$ rpki-client -vvf rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft File: s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft (raw, json) Hash identifier: Qm7zphVEirqLIdoVModk/h7TwPTN7UOGLcDhq3UrC8E= Subject key identifier: 3C:F5:1E:65:1E:96:A5:BC:8E:76:1E:2A:53:5D:35:7F:62:CD:3C:B5 Authority key identifier: B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 Certificate issuer: /CN=A91A381A/serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft Manifest number: 014B Signing time: Sat 09 Aug 2025 04:38:22 +0000 Manifest this update: Sat 09 Aug 2025 04:38:21 +0000 Manifest next update: Sat 16 Aug 2025 04:38:21 +0000 Files and hashes: 1: s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl (hash: 1SerRPLWbm/pFCPNK+fDRLRJpTRhCf9Nbu8qEQo9j5o=) 2: EBB7A41AB4DA11EEBD650259C4F9AE02.roa (hash: l8sRE2YAPh1eQYlp9y5e6VCbUFJp+lvUI5lEd97/izs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A381A, serialNumber=B3EC1FF6AD552AA16EE1019564BAD9F761FDB5D8 Validity Not Before: Aug 9 04:38:21 2025 GMT Not After : Aug 16 04:38:21 2025 GMT Subject: CN=6896d0bd-8e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:70:07:91:59:c0:d9:48:e7:30:08:ec:a8: 2d:63:eb:9b:25:b0:a4:39:9e:1b:ec:1b:82:0c:9e: 1c:ee:79:6c:57:5e:d7:68:f2:2b:23:5a:96:9d:b9: c7:32:8b:c8:03:08:03:a7:77:67:eb:76:51:e2:26: 1a:c7:d6:eb:de:44:a5:2d:26:09:64:c9:79:b3:87: dd:84:58:23:de:ae:74:56:cf:cb:e1:38:7a:d9:15: 26:2b:b0:a8:fc:6a:81:2a:21:7b:01:ef:71:7b:db: b5:4e:6e:63:03:33:fd:01:46:d3:e2:e1:09:d6:91: 64:42:21:24:bc:33:ab:0c:1b:59:e1:fa:e1:ea:8b: 5b:e4:4e:f0:f6:dd:27:0f:f5:fd:67:7e:20:50:d2: 1b:39:25:48:72:a5:a3:65:2f:0b:82:35:c8:72:fc: f9:38:a5:b2:07:df:57:c3:2f:9a:89:b1:26:de:cd: f1:59:98:dc:a3:c8:ed:a9:9a:0f:a2:3e:5e:72:5a: 84:1d:9c:70:2c:2e:f3:ff:b9:a0:a9:9f:0d:1a:d6: 28:e9:c7:e0:52:9c:8c:78:6e:85:56:da:f0:ce:0c: 02:33:35:d4:7f:67:ca:59:17:a2:ae:27:6a:92:f6: 57:12:14:26:34:26:72:c0:81:61:fc:14:4e:de:42: 19:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F5:1E:65:1E:96:A5:BC:8E:76:1E:2A:53:5D:35:7F:62:CD:3C:B5 X509v3 Authority Key Identifier: keyid:B3:EC:1F:F6:AD:55:2A:A1:6E:E1:01:95:64:BA:D9:F7:61:FD:B5:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-wf9q1VKqFu4QGVZLrZ92H9tdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A381A/28E86E4479FF11EEB32C2379C4F9AE02/s-wf9q1VKqFu4QGVZLrZ92H9tdg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b2:33:65:30:8f:52:8f:57:a0:f1:f0:c7:ba:92:f2:b3:66: 