$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: vLgfp94elsQmCOAU6bUsWSMSwda59WfdlQ3dbJRo2+I= Subject key identifier: 1F:18:DB:3E:A8:13:CC:C1:D7:37:4C:59:66:D9:C3:3D:C5:AD:53:17 Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 01BF Signing time: Sat 09 Aug 2025 03:25:51 +0000 Manifest this update: Sat 09 Aug 2025 03:25:50 +0000 Manifest next update: Sat 16 Aug 2025 03:25:50 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: nEuc7uSvM+azEX4Kenk6IRnG3pQS4uWCLhHPrkjtC4s=) 2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: e9UJAcJ07X5sik6oJ0l9nVp35GOCmRSlbj3wJmjgBrI=) 3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: W+oeT9rREoYMeOrigBJ91wQkGtgMzcafqibSzxam1Bk=) 4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: oqC6m15GvkoEhYAheA3+Yegw0Ae9mcHaCs/xuTvq3ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Aug 9 03:25:50 2025 GMT Not After : Aug 16 03:25:50 2025 GMT Subject: CN=6896bfbf-f8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:d3:90:3c:3c:8b:07:50:2a:bc:c3:cb:fb: d3:51:82:0a:8a:9e:90:ba:d0:1a:5b:db:27:da:9d: 97:a8:c9:77:9b:8a:ce:0e:43:91:ae:31:a9:6b:9d: f0:97:30:7f:34:94:85:11:50:15:bc:41:eb:3c:ab: 51:5a:9a:5f:86:2d:1a:df:6e:a6:ff:ae:f2:1a:0d: a9:7c:b9:6f:16:be:e5:c9:25:73:4a:7d:a7:f6:18: bd:75:ad:85:c7:9d:7f:d3:20:08:a2:d2:e0:95:03: bf:a3:47:e9:40:5f:7b:88:13:3a:1c:dd:ec:eb:ca: 1f:f4:01:35:d3:76:35:86:3b:35:55:85:29:d4:56: e4:49:d7:ec:3b:0c:09:fe:bc:68:e0:84:7b:6d:a7: 98:af:1e:f9:41:a6:97:bf:a9:25:e5:07:1c:60:ae: 7b:df:09:10:97:0b:f0:ac:49:e3:c3:63:1f:e1:2e: 0e:2e:7d:80:0e:6d:dd:38:fa:70:b7:16:6c:ce:ca: d5:81:31:1f:96:64:df:c3:32:f7:37:9d:a5:39:6e: d2:e0:d3:83:93:f9:e4:cb:55:d0:c6:08:54:8d:b7: a6:97:98:f2:af:b5:16:b0:37:ec:3b:16:8b:7c:1b: 23:cc:ff:e2:07:4a:06:b8:bc:66:cd:4a:1d:f5:b4: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:DB:3E:A8:13:CC:C1:D7:37:4C:59:66:D9:C3:3D:C5:AD:53:17 X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f6:f6:a7:1c:fe:26:63:a6:b2:25:b9:96:55:a4:73:29:7a: 50:7b:a4:7a:ed:1e:0c:d3:0b:8f:25:66:3a:05:34:78:4c:09: 39:a3:fe:88:ff:39:a1:37:67:01:15:25:c0:63:f6:38:12:f6: b0:53:85:4a:45:08:95:57:e0:3c:a1:1e:e6:8f:16:c0:d5:1f: e9:09:ad:3d:a9:5b:19:cc:28:1f:ab:1b:c0:1d:8a:38:bc:de: ce:bc:79:05:04:8a:05:21:bf:2d:3f:95:b0:87:dc:4d:fb:b8: 0d:96:7a:3b:c5:a2:96:a1:84:af:f9:96:d2:4e:67:dc:58:dd: 07:a5:d7:76:1d:22:16:c2:bd:3b:fe:6c:ba:21:96:ea:1e:58: d2:51:bb:e8:6d:cc:4b:95:33:41:14:f3:f5:df:a6:ae:ab:85: e0:db:ac:5d:22:bd:a3:0d:06:9f:11:64:5f:f4:70:4e:02:48: c7:a0:31:ee:af:c9:ce:53:aa:63:11:25:45:07:fe:b4:74:7e: f8:a0:b7:23:d9:42:de:a4:54:0d:ff:35:3a:ba:c3:4d:05:82: 17:9d:b6:c6:a8:49:61:ec:e4:f4:55:cd:53:0b:9c:85:39:5c: 92:0a:d3:04:3f:f8:8e:1d:9f:bc:47:9b:62:18:2f:15:dc:ce: a1:6f:16:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjUwODA5MDMyNTUwWhcNMjUwODE2MDMyNTUwWjAYMRYwFAYD VQQDEw02ODk2YmZiZi1mOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45HTkDw8iwdQKrzDy/vTUYIKip6QutAaW9sn2p2XqMl3m4rODkORrjGpa53w lzB/NJSFEVAVvEHrPKtRWppfhi0a326m/67yGg2pfLlvFr7lySVzSn2n9hi9da2F x51/0yAIotLglQO/o0fpQF97iBM6HN3s68of9AE103Y1hjs1VYUp1FbkSdfsOwwJ /rxo4IR7baeYrx75QaaXv6kl5QccYK573wkQlwvwrEnjw2Mf4S4OLn2ADm3dOPpw txZszsrVgTEflmTfwzL3N52lOW7S4NODk/nky1XQxghUjbeml5jyr7UWsDfsOxaL fBsjzP/iB0oGuLxmzUod9bQciQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8Y2z6o E8zB1zdMWWbZwz3FrVMXMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr9vanHP4mY6ayJbmWVaRzKXpQe6R67R4M0wuPJWY6BTR4TAk5o/6I /zmhN2cBFSXAY/Y4EvawU4VKRQiVV+A8oR7mjxbA1R/pCa09qVsZzCgfqxvAHYo4 vN7OvHkFBIoFIb8tP5Wwh9xN+7gNlno7xaKWoYSv+ZbSTmfcWN0Hpdd2HSIWwr07 /my6IZbqHljSUbvobcxLlTNBFPP136auq4Xg26xdIr2jDQafEWRf9HBOAkjHoDHu r8nOU6pjESVFB/60dH74oLcj2ULepFQN/zU6usNNBYIXnbbGqElh7OT0Vc1TC5yF OVySCtMEP/iOHZ+8R5tiGC8V3M6hbxbQ -----END CERTIFICATE-----Generated at Sat Aug 9 14:18:17 2025 by rpki-client