$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: 4goiOWThJXtiC+fdyZKz2J1gXuLOQCsdDDteTLRe5bg= Subject key identifier: 57:87:34:12:D1:BC:19:24:08:49:6B:F1:F3:AF:DF:83:29:64:02:B0 Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 0283 Signing time: Thu 07 Aug 2025 02:17:11 +0000 Manifest this update: Thu 07 Aug 2025 02:17:10 +0000 Manifest next update: Thu 14 Aug 2025 02:17:10 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: sNqwz5rTHYxgrOsLC9E8701S2cf+T2hL6WGGdOLjvck=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: Aug 7 02:17:10 2025 GMT Not After : Aug 14 02:17:10 2025 GMT Subject: CN=68940ca6-3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:45:e6:9a:52:75:b4:e3:70:a3:50:a2:2c: 04:7b:4e:96:b0:54:58:1e:ba:55:fc:8e:63:6a:2a: 6c:08:0f:bd:fb:4c:d5:73:00:85:50:7e:bb:0d:ce: fa:94:2d:85:3e:0c:00:48:e5:82:9a:1f:f1:dd:f1: 38:93:89:cc:d1:48:70:d2:db:c4:57:70:6a:88:54: 67:89:bb:14:e9:0d:a6:12:d6:80:45:f5:ef:e9:f8: e3:46:46:7c:94:e2:f6:63:1b:b5:52:37:4f:59:2f: 53:a0:19:e0:a9:aa:e3:07:e6:64:c1:de:d0:26:6e: e7:75:be:5f:bd:5c:ec:31:3e:d6:5d:6d:28:70:2c: 93:bf:7a:83:3d:be:83:43:97:c7:44:cc:ad:69:a3: 5f:bc:7a:e7:5a:81:5f:61:b4:aa:07:c7:a6:3b:d7: 9f:ff:42:bd:72:c5:1c:26:ba:90:c2:33:a1:2a:a2: 90:4a:91:67:a4:ef:50:f8:63:9c:88:f5:38:97:c3: 46:90:67:81:04:3b:3b:6b:25:2d:da:48:d9:b9:85: 85:70:d1:0a:19:74:58:21:97:59:d7:fa:b3:2c:02: 19:75:dc:f7:9f:a0:e4:05:e3:54:eb:59:27:0c:dc: fb:4c:e9:e3:8d:07:ed:ed:c1:ac:61:ec:fc:85:96: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:87:34:12:D1:BC:19:24:08:49:6B:F1:F3:AF:DF:83:29:64:02:B0 X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d9:df:2d:c1:40:72:6d:09:d4:31:08:07:b2:7b:ad:84:f3: b9:76:52:85:ca:7a:b3:78:7c:f6:d9:34:09:c7:49:86:ee:88: 27:e9:42:5f:ab:16:e5:42:ae:4d:15:d7:ef:e3:bc:58:e7:94: 6b:d0:0c:62:7f:19:d6:8c:82:91:1d:74:28:d7:dc:aa:3e:51: 07:8a:a4:74:12:bd:97:0b:0d:c3:a4:a7:24:45:b4:55:45:f0: c3:6e:2e:0f:aa:4d:b0:e8:0e:bb:c6:b8:9c:0b:1d:f5:2f:df: 6a:41:a0:be:9b:95:6f:bc:1e:4d:4b:4c:a0:4c:3f:b0:f3:73: 7a:17:8e:6b:8b:cb:95:b5:08:c6:5b:e0:e9:e9:a3:21:7b:8c: a6:23:f2:38:3a:bd:e7:0c:4b:fe:91:96:ea:ad:e4:a6:4d:14: e6:2a:46:2e:48:f0:1a:a0:97:74:42:0f:7e:37:ee:72:a1:95: 98:29:89:1d:42:22:02:37:98:f5:9f:16:69:5d:71:e1:4e:4b: 71:8a:90:63:7b:e4:a5:fc:d2:59:9f:67:83:c2:85:d5:9b:0c: 38:c2:32:31:e1:4b:a7:5a:18:60:e3:97:41:82:c5:57:42:3b: 65:05:f5:5e:d9:70:17:b3:00:ca:7a:8e:80:f3:2d:2c:94:bb: ba:90:0b:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjUwODA3MDIxNzEwWhcNMjUwODE0MDIxNzEwWjAYMRYwFAYD VQQDEw02ODk0MGNhNi0zYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DxF5ppSdbTjcKNQoiwEe06WsFRYHrpV/I5jaipsCA+9+0zVcwCFUH67Dc76 lC2FPgwASOWCmh/x3fE4k4nM0Uhw0tvEV3BqiFRnibsU6Q2mEtaARfXv6fjjRkZ8 lOL2Yxu1UjdPWS9ToBngqarjB+Zkwd7QJm7ndb5fvVzsMT7WXW0ocCyTv3qDPb6D Q5fHRMytaaNfvHrnWoFfYbSqB8emO9ef/0K9csUcJrqQwjOhKqKQSpFnpO9Q+GOc iPU4l8NGkGeBBDs7ayUt2kjZuYWFcNEKGXRYIZdZ1/qzLAIZddz3n6DkBeNU61kn DNz7TOnjjQft7cGsYez8hZZHMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeHNBLR vBkkCElr8fOv34MpZAKwMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+2d8twUBybQnUMQgHsnuthPO5dlKFynqzeHz22TQJx0mG7ogn6UJf qxblQq5NFdfv47xY55Rr0AxifxnWjIKRHXQo19yqPlEHiqR0Er2XCw3DpKckRbRV RfDDbi4Pqk2w6A67xricCx31L99qQaC+m5VvvB5NS0ygTD+w83N6F45ri8uVtQjG W+Dp6aMhe4ymI/I4Or3nDEv+kZbqreSmTRTmKkYuSPAaoJd0Qg9+N+5yoZWYKYkd QiICN5j1nxZpXXHhTktxipBje+Sl/NJZn2eDwoXVmww4wjIx4UunWhhg45dBgsVX QjtlBfVe2XAXswDKeo6A8y0slLu6kAs6 -----END CERTIFICATE-----Generated at Sat Aug 9 01:14:31 2025 by rpki-client