$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json) Hash identifier: XL60Gf7UzuTM8tgDNZiDi8Zmi9yLTDYTyWU8uudvsPY= Subject key identifier: B1:46:F0:EB:13:1D:C9:95:B7:11:43:B4:23:91:94:82:7C:B2:E1:93 Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft Manifest number: 01BF Signing time: Sat 09 Aug 2025 03:24:33 +0000 Manifest this update: Sat 09 Aug 2025 03:24:32 +0000 Manifest next update: Sat 16 Aug 2025 03:24:32 +0000 Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: IQyZF8Z1s9HtuTzfFNqQaZZAsxuLlyPhBwRAqt7Z33w=) 2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: gexTzIiKhgLcrcI1jyC1eZ1O4wMhCdNKof8sdrmuHDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Validity Not Before: Aug 9 03:24:32 2025 GMT Not After : Aug 16 03:24:32 2025 GMT Subject: CN=6896bf71-6885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:d7:36:40:35:1e:e9:cb:0a:c4:04:8d:cf: b5:ee:a8:5b:a9:46:ab:66:c1:b2:2f:f3:33:8a:6a: 1e:0a:4d:eb:b0:8f:c7:41:ce:ff:bf:df:a3:72:77: 68:4c:71:72:64:98:d1:74:b1:0c:d3:c6:9b:80:b9: d4:99:3d:50:d2:e7:2e:1a:50:d2:f7:e9:2a:ec:86: c5:6a:53:22:34:3e:66:a3:7d:e4:3e:19:d4:8c:ff: fd:f7:64:99:dc:5c:7e:be:b4:24:a4:a2:44:5c:b0: 24:9e:cb:d8:df:3e:27:5e:79:2c:1b:e0:80:36:64: 74:7e:54:db:2f:04:69:7e:9e:17:61:3c:1e:f2:91: 46:93:ad:d3:50:8e:0b:29:22:44:24:35:4f:b3:8f: a8:c2:0a:87:0c:9a:50:0c:e3:c7:f1:42:96:29:ff: b1:2a:e5:66:d4:79:69:46:9e:b5:b0:fe:81:50:e3: 39:c9:b5:a7:eb:98:91:34:9f:0a:37:84:44:6b:a9: 3f:10:5a:93:2f:3d:05:17:55:23:3c:45:8f:bb:90: 6d:c5:70:31:94:d8:d5:57:ff:f1:e2:24:ce:ec:c8: f9:43:26:04:ac:b4:7e:94:78:a3:82:93:bc:3d:5f: 89:8d:23:be:b7:da:9e:61:13:39:cc:e0:f4:d4:15: a8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:F0:EB:13:1D:C9:95:B7:11:43:B4:23:91:94:82:7C:B2:E1:93 X509v3 Authority Key Identifier: keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:aa:38:6d:01:82:6c:71:b9:cc:90:ba:87:82:12:98:e1:e9: 50:64:65:a3:10:b7:e7:65:a5:7f:f4:6b:48:51:33:d9:81:b5: 02:7e:20:fc:86:1d:f4:7e:55:c8:c9:75:8d:60:a1:86:55:06: 80:58:c4:5c:cf:76:54:b8:15:da:73:b1:06:c4:b6:aa:4f:9a: 79:f0:9f:82:f9:51:36:09:a3:70:33:bb:1d:02:b7:a0:d1:fa: b9:5e:50:67:5d:5a:f7:8c:e0:d3:aa:6f:2e:91:1a:89:86:b5: 89:d3:e1:ec:d1:75:3f:94:59:c9:69:63:48:19:99:d9:98:69: 45:c3:9f:60:5a:c2:46:6f:6f:6b:0d:45:8a:d8:d4:26:2e:5e: a2:13:73:36:a1:69:79:63:2b:32:8f:71:2e:c7:23:e9:2f:5c: 9e:b0:81:2d:fd:05:7c:6f:22:2a:e6:24:a6:dc:23:59:94:90: 1d:ba:c8:eb:96:b8:cd:3f:36:cc:10:13:21:4c:55:45:ad:81: 5b:d9:72:8d:be:1d:57:98:1c:70:09:01:ad:3d:b8:f3:14:bb: 41:d5:38:f7:3f:7c:08:d7:6f:3c:64:b3:33:c8:db:4f:6b:41: d5:ab:f8:89:25:52:84:1e:99:42:ae:5a:7e:99:d7:23:23:6f: 67:fb:7b:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQjYxMTAvBgNVBAUTKDczMEM5MTg4MjlCMzNGQTZDOEU3QzhEMDUyN0IyNkND NTBCOTM1MkQwHhcNMjUwODA5MDMyNDMyWhcNMjUwODE2MDMyNDMyWjAYMRYwFAYD VQQDEw02ODk2YmY3MS02ODg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyebXNkA1HunLCsQEjc+17qhbqUarZsGyL/MzimoeCk3rsI/HQc7/v9+jcndo THFyZJjRdLEM08abgLnUmT1Q0ucuGlDS9+kq7IbFalMiND5mo33kPhnUjP/992SZ 3Fx+vrQkpKJEXLAknsvY3z4nXnksG+CANmR0flTbLwRpfp4XYTwe8pFGk63TUI4L KSJEJDVPs4+owgqHDJpQDOPH8UKWKf+xKuVm1HlpRp61sP6BUOM5ybWn65iRNJ8K N4REa6k/EFqTLz0FF1UjPEWPu5BtxXAxlNjVV//x4iTO7Mj5QyYErLR+lHijgpO8 PV+JjSO+t9qeYRM5zOD01BWo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLFG8OsT HcmVtxFDtCORlIJ8suGTMB8GA1UdIwQYMBaAFHMMkYgpsz+myOfI0FJ7JsxQuTUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZCNi9CRTRERjIyMkNE MUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2Ykk1OGpRVW5zbXpGQzVO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3eVJpQ216UDZiSTU4alFVbnNtekZDNU5TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZCNi9CRTRERjIyMkNEMUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2 Ykk1OGpRVW5zbXpGQzVOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6qjhtAYJscbnMkLqHghKY4elQZGWjELfnZaV/9GtIUTPZgbUCfiD8 hh30flXIyXWNYKGGVQaAWMRcz3ZUuBXac7EGxLaqT5p58J+C+VE2CaNwM7sdAreg 0fq5XlBnXVr3jODTqm8ukRqJhrWJ0+Hs0XU/lFnJaWNIGZnZmGlFw59gWsJGb29r DUWK2NQmLl6iE3M2oWl5Yysyj3EuxyPpL1yesIEt/QV8byIq5iSm3CNZlJAdusjr lrjNPzbMEBMhTFVFrYFb2XKNvh1XmBxwCQGtPbjzFLtB1Tj3P3wI1288ZLMzyNtP a0HVq/iJJVKEHplCrlp+mdcjI29n+3vS -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:52 2025 by rpki-client