$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: ROaImaTy/kyDJt7vJO6eqdvuYBHe78lt1vkVqxEdmh8= Subject key identifier: 03:E9:E8:F9:72:26:03:F1:AE:F2:52:9D:2C:9E:C7:8B:E0:B9:1C:60 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 05EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 05E7 Signing time: Tue 12 Aug 2025 23:24:00 +0000 Manifest this update: Tue 12 Aug 2025 23:24:00 +0000 Manifest next update: Tue 19 Aug 2025 23:24:00 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: Z2vQ28ekSLFbT+Qc0za4W8A+Vq/a3MQZfM9wtiTf6aA=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: Cb+Fd72gPRV5Z7Th9MT+3K1J11y33W768SuL3j3Pm7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1518 (0x5ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Aug 12 23:24:00 2025 GMT Not After : Aug 19 23:24:00 2025 GMT Subject: CN=689bcd10-c306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7d:39:fb:d7:f8:ee:63:3e:12:79:fb:ca:4f: 05:40:ae:f0:c6:d2:61:91:b0:45:08:ce:b5:42:dc: c0:d0:10:b0:45:3a:d3:5d:47:20:2a:6d:b6:36:09: ef:b5:97:c3:75:0c:65:d2:d4:c1:dd:46:b2:ac:12: 75:e5:27:05:66:a1:08:e2:14:0d:7f:87:3a:a6:03: 41:19:fc:b2:2d:db:6a:d9:3d:7f:df:98:80:03:0f: ec:9d:9d:6d:97:7f:93:05:35:84:69:af:3a:dd:0b: d6:0a:66:9b:a1:3b:35:61:6b:8f:fe:16:ad:d7:b2: fb:9a:5b:70:a2:97:e8:40:c6:4d:80:3b:56:a3:d2: 6d:80:4b:e6:d2:f2:46:a9:09:b0:d3:87:7b:34:b3: d8:64:6f:2b:5b:bf:93:1b:fe:b9:bd:22:dd:9d:4d: b9:b9:83:4b:f4:23:65:d6:7c:db:69:cd:3b:e3:c9: 0f:c4:32:d9:11:37:df:41:b4:ca:a7:7c:a7:54:12: 32:3a:a9:2d:c7:d6:92:02:da:c5:c8:73:d4:60:83: 3f:7e:ae:32:d3:67:3f:59:2d:1e:97:cd:8d:40:72: 47:b8:7e:23:d4:e9:f6:61:d2:9e:1d:4f:9b:4b:c5: e5:c9:5f:5f:8a:55:80:3d:6b:2f:9a:5c:a5:ca:ea: 51:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E9:E8:F9:72:26:03:F1:AE:F2:52:9D:2C:9E:C7:8B:E0:B9:1C:60 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:c7:6e:20:b6:ca:d9:8d:ba:59:90:c4:6b:ed:fd:47:eb:6c: 86:db:5e:d2:ae:d9:fb:88:8b:fc:e9:92:8d:91:9f:b7:b7:a9: 33:f0:00:30:b1:65:e5:1f:81:6b:6c:67:c5:93:88:69:d4:bd: 8f:c3:a4:ac:b6:fd:06:4a:e6:0e:5b:aa:92:98:93:c0:28:c4: ae:55:a8:d3:61:01:cb:6d:2d:cf:ac:bb:66:ee:d7:59:89:e0: 6c:82:85:c9:df:59:df:4b:84:59:ee:01:87:a1:62:2d:96:f2: ce:14:78:e8:80:40:d3:03:2b:4b:ac:9b:5b:a5:a0:54:4b:06: 05:9c:9a:a1:bd:b1:78:b0:8e:cc:72:e0:d5:e5:9b:9f:f3:7e: 31:31:47:3d:87:24:12:f7:16:45:8f:04:90:94:bd:b4:74:6b: 85:f5:71:4f:86:d6:17:0b:90:86:96:af:59:7c:86:e2:58:23: a8:97:88:6a:e3:11:9a:31:c1:a3:1f:6e:96:80:b8:46:e8:3b: 05:b1:97:d7:38:80:cd:4f:82:32:ac:6c:e8:18:5e:6d:cc:2e: 1a:b4:87:f0:5d:9e:a6:a1:0d:ba:21:c8:8f:fc:4a:e4:6e:36: 3a:63:60:a4:36:48:2b:54:b7:17:8a:cd:66:c4:65:4c:44:1b: 9d:44:f4:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjUwODEyMjMyNDAwWhcNMjUwODE5MjMyNDAwWjAYMRYwFAYD VQQDEw02ODliY2QxMC1jMzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4305+9f47mM+Enn7yk8FQK7wxtJhkbBFCM61QtzA0BCwRTrTXUcgKm22Ngnv tZfDdQxl0tTB3UayrBJ15ScFZqEI4hQNf4c6pgNBGfyyLdtq2T1/35iAAw/snZ1t l3+TBTWEaa863QvWCmaboTs1YWuP/hat17L7mltwopfoQMZNgDtWo9JtgEvm0vJG qQmw04d7NLPYZG8rW7+TG/65vSLdnU25uYNL9CNl1nzbac0748kPxDLZETffQbTK p3ynVBIyOqktx9aSAtrFyHPUYIM/fq4y02c/WS0el82NQHJHuH4j1On2YdKeHU+b S8XlyV9filWAPWsvmlylyupR0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPp6Ply JgPxrvJSnSyex4vguRxgMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYx24gtsrZjbpZkMRr7f1H62yG217Srtn7iIv86ZKNkZ+3t6kz8AAw sWXlH4FrbGfFk4hp1L2Pw6Sstv0GSuYOW6qSmJPAKMSuVajTYQHLbS3PrLtm7tdZ ieBsgoXJ31nfS4RZ7gGHoWItlvLOFHjogEDTAytLrJtbpaBUSwYFnJqhvbF4sI7M cuDV5Zuf834xMUc9hyQS9xZFjwSQlL20dGuF9XFPhtYXC5CGlq9ZfIbiWCOol4hq 4xGaMcGjH26WgLhG6DsFsZfXOIDNT4IyrGzoGF5tzC4atIfwXZ6moQ26IciP/Erk bjY6Y2CkNkgrVLcXis1mxGVMRBudRPRs -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:25 2025 by rpki-client