$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft File: WKDd0CVVyDdIbVVDUYbcxXahKD4.mft (raw, json) Hash identifier: m8n9AV3xibrfo6DuDZ2m1W2CJedk6l4xGoU34lsu7nQ= Subject key identifier: 09:37:EA:CB:F4:92:1C:76:3E:0B:83:F7:E3:72:10:DF:93:D5:2D:C2 Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft Manifest number: 01E5 Signing time: Thu 07 Aug 2025 03:08:59 +0000 Manifest this update: Thu 07 Aug 2025 03:08:59 +0000 Manifest next update: Thu 14 Aug 2025 03:08:59 +0000 Files and hashes: 1: WKDd0CVVyDdIbVVDUYbcxXahKD4.crl (hash: KOKgqeAUV3EqqkaphW/uW3Xe9SESdbRFLlTQdrKLe7A=) 2: 8C48B22C47E711EE91530D28C4F9AE02.roa (hash: wKqJN3HUJdyX5elWCqbGG36RonSJ+MBkLKESMLKx2qQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Aug 7 03:08:59 2025 GMT Not After : Aug 14 03:08:59 2025 GMT Subject: CN=689418cb-2e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:21:35:33:64:06:38:e1:ba:2a:42:0f:68: 32:82:20:d3:b0:94:56:8e:e0:b8:28:a4:ab:5a:02: ef:61:07:84:3c:e0:d4:c9:26:10:94:0e:72:da:95: b1:ee:fc:4a:82:eb:c7:31:8f:0e:05:aa:63:50:8d: e1:89:89:02:95:cf:d5:0d:5b:aa:2c:60:97:bd:7b: 08:4c:d6:f2:c6:41:b2:d1:eb:bb:58:ef:87:e9:ce: c9:a8:49:a3:bd:0c:be:7e:2d:87:8e:e7:20:89:b4: e3:60:35:e0:87:01:aa:64:38:78:96:bb:39:f9:14: 93:35:26:d5:21:e8:34:d9:df:f7:8c:3c:3e:90:bb: c6:aa:3d:17:01:09:83:16:64:58:05:ac:29:18:29: 48:9e:ac:5f:37:13:db:32:b0:00:d6:7e:12:99:ac: 9b:5e:72:ed:2f:80:92:98:04:e8:bf:88:c5:c1:39: 17:8a:a6:eb:80:0d:01:5d:03:23:15:ab:7f:44:62: 87:98:39:13:3d:3c:8e:80:04:f2:d4:31:37:d1:32: 66:0a:e6:1d:c0:7f:1e:ab:55:b8:d9:f2:23:5c:d6: c3:39:4b:f8:fc:77:65:c3:80:3f:fc:c3:c4:38:5c: bb:d2:9c:ae:52:93:32:a6:e0:da:b7:1f:a4:42:e4: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:37:EA:CB:F4:92:1C:76:3E:0B:83:F7:E3:72:10:DF:93:D5:2D:C2 X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ae:1c:55:b5:69:9b:40:5d:2c:fe:77:44:24:81:02:87:07: 8b:4c:31:87:d0:86:8b:40:99:de:5f:f5:1b:89:3f:98:31:96: ee:00:3c:15:c9:63:14:72:86:55:06:0b:c9:43:c8:62:2f:cd: bd:e5:0c:45:14:a4:f0:15:e0:d3:b6:5b:6e:b9:10:2f:86:03: 9f:dc:29:f9:24:14:c6:a3:64:4c:f7:54:f0:b6:b7:6d:c2:10: cd:4e:96:76:a3:81:eb:12:6b:f8:eb:4c:72:f9:e7:2c:25:f2: 7b:e1:eb:19:74:78:a8:19:c4:19:96:89:7b:7b:9d:38:33:85: 1a:d0:89:10:40:34:2a:50:44:53:ec:46:56:58:af:0e:ed:3d: cd:83:4b:cb:5f:93:8e:d2:65:90:83:3f:ec:62:44:06:33:49: 96:4a:4e:79:ef:e2:d1:ea:04:7a:77:39:97:e5:f6:f7:9c:d3: 6e:cf:c4:ac:3c:ab:2b:2f:1a:d7:0d:aa:68:92:32:a6:98:a1: 1e:62:27:9a:b3:7d:49:42:fe:1e:c4:7b:82:de:35:20:3b:75: 04:ee:29:ff:e0:ac:24:fa:a2:c4:d4:9e:11:24:2e:92:f8:dd: c8:0f:31:cb:37:0d:80:55:9d:13:9b:6b:0e:40:28:bf:d6:48: cb:8d:81:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUwODA3MDMwODU5WhcNMjUwODE0MDMwODU5WjAYMRYwFAYD VQQDEw02ODk0MThjYi0yZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6whNTNkBjjhuipCD2gygiDTsJRWjuC4KKSrWgLvYQeEPODUySYQlA5y2pWx 7vxKguvHMY8OBapjUI3hiYkClc/VDVuqLGCXvXsITNbyxkGy0eu7WO+H6c7JqEmj vQy+fi2HjucgibTjYDXghwGqZDh4lrs5+RSTNSbVIeg02d/3jDw+kLvGqj0XAQmD FmRYBawpGClInqxfNxPbMrAA1n4SmaybXnLtL4CSmATov4jFwTkXiqbrgA0BXQMj Fat/RGKHmDkTPTyOgATy1DE30TJmCuYdwH8eq1W42fIjXNbDOUv4/Hdlw4A//MPE OFy70pyuUpMypuDatx+kQuR1ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAk36sv0 khx2PguD9+NyEN+T1S3CMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEMzMC8wRjFGN0NFODk2NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlE ZEliVlZEVVliY3hYYWhLRDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBArhxVtWmbQF0s/ndEJIEChweLTDGH0IaLQJneX/UbiT+YMZbuADwV yWMUcoZVBgvJQ8hiL8295QxFFKTwFeDTtltuuRAvhgOf3Cn5JBTGo2RM91Twtrdt whDNTpZ2o4HrEmv460xy+ecsJfJ74esZdHioGcQZlol7e504M4Ua0IkQQDQqUERT 7EZWWK8O7T3Ng0vLX5OO0mWQgz/sYkQGM0mWSk557+LR6gR6dzmX5fb3nNNuz8Ss PKsrLxrXDapokjKmmKEeYieas31JQv4exHuC3jUgO3UE7in/4Kwk+qLE1J4RJC6S +N3IDzHLNw2AVZ0Tm2sOQCi/1kjLjYHJ -----END CERTIFICATE-----Generated at Thu Aug 7 17:36:56 2025 by rpki-client