$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft File: mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft (raw, json) Hash identifier: /tquk0ZZ8bjF40gEH7hHWaSs6NA6Gu87s+ORu9cUDuw= Subject key identifier: A0:B3:25:E5:12:2E:6A:3C:F4:72:48:E1:AC:3A:B8:3D:84:FC:A7:A3 Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 059C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft Manifest number: 0595 Signing time: Sun 10 Aug 2025 23:19:43 +0000 Manifest this update: Sun 10 Aug 2025 23:19:42 +0000 Manifest next update: Sun 17 Aug 2025 23:19:42 +0000 Files and hashes: 1: mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl (hash: XgmUoQERUUhwE9+xiC9EFab6n4CIbZJtIFKsaPsBncM=) 2: C4CB04C4E2A911EBB4631960C4F9AE02.roa (hash: w5XSagCBbj7wYrqd/6P5FJGCYb7FRwj35SS+I3gJcAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1436 (0x59c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C, serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: Aug 10 23:19:42 2025 GMT Not After : Aug 17 23:19:42 2025 GMT Subject: CN=6899290e-27bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:06:3f:16:f0:39:84:6e:69:92:3b:b3:d6: 59:2a:4c:4c:fd:dc:5f:cd:83:a6:ba:69:28:65:e5: ca:81:e0:55:be:84:f5:7c:25:05:e5:28:0e:89:19: 58:38:1b:0b:20:53:68:5f:e8:fa:40:d5:c5:59:02: f1:37:63:b3:d6:d6:9e:38:71:a2:43:8c:5c:c4:bc: b5:00:be:27:73:5e:66:9e:23:76:db:60:61:08:30: 62:2d:16:87:87:43:bc:9b:e7:ea:68:b0:3a:0d:3a: fe:d7:c1:ec:e1:f8:62:6f:99:45:4f:ac:81:7e:13: ee:1f:74:ef:bf:9c:82:fe:25:34:57:2c:7e:75:ea: e9:85:4b:81:67:a9:b6:42:37:64:55:a3:52:47:31: c0:c6:dc:b5:31:11:61:f1:81:62:03:95:a2:00:89: 19:b8:0a:f2:91:a0:77:9e:8f:37:22:8a:53:5d:f0: e6:34:5e:8a:c5:72:b8:5e:8f:70:32:71:9d:42:de: c3:0f:58:6e:a3:fb:4c:1f:87:75:14:92:7d:41:aa: 22:21:f1:fe:19:72:1a:02:f0:fe:db:a0:fa:2b:fe: e6:ff:9f:16:05:f4:4c:48:34:b0:cd:c1:09:93:9a: 86:48:74:28:95:c2:3b:95:d8:5b:1a:8b:a2:53:da: 41:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B3:25:E5:12:2E:6A:3C:F4:72:48:E1:AC:3A:B8:3D:84:FC:A7:A3 X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b7:2b:d9:3d:56:e7:4b:99:82:93:1a:f5:03:81:e2:a8:da: 54:c7:12:07:47:b3:4a:aa:e4:10:ef:8f:4c:99:0c:b9:26:af: d4:f0:93:17:dc:16:23:85:4b:53:d5:74:b7:48:14:71:5f:f3: 40:49:d5:91:64:fc:f3:4c:20:63:e4:1b:79:a9:9d:85:57:b9: ce:03:05:4e:2f:56:4b:26:c9:51:8b:0a:d2:6f:0c:65:15:fb: d0:9b:cd:e2:09:01:5b:af:49:20:90:fa:fd:d9:fd:de:56:a1: a1:ad:7a:c9:6b:e0:a2:4c:4f:fa:fd:90:af:1c:02:a4:ae:51: f6:3c:57:84:e1:2d:01:cf:77:62:77:38:ea:db:a1:bf:ee:99: b9:23:8d:7d:5c:65:59:53:43:72:71:08:20:a7:04:cb:8b:25: 46:b1:5e:7e:62:b2:fd:3e:8b:e8:a8:32:ca:c4:8e:df:33:a0: 9c:2c:67:94:5b:b6:c7:aa:98:c2:31:18:7b:97:03:59:49:c4: 7b:b6:7e:7c:17:d6:5a:b6:77:5a:64:96:54:b0:81:65:f5:82: aa:11:57:ef:45:b8:ba:28:97:4f:9d:a5:5e:de:47:68:66:ff: 0b:7c:db:4a:6f:de:10:07:93:27:33:a8:d0:cc:e4:05:34:f8: e5:73:f7:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjUwODEwMjMxOTQyWhcNMjUwODE3MjMxOTQyWjAYMRYwFAYD VQQDEw02ODk5MjkwZS0yN2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2sGPxbwOYRuaZI7s9ZZKkxM/dxfzYOmumkoZeXKgeBVvoT1fCUF5SgOiRlY OBsLIFNoX+j6QNXFWQLxN2Oz1taeOHGiQ4xcxLy1AL4nc15mniN222BhCDBiLRaH h0O8m+fqaLA6DTr+18Hs4fhib5lFT6yBfhPuH3Tvv5yC/iU0Vyx+derphUuBZ6m2 QjdkVaNSRzHAxty1MRFh8YFiA5WiAIkZuArykaB3no83IopTXfDmNF6KxXK4Xo9w MnGdQt7DD1huo/tMH4d1FJJ9QaoiIfH+GXIaAvD+26D6K/7m/58WBfRMSDSwzcEJ k5qGSHQolcI7ldhbGouiU9pBCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCzJeUS Lmo89HJI4aw6uD2E/KejMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0I2Qy84QjA4OTIwQUUyQTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZi eWZrQ0JZWDVwWU1tZDNQOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFtyvZPVbnS5mCkxr1A4HiqNpUxxIHR7NKquQQ749MmQy5Jq/U8JMX 3BYjhUtT1XS3SBRxX/NASdWRZPzzTCBj5Bt5qZ2FV7nOAwVOL1ZLJslRiwrSbwxl FfvQm83iCQFbr0kgkPr92f3eVqGhrXrJa+CiTE/6/ZCvHAKkrlH2PFeE4S0Bz3di dzjq26G/7pm5I419XGVZU0NycQggpwTLiyVGsV5+YrL9PovoqDLKxI7fM6CcLGeU W7bHqpjCMRh7lwNZScR7tn58F9ZatndaZJZUsIFl9YKqEVfvRbi6KJdPnaVe3kdo Zv8LfNtKb94QB5MnM6jQzOQFNPjlc/dp -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:20 2025 by rpki-client