$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft File: w5O8331Fpxlv881tMNYjDfT9xX0.mft (raw, json) Hash identifier: znoaKXBtl4uqlH0ZA85dI2t9hcQoxAsF3wUJoq3f6xI= Subject key identifier: 5F:38:B5:BD:C3:A3:4B:E5:5B:DD:CC:9F:F0:EF:05:B7:2F:9E:26:52 Authority key identifier: C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D Certificate issuer: /CN=A916ED2B/serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft Manifest number: C7 Signing time: Sat 09 Aug 2025 06:11:30 +0000 Manifest this update: Sat 09 Aug 2025 06:11:30 +0000 Manifest next update: Sat 16 Aug 2025 06:11:30 +0000 Files and hashes: 1: w5O8331Fpxlv881tMNYjDfT9xX0.crl (hash: fUz66sJFF4T5QuSEalNWjRW9lpEl+esDk9HPhgTAmfE=) 2: 2B4804B845B211EF9B812019C4F9AE02.roa (hash: nLqd4iOtl1GLw2Gq5WmxNPMWDRnWSTF7f/Jyns3zXvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=C393BCDF7D45A7196FF3CD6D30D6230DF4FDC57D Validity Not Before: Aug 9 06:11:30 2025 GMT Not After : Aug 16 06:11:30 2025 GMT Subject: CN=6896e692-d2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:cf:36:7d:4f:42:82:60:ad:b2:b1:70:63: c8:76:96:b0:78:61:99:61:54:1a:bb:22:2a:e1:bb: 22:29:c6:88:92:da:37:4f:c9:7d:31:da:70:6e:23: ea:cf:ba:1d:b7:8e:44:66:c8:07:d1:3b:49:32:35: 23:88:24:d4:0d:26:ac:04:1b:70:1f:7a:4f:f5:91: b5:88:97:88:14:76:82:95:2a:7e:47:d3:2b:56:04: 62:2b:f7:5c:94:75:1c:07:8d:a5:c3:4d:f3:6c:9c: 9e:e8:1b:56:55:45:58:18:05:4d:2b:db:45:11:fe: 4b:e2:d7:f0:ff:4e:e0:88:d0:1e:d7:65:a1:6b:2a: e7:4e:51:2d:88:02:b5:be:a6:f9:7e:a2:f4:b3:b9: d3:9e:6e:33:f8:d6:21:6f:cc:3f:b3:b5:68:36:a7: 73:11:df:c7:e4:29:d5:bb:1c:10:c8:59:7d:c4:8a: 0f:66:25:89:e5:a5:01:0c:49:56:41:bc:fc:ae:68: 88:38:8c:a6:55:27:e3:33:b4:2e:55:b0:35:fe:e8: 02:2c:7b:d5:af:25:32:e4:62:38:db:dc:ab:5e:a0: 59:d2:11:45:6e:cf:4f:bf:ff:a3:31:87:b2:04:5b: 1d:e2:a2:b2:b4:ee:00:84:d0:8d:2d:25:e0:ae:7f: 39:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:38:B5:BD:C3:A3:4B:E5:5B:DD:CC:9F:F0:EF:05:B7:2F:9E:26:52 X509v3 Authority Key Identifier: keyid:C3:93:BC:DF:7D:45:A7:19:6F:F3:CD:6D:30:D6:23:0D:F4:FD:C5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w5O8331Fpxlv881tMNYjDfT9xX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/FC11BFD245B011EFBD598B77C4F9AE02/w5O8331Fpxlv881tMNYjDfT9xX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:0f:83:89:0c:0a:d6:85:9f:27:7d:c9:55:b9:53:de:cd:e5: