$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: gSxtiGEzXE/WkWGRbpssoiqBkNgZWSa4lfLZwyowdTY= Subject key identifier: 3D:10:A0:4E:F0:2C:1C:FB:85:C6:E1:03:EA:1D:76:A8:15:CD:0F:D0 Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 08BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 08B8 Signing time: Fri 08 Aug 2025 20:50:46 +0000 Manifest this update: Fri 08 Aug 2025 20:50:45 +0000 Manifest next update: Fri 15 Aug 2025 20:50:45 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: i74N8lDLH3MT8nH74BrHgX+b4AGToT8NzgaPf00YeBg=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: MbzDlkokZBR/aS6/hcoRXo43UcCAHhzz3LI8ih+FSVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: Aug 8 20:50:45 2025 GMT Not After : Aug 15 20:50:45 2025 GMT Subject: CN=68966325-0969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:83:0e:3a:8d:b8:f1:a6:d9:08:87:2b:18: 93:c7:7b:38:b9:1f:0f:f5:dc:91:aa:05:8d:cc:27: b7:89:48:00:20:a7:1c:56:23:87:1f:49:75:3d:d3: f5:b7:bc:d0:8d:74:46:55:f3:9c:0f:8b:a6:c6:a7: b8:bf:07:fa:65:43:31:d9:0d:f9:91:45:f5:26:0b: 08:f4:c8:41:63:df:fa:3a:96:6c:5c:d6:a2:27:6d: ea:7a:28:cb:72:ba:b0:80:b1:2d:19:7c:09:0f:76: fa:5a:dd:8c:3b:76:9e:d5:57:2a:35:fd:9d:30:9a: 81:47:f1:25:dc:19:d3:b3:32:15:11:a0:84:69:e2: 07:4d:66:b6:6b:c4:97:40:d8:58:d2:93:c3:47:a6: 29:54:75:8f:d4:f0:ae:7b:0d:af:f7:38:b2:fa:4e: 76:8c:e4:01:25:76:05:44:30:87:cb:3a:86:b1:26: 4c:33:8a:9e:9b:8b:2b:02:dd:e7:c0:ba:ef:42:16: c6:7a:72:6e:1c:34:d1:3f:1b:9d:cd:38:67:61:ec: 4f:37:bf:2d:00:53:dc:d5:a4:58:c1:92:61:e9:9d: 87:c8:cc:fa:00:a5:21:ad:4c:ef:e9:03:bf:14:2f: 35:33:9a:a2:47:e6:2f:06:74:29:f5:cd:2a:e1:e8: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:10:A0:4E:F0:2C:1C:FB:85:C6:E1:03:EA:1D:76:A8:15:CD:0F:D0 X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:45:76:3d:39:4f:42:ad:eb:2f:bf:a2:87:df:bc:ca:f1:ef: 7f:8f:0c:30:f3:42:73:72:82:51:fb:bd:82:61:75:1e:08:61: dc:4f:10:bf:92:62:c7:7e:e0:b0:78:40:ab:ae:36:94:e3:bc: 78:eb:e0:e9:5d:8c:bd:df:a0:20:db:cf:93:34:9e:de:58:c7: f0:08:63:07:14:f2:fc:b6:29:05:83:1a:57:a3:3a:2b:da:38: eb:1f:8e:a9:46:80:bd:e6:3a:1b:a3:c4:34:85:c5:b7:82:22: 30:9d:92:23:20:2c:bb:c5:9c:83:03:d0:73:0b:c3:f4:66:47: 6b:aa:68:42:54:82:cb:7a:a7:0a:16:05:51:fd:52:59:cd:53: dc:ea:17:2b:dd:a9:22:ee:bb:0b:b9:30:29:bc:24:25:44:77: 86:80:93:dd:1d:cb:cd:e9:79:50:5e:f2:c1:23:12:6d:9c:9a: 23:95:5a:95:e5:9c:2c:a6:67:cf:cb:1f:71:38:63:8e:56:cc: 1e:06:27:37:36:3e:17:06:c7:a3:24:ff:63:53:3d:13:68:25: 9f:3b:20:38:ee:de:c0:bc:3d:17:b1:26:c9:f5:a4:ab:dc:fb: 78:ac:e9:17:a0:5e:a3:7a:d3:55:97:b4:cc:94:cd:31:34:d4: dd:81:e3:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUwODA4MjA1MDQ1WhcNMjUwODE1MjA1MDQ1WjAYMRYwFAYD VQQDEw02ODk2NjMyNS0wOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiKDDjqNuPGm2QiHKxiTx3s4uR8P9dyRqgWNzCe3iUgAIKccViOHH0l1PdP1 t7zQjXRGVfOcD4umxqe4vwf6ZUMx2Q35kUX1JgsI9MhBY9/6OpZsXNaiJ23qeijL crqwgLEtGXwJD3b6Wt2MO3ae1VcqNf2dMJqBR/El3BnTszIVEaCEaeIHTWa2a8SX QNhY0pPDR6YpVHWP1PCuew2v9ziy+k52jOQBJXYFRDCHyzqGsSZMM4qem4srAt3n wLrvQhbGenJuHDTRPxudzThnYexPN78tAFPc1aRYwZJh6Z2HyMz6AKUhrUzv6QO/ FC81M5qiR+YvBnQp9c0q4egy5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0QoE7w LBz7hcbhA+oddqgVzQ/QMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDoRXY9OU9Cresvv6KH37zK8e9/jwww80JzcoJR+72CYXUeCGHcTxC/ kmLHfuCweECrrjaU47x46+DpXYy936Ag28+TNJ7eWMfwCGMHFPL8tikFgxpXozor 2jjrH46pRoC95jobo8Q0hcW3giIwnZIjICy7xZyDA9BzC8P0ZkdrqmhCVILLeqcK FgVR/VJZzVPc6hcr3aki7rsLuTApvCQlRHeGgJPdHcvN6XlQXvLBIxJtnJojlVqV 5ZwspmfPyx9xOGOOVsweBic3Nj4XBsejJP9jUz0TaCWfOyA47t7AvD0XsSbJ9aSr 3Pt4rOkXoF6jetNVl7TMlM0xNNTdgeO6 -----END CERTIFICATE-----Generated at Sun Aug 10 18:56:28 2025 by rpki-client