$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft File: atWLLDI-9A_AiUCxRgfQhpXOhpg.mft (raw, json) Hash identifier: 2g1J0Eg3ViGIlmVK3/lXOf+ad6COKnY9lkBzt2K5UmE= Subject key identifier: 32:67:10:C2:44:22:45:0A:45:F1:06:A7:88:B2:13:35:1E:D7:0F:92 Authority key identifier: 6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98 Certificate issuer: /CN=A91BB6B3/serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698 Certificate serial: 0646 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft Manifest number: 0643 Signing time: Fri 08 Aug 2025 23:04:09 +0000 Manifest this update: Fri 08 Aug 2025 23:04:08 +0000 Manifest next update: Fri 15 Aug 2025 23:04:08 +0000 Files and hashes: 1: atWLLDI-9A_AiUCxRgfQhpXOhpg.crl (hash: Hxqai21czhPOMM463DQzoiyVhtdK6XKExX2lQwxDvIE=) 2: D154F886EB7E11EE973A5D76C4F9AE02.roa (hash: YIXSyV44XhAG1Lj7gtWc38+2l5HR5ltRFiBGyckO8MU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1606 (0x646) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB6B3, serialNumber=6AD58B2C323EF40FC08940B14607D08695CE8698 Validity Not Before: Aug 8 23:04:08 2025 GMT Not After : Aug 15 23:04:08 2025 GMT Subject: CN=68968268-e36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b7:5e:0e:75:e8:0a:20:bc:d2:c9:82:e1:4d: bd:1d:fc:f0:11:d0:fe:c1:bc:db:d4:1c:56:e2:49: 90:af:e7:15:25:b5:45:55:5d:26:f6:77:48:89:0e: 79:89:12:3a:81:dd:1c:92:af:ac:14:da:17:0a:49: 63:1b:79:e0:98:49:cd:fa:99:9e:a8:2c:8a:9b:78: 1a:d4:a5:af:01:d8:3e:ae:52:c9:69:45:54:8f:93: 2f:1f:fe:3c:49:27:de:fd:07:de:24:cd:13:66:3d: 8e:07:8a:d7:73:1e:7f:8a:81:c4:b0:17:40:3f:0f: dc:27:9d:27:c5:f5:21:e1:e5:23:d7:6f:de:4e:81: e6:a7:96:d9:73:b3:78:8f:a6:3a:5a:37:42:89:1b: b8:da:b9:a1:a1:62:1a:cb:49:60:f2:d1:c1:76:91: e9:33:3e:25:91:b5:70:65:b3:7c:95:00:8b:1d:9d: 93:35:c5:dd:94:68:c7:62:7f:80:5d:28:a9:60:34: 32:a2:6a:7e:f1:a9:b0:4b:e6:64:9b:77:d1:cd:67: 87:8b:5b:7c:37:87:3e:2e:7c:66:6e:71:8d:95:33: 68:25:58:08:d1:ab:fd:dd:29:cb:8a:65:e3:a5:8d: 98:74:a6:9d:a4:fa:58:d1:8e:32:d0:4e:9f:70:61: e5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:10:C2:44:22:45:0A:45:F1:06:A7:88:B2:13:35:1E:D7:0F:92 X509v3 Authority Key Identifier: keyid:6A:D5:8B:2C:32:3E:F4:0F:C0:89:40:B1:46:07:D0:86:95:CE:86:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/atWLLDI-9A_AiUCxRgfQhpXOhpg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB6B3/7243EB9E9B6411EBB65E6E87C4F9AE02/atWLLDI-9A_AiUCxRgfQhpXOhpg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8e:d4:27:49:a3:f4:a8:d3:ec:4d:d5:3c:31:20:d4:1a:0f: 