY5t+P6RpTmdDTdWRiAuSB0SyQ=) 4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: EXWdfyEJT1f9crTXGSpRWWqKkko/3WFflLjeDGOj6XU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Aug 3 01:26:14 2025 GMT Not After : Aug 10 01:26:14 2025 GMT Subject: CN=688ebab6-1b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:68:0a:be:9b:1e:66:2f:a3:b6:71:fb:5e: dd:ff:22:5b:f7:5f:f2:99:3a:f9:15:3f:57:48:9d: ce:be:c6:38:00:87:14:d9:8a:d6:6b:fa:06:c5:f8: 1f:e4:c6:1e:b0:bc:a4:4e:21:0a:6d:63:2c:24:4c: 19:e4:6f:f1:22:81:cd:3f:06:e3:62:79:cc:6d:0e: 5b:99:90:ce:3c:b0:e2:cd:71:99:ed:bc:47:08:e6: 5e:87:a7:47:bd:0f:7b:49:df:90:e2:fe:66:b5:d3: 2a:af:39:ac:6c:4c:11:eb:06:b4:7c:4f:24:5b:47: 12:d5:e4:17:3e:70:27:dc:7a:4b:77:2f:dd:14:25: cc:06:29:62:ea:55:50:61:1a:9d:66:9b:c6:5b:14: bb:e5:15:2a:55:52:01:ed:fb:2c:d1:46:98:ff:8a: 02:01:ea:81:13:8f:69:bf:bb:81:98:9b:26:73:80: 4b:20:b0:0a:60:e9:bb:b7:f0:08:09:d2:79:10:0d: 65:9f:7e:c8:6b:e9:38:70:db:05:02:4c:b5:53:69: cd:6f:3f:02:2d:b8:16:0f:60:0e:c7:8b:9a:31:03: a4:31:d8:a6:4b:76:53:c8:58:f5:cc:fe:e0:e4:8c: 91:d8:99:e7:f5:e8:b9:92:09:88:e1:d8:d0:da:42: 76:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:22:DF:46:E9:01:B5:19:2B:7D:0F:39:EF:DD:DB:F4:1E:64:C9:1E X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0b:83:4f:03:2e:98:5b:c0:15:8f:f1:f0:16:36:62:ef:95: 86:ca:31:97:2b:ec:7e:0a:9d:7f:cb:23:cb:f3:10:5b:cf:8b: 8b:a1:24:97:f3:12:79:09:60:99:a2:b2:5b:5c:bf:25:66:b5: 9d:cc:25:a3:66:07:cc:52:2f:e0:fe:92:28:e6:8f:5a:29:70: be:fc:7c:f5:06:41:27:7f:10:ba:bc:75:41:d1:e9:3d:f3:43: 05:a9:45:85:91:5a:8a:e5:2e:fd:a6:22:48:34:d1:f8:83:16: ba:00:e0:82:c3:9f:e4:ef:fe:d1:34:43:0a:3c:93:e8:30:49: b7:8a:94:54:66:7f:f6:09:e3:e6:37:26:6d:dc:07:5b:ab:1f: 24:ae:86:21:ae:88:52:b5:3a:d8:78:6e:4e:36:6f:21:01:85: 6d:8b:61:4f:38:4d:f0:26:b7:76:f2:fa:9c:c6:bc:a1:22:60: 4a:18:2f:c8:41:2e:a6:58:3a:8a:4d:90:08:1d:de:c8:a4:d3: 4b:b9:10:6c:1b:a9:15:5a:77:ef:51:ff:cd:cc:e3:15:9d:cd: ed:c2:9f:64:d9:e3:48:72:c1:48:3b:1e:73:d7:e6:23:f2:27: 8e:b6:cf:54:18:0c:67:54:31:94:18:06:94:a1:1a:17:71:45: d5:cb:51:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjUwODAzMDEyNjE0WhcNMjUwODEwMDEyNjE0WjAYMRYwFAYD VQQDEw02ODhlYmFiNi0xYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpRoCr6bHmYvo7Zx+17d/yJb91/ymTr5FT9XSJ3OvsY4AIcU2YrWa/oGxfgf 5MYesLykTiEKbWMsJEwZ5G/xIoHNPwbjYnnMbQ5bmZDOPLDizXGZ7bxHCOZeh6dH vQ97Sd+Q4v5mtdMqrzmsbEwR6wa0fE8kW0cS1eQXPnAn3HpLdy/dFCXMBili6lVQ YRqdZpvGWxS75RUqVVIB7fss0UaY/4oCAeqBE49pv7uBmJsmc4BLILAKYOm7t/AI CdJ5EA1ln37Ia+k4cNsFAky1U2nNbz8CLbgWD2AOx4uaMQOkMdimS3ZTyFj1zP7g 5IyR2Jnn9ei5kgmI4djQ2kJ2wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0i30bp AbUZK30POe/d2/QeZMkeMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsC4NPAy6YW8AVj/HwFjZi75WGyjGXK+x+Cp1/yyPL8xBbz4uLoSSX 8xJ5CWCZorJbXL8lZrWdzCWjZgfMUi/g/pIo5o9aKXC+/Hz1BkEnfxC6vHVB0ek9 80MFqUWFkVqK5S79piJINNH4gxa6AOCCw5/k7/7RNEMKPJPoMEm3ipRUZn/2CePm NyZt3Adbqx8kroYhrohStTrYeG5ONm8hAYVti2FPOE3wJrd28vqcxryhImBKGC/I QS6mWDqKTZAIHd7IpNNLuRBsG6kVWnfvUf/NzOMVnc3twp9k2eNIcsFIOx5z1+Yj 8ieOts9UGAxnVDGUGAaUoRoXcUXVy1Fi -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:09 2025 by rpki-client