cd:59:58:2c:03:9f:b9:19:9d:53:30:45:37:ef:83:71:ae:ec: d8:7f:96:94:41:f9:f3:38:d7:8d:28:8d:af:00:61:87:4f:66: d4:26:a7:c8:a0:1d:55:56:be:2a:fa:27:26:dd:11:15:4d:01: a0:f9:fe:eb:6f:fe:9b:42:c4:f9:3c:fe:00:d7:5e:4c:12:aa: 5b:42:9e:bd:86:f3:17:61:91:c2:ad:91:48:9f:15:73:d1:65: df:80:09:27:3c:ac:31:b7:f3:f5:8d:5a:06:ac:d0:a6:d1:32: 09:f7:af:6b:c7:f5:7a:2e:c9:e6:21:f8:65:b7:71:22:27:ad: 7b:46:1f:b2:20:ec:42:d0:39:59:61:c0:8a:47:2f:09:ef:a2: 39:fa:52:86:2c:a8:32:2c:c1:1c:0b:96:a2:83:1e:90:e3:3f: aa:69:f2:cf:89:f3:89:05:34:ab:90:04:29:16:4a:7f:87:0e: e8:2b:79:bf:6b:37:b2:7d:28:db:cd:4d:2a:e0:66:4f:7c:a9: 74:91:8f:37:0c:23:2a:1e:be:9e:32:81:bb:7b:e9:02:f9:b1: c2:5b:96:88:09:80:94:df:a0:e1:f3:b3:cb:71:22:88:a8:a2: 7d:b1:00:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKEMzOTNCQ0RGN0Q0NUE3MTk2RkYzQ0Q2RDMwRDYyMzBE RjRGREM1N0QwHhcNMjUwODA5MDYxMTMwWhcNMjUwODE2MDYxMTMwWjAYMRYwFAYD VQQDEw02ODk2ZTY5Mi1kMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8XPNn1PQoJgrbKxcGPIdpaweGGZYVQauyIq4bsiKcaIkto3T8l9MdpwbiPq z7odt45EZsgH0TtJMjUjiCTUDSasBBtwH3pP9ZG1iJeIFHaClSp+R9MrVgRiK/dc lHUcB42lw03zbJye6BtWVUVYGAVNK9tFEf5L4tfw/07giNAe12WhayrnTlEtiAK1 vqb5fqL0s7nTnm4z+NYhb8w/s7VoNqdzEd/H5CnVuxwQyFl9xIoPZiWJ5aUBDElW Qbz8rmiIOIymVSfjM7QuVbA1/ugCLHvVryUy5GI429yrXqBZ0hFFbs9Pv/+jMYey BFsd4qKytO4AhNCNLSXgrn85xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF84tb3D o0vlW93Mn/DvBbcvniZSMB8GA1UdIwQYMBaAFMOTvN99RacZb/PNbTDWIw30/cV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi9GQzExQkZEMjQ1 QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4bHY4ODF0TU5ZakRmVDl4 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3c1TzgzMzFGcHhsdjg4MXRNTllqRGZUOXhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi9GQzExQkZEMjQ1QjAxMUVGQkQ1OThCNzdDNEY5QUUwMi93NU84MzMxRnB4 bHY4ODF0TU5ZakRmVDl4WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9D4OJDArWhZ8nfclVuVPezeXNWVgsA5+5GZ1TMEU374NxruzYf5aU QfnzONeNKI2vAGGHT2bUJqfIoB1VVr4q+icm3REVTQGg+f7rb/6bQsT5PP4A115M EqpbQp69hvMXYZHCrZFInxVz0WXfgAknPKwxt/P1jVoGrNCm0TIJ969rx/V6Lsnm Ifhlt3EiJ617Rh+yIOxC0DlZYcCKRy8J76I5+lKGLKgyLMEcC5aigx6Q4z+qafLP ifOJBTSrkAQpFkp/hw7oK3m/azeyfSjbzU0q4GZPfKl0kY83DCMqHr6eMoG7e+kC +bHCW5aICYCU36Dh87PLcSKIqKJ9sQC5 -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:17 2025 by rpki-client