$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft File: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft (raw, json) Hash identifier: OQBoe4xTMVbi+ruPYKq1/qi6s+TajTDVHRHPGL7YMXE= Subject key identifier: 22:25:6A:DE:94:C2:5F:91:11:4B:51:F9:BC:06:51:34:4F:FD:25:14 Authority key identifier: 5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 Certificate issuer: /CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft Manifest number: 07BA Signing time: Fri 08 Aug 2025 21:36:00 +0000 Manifest this update: Fri 08 Aug 2025 21:35:59 +0000 Manifest next update: Fri 15 Aug 2025 21:35:59 +0000 Files and hashes: 1: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl (hash: EZ4WeB8kqmcEDBVBVmYwccHjFWob4vdRmOk9dr8IqPc=) 2: EEC2740A08A811EBB9370955C4F9AE02.roa (hash: 9uP3caieQ9R/E3ygi+poq9n2v4lqPTCGWeJ156owEWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3859, serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Validity Not Before: Aug 8 21:35:59 2025 GMT Not After : Aug 15 21:35:59 2025 GMT Subject: CN=68966dc0-b17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dd:9f:07:f6:cc:bc:fe:65:24:fb:ec:f3:2d: 99:93:65:e6:46:eb:02:4d:72:35:09:d7:e9:45:e8: ca:41:cc:46:69:6b:bf:82:bf:05:fe:1d:69:37:c0: c4:33:92:6a:a2:8f:c8:57:cb:96:7e:be:e7:ba:cb: cc:b7:01:02:cf:a7:61:00:32:6c:f0:3b:33:fb:f3: e9:0f:13:94:56:e9:c0:95:19:74:1c:85:93:fc:87: 8a:5d:2c:fb:e1:8d:b8:f8:ab:dc:4f:64:26:e5:7a: a3:7e:0b:65:13:11:de:33:d3:ee:42:af:b7:9e:d6: df:48:94:b2:53:27:38:76:7a:72:27:5a:9d:72:cf: 08:26:18:10:22:57:ce:ea:c0:40:b6:53:5a:2c:40: e8:69:55:52:ae:bd:af:c4:b8:8e:31:95:18:5b:5a: fb:7e:0e:2a:47:81:b0:3c:2f:e2:cc:e3:a9:a6:f6: ec:e0:11:b9:1d:c4:1a:dd:47:a4:91:a3:71:ad:1f: e5:0b:41:a5:1b:3c:e6:b8:61:f8:cf:c2:58:2e:b6: 2b:46:39:cf:01:60:7e:2f:b7:e0:34:14:07:63:f8: 56:ed:34:e9:4c:8e:07:3d:40:25:81:83:a0:fc:16: b9:25:42:9a:00:24:f4:6f:8a:c1:02:88:6c:06:1e: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:25:6A:DE:94:C2:5F:91:11:4B:51:F9:BC:06:51:34:4F:FD:25:14 X509v3 Authority Key Identifier: keyid:5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:f2:c5:e1:94:28:f6:cb:d8:cb:60:e5:88:6e:21:cd:49:e0: 8e:c3:07:56:3a:ec:e3:49:3f:10:72:a1:43:34:1a:ef:11:c8: af:f9:84:7e:d3:27:a1:f7:c3:ec:63:95:9b:79:49:e5:8b:b1: 3f:fa:95:5f:62:eb:1a:17:4f:9d:39:dc:eb:2e:12:9a:e9:42: 26:55:d1:0c:dc:dd:be:e0:a5:f7:74:bc:bb:93:17:3d:d0:a6: 89:f9:96:3f:b2:77:fd:be:f8:f5:56:14:91:65:5c:7a:60:9b: 62:7b:e6:57:45:d9:d2:53:dc:f5:98:a4:8f:db:f2:c3:10:8b: ee:34:55:5f:e4:e4:79:f0:3d:bd:37:e7:01:c4:57:42:52:06: f8:cb:69:ed:d7:2e:64:81:7d:fd:2c:15:65:59:2e:6c:ed:e5: 12:92:b5:66:4e:4e:0b:a5:6d:6c:21:6a:23:20:d1:74:2d:15: 47:7f:89:8b:a6:c8:5d:96:7e:29:b1:d2:94:3b:44:ee:9e:af: ba:6a:dd:f0:8d:b3:fb:c6:e1:78:82:b7:03:79:76:ee:1e:20: 5f:1a:74:a2:65:db:34:ad:67:9f:06:4c:b5:13:6e:43:67:cf: c8:ad:d6:29:d2:a8:53:89:4c:7b:89:2e:10:ea:b6:7a:69:cd: 07:5e:37:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4NTkxMTAvBgNVBAUTKDVCMEVBMDk0NTExOUU1M0U5RkI4MjBEOTIyMTAzNTc0 NDFFNEFDRDYwHhcNMjUwODA4MjEzNTU5WhcNMjUwODE1MjEzNTU5WjAYMRYwFAYD VQQDEw02ODk2NmRjMC1iMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN2fB/bMvP5lJPvs8y2Zk2XmRusCTXI1CdfpRejKQcxGaWu/gr8F/h1pN8DE M5Jqoo/IV8uWfr7nusvMtwECz6dhADJs8Dsz+/PpDxOUVunAlRl0HIWT/IeKXSz7 4Y24+KvcT2Qm5XqjfgtlExHeM9PuQq+3ntbfSJSyUyc4dnpyJ1qdcs8IJhgQIlfO 6sBAtlNaLEDoaVVSrr2vxLiOMZUYW1r7fg4qR4GwPC/izOOppvbs4BG5HcQa3Uek kaNxrR/lC0GlGzzmuGH4z8JYLrYrRjnPAWB+L7fgNBQHY/hW7TTpTI4HPUAlgYOg /Ba5JUKaACT0b4rBAohsBh5HvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIlat6U wl+REUtR+bwGUTRP/SUUMB8GA1UdIwQYMBaAFFsOoJRRGeU+n7gg2SIQNXRB5KzW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg1OS9FRTdFMEMwNDA4 QTYxMUVCODdFMjlBMzlDNEY5QUUwMi9XdzZnbEZFWjVUNmZ1Q0RaSWhBMWRFSGty TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d3NmdsRkVaNVQ2ZnVDRFpJaEExZEVIa3JOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzg1OS9FRTdFMEMwNDA4QTYxMUVCODdFMjlBMzlDNEY5QUUwMi9XdzZnbEZFWjVU NmZ1Q0RaSWhBMWRFSGtyTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC18sXhlCj2y9jLYOWIbiHNSeCOwwdWOuzjST8QcqFDNBrvEciv+YR+ 0yeh98PsY5WbeUnli7E/+pVfYusaF0+dOdzrLhKa6UImVdEM3N2+4KX3dLy7kxc9 0KaJ+ZY/snf9vvj1VhSRZVx6YJtie+ZXRdnSU9z1mKSP2/LDEIvuNFVf5OR58D29 N+cBxFdCUgb4y2nt1y5kgX39LBVlWS5s7eUSkrVmTk4LpW1sIWojINF0LRVHf4mL pshdln4psdKUO0Tunq+6at3wjbP7xuF4grcDeXbuHiBfGnSiZds0rWefBky1E25D Z8/IrdYp0qhTiUx7iS4Q6rZ6ac0HXjfq -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:52 2025 by rpki-client