$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: +YHWnOrymNu2WfbgdlOTuBXWIJGQETGjdeeBdYHlM64= Subject key identifier: C5:CD:E0:B3:30:BD:84:80:6F:79:87:80:B6:8B:05:79:3E:10:D0:48 Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 4F Signing time: Thu 07 Aug 2025 07:56:27 +0000 Manifest this update: Thu 07 Aug 2025 07:56:27 +0000 Manifest next update: Thu 14 Aug 2025 07:56:27 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: shPK2gPML1SgBxCavMDa9ibCB7ygb0ZFGx1jljyDtoA=) 2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: Aug 7 07:56:27 2025 GMT Not After : Aug 14 07:56:27 2025 GMT Subject: CN=68945c2b-4d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:12:08:ab:15:12:86:52:a6:8e:38:1b:c9: 7a:33:32:23:b4:a7:1f:6a:c5:0f:9f:01:d1:e3:55: e7:71:a7:95:3c:b3:de:09:44:aa:e1:68:e0:69:81: 34:39:01:64:c9:e9:4a:e8:ba:d6:27:e6:2d:90:a9: 72:6c:39:03:b0:af:21:76:1a:2e:30:9e:d6:aa:79: a8:7b:6d:95:0e:49:56:bf:38:83:c2:10:e0:bd:24: c8:eb:55:4f:88:4d:4b:05:27:cd:16:e6:87:e9:d8: 49:4f:10:e6:42:90:fb:71:32:5e:f6:9c:c3:4b:48: ee:df:c1:ab:ee:60:6b:80:b3:21:85:31:25:1b:e6: 02:92:67:76:de:9d:a6:e7:3b:0e:f5:2d:37:3e:9c: 99:e9:67:57:ed:7d:18:89:63:16:a4:85:e6:24:26: dd:34:84:2d:c3:59:df:25:f0:aa:3e:ec:ff:be:8d: 91:3f:70:57:a0:6e:df:f9:9c:13:44:54:d5:69:78: d6:61:2a:70:bf:c8:35:e8:29:fd:d7:3c:9e:24:96: 2c:02:94:cb:1a:fa:a8:51:ca:f7:af:de:62:4e:cf: 08:42:84:54:d0:bd:74:6b:20:cf:61:c4:ed:aa:84: d7:1b:dd:9a:96:5c:6f:00:ef:31:b8:ee:27:58:bf: 5b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CD:E0:B3:30:BD:84:80:6F:79:87:80:B6:8B:05:79:3E:10:D0:48 X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b8:d2:f3:a3:06:d9:2d:13:a8:19:6a:76:8c:28:98:56:7d: 65:21:c0:a7:6f:c5:e0:c8:55:0a:a0:7d:9f:e6:61:01:44:1e: 2a:ec:6e:31:11:1d:49:0a:85:61:b8:da:69:ba:c5:34:03:7a: ba:09:30:08:ce:dc:df:ca:28:c4:46:ab:54:7c:75:4a:60:9f: 2b:b4:0a:63:58:c1:92:5e:98:5d:59:91:54:48:61:83:3f:b6: 9b:b1:3e:41:ee:82:9a:ac:22:81:cc:19:27:ae:b4:45:c3:4e: e7:82:32:d9:b1:64:68:ba:0c:f6:f0:10:39:f3:4f:42:fa:25: ca:2c:e6:de:c2:cb:10:ed:f2:b7:37:37:7b:91:ec:25:a5:8c: 42:26:47:f4:ed:8f:75:ed:d7:b4:1a:d3:65:80:51:09:72:9c: 7a:d4:eb:98:f2:44:a2:3a:c3:b5:0d:a8:60:a5:d5:eb:c4:5a: 32:b7:6d:ed:c1:99:92:bc:5e:d0:09:bd:f4:94:7a:41:8a:30: 44:e6:ce:1a:6c:f4:9c:ef:73:52:1b:d3:28:76:4b:0b:fe:53: 39:be:47:92:26:30:9d:3e:f2:08:42:a8:40:f5:13:07:26:c5: d1:42:57:e8:8c:43:c7:8d:cf:80:bb:dc:80:0f:84:5e:a5:e2: d4:e4:1c:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTA4MDcwNzU2MjdaFw0yNTA4MTQwNzU2MjdaMBgxFjAUBgNV BAMTDTY4OTQ1YzJiLTRkMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3ZhIIqxUShlKmjjgbyXozMiO0px9qxQ+fAdHjVedxp5U8s94JRKrhaOBpgTQ5 AWTJ6UroutYn5i2QqXJsOQOwryF2Gi4wntaqeah7bZUOSVa/OIPCEOC9JMjrVU+I TUsFJ80W5ofp2ElPEOZCkPtxMl72nMNLSO7fwavuYGuAsyGFMSUb5gKSZ3benabn Ow71LTc+nJnpZ1ftfRiJYxakheYkJt00hC3DWd8l8Ko+7P++jZE/cFegbt/5nBNE VNVpeNZhKnC/yDXoKf3XPJ4kliwClMsa+qhRyvev3mJOzwhChFTQvXRrIM9hxO2q hNcb3ZqWXG8A7zG47idYv1ujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxc3gszC9 hIBveYeAtosFeT4Q0EgwHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADW40vOjBtktE6gZanaMKJhWfWUhwKdvxeDIVQqgfZ/mYQFEHirsbjER HUkKhWG42mm6xTQDeroJMAjO3N/KKMRGq1R8dUpgnyu0CmNYwZJemF1ZkVRIYYM/ tpuxPkHugpqsIoHMGSeutEXDTueCMtmxZGi6DPbwEDnzT0L6Jcos5t7CyxDt8rc3 N3uR7CWljEImR/Ttj3Xt17Qa02WAUQlynHrU65jyRKI6w7UNqGCl1evEWjK3be3B mZK8XtAJvfSUekGKMETmzhps9Jzvc1Ib0yh2Swv+Uzm+R5ImMJ0+8ghCqED1Ewcm xdFCV+iMQ8eNz4C73IAPhF6l4tTkHE0= -----END CERTIFICATE-----Generated at Fri Aug 8 13:09:16 2025 by rpki-client