$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json) Hash identifier: VzvnXUV4ykbr2HyT9MS1ldROLt+qM7FaEVxcUTw+we4= Subject key identifier: 3E:16:BD:4D:A7:19:68:24:34:28:89:5C:11:62:C1:9B:B2:74:87:C6 Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Certificate serial: 0C77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft Manifest number: 0C6C Signing time: Mon 04 Aug 2025 18:33:49 +0000 Manifest this update: Mon 04 Aug 2025 18:33:49 +0000 Manifest next update: Mon 11 Aug 2025 18:33:48 +0000 Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: zjYb9DJ3XMXY5BBKY04Kzwk0QA3lXgbuIjcW43aLNvA=) 2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: iEFdnNUSTVmlnEmHIkSfOkDzcc3pJG72lpQKbTvUl98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3191 (0xc77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Validity Not Before: Aug 4 18:33:49 2025 GMT Not After : Aug 11 18:33:48 2025 GMT Subject: CN=6890fd0d-a277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:52:9b:88:cd:10:ed:95:14:04:1e:88:7a: 03:49:63:6c:c2:c2:74:9a:77:2e:00:a1:f0:48:30: 3f:f8:cb:53:a0:29:e0:8a:c1:95:57:0e:08:ff:1b: 02:09:f5:18:9a:cb:99:23:ca:ab:af:60:ef:c8:3a: d8:d3:2a:ae:fe:b6:4f:64:1e:4f:96:01:88:4c:e7: 95:15:d2:df:62:7f:13:a6:e8:f0:1d:13:dc:ae:de: b9:94:7b:c9:4f:91:f8:d9:5b:76:b9:00:e0:36:20: e3:77:6f:b4:21:3c:d1:08:38:ae:5e:09:83:c5:1d: d8:04:1b:33:ec:cf:3e:60:b3:ec:c3:32:5f:f9:29: 96:7e:a1:a5:cf:96:9a:24:17:bd:11:22:61:12:0f: 73:80:3b:b5:07:2c:69:83:99:57:41:dd:90:d0:16: 89:5c:1b:c6:8f:8a:10:46:ed:39:72:ed:08:a5:1e: e7:4e:ff:f3:ce:70:2f:69:0b:b8:dd:a4:1a:a0:cc: 01:97:9f:d9:8d:a0:8f:82:f9:ef:e6:57:b7:d2:33: 81:49:82:e1:63:f6:f5:6e:e0:46:8f:be:dc:53:f7: 7f:7b:26:b5:aa:a2:51:37:3b:5e:31:3f:78:9d:6f: ed:27:f0:08:98:a0:c6:2e:b4:5b:66:d9:16:6c:e4: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:16:BD:4D:A7:19:68:24:34:28:89:5C:11:62:C1:9B:B2:74:87:C6 X509v3 Authority Key Identifier: keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:65:36:ec:bf:d0:cf:86:14:55:5b:6c:8f:66:27:f9:70:15: c4:24:74:8f:19:78:bb:23:89:c5:1f:49:9e:b5:2f:f2:0e:c2: 01:0f:32:00:8c:58:90:9d:21:af:3d:90:4d:bb:09:55:a3:1f: 18:24:1f:3c:2b:3f:e0:24:4a:57:62:11:f7:90:04:9a:3e:c8: 9f:9b:5b:c5:60:99:8c:41:0f:cc:50:91:73:d5:80:98:29:f2: 1a:a9:86:f2:2d:d1:ad:89:c1:93:ec:44:e8:64:8d:67:73:74: bb:9f:4f:f2:5e:d9:78:0c:70:4d:b8:20:28:4f:ff:b3:79:ef: 0a:4e:0f:3c:d1:73:2f:b0:69:bf:ce:b6:94:62:b4:af:d0:e3: ca:36:ce:b8:98:62:72:26:6a:1d:41:ed:7a:01:42:e9:6a:2e: 85:da:94:c0:6f:d4:d0:1f:03:6b:28:83:04:cc:6f:bd:05:80: 2c:c5:8f:63:cc:fa:7a:59:5b:02:bf:a4:3f:59:44:cb:0c:cb: 5d:5e:3c:32:3b:55:56:37:64:ae:9e:cc:81:28:4f:2f:b2:77: 60:25:70:d5:7c:5b:61:7d:c6:c7:6b:4e:9b:4b:84:4a:78:a5: 22:f9:7f:76:10:68:90:a6:24:c8:21:d6:e5:3e:32:94:b9:3a: d4:d2:a6:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw MjQ4MkI3MjgwHhcNMjUwODA0MTgzMzQ5WhcNMjUwODExMTgzMzQ4WjAYMRYwFAYD VQQDEw02ODkwZmQwZC1hMjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSZSm4jNEO2VFAQeiHoDSWNswsJ0mncuAKHwSDA/+MtToCngisGVVw4I/xsC CfUYmsuZI8qrr2DvyDrY0yqu/rZPZB5PlgGITOeVFdLfYn8TpujwHRPcrt65lHvJ T5H42Vt2uQDgNiDjd2+0ITzRCDiuXgmDxR3YBBsz7M8+YLPswzJf+SmWfqGlz5aa JBe9ESJhEg9zgDu1Byxpg5lXQd2Q0BaJXBvGj4oQRu05cu0IpR7nTv/zznAvaQu4 3aQaoMwBl5/ZjaCPgvnv5le30jOBSYLhY/b1buBGj77cU/d/eya1qqJRNzteMT94 nW/tJ/AImKDGLrRbZtkWbOQHYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4WvU2n GWgkNCiJXBFiwZuydIfGMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0 NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2 RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4ZTbsv9DPhhRVW2yPZif5cBXEJHSPGXi7I4nFH0metS/yDsIBDzIA jFiQnSGvPZBNuwlVox8YJB88Kz/gJEpXYhH3kASaPsifm1vFYJmMQQ/MUJFz1YCY KfIaqYbyLdGticGT7EToZI1nc3S7n0/yXtl4DHBNuCAoT/+zee8KTg880XMvsGm/ zraUYrSv0OPKNs64mGJyJmodQe16AULpai6F2pTAb9TQHwNrKIMEzG+9BYAsxY9j zPp6WVsCv6Q/WUTLDMtdXjwyO1VWN2SunsyBKE8vsndgJXDVfFthfcbHa06bS4RK eKUi+X92EGiQpiTIIdblPjKUuTrU0qZn -----END CERTIFICATE-----Generated at Wed Aug 6 04:00:34 2025 by rpki-client