$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: ErQoMbrbzOMy25ERlUv034IykAu93nAhq3o78wzQMBI= Subject key identifier: 47:47:1A:E6:BA:A6:7D:F0:C4:02:03:D7:E2:52:86:AB:A3:F0:7D:E2 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 095B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 0937 Signing time: Fri 08 Aug 2025 20:33:13 +0000 Manifest this update: Fri 08 Aug 2025 20:33:13 +0000 Manifest next update: Fri 15 Aug 2025 20:33:13 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: ihTDKYfo26CWbqxCGt17P8ep4MyvDybBwEnTyv5H5gk=) 2: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: pXrEj4stDQa7vXKCjosbWVQ6drk8njOMSLWpF1DWD7I=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: rt6Bny5AcJrI2S637EuL4TLyFA4SjY1ZgYuhkIe6es0=) 4: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: hPsYz+84BMOD09qXWXtUIiGoQs2iz4MgarEp+UA6x9E=) 5: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=) 6: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: IsjUPn+kzqWFAXd7ZKFs/dyXmrJrx2wfZqJliLqmPzA=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: RAy4NEtPtRjjHZ7I4vl5fhJ8895ko/HNAUdCvF3aEZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Aug 8 20:33:13 2025 GMT Not After : Aug 15 20:33:13 2025 GMT Subject: CN=68965f09-7127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9c:6b:94:7e:4d:aa:54:7c:3c:20:65:87:51: 5a:f0:09:51:32:cc:77:b2:78:41:26:3f:fe:e1:9f: 38:8a:a7:de:87:47:b3:bb:d6:af:1b:51:db:96:ed: 1a:86:0f:07:ee:f8:c1:f5:20:e7:32:0a:d0:a6:a7: 5e:05:e7:1f:d2:71:f1:a5:75:09:40:97:64:b7:85: a7:fa:4a:9b:b1:20:25:41:ed:ca:4e:a3:20:8c:fb: 2f:1c:b1:21:37:7b:9b:52:06:2b:83:3e:40:b5:63: 15:52:07:c6:16:3d:76:18:67:d2:1f:a6:39:f7:33: 11:3e:96:d8:e7:1a:f1:5d:7f:ca:0c:5e:09:1a:21: bc:d3:69:95:4a:41:fa:82:37:c4:48:77:5a:e7:69: 39:f4:0a:31:1c:69:c0:f3:f2:7f:e9:e1:ff:fe:05: 9c:6c:13:29:56:5e:61:0d:63:50:c7:ba:8b:1d:e3: fd:ba:07:5a:22:a3:6b:21:06:ff:00:ac:ae:93:27: 49:6d:26:d9:da:d2:91:25:69:6f:b0:0d:01:a2:af: 7e:f1:e6:a1:53:09:73:52:ba:c0:64:59:a0:a7:20: a6:c0:48:94:12:34:17:bd:9a:a6:68:7b:ac:e1:ec: 38:bd:38:ae:1a:7e:cf:9d:b1:be:ef:a6:ce:07:6c: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:47:1A:E6:BA:A6:7D:F0:C4:02:03:D7:E2:52:86:AB:A3:F0:7D:E2 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:1f:c1:eb:ab:d3:de:e8:38:00:7b:2d:a5:2c:32:f4:8a:82: ae:6e:09:fe:18:c1:6b:20:fc:01:90:31:ab:a8:0b:ea:fa:a4: 0e:53:17:cc:63:d4:61:0f:9c:1c:10:2e:4b:0e:0f:14:3e:4f: f6:78:52:97:9d:4b:e3:38:d9:54:12:73:70:38:34:f7:29:97: 1d:d7:27:fa:2b:aa:ea:99:cb:4e:dd:c6:6c:9f:39:25:be:d0: 34:c9:7e:2e:9c:e0:01:f9:23:81:bd:5f:78:01:1e:09:81:d9: a7:2f:4f:70:61:6f:c4:a2:54:5d:65:20:82:09:a7:42:f0:24: fc:53:ff:f9:50:95:c7:1b:fe:79:ca:13:62:07:4e:8f:a4:3b: 70:dc:0b:10:a7:35:cb:8f:55:12:64:4e:8b:35:bb:28:39:dd: 3a:35:66:33:b8:2c:ad:5a:93:e3:a2:c8:98:ad:f6:ca:e0:68: 86:f9:4f:3d:a8:65:2d:89:0e:d3:6e:ed:e5:23:f0:a7:fb:86: c0:e7:45:1d:af:e7:c6:68:f8:d5:e3:2c:3b:09:bf:05:20:14: 23:84:c4:85:4d:e0:6d:3a:41:98:c1:3b:1f:38:42:02:89:14: 7c:86:bb:f4:c0:74:a5:fd:1f:5f:04:3c:1b:c4:88:fa:42:e1: 87:99:82:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjUwODA4MjAzMzEzWhcNMjUwODE1MjAzMzEzWjAYMRYwFAYD VQQDEw02ODk2NWYwOS03MTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JxrlH5NqlR8PCBlh1Fa8AlRMsx3snhBJj/+4Z84iqfeh0ezu9avG1Hblu0a hg8H7vjB9SDnMgrQpqdeBecf0nHxpXUJQJdkt4Wn+kqbsSAlQe3KTqMgjPsvHLEh N3ubUgYrgz5AtWMVUgfGFj12GGfSH6Y59zMRPpbY5xrxXX/KDF4JGiG802mVSkH6 gjfESHda52k59AoxHGnA8/J/6eH//gWcbBMpVl5hDWNQx7qLHeP9ugdaIqNrIQb/ AKyukydJbSbZ2tKRJWlvsA0Boq9+8eahUwlzUrrAZFmgpyCmwEiUEjQXvZqmaHus 4ew4vTiuGn7PnbG+76bOB2y9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdHGua6 pn3wxAID1+JShquj8H3iMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4H8Hrq9Pe6DgAey2lLDL0ioKubgn+GMFrIPwBkDGrqAvq+qQOUxfM Y9RhD5wcEC5LDg8UPk/2eFKXnUvjONlUEnNwODT3KZcd1yf6K6rqmctO3cZsnzkl vtA0yX4unOAB+SOBvV94AR4JgdmnL09wYW/EolRdZSCCCadC8CT8U//5UJXHG/55 yhNiB06PpDtw3AsQpzXLj1USZE6LNbsoOd06NWYzuCytWpPjosiYrfbK4GiG+U89 qGUtiQ7Tbu3lI/Cn+4bA50Udr+fGaPjV4yw7Cb8FIBQjhMSFTeBtOkGYwTsfOEIC iRR8hrv0wHSl/R9fBDwbxIj6QuGHmYKR -----END CERTIFICATE-----Generated at Sat Aug 9 01:16:18 2025 by rpki-client