$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft File: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft (raw, json) Hash identifier: +qJvniCvazildrXYJOKL3PS73h9wDmIY6hdEu65b2pI= Subject key identifier: E2:2D:F4:4E:FB:FA:3D:E3:CB:BF:A5:74:41:B5:61:3F:C9:15:B8:91 Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft Manifest number: 0C14 Signing time: Sun 10 Aug 2025 18:48:20 +0000 Manifest this update: Sun 10 Aug 2025 18:48:20 +0000 Manifest next update: Sun 17 Aug 2025 18:48:20 +0000 Files and hashes: 1: WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl (hash: ZBdabFNnT3gDmvJQKF7pjhYURcAiEuYbWmPSaZlZwwM=) 2: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (hash: h8cq7eEqWj3L5NzXqfHs5Ge3X0txZ1Fjij9Lq2hQUOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7E85, serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Validity Not Before: Aug 10 18:48:20 2025 GMT Not After : Aug 17 18:48:20 2025 GMT Subject: CN=6898e974-7e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:b2:3f:ef:b0:ed:15:ea:05:6f:7a:ec:34: e3:b1:a4:db:e6:55:3e:4f:81:37:16:16:79:9b:b6: b5:e9:66:b8:0f:0b:2a:e7:cc:f1:b4:f2:da:63:2b: a0:f4:09:52:cc:02:ff:3c:d3:63:d2:f7:aa:75:22: 3d:21:25:1f:07:d4:9b:cb:ae:75:62:06:5b:2f:28: 3e:77:8f:80:4f:21:ba:bb:19:99:3f:61:a0:cb:a3: 35:8e:22:32:43:89:6f:01:b9:3a:7e:8a:38:5a:49: 33:08:d6:94:f8:2a:67:f0:14:3d:b6:f7:4f:c8:e9: a9:ac:a6:e9:dd:81:9c:ca:26:d7:e3:cc:e0:59:7b: 8f:90:79:7c:21:8c:47:6a:17:67:11:50:d1:87:72: da:9c:a7:b3:5e:07:fd:2c:e0:f0:24:d0:7d:58:fa: 0f:09:6c:20:53:f3:67:2c:4d:08:9d:c2:36:8f:a5: c1:96:06:91:5f:05:d0:21:77:6f:4a:91:d4:1f:e8: ca:fe:db:4b:e8:91:07:23:c1:a7:e5:72:a0:36:ad: 6d:96:ef:5d:23:d0:66:29:17:f8:be:cd:2e:21:b2: d0:83:9a:4e:ae:d0:50:a8:53:b7:c0:e1:26:49:96: 6e:7f:f1:3f:b5:ef:62:c2:f6:c4:22:fe:e4:ca:26: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:2D:F4:4E:FB:FA:3D:E3:CB:BF:A5:74:41:B5:61:3F:C9:15:B8:91 X509v3 Authority Key Identifier: keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f2:bd:6e:e4:e6:87:fe:c4:c4:62:64:2c:77:5e:97:0a:b5: 27:43:f1:3d:81:17:1e:0d:5a:9c:52:29:7e:af:cd:ff:58:3d: 33:e6:08:0b:93:b6:34:98:b0:e7:53:dd:d6:a4:9e:15:90:43: 84:45:db:07:18:37:bf:1d:a4:19:2e:e0:9f:34:a0:39:77:53: 04:95:9e:78:20:9a:32:81:75:7d:17:f4:73:84:0d:7a:d6:e4: 47:2c:ce:87:7b:ff:56:00:72:8b:a6:35:42:63:9d:39:05:67: 87:db:c8:c5:f7:8d:5c:37:d1:fa:78:a5:46:32:95:43:b0:e7: 73:e7:c7:f6:c8:e1:42:b8:8b:ab:df:4b:af:27:aa:61:e2:4d: b7:47:80:85:c8:0c:d5:e4:fe:49:63:59:66:b4:a7:0b:be:f6: c2:69:ad:f3:9e:8a:38:91:fe:55:9f:fc:27:47:96:aa:85:55: 15:18:e2:f1:80:9d:88:41:b9:89:e9:a2:d8:34:8a:72:e4:81: 54:b5:34:f0:dc:56:98:09:d0:64:54:1f:04:ed:59:26:59:cb: aa:f2:93:9d:ca:f4:28:cf:b4:3e:17:31:db:b2:f0:d5:2a:e8: 1a:ab:1c:26:1c:9f:f0:09:43:86:c1:a1:cd:06:d5:5b:15:76: c5:67:45:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0 NTUzRUU4ODYwHhcNMjUwODEwMTg0ODIwWhcNMjUwODE3MTg0ODIwWjAYMRYwFAYD VQQDEw02ODk4ZTk3NC03ZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8yyP++w7RXqBW967DTjsaTb5lU+T4E3FhZ5m7a16Wa4Dwsq58zxtPLaYyug 9AlSzAL/PNNj0veqdSI9ISUfB9Sby651YgZbLyg+d4+ATyG6uxmZP2Ggy6M1jiIy Q4lvAbk6foo4WkkzCNaU+Cpn8BQ9tvdPyOmprKbp3YGcyibX48zgWXuPkHl8IYxH ahdnEVDRh3LanKezXgf9LODwJNB9WPoPCWwgU/NnLE0IncI2j6XBlgaRXwXQIXdv SpHUH+jK/ttL6JEHI8Gn5XKgNq1tlu9dI9BmKRf4vs0uIbLQg5pOrtBQqFO3wOEm SZZuf/E/te9iwvbEIv7kyiZqgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIt9E77 +j3jy7+ldEG1YT/JFbiRMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0U4NS9CMkUwRTVBRTFDMzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03 WjZZM21ySGdyMUZGVS02SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk8r1u5OaH/sTEYmQsd16XCrUnQ/E9gRceDVqcUil+r83/WD0z5ggL k7Y0mLDnU93WpJ4VkEOERdsHGDe/HaQZLuCfNKA5d1MElZ54IJoygXV9F/RzhA16 1uRHLM6He/9WAHKLpjVCY505BWeH28jF941cN9H6eKVGMpVDsOdz58f2yOFCuIur 30uvJ6ph4k23R4CFyAzV5P5JY1lmtKcLvvbCaa3znoo4kf5Vn/wnR5aqhVUVGOLx gJ2IQbmJ6aLYNIpy5IFUtTTw3FaYCdBkVB8E7VkmWcuq8pOdyvQoz7Q+FzHbsvDV KugaqxwmHJ/wCUOGwaHNBtVbFXbFZ0Xi -----END CERTIFICATE-----Generated at Sun Aug 10 20:00:47 2025 by rpki-client