6f:8d:f8:2c:c4:81:20:5c:43:e5:b7:7b:51:68:4b:b3:33:ad: 59:66:c8:50:17:35:a6:65:1c:f1:b3:ca:5c:2c:ec:36:cd:d2: 1a:d2:34:4b:07:65:4d:e5:a1:10:04:42:04:d9:c2:55:38:1b: 1b:09:68:b5:29:da:a4:4f:23:c0:1c:db:97:d5:ee:01:38:27: ef:5c:cf:d0:2d:3b:ae:5c:89:7c:e0:b1:38:aa:66:6c:e5:a5: 2f:4e:e2:d9:9c:53:09:23:f9:66:a7:e1:ee:6e:f4:07:63:1f: 02:7b:48:83:bf:04:ba:85:88:9a:ac:e7:15:be:be:d4:03:09: b3:9d:fe:57:fb:5a:a7:fe:02:80:4c:75:ac:a7:23:86:7e:77: 36:27:4e:aa:ed:ea:cf:68:1a:93:10:a6:6f:5a:a2:ae:20:9e: 13:c5:74:63:f9:95:b1:2a:be:8f:5d:2e:03:66:16:c8:33:d3: f1:fa:2f:ae:b1:8c:b3:27:85:77:65:d9:43:8b:85:47:17:2f: a9:de:dd:02:d7:64:00:ae:a1:6c:1b:ed:ee:93:03:b2:ed:77: a6:82:f1:81:f3:23:be:1e:87:9b:09:75:e0:20:bb:35:89:06: f2:e0:97:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4MUExMTAvBgNVBAUTKEIzRUMxRkY2QUQ1NTJBQTE2RUUxMDE5NTY0QkFEOUY3 NjFGREI1RDgwHhcNMjUwODA5MDQzODIxWhcNMjUwODE2MDQzODIxWjAYMRYwFAYD VQQDEw02ODk2ZDBiZC04ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygdwB5FZwNlI5zAI7KgtY+ubJbCkOZ4b7BuCDJ4c7nlsV17XaPIrI1qWnbnH MovIAwgDp3dn63ZR4iYax9br3kSlLSYJZMl5s4fdhFgj3q50Vs/L4Th62RUmK7Co /GqBKiF7Ae9xe9u1Tm5jAzP9AUbT4uEJ1pFkQiEkvDOrDBtZ4frh6otb5E7w9t0n D/X9Z34gUNIbOSVIcqWjZS8LgjXIcvz5OKWyB99Xwy+aibEm3s3xWZjco8jtqZoP oj5eclqEHZxwLC7z/7mgqZ8NGtYo6cfgUpyMeG6FVtrwzgwCMzXUf2fKWReiridq kvZXEhQmNCZywIFh/BRO3kIZuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDz1HmUe lqW8jnYeKlNdNX9izTy1MB8GA1UdIwQYMBaAFLPsH/atVSqhbuEBlWS62fdh/bXY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzgxQS8yOEU4NkU0NDc5 RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktxRnU0UUdWWkxyWjkySDl0 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Mtd2Y5cTFWS3FGdTRRR1ZaTHJaOTJIOXRkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzgxQS8yOEU4NkU0NDc5RkYxMUVFQjMyQzIzNzlDNEY5QUUwMi9zLXdmOXExVktx RnU0UUdWWkxyWjkySDl0ZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKsjNlMI9Sj1eg8fDHupLys2ZvjfgsxIEgXEPlt3tRaEuzM61ZZshQ FzWmZRzxs8pcLOw2zdIa0jRLB2VN5aEQBEIE2cJVOBsbCWi1KdqkTyPAHNuX1e4B OCfvXM/QLTuuXIl84LE4qmZs5aUvTuLZnFMJI/lmp+HubvQHYx8Ce0iDvwS6hYia rOcVvr7UAwmznf5X+1qn/gKATHWspyOGfnc2J06q7erPaBqTEKZvWqKuIJ4TxXRj +ZWxKr6PXS4DZhbIM9Px+i+usYyzJ4V3ZdlDi4VHFy+p3t0C12QArqFsG+3ukwOy 7XemgvGB8yO+HoebCXXgILs1iQby4JcX -----END CERTIFICATE-----Generated at Sun Aug 10 04:14:38 2025 by rpki-client