$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft File: w66slu2yjCiN16VQC1EphfHaNxQ.mft (raw, json) Hash identifier: GXasUkdYcoNuarltcxBMtBfQl3hfoi8QFT/3LwiG7IM= Subject key identifier: 98:78:B8:03:3E:B9:CC:45:81:8A:EB:21:55:B7:BF:11:91:0D:A3:E3 Authority key identifier: C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14 Certificate issuer: /CN=A91A1E13/serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft Manifest number: 0682 Signing time: Tue 12 Aug 2025 01:22:59 +0000 Manifest this update: Tue 12 Aug 2025 01:22:59 +0000 Manifest next update: Tue 19 Aug 2025 01:22:58 +0000 Files and hashes: 1: w66slu2yjCiN16VQC1EphfHaNxQ.crl (hash: IdChJM4JO2eYTBjWQTDwKeyaPNTBrl59ZLeLg+zK3JA=) 2: DFE3798A771A11F097605B25C4F9AE02.roa (hash: bw4F6dnOP6M4fIF/r1L0ZO7zXCeYoaCvjGJrIiGpg8o=) 3: 3812172A9EEA11EEA87D017FC4F9AE02.roa (hash: WH71W6v4z62eEUi2VOWvu9HZUj4UGtzkB/NlqT3/O3U=) 4: 3E3F56AE602C11EF82BEF23FC4F9AE02.roa (hash: /pUdlndQ29VgGj6ss3jqZKtTLf7SVeCwADPq+4ZOuqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 01:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E13, serialNumber=C3AEAC96EDB28C288DD7A5500B512985F1DA3714 Validity Not Before: Aug 12 01:22:59 2025 GMT Not After : Aug 19 01:22:58 2025 GMT Subject: CN=689a9773-6658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:8e:a8:83:a8:b9:e6:2e:26:7d:c7:4a:79: 1b:47:64:63:f5:16:57:18:63:00:da:21:7d:b0:e9: 6d:57:72:53:b4:d1:7d:1b:64:78:33:36:aa:25:2a: b8:3f:b6:9f:ee:26:00:b3:62:05:c5:3e:fc:87:1e: 7a:90:f5:8f:af:d9:ca:2f:3f:3b:a4:aa:33:41:a4: 30:30:03:ca:e9:f5:f7:a5:03:87:6b:9c:a5:78:b8: d3:40:e1:9c:1d:30:cb:78:c8:5e:44:9e:06:a6:22: 45:d0:e9:47:a9:6c:8b:62:8b:1c:18:fe:a0:c6:b4: bc:44:b0:86:fc:f4:44:52:8f:fd:a3:f6:9f:af:49: 0a:73:7c:a4:03:f0:6c:10:9d:3e:fe:d5:0d:fd:66: e8:37:85:c4:cd:61:e0:35:51:21:d7:f3:ad:81:f3: b7:01:63:6f:8f:62:f0:60:6c:4b:28:ca:fc:ad:15: 25:1e:47:e2:b1:cb:44:96:cd:af:70:b1:58:f7:3e: 01:97:a7:5c:4b:25:5d:87:df:e1:7c:d1:08:32:c3: f8:1c:8f:fb:04:29:1c:1c:eb:bf:fe:df:e7:3f:2e: d6:85:87:1a:f0:9a:52:94:af:22:07:ae:df:77:8b: 50:42:ad:ca:b4:66:37:59:13:ee:83:c9:e7:f9:49: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:78:B8:03:3E:B9:CC:45:81:8A:EB:21:55:B7:BF:11:91:0D:A3:E3 X509v3 Authority Key Identifier: keyid:C3:AE:AC:96:ED:B2:8C:28:8D:D7:A5:50:0B:51:29:85:F1:DA:37:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w66slu2yjCiN16VQC1EphfHaNxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E13/18F096E0866B11EB9BFD4F32C4F9AE02/w66slu2yjCiN16VQC1EphfHaNxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:4c:59:cc:ef:70:89:e5:00:e1:18:ca:ae:0f:19:e4:35:30: