$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json) Hash identifier: cyHkT0CF5/5x25k/LSwlwd7eRGSD7rCIWmdtrLUAtVE= Subject key identifier: 61:82:EA:39:A1:49:BC:29:C4:17:8B:25:DB:08:4E:13:A6:EF:C9:EB Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft Manifest number: 70 Signing time: Sat 09 Aug 2025 07:27:40 +0000 Manifest this update: Sat 09 Aug 2025 07:27:40 +0000 Manifest next update: Sat 16 Aug 2025 07:27:40 +0000 Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: jeXPjjXVfvpxChJ70gnDpCP77lDQdS1xQTSXISogaXs=) 2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: PQLVpWWHthzNnD5URwix2MJ4GqKKAheIHq2d7TmXEW0=) 3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: QHLRTEx6Qgh4+lTDIbuuL3PGb+4V0jC1oeBCPhaLkPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Aug 9 07:27:40 2025 GMT Not After : Aug 16 07:27:40 2025 GMT Subject: CN=6896f86c-d4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f5:f5:11:72:29:77:55:90:6d:62:09:03:44: 18:d0:39:6b:ea:a7:08:c3:be:69:b3:9f:a7:78:19: ec:cd:2b:6a:20:93:93:71:b9:b9:97:b7:58:e9:d0: 84:a5:b5:21:91:80:5c:49:e6:9f:d2:3d:f5:40:d7: d1:14:56:8a:ac:db:9b:9e:23:33:94:75:49:f7:d4: 9b:2c:dc:75:bc:e2:86:c5:4a:c5:35:80:60:12:b7: 91:89:98:f9:ee:09:cd:8e:a4:9c:53:6d:8a:35:3e: ef:94:1d:94:5e:15:ab:8e:52:fa:b8:46:ad:8c:24: c4:b8:21:79:87:45:d7:26:02:5c:9c:df:43:85:95: 61:b7:05:7a:04:22:7a:3c:ca:cc:83:d8:3d:75:81: 44:62:ef:79:bb:23:ad:22:7b:04:34:59:d0:e8:50: 51:e6:c4:07:16:b6:10:81:01:c0:90:26:fe:6c:ac: c9:44:c7:37:d7:01:2f:ad:7d:5b:8c:0a:51:03:04: 4a:5d:ce:c6:ea:88:36:5a:a3:10:2c:24:8c:37:df: 7c:41:fc:d4:f3:00:28:70:1b:6a:6f:9e:73:de:4d: ca:26:ad:a7:00:52:55:13:f7:39:16:1e:d6:53:74: 48:3c:9b:95:c3:2f:e7:92:c2:da:af:2b:1c:71:03: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:82:EA:39:A1:49:BC:29:C4:17:8B:25:DB:08:4E:13:A6:EF:C9:EB X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f6:4f:32:44:ca:32:0b:14:b2:ca:be:29:a0:cb:28:ae:8a: 5a:c1:c6:ab:da:43:21:e2:38:48:93:94:75:5f:b0:d8:d4:94: 36:21:75:f3:31:96:e2:8a:39:f3:b3:03:75:75:81:bf:cb:d7: 36:7c:95:5e:6e:82:0d:5a:9b:21:03:6d:ea:3f:d3:22:a8:46: 4a:5f:da:88:f0:dd:7c:82:4d:02:eb:fa:99:f2:d9:2d:fe:07: 55:79:b4:87:1f:ad:0a:d9:93:1a:96:b7:30:09:c6:05:24:be: f5:3a:47:d8:16:f9:c6:e1:65:82:c0:c7:b9:5d:30:44:dc:b9: 73:01:ed:10:ae:0a:21:ed:1b:e0:13:a2:ea:2a:46:17:59:fb: 58:45:8f:70:cf:42:a1:99:9e:43:07:cb:51:3f:c9:ea:8a:83: 96:0e:3b:9a:0b:ff:a2:66:22:f3:28:59:ea:b3:7f:6c:10:b1: af:67:20:80:0d:05:2f:18:82:cb:47:89:c6:3a:30:8f:28:9c: 98:47:5a:8e:3e:4e:6b:2b:eb:59:48:5a:54:95:f4:bd:30:ea: 2a:e9:c9:f3:66:c2:63:7a:7f:9c:ca:0d:cc:0d:1d:26:38:f7: dc:7e:13:c7:44:c8:ed:a4:c6:ea:a1:3c:18:5e:3b:7a:65:45: 98:5c:48:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoRDYwQzMwQjFBOUY1OUM5NTlBRDQ5NjdGMkY2RDU3MkFD Qjc1Mjk5QzAeFw0yNTA4MDkwNzI3NDBaFw0yNTA4MTYwNzI3NDBaMBgxFjAUBgNV BAMTDTY4OTZmODZjLWQ0YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW9fURcil3VZBtYgkDRBjQOWvqpwjDvmmzn6d4GezNK2ogk5NxubmXt1jp0ISl tSGRgFxJ5p/SPfVA19EUVoqs25ueIzOUdUn31Jss3HW84obFSsU1gGASt5GJmPnu Cc2OpJxTbYo1Pu+UHZReFauOUvq4Rq2MJMS4IXmHRdcmAlyc30OFlWG3BXoEIno8 ysyD2D11gURi73m7I60iewQ0WdDoUFHmxAcWthCBAcCQJv5srMlExzfXAS+tfVuM ClEDBEpdzsbqiDZaoxAsJIw333xB/NTzAChwG2pvnnPeTcomracAUlUT9zkWHtZT dEg8m5XDL+eSwtqvKxxxA52ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYYLqOaFJ vCnEF4sl2whOE6bvyeswHwYDVR0jBBgwFoAU1gwwsan1nJWa1JZ/L21XKst1KZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0UzRkNEMTQ0RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUta dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWd3d3NhbjFuSldhMUpaX0wyMVhLc3QxS1p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUVBL0UzRkNEMTQ0RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpX YTFKWl9MMjFYS3N0MUtady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJH2TzJEyjILFLLKvimgyyiuilrBxqvaQyHiOEiTlHVfsNjUlDYhdfMx luKKOfOzA3V1gb/L1zZ8lV5ugg1amyEDbeo/0yKoRkpf2ojw3XyCTQLr+pny2S3+ B1V5tIcfrQrZkxqWtzAJxgUkvvU6R9gW+cbhZYLAx7ldMETcuXMB7RCuCiHtG+AT ouoqRhdZ+1hFj3DPQqGZnkMHy1E/yeqKg5YOO5oL/6JmIvMoWeqzf2wQsa9nIIAN BS8YgstHicY6MI8onJhHWo4+Tmsr61lIWlSV9L0w6irpyfNmwmN6f5zKDcwNHSY4 99x+E8dEyO2kxuqhPBheO3plRZhcSHI= -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:02 2025 by rpki-client