$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: G9s4Fh7xr72+niefzjiSyrqxxdD6LQfu1aTBksNFC/0= Subject key identifier: A7:03:93:AA:9F:09:A1:1D:0F:18:F8:E8:21:23:9F:D8:84:6D:F9:31 Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: C2 Signing time: Sat 09 Aug 2025 06:14:54 +0000 Manifest this update: Sat 09 Aug 2025 06:14:53 +0000 Manifest next update: Sat 16 Aug 2025 06:14:53 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: NhRApFEGka/AFEetVVaV6FUSB+89jmZmEMjQ3O+7bzQ=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: EOPx00rRZjGS/73Br0xTrWoW0kA4+3+SpewBHZe+BK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Aug 9 06:14:53 2025 GMT Not After : Aug 16 06:14:53 2025 GMT Subject: CN=6896e75d-a62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:ae:6a:c4:c9:92:db:6b:9f:8e:15:34:bb: e7:cb:1a:f9:e4:35:b4:65:ce:8f:1d:a1:85:9e:9d: c0:5d:c5:ae:c9:66:89:b2:2d:c0:88:c5:a1:d0:12: dc:d8:c1:e5:ea:ea:21:f8:56:5d:8b:20:51:2c:ba: 69:22:df:6d:bb:87:3e:4d:73:92:ba:a7:27:10:94: d0:05:88:fb:4c:6b:c2:90:56:7d:10:c6:66:d5:f7: 1c:a9:24:a0:01:ca:12:ce:ea:9c:80:af:9c:22:6e: c1:b9:9a:2e:03:12:90:84:24:80:0d:52:38:01:7b: 86:96:e1:33:03:0b:34:50:f3:ef:d4:25:a0:9a:51: 69:7a:63:b9:e5:6c:e2:a6:e3:fb:e4:28:b1:40:3c: 9d:18:60:56:ba:b2:b7:f7:d9:b2:3f:eb:9c:92:87: 9b:1f:ce:3e:af:df:26:8d:ae:2c:55:8f:30:05:37: 16:27:40:f3:3a:63:7f:8f:9e:3a:5e:4b:0c:f9:ea: 2e:dd:04:c4:bf:42:97:94:47:64:f1:5f:7a:fb:ba: 2c:21:a5:56:a4:7f:15:65:86:78:4d:8c:2d:5c:77: 7e:46:cc:f3:c8:19:80:b3:12:d7:a6:58:16:14:5c: 4c:33:c3:7a:a3:0c:c1:77:43:7e:fb:ef:a4:d2:df: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:03:93:AA:9F:09:A1:1D:0F:18:F8:E8:21:23:9F:D8:84:6D:F9:31 X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8c:b8:7b:99:e4:e7:b4:e9:db:21:90:0b:4c:32:39:74:5c: 95:6d:1a:15:71:1d:bd:f8:aa:65:8f:02:6f:73:36:09:8c:9c: 82:22:cb:2b:2d:f6:65:08:03:c2:74:60:3f:42:22:0a:75:b7: 86:ef:55:2e:51:c7:ec:51:3d:8c:f6:20:1e:e8:8b:d6:6c:38: f0:8e:e4:2d:6e:77:b4:d6:0f:37:14:58:52:34:a3:39:d6:92: 5a:c8:cb:78:80:aa:2f:bd:1e:2c:c6:4e:44:9c:b6:ea:c3:10: 91:a4:38:d4:32:cc:f6:34:ae:68:b8:d9:8f:aa:35:55:b2:9b: 12:4e:27:55:98:61:26:53:77:41:d7:77:30:33:2f:40:80:f5: 3e:d9:33:ed:17:f6:b7:e7:64:24:83:75:cb:b8:fe:66:58:2b: 4d:63:c5:87:f2:1c:0f:f3:a6:c4:1b:d8:4f:7b:db:a1:10:7c: aa:9a:ca:95:b6:ff:3d:82:68:41:b2:f7:fb:e6:0c:4e:93:0b: 6b:7c:1e:c7:c3:70:80:8a:40:3c:f5:35:07:46:ef:0b:fa:b4: c6:85:5e:93:9c:dc:8b:1e:02:2d:f8:d7:f9:8b:33:d6:64:10: fe:11:5f:e9:bb:63:8d:65:ea:03:35:1d:6a:a7:8e:4e:cc:0d: 70:2f:a6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjUwODA5MDYxNDUzWhcNMjUwODE2MDYxNDUzWjAYMRYwFAYD VQQDEw02ODk2ZTc1ZC1hNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD2uasTJkttrn44VNLvnyxr55DW0Zc6PHaGFnp3AXcWuyWaJsi3AiMWh0BLc 2MHl6uoh+FZdiyBRLLppIt9tu4c+TXOSuqcnEJTQBYj7TGvCkFZ9EMZm1fccqSSg AcoSzuqcgK+cIm7BuZouAxKQhCSADVI4AXuGluEzAws0UPPv1CWgmlFpemO55Wzi puP75CixQDydGGBWurK399myP+uckoebH84+r98mja4sVY8wBTcWJ0DzOmN/j546 XksM+eou3QTEv0KXlEdk8V96+7osIaVWpH8VZYZ4TYwtXHd+RszzyBmAsxLXplgW FFxMM8N6owzBd0N++++k0t/LswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcDk6qf CaEdDxj46CEjn9iEbfkxMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfjLh7meTntOnbIZALTDI5dFyVbRoVcR29+KpljwJvczYJjJyCIssr LfZlCAPCdGA/QiIKdbeG71UuUcfsUT2M9iAe6IvWbDjwjuQtbne01g83FFhSNKM5 1pJayMt4gKovvR4sxk5EnLbqwxCRpDjUMsz2NK5ouNmPqjVVspsSTidVmGEmU3dB 13cwMy9AgPU+2TPtF/a352Qkg3XLuP5mWCtNY8WH8hwP86bEG9hPe9uhEHyqmsqV tv89gmhBsvf75gxOkwtrfB7Hw3CAikA89TUHRu8L+rTGhV6TnNyLHgIt+Nf5izPW ZBD+EV/pu2ONZeoDNR1qp45OzA1wL6ba -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:12 2025 by rpki-client