d6:dc:87:61:42:41:19:f1:71:1c:74:74:03:60:d6:40:a6:b0: 4a:52:0b:24:58:cb:d0:9d:d2:b4:ee:04:e6:98:13:7a:18:b2: 26:ef:2d:7a:b3:0b:91:89:3b:24:8a:f0:b1:f3:0e:6a:33:65: df:15:6d:b0:f0:7c:95:c1:1b:a4:21:3c:5c:6b:96:a8:3d:79: d2:c8:9c:38:bd:e6:d5:74:5b:74:4a:6b:a2:d9:f5:9b:5d:21: 7e:18:10:e6:2a:bf:ae:f8:49:c0:13:84:5a:6a:be:fa:27:aa: 4f:1d:5c:3c:8f:db:30:03:ad:ae:69:3f:7c:69:e8:47:0e:39: da:65:c8:f9:b1:02:5d:b2:3e:0a:b1:fd:77:e1:a6:34:50:18: e5:ea:94:b2:b6:3f:de:b4:83:01:69:c0:cc:a6:2f:a5:08:9d: b6:62:dd:95:16:d2:0b:94:cd:28:7b:62:e4:06:2f:e8:8d:88: fb:dd:74:a7:23:26:50:22:01:fe:ec:99:a8:8d:67:09:3b:54: 8d:7d:ae:cd:75:4a:67:2d:40:4b:fc:fa:a2:b6:60:29:9e:02: 0e:41:7b:a2:bc:b7:75:b9:32:ca:64:c9:58:d8:45:69:49:2c: 33:dd:a1:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMTMxMTAvBgNVBAUTKEMzQUVBQzk2RURCMjhDMjg4REQ3QTU1MDBCNTEyOTg1 RjFEQTM3MTQwHhcNMjUwODEyMDEyMjU5WhcNMjUwODE5MDEyMjU4WjAYMRYwFAYD VQQDEw02ODlhOTc3My02NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9OOqIOoueYuJn3HSnkbR2Rj9RZXGGMA2iF9sOltV3JTtNF9G2R4MzaqJSq4 P7af7iYAs2IFxT78hx56kPWPr9nKLz87pKozQaQwMAPK6fX3pQOHa5yleLjTQOGc HTDLeMheRJ4GpiJF0OlHqWyLYoscGP6gxrS8RLCG/PREUo/9o/afr0kKc3ykA/Bs EJ0+/tUN/WboN4XEzWHgNVEh1/OtgfO3AWNvj2LwYGxLKMr8rRUlHkfisctEls2v cLFY9z4Bl6dcSyVdh9/hfNEIMsP4HI/7BCkcHOu//t/nPy7WhYca8JpSlK8iB67f d4tQQq3KtGY3WRPug8nn+UmvPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh4uAM+ ucxFgYrrIVW3vxGRDaPjMB8GA1UdIwQYMBaAFMOurJbtsowojdelUAtRKYXx2jcU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxMy8xOEYwOTZFMDg2 NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi93NjZzbHUyeWpDaU4xNlZRQzFFcGhmSGFO eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2NnNsdTJ5akNpTjE2VlFDMUVwaGZIYU54US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxMy8xOEYwOTZFMDg2NkIxMUVCOUJGRDRGMzJDNEY5QUUwMi93NjZzbHUyeWpD aU4xNlZRQzFFcGhmSGFOeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmTFnM73CJ5QDhGMquDxnkNTDW3IdhQkEZ8XEcdHQDYNZAprBKUgsk WMvQndK07gTmmBN6GLIm7y16swuRiTskivCx8w5qM2XfFW2w8HyVwRukITxca5ao PXnSyJw4vebVdFt0Smui2fWbXSF+GBDmKr+u+EnAE4Raar76J6pPHVw8j9swA62u aT98aehHDjnaZcj5sQJdsj4Ksf134aY0UBjl6pSytj/etIMBacDMpi+lCJ22Yt2V FtILlM0oe2LkBi/ojYj73XSnIyZQIgH+7JmojWcJO1SNfa7NdUpnLUBL/PqitmAp ngIOQXuivLd1uTLKZMlY2EVpSSwz3aG5 -----END CERTIFICATE-----Generated at Tue Aug 12 14:41:38 2025 by rpki-client