$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: sKM47wlknOAYKTwjCa747vTVrp+ToJNAwImcZIquM0o= Subject key identifier: 62:65:04:9C:71:CA:6A:85:46:F9:D1:4C:75:2C:88:E9:90:D1:BE:8A Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 21 Signing time: Sat 09 Aug 2025 08:22:35 +0000 Manifest this update: Sat 09 Aug 2025 08:22:35 +0000 Manifest next update: Sat 16 Aug 2025 08:22:35 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: 9Zd4U5iS7vt8B55g7xWfJEFPPb2hOqVRJsEudNTfdVE=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Aug 9 08:22:35 2025 GMT Not After : Aug 16 08:22:35 2025 GMT Subject: CN=6897054b-de1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:3d:52:e9:0a:20:0d:98:2f:e5:66:e1:64: 3b:78:1e:f3:31:d2:88:42:c6:0e:30:5b:6b:85:d0: c5:ce:79:20:9b:4e:6c:f4:13:60:c2:8c:38:b3:19: 79:49:71:47:eb:38:ea:44:2c:2d:87:bb:33:51:83: d6:56:7b:b8:82:aa:8a:34:b8:69:79:22:69:97:6b: 2b:eb:6f:41:4c:2f:fd:2f:25:5a:4b:e0:3e:e6:73: ad:42:eb:49:39:93:ee:e8:de:10:3a:0e:d3:7d:ab: 91:4a:9c:f8:f7:b5:99:70:8f:1e:78:1a:40:22:f3: 5a:67:bb:60:90:81:c7:a3:9d:09:65:9f:5c:7b:47: 42:dd:a2:19:aa:a8:39:5d:e3:14:26:a2:73:51:13: 07:9b:17:2b:76:b7:c8:fe:4b:86:8b:16:ce:e0:8b: 52:44:59:8e:55:05:ca:08:2d:29:6c:ec:21:a0:18: 36:da:b8:95:05:6d:1d:a9:d8:11:9e:a7:15:12:bb: 2e:98:4e:a2:f8:e2:b5:ad:ff:40:72:dd:b8:65:e3: 1f:a8:ff:ce:18:02:4e:68:e5:0e:0c:95:0a:4d:b6: 59:a7:4f:2d:c7:6b:2e:c0:b9:70:58:43:75:a7:7b: 66:cf:c2:97:ea:3f:13:a7:1d:f1:84:f9:98:04:fd: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:65:04:9C:71:CA:6A:85:46:F9:D1:4C:75:2C:88:E9:90:D1:BE:8A X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:48:d4:68:d7:bf:26:1e:e3:fe:ee:6b:bd:dd:5e:36:ff:88: 3b:25:4e:5a:da:3f:94:e1:31:07:d8:ad:63:78:10:4c:a7:da: ff:81:d0:31:f1:e3:18:99:b9:99:f2:3f:df:21:26:c6:4d:f0: f4:23:09:14:b9:41:6b:2b:cd:40:07:5b:27:77:64:76:66:eb: fa:af:c2:a0:a9:d6:99:6b:55:60:29:8c:97:8e:57:4d:59:af: 73:52:53:ef:49:00:36:75:9d:d9:bd:01:af:ff:dd:12:8c:4d: 89:ee:bd:20:e2:21:e6:e3:41:9e:93:13:07:78:ed:9d:82:e0: 4f:50:2f:9e:80:e5:91:3f:e3:ce:15:91:0c:b6:d7:80:0f:d0: 44:66:15:fb:5e:76:98:02:dc:e0:5b:45:52:9b:08:f9:1a:10: 08:4f:cf:50:b7:3f:cf:67:99:1a:b9:c1:f7:84:80:db:f2:c1: 80:36:c7:28:06:6c:c2:30:c5:80:51:70:24:56:71:4d:50:40: b4:89:8a:7f:b9:15:00:f1:98:11:e1:4f:e1:7d:1b:f9:2b:81: 42:74:0d:10:db:99:12:be:f5:dc:4a:0f:25:5b:f5:b8:59:c5: 75:3f:98:2a:47:2c:29:6e:60:bc:3e:0c:33:71:5c:ff:e3:0e: 35:0a:39:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTA4MDkwODIyMzVaFw0yNTA4MTYwODIyMzVaMBgxFjAUBgNV BAMTDTY4OTcwNTRiLWRlMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPVj1S6QogDZgv5WbhZDt4HvMx0ohCxg4wW2uF0MXOeSCbTmz0E2DCjDizGXlJ cUfrOOpELC2HuzNRg9ZWe7iCqoo0uGl5ImmXayvrb0FML/0vJVpL4D7mc61C60k5 k+7o3hA6DtN9q5FKnPj3tZlwjx54GkAi81pnu2CQgcejnQlln1x7R0LdohmqqDld 4xQmonNREwebFyt2t8j+S4aLFs7gi1JEWY5VBcoILSls7CGgGDbauJUFbR2p2BGe pxUSuy6YTqL44rWt/0By3bhl4x+o/84YAk5o5Q4MlQpNtlmnTy3Hay7AuXBYQ3Wn e2bPwpfqPxOnHfGE+ZgE/YDpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYmUEnHHK aoVG+dFMdSyI6ZDRvoowHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBI1GjXvyYe4/7ua73dXjb/iDslTlraP5ThMQfYrWN4EEyn2v+B0DHx 4xiZuZnyP98hJsZN8PQjCRS5QWsrzUAHWyd3ZHZm6/qvwqCp1plrVWApjJeOV01Z r3NSU+9JADZ1ndm9Aa//3RKMTYnuvSDiIebjQZ6TEwd47Z2C4E9QL56A5ZE/484V kQy214AP0ERmFftedpgC3OBbRVKbCPkaEAhPz1C3P89nmRq5wfeEgNvywYA2xygG bMIwxYBRcCRWcU1QQLSJin+5FQDxmBHhT+F9G/krgUJ0DRDbmRK+9dxKDyVb9bhZ xXU/mCpHLCluYLw+DDNxXP/jDjUKOZo= -----END CERTIFICATE-----Generated at Sat Aug 9 23:15:45 2025 by rpki-client