$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: GnkhIw26rC5dzp5PwLS3tbs/6TqiH8AJ6PoMSFdNvKM= Subject key identifier: AE:A1:F6:C1:00:83:C0:80:EA:6C:59:3F:52:FD:AD:C0:25:E4:4D:B1 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 021C Signing time: Sat 09 Aug 2025 02:33:15 +0000 Manifest this update: Sat 09 Aug 2025 02:33:14 +0000 Manifest next update: Sat 16 Aug 2025 02:33:14 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: A8HKlgD8QWfFLhXLqs5jcneQM77Abyg/0ZVIxwq0Sns=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Aug 9 02:33:14 2025 GMT Not After : Aug 16 02:33:14 2025 GMT Subject: CN=6896b36b-0f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:91:cd:27:c6:d9:7b:81:57:e4:21:ba:50: 75:d8:7e:df:d3:dd:79:5a:e1:cb:5d:2e:12:f9:1e: d0:fd:fa:93:24:e8:b0:23:a4:e5:09:3f:3c:ae:bc: ff:5a:6f:0e:e7:7f:da:ed:27:60:9e:db:21:16:24: 9c:62:af:d1:be:6d:20:38:5e:a9:e3:0e:17:48:b8: 98:17:16:59:66:49:11:3b:14:24:6c:49:8b:0a:0a: 7b:8c:df:9c:e5:d0:5c:1b:37:d2:9b:00:8c:34:e4: c8:22:0c:5e:92:47:90:8d:16:9d:dd:06:f9:18:e7: ef:49:38:82:5d:20:6b:6e:95:09:5b:ec:b3:44:fe: 0f:56:6d:04:19:c0:e9:bb:f9:ed:00:7c:3e:7a:b4: 49:f9:b9:5d:b4:81:4c:67:6f:60:fd:1f:a4:7e:24: 78:90:d9:9f:46:07:e3:de:59:c4:19:36:63:ae:b1: 6c:dc:0d:1f:10:57:ad:b4:4e:40:a3:d8:dc:95:26: 5a:01:98:00:68:92:3f:bc:a5:f9:37:6e:69:ee:c0: ac:2a:92:50:dd:89:c6:8e:b8:10:e3:5b:44:ab:25: be:4d:04:d6:48:7f:13:8d:61:72:7f:04:c6:fd:70: 56:27:98:39:44:34:38:58:cc:ce:5e:89:24:19:04: 98:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A1:F6:C1:00:83:C0:80:EA:6C:59:3F:52:FD:AD:C0:25:E4:4D:B1 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:aa:b3:d7:94:11:ea:0b:ee:e5:3b:77:1b:81:3b:72:4f:6d: cd:00:47:c9:6a:a9:e3:e6:f7:66:f8:49:bd:c7:e6:a8:5c:b5: 36:4c:74:cb:04:0a:da:1d:e8:8d:c4:ce:4b:c0:cb:fa:76:ec: 5e:0e:48:ed:95:43:fa:cc:a2:d4:35:75:8b:e3:0d:de:10:7d: 75:dd:35:0c:64:21:f4:64:37:01:c8:38:b2:d4:93:e9:51:b2: 64:84:9f:4b:d6:cb:29:05:f4:da:67:fd:2c:8f:61:5f:af:6c: bd:80:87:9d:0b:50:01:59:65:75:ed:e0:bd:22:e4:dc:ae:06: 0a:af:87:1d:83:88:76:d7:8d:58:46:55:e8:55:49:6b:f0:87: 17:01:36:e3:1d:6a:ea:c9:dd:38:2b:71:9e:03:4f:04:75:8c: 97:95:3a:de:63:8b:70:35:11:89:02:bb:07:38:17:fa:6a:be: 59:28:50:6b:a2:e0:10:68:e3:6f:b8:b5:5f:7c:44:41:68:a2: 0c:ee:f5:9d:15:d2:8b:60:a9:cc:75:bb:c0:a2:a5:b2:e7:39: b1:76:33:5b:ad:dd:13:92:7f:62:b3:be:db:3a:8e:e0:76:cf: 51:50:bf:47:ed:25:76:6f:d0:4f:3e:3f:fa:91:77:36:04:c1: 76:a0:8d:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwODA5MDIzMzE0WhcNMjUwODE2MDIzMzE0WjAYMRYwFAYD VQQDEw02ODk2YjM2Yi0wZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcGRzSfG2XuBV+QhulB12H7f0915WuHLXS4S+R7Q/fqTJOiwI6TlCT88rrz/ Wm8O53/a7SdgntshFiScYq/Rvm0gOF6p4w4XSLiYFxZZZkkROxQkbEmLCgp7jN+c 5dBcGzfSmwCMNOTIIgxekkeQjRad3Qb5GOfvSTiCXSBrbpUJW+yzRP4PVm0EGcDp u/ntAHw+erRJ+bldtIFMZ29g/R+kfiR4kNmfRgfj3lnEGTZjrrFs3A0fEFettE5A o9jclSZaAZgAaJI/vKX5N25p7sCsKpJQ3YnGjrgQ41tEqyW+TQTWSH8TjWFyfwTG /XBWJ5g5RDQ4WMzOXokkGQSYeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6h9sEA g8CA6mxZP1L9rcAl5E2xMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGqrPXlBHqC+7lO3cbgTtyT23NAEfJaqnj5vdm+Em9x+aoXLU2THTL BAraHeiNxM5LwMv6duxeDkjtlUP6zKLUNXWL4w3eEH113TUMZCH0ZDcByDiy1JPp UbJkhJ9L1sspBfTaZ/0sj2Ffr2y9gIedC1ABWWV17eC9IuTcrgYKr4cdg4h2141Y RlXoVUlr8IcXATbjHWrqyd04K3GeA08EdYyXlTreY4twNRGJArsHOBf6ar5ZKFBr ouAQaONvuLVffERBaKIM7vWdFdKLYKnMdbvAoqWy5zmxdjNbrd0Tkn9is77bOo7g ds9RUL9H7SV2b9BPPj/6kXc2BMF2oI3K -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:48 2025 by rpki-client