$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft File: wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft (raw, json) Hash identifier: LFuNeWpct5UjskNtBliioNqGfxeZwv/8z2PuZcnloaQ= Subject key identifier: 5C:1C:33:05:BF:38:DC:05:A9:5D:23:8B:96:9E:70:A7:1D:16:40:B9 Authority key identifier: C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D Certificate issuer: /CN=A91EF24F/serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft Manifest number: 07CD Signing time: Sun 10 Aug 2025 21:09:44 +0000 Manifest this update: Sun 10 Aug 2025 21:09:44 +0000 Manifest next update: Sun 17 Aug 2025 21:09:44 +0000 Files and hashes: 1: wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl (hash: MrJDkM0mcyT5aRxxljVN4/k9Ex/o6Sv19q4H/2HjtX8=) 2: 47D255C8572811ECBE150619C4F9AE02.roa (hash: ciOpG8qRab9sKkVmGRn2hy7gpdalC9pHnHF+YnHZNHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF24F, serialNumber=C24D8EA76BCA64983F532A4CDBB2CCF19B06250D Validity Not Before: Aug 10 21:09:44 2025 GMT Not After : Aug 17 21:09:44 2025 GMT Subject: CN=68990a98-6ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:59:d4:9a:30:17:fd:e0:95:6e:8b:28:97: 6b:c7:90:56:de:b4:37:d7:5f:01:55:32:c2:cd:ca: f8:d4:46:a4:fa:60:0c:71:cf:62:53:e5:a3:66:31: e4:fa:52:29:b9:43:1b:73:a3:45:64:d7:57:67:a9: 45:95:98:b5:37:d4:2f:2c:f1:a6:c0:a0:c4:14:aa: 6f:75:3c:a0:43:31:d2:16:fb:a0:18:08:0a:a6:69: e3:5f:69:41:83:f3:91:ba:9d:0a:2b:0a:19:ed:2d: 79:bb:63:e7:bc:4f:fa:ad:34:26:8e:de:55:bb:bf: c0:fb:c9:fa:c8:38:47:08:f4:ea:ea:86:e3:02:0f: 33:e1:c6:6d:57:ac:c5:e9:16:b1:5a:f8:dc:ff:25: b1:98:79:5a:7f:4d:fc:85:51:2d:10:6f:d7:0c:1a: 0b:25:43:ce:38:85:76:ae:2b:2f:f7:c2:6a:1a:99: c7:03:ab:44:af:f5:71:d7:f6:1c:bd:3e:0d:d4:a4: 48:8a:e0:bf:4c:d9:0b:0c:e8:28:f7:03:e5:65:4c: 85:0d:0e:25:7c:32:3c:2f:2e:7c:46:e8:98:73:fe: 42:c4:b8:22:18:f8:9c:e5:ec:0c:ab:1a:4b:c4:d2: 85:bc:0c:d2:f1:60:1c:14:5e:64:31:58:39:f9:44: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1C:33:05:BF:38:DC:05:A9:5D:23:8B:96:9E:70:A7:1D:16:40:B9 X509v3 Authority Key Identifier: keyid:C2:4D:8E:A7:6B:CA:64:98:3F:53:2A:4C:DB:B2:CC:F1:9B:06:25:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/wk2Op2vKZJg_UypM27LM8ZsGJQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF24F/5F46732A02FA11EBA3A0A231C4F9AE02/wk2Op2vKZJg_UypM27LM8ZsGJQ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e1:05:9c:77:72:4a:09:f3:1e:e6:9e:19:7b:54:09:ef:85: f6:3c:5c:0a:3f:67:07:bc:4c:cd:77:c0:7e:4e:d6:4b:1b:06: 7c:5e:eb:8c:cb:dc:e0:a4:1e:fc:52:fe:ab:29:2d:9a:80:88: be:8c:19:31:27:6d:cb:b2:07:22:77:ee:7a:30:0c:ff:16:a1: 46:51:3d:f5:5c:bd:a1:45:ec:bc:f9:65:cf:c5:12:af:13:0c: 46:68:7e:3e:88:a9:c6:0c:ee:5e:e5:eb:19:71:b2:70:41:d6: 87:ac:fb:60:f9:24:24:b4:9d:f3:3b:37:ba:60:c7:84:4b:c3: bf:75:8f:3d:5c:3a:49:cc:46:3f:df:48:c1:e5:d3:e8:88:cd: 2f:b2:bd:39:fd:ad:8a:ae:a3:90:eb:0e:8d:04:e8:58:74:6f: ed:d9:45:e9:3c:e7:2f:3a:e9:ef:3f:00:9a:27:24:8a:2b:f8: 37:b4:94:cb:f2:41:74:fc:2d:27:d3:fe:98:72:66:93:dd:9f: 8e:c4:57:71:4f:4c:cf:37:56:64:2f:73:8a:9d:d8:a3:d7:eb: 6f:b8:28:ac:de:da:18:77:8f:3c:25:32:16:20:df:13:c6:c2: 5b:28:bb:c0:5a:e2:22:e1:7c:8a:22:e0:f5:ee:03:c9:b7:50: 62:51:7b:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyNEYxMTAvBgNVBAUTKEMyNEQ4RUE3NkJDQTY0OTgzRjUzMkE0Q0RCQjJDQ0Yx OUIwNjI1MEQwHhcNMjUwODEwMjEwOTQ0WhcNMjUwODE3MjEwOTQ0WjAYMRYwFAYD VQQDEw02ODk5MGE5OC02ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBpZ1JowF/3glW6LKJdrx5BW3rQ3118BVTLCzcr41Eak+mAMcc9iU+WjZjHk +lIpuUMbc6NFZNdXZ6lFlZi1N9QvLPGmwKDEFKpvdTygQzHSFvugGAgKpmnjX2lB g/ORup0KKwoZ7S15u2PnvE/6rTQmjt5Vu7/A+8n6yDhHCPTq6objAg8z4cZtV6zF 6RaxWvjc/yWxmHlaf038hVEtEG/XDBoLJUPOOIV2risv98JqGpnHA6tEr/Vx1/Yc vT4N1KRIiuC/TNkLDOgo9wPlZUyFDQ4lfDI8Ly58RuiYc/5CxLgiGPic5ewMqxpL xNKFvAzS8WAcFF5kMVg5+US6gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwcMwW/ ONwFqV0ji5aecKcdFkC5MB8GA1UdIwQYMBaAFMJNjqdrymSYP1MqTNuyzPGbBiUN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjI0Ri81RjQ2NzMyQTAy RkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pKZ19VeXBNMjdMTThac0dK UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3drMk9wMnZLWkpnX1V5cE0yN0xNOFpzR0pRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjI0Ri81RjQ2NzMyQTAyRkExMUVCQTNBMEEyMzFDNEY5QUUwMi93azJPcDJ2S1pK Z19VeXBNMjdMTThac0dKUTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu4QWcd3JKCfMe5p4Ze1QJ74X2PFwKP2cHvEzNd8B+TtZLGwZ8XuuM y9zgpB78Uv6rKS2agIi+jBkxJ23Lsgcid+56MAz/FqFGUT31XL2hRey8+WXPxRKv EwxGaH4+iKnGDO5e5esZcbJwQdaHrPtg+SQktJ3zOze6YMeES8O/dY89XDpJzEY/ 30jB5dPoiM0vsr05/a2KrqOQ6w6NBOhYdG/t2UXpPOcvOunvPwCaJySKK/g3tJTL 8kF0/C0n0/6YcmaT3Z+OxFdxT0zPN1ZkL3OKndij1+tvuCis3toYd488JTIWIN8T xsJbKLvAWuIi4XyKIuD17gPJt1BiUXsE -----END CERTIFICATE-----Generated at Mon Aug 11 10:30:51 2025 by rpki-client