3e:18:58:77:1d:63:20:03:46:ee:fe:a4:4f:0e:42:54:3b:10: 26:a2:66:33:e6:a2:1b:4b:19:23:6c:4c:84:74:07:3f:b5:6d: 20:97:58:2c:8c:47:50:c3:2e:c8:1f:f6:99:78:c8:0b:1d:d0: 47:91:c1:01:ef:11:a1:f1:a4:bb:19:5b:2c:12:53:2e:7a:87: a8:2e:02:7f:ed:6b:15:fa:4a:29:ab:02:48:2c:f8:f9:67:f9: 22:72:ef:74:36:7f:12:24:40:90:bf:c1:31:2c:42:bd:b1:53: 2f:b1:d3:af:33:ca:55:3b:ef:30:1d:7a:2a:8d:51:47:78:35: 4b:13:a9:32:a3:16:82:3b:91:9b:be:43:da:38:f2:09:6c:ed: 33:2e:23:ab:76:d9:01:d5:cf:fa:54:ed:c2:2b:c5:f7:68:28: 25:01:77:7b:33:f6:3f:1d:58:9f:7a:9d:0f:16:1d:9e:37:4e: fa:4a:3e:22:71:8b:05:92:21:e9:c4:7b:86:bd:21:ca:f7:0f: e6:45:ee:22:54:19:75:ce:62:77:86:3b:d6:2c:8b:66:e0:1b: f9:cd:39:57:b3:c4:bb:7a:7f:59:67:b0:d6:0f:17:fc:9f:f9: 0a:7b:c8:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2QjMxMTAvBgNVBAUTKDZBRDU4QjJDMzIzRUY0MEZDMDg5NDBCMTQ2MDdEMDg2 OTVDRTg2OTgwHhcNMjUwODA4MjMwNDA4WhcNMjUwODE1MjMwNDA4WjAYMRYwFAYD VQQDEw02ODk2ODI2OC1lMzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LdeDnXoCiC80smC4U29HfzwEdD+wbzb1BxW4kmQr+cVJbVFVV0m9ndIiQ55 iRI6gd0ckq+sFNoXCkljG3ngmEnN+pmeqCyKm3ga1KWvAdg+rlLJaUVUj5MvH/48 SSfe/QfeJM0TZj2OB4rXcx5/ioHEsBdAPw/cJ50nxfUh4eUj12/eToHmp5bZc7N4 j6Y6WjdCiRu42rmhoWIay0lg8tHBdpHpMz4lkbVwZbN8lQCLHZ2TNcXdlGjHYn+A XSipYDQyomp+8amwS+Zkm3fRzWeHi1t8N4c+LnxmbnGNlTNoJVgI0av93SnLimXj pY2YdKadpPpY0Y4y0E6fcGHlHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJnEMJE IkUKRfEGp4iyEzUe1w+SMB8GA1UdIwQYMBaAFGrViywyPvQPwIlAsUYH0IaVzoaY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjZCMy83MjQzRUI5RTlC NjQxMUVCQjY1RTZFODdDNEY5QUUwMi9hdFdMTERJLTlBX0FpVUN4UmdmUWhwWE9o cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0V0xMREktOUFfQWlVQ3hSZ2ZRaHBYT2hwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjZCMy83MjQzRUI5RTlCNjQxMUVCQjY1RTZFODdDNEY5QUUwMi9hdFdMTERJLTlB X0FpVUN4UmdmUWhwWE9ocGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbjtQnSaP0qNPsTdU8MSDUGg8+GFh3HWMgA0bu/qRPDkJUOxAmomYz 5qIbSxkjbEyEdAc/tW0gl1gsjEdQwy7IH/aZeMgLHdBHkcEB7xGh8aS7GVssElMu eoeoLgJ/7WsV+kopqwJILPj5Z/kicu90Nn8SJECQv8ExLEK9sVMvsdOvM8pVO+8w HXoqjVFHeDVLE6kyoxaCO5GbvkPaOPIJbO0zLiOrdtkB1c/6VO3CK8X3aCglAXd7 M/Y/HVifep0PFh2eN076Sj4icYsFkiHpxHuGvSHK9w/mRe4iVBl1zmJ3hjvWLItm 4Bv5zTlXs8S7en9ZZ7DWDxf8n/kKe8gJ -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:06 2025 by rpki-client