$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft File: wH1plEfeirTddOwzDml3qwMZJmI.mft (raw, json) Hash identifier: H4MstSLd6Vu3vaj677wPS6OouAzQmEpPxAfD+jtcxow= Subject key identifier: 0B:45:4D:4A:E4:79:0B:9F:77:3B:F7:A7:A1:C6:1F:A5:A4:C3:86:E1 Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 Certificate issuer: /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft Manifest number: 0198 Signing time: Sun 03 Aug 2025 03:43:59 +0000 Manifest this update: Sun 03 Aug 2025 03:43:58 +0000 Manifest next update: Sun 10 Aug 2025 03:43:58 +0000 Files and hashes: 1: wH1plEfeirTddOwzDml3qwMZJmI.crl (hash: tEzgAuiaZI7P2ptmnGWj61tdWPN9q+91D203rki/iZw=) 2: 6065A88AFE0011ED89B23949C4F9AE02.roa (hash: GQuRICCeDjjGixJ45rH35u2ONJ6slmeUzZUnxu6QOIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662 Validity Not Before: Aug 3 03:43:58 2025 GMT Not After : Aug 10 03:43:58 2025 GMT Subject: CN=688edafe-fafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:9a:3e:c9:6a:47:cc:06:d3:1a:41:bb:6d: e9:d8:9f:26:f5:c7:56:3a:9d:03:1e:a3:cc:24:1b: b3:8d:8a:ed:0c:42:06:d9:6f:ac:58:02:51:e0:54: c2:71:cd:91:fc:4b:83:20:53:70:7d:1c:bb:55:c2: a7:bd:73:7b:2a:8b:19:33:1f:cf:62:6e:61:e5:0d: 46:ee:87:a2:28:62:11:23:d0:47:5e:2a:a1:2f:81: b9:81:bc:09:bf:22:ed:fb:80:76:5c:da:58:4b:fd: 7c:4c:1c:7e:3d:66:8c:db:30:60:b4:51:0a:41:3a: 4d:96:73:78:31:1d:c1:c2:31:63:24:2e:1a:e5:a8: 68:7d:1f:84:07:50:99:16:f8:83:62:90:18:22:3c: f1:0e:e3:22:76:53:ed:3f:e4:ec:b0:a3:d7:6f:0b: c5:bd:e5:f2:40:43:cd:1b:f5:63:b9:d5:78:e5:3f: f3:d3:7c:54:fc:48:84:21:31:98:fe:64:27:e8:68: ea:da:3b:6d:e8:92:fe:d6:de:41:ae:53:29:f6:c2: 5f:e1:ac:53:22:0e:b5:13:48:16:27:f7:62:d3:c9: d1:6e:94:97:fa:6c:cc:66:f8:8b:14:03:ff:6d:d8: 11:6e:27:1a:b7:ef:eb:b5:b0:b5:d9:40:21:87:fe: e5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:45:4D:4A:E4:79:0B:9F:77:3B:F7:A7:A1:C6:1F:A5:A4:C3:86:E1 X509v3 Authority Key Identifier: keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:15:85:37:83:b2:ac:75:87:7c:1d:3c:a0:59:2a:03:13:d8: b5:e1:43:ad:66:d1:a1:b2:a0:cc:8a:e3:8b:63:06:50:33:1c: 31:a8:ab:63:b1:11:49:c0:b2:e0:57:58:e9:f7:76:16:c7:a0: 5a:9b:39:bc:e0:6f:3f:67:60:e7:03:b3:55:2e:f6:21:4d:40: ad:02:2f:bc:ee:aa:bf:b2:0a:25:0f:47:e7:aa:3d:ab:81:6a: ee:35:a7:7d:c8:15:e6:84:c2:c3:22:42:c1:0a:89:3f:7f:5c: a8:f1:08:12:27:5d:f3:b3:7f:f3:7e:23:64:9e:d4:7c:27:2e: d3:aa:c8:d7:95:79:a6:24:90:54:00:22:8f:84:36:71:9e:95: 6a:25:d0:ec:a9:6a:0f:d4:96:48:a9:ce:89:7b:9a:9d:c3:0d: e7:a8:58:9d:ae:15:cf:69:07:7d:50:fe:be:f6:ab:1e:0d:5c: 59:97:34:ae:1d:40:6e:6d:e8:e6:7c:93:25:64:69:d4:10:de: 64:5d:49:b8:b2:e6:0a:33:5e:f6:80:c0:82:51:46:bb:f7:0f: c9:bc:a0:ba:35:66:36:20:bb:3b:57:d4:ac:46:f0:c4:83:32: e5:09:a1:10:d2:a3:b3:f6:c5:f6:e3:1a:28:ab:8d:f6:56:26: 3c:d6:4f:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkyRDYxMTAvBgNVBAUTKEMwN0Q2OTk0NDdERThBQjRERDc0RUMzMzBFNjk3N0FC MDMxOTI2NjIwHhcNMjUwODAzMDM0MzU4WhcNMjUwODEwMDM0MzU4WjAYMRYwFAYD VQQDEw02ODhlZGFmZS1mYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3iaPslqR8wG0xpBu23p2J8m9cdWOp0DHqPMJBuzjYrtDEIG2W+sWAJR4FTC cc2R/EuDIFNwfRy7VcKnvXN7KosZMx/PYm5h5Q1G7oeiKGIRI9BHXiqhL4G5gbwJ vyLt+4B2XNpYS/18TBx+PWaM2zBgtFEKQTpNlnN4MR3BwjFjJC4a5ahofR+EB1CZ FviDYpAYIjzxDuMidlPtP+TssKPXbwvFveXyQEPNG/VjudV45T/z03xU/EiEITGY /mQn6Gjq2jtt6JL+1t5BrlMp9sJf4axTIg61E0gWJ/di08nRbpSX+mzMZviLFAP/ bdgRbicat+/rtbC12UAhh/7lQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtFTUrk eQufdzv3p6HGH6Wkw4bhMB8GA1UdIwQYMBaAFMB9aZRH3oq03XTsMw5pd6sDGSZi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJENi8wREQ5RkRDQUZE RjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWlyVGRkT3d6RG1sM3F3TVpK bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dIMXBsRWZlaXJUZGRPd3pEbWwzcXdNWkptSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTJENi8wREQ5RkRDQUZERjkxMUVEQTY5QUMzN0VDNEY5QUUwMi93SDFwbEVmZWly VGRkT3d6RG1sM3F3TVpKbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPFYU3g7KsdYd8HTygWSoDE9i14UOtZtGhsqDMiuOLYwZQMxwxqKtj sRFJwLLgV1jp93YWx6Bamzm84G8/Z2DnA7NVLvYhTUCtAi+87qq/sgolD0fnqj2r gWruNad9yBXmhMLDIkLBCok/f1yo8QgSJ13zs3/zfiNkntR8Jy7TqsjXlXmmJJBU ACKPhDZxnpVqJdDsqWoP1JZIqc6Je5qdww3nqFidrhXPaQd9UP6+9qseDVxZlzSu HUBubejmfJMlZGnUEN5kXUm4suYKM172gMCCUUa79w/JvKC6NWY2ILs7V9SsRvDE gzLlCaEQ0qOz9sX24xooq432ViY81k/P -----END CERTIFICATE-----Generated at Mon Aug 4 14:50:49 2025 by rpki-client