$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: UOobR/zEU4Ek4PCW9AMcllyveY78OulvYceuB3fFlY8= Subject key identifier: C5:1D:E6:9F:A8:C4:8D:2F:43:76:6F:DA:B7:48:78:55:18:A0:30:0D Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: AE Signing time: Tue 05 Aug 2025 06:36:19 +0000 Manifest this update: Tue 05 Aug 2025 06:36:18 +0000 Manifest next update: Tue 12 Aug 2025 06:36:18 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: WPqyezxRPaGMWSAVFIqcejaRWyWVXrAdUhl7DNWkioE=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Aug 5 06:36:18 2025 GMT Not After : Aug 12 06:36:18 2025 GMT Subject: CN=6891a663-0fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:84:5b:08:33:ff:db:ac:15:50:de:0b:3e: 0c:ef:60:6c:66:13:d6:58:ea:f0:d1:a7:10:06:55: 2c:45:4b:30:c5:24:34:55:88:7b:5d:b3:9f:14:50: ba:bb:1d:67:6c:5b:5b:5f:d3:cb:40:58:b0:51:37: 44:93:1d:06:da:99:b1:0b:15:db:29:85:20:05:2b: bb:24:0a:e6:6d:b3:bc:0d:08:46:ac:a0:19:e5:db: 30:0d:e2:33:47:25:1e:c8:6c:76:7a:dc:15:c7:c5: f5:50:26:db:6d:7c:9d:f7:4e:96:9d:5c:eb:57:cc: 31:5f:c4:c5:f5:bf:7a:c4:1f:2c:3d:dc:07:08:09: 41:bc:49:24:59:23:f0:cb:47:96:43:77:0f:d8:44: 17:76:62:c8:f7:5d:1d:f9:9b:0e:1a:40:9f:89:88: 2a:37:c3:f8:38:f7:ff:8a:86:a5:7d:2e:f2:8f:72: ab:d1:1f:bc:89:b2:0b:a4:5b:9b:3e:c6:ce:e9:43: 42:2a:fb:8f:39:37:1e:37:5b:3b:28:32:42:e6:5f: 4c:1b:d7:16:fc:14:c7:13:08:30:ad:47:69:07:85: 78:12:3a:cb:a5:0a:39:bf:09:2a:1a:1a:08:58:76: e7:0c:4b:67:11:28:83:64:69:e2:e1:fd:df:3c:37: b8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:E6:9F:A8:C4:8D:2F:43:76:6F:DA:B7:48:78:55:18:A0:30:0D X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ff:ef:03:a8:98:94:84:30:40:4d:12:29:36:51:92:1b:6b: 27:9b:9a:7e:ed:a4:00:f9:cf:c4:d8:a8:cc:cc:a3:40:62:15: f7:15:c2:ee:30:75:69:fe:60:15:1e:84:ff:7b:8e:d6:f2:23: b9:10:d3:52:58:a2:a0:0c:e3:0f:72:0d:85:b6:99:37:9f:74: 07:35:9c:c3:be:ec:3c:4b:ab:b2:0a:2b:95:7c:f7:75:8e:b2: c2:01:d5:63:94:1d:87:a2:3d:1f:08:3d:8a:35:a0:03:4a:46: 0b:b5:e9:70:40:e0:52:f8:38:df:ff:90:69:5c:6b:df:1e:5f: c8:a0:96:30:4f:6b:b2:ba:0a:72:d8:c7:cc:37:21:62:a3:46: 7f:aa:85:09:ad:d5:25:d5:75:e2:f6:cb:42:61:49:1d:6c:19: 2e:e6:52:65:1e:ef:a7:31:cd:96:ed:db:f8:a7:dc:1a:8a:8c: b9:d2:df:4f:78:7a:68:63:4f:4b:d8:cd:c0:81:ee:ed:aa:1e: 51:91:1d:be:b9:04:49:26:a4:55:15:87:3f:d5:6b:93:be:cf: 17:a4:36:1f:36:43:e0:c7:b4:3f:13:6f:96:40:33:d5:26:e7: 84:18:ee:b7:69:fc:74:0a:e7:7e:8c:07:f7:75:a1:9f:82:fe: 82:88:f5:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwODA1MDYzNjE4WhcNMjUwODEyMDYzNjE4WjAYMRYwFAYD VQQDEw02ODkxYTY2My0wZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQyEWwgz/9usFVDeCz4M72BsZhPWWOrw0acQBlUsRUswxSQ0VYh7XbOfFFC6 ux1nbFtbX9PLQFiwUTdEkx0G2pmxCxXbKYUgBSu7JArmbbO8DQhGrKAZ5dswDeIz RyUeyGx2etwVx8X1UCbbbXyd906WnVzrV8wxX8TF9b96xB8sPdwHCAlBvEkkWSPw y0eWQ3cP2EQXdmLI910d+ZsOGkCfiYgqN8P4OPf/ioalfS7yj3Kr0R+8ibILpFub PsbO6UNCKvuPOTceN1s7KDJC5l9MG9cW/BTHEwgwrUdpB4V4EjrLpQo5vwkqGhoI WHbnDEtnESiDZGni4f3fPDe4BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUd5p+o xI0vQ3Zv2rdIeFUYoDANMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/+8DqJiUhDBATRIpNlGSG2snm5p+7aQA+c/E2KjMzKNAYhX3FcLu MHVp/mAVHoT/e47W8iO5ENNSWKKgDOMPcg2Ftpk3n3QHNZzDvuw8S6uyCiuVfPd1 jrLCAdVjlB2Hoj0fCD2KNaADSkYLtelwQOBS+Djf/5BpXGvfHl/IoJYwT2uyugpy 2MfMNyFio0Z/qoUJrdUl1XXi9stCYUkdbBku5lJlHu+nMc2W7dv4p9waioy50t9P eHpoY09L2M3Age7tqh5RkR2+uQRJJqRVFYc/1WuTvs8XpDYfNkPgx7Q/E2+WQDPV JueEGO63afx0Cud+jAf3daGfgv6CiPVI -----END CERTIFICATE-----Generated at Thu Aug 7 03:50:40 2025 by rpki-client