$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: OUm7xfFd++hWWYocjr68I0/YbqaY0RDP20cnz+MgBMg= Subject key identifier: 0C:1D:4A:47:F1:A2:3D:DB:A6:C5:E8:C9:91:92:D5:3D:5D:CF:9B:82 Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 01C0 Signing time: Mon 11 Aug 2025 03:04:59 +0000 Manifest this update: Mon 11 Aug 2025 03:04:59 +0000 Manifest next update: Mon 18 Aug 2025 03:04:59 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: WcCAHnzyCGikZqFaC1cFQc3GSlmUHvaM+1zo6Hh+rK4=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: HHXQFb70LXf16l4S8JzNbd5w8LQr3pgR5z+FBqxSlps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: Aug 11 03:04:59 2025 GMT Not After : Aug 18 03:04:59 2025 GMT Subject: CN=68995ddb-22bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:91:55:f0:c3:a8:ca:d1:fd:a3:87:04:a3: 64:e5:9b:77:97:c9:16:e0:5a:e7:fb:c2:4d:e1:58: b9:84:15:4d:21:31:38:2d:e5:fb:f1:15:85:76:b2: c3:d9:b1:27:41:f6:14:68:45:5e:06:65:ca:3b:c5: 4c:1f:22:b7:1c:a5:41:51:72:ac:37:97:f2:61:91: 95:91:23:61:6b:ad:69:c3:a2:db:f0:31:73:46:22: 44:ca:aa:c8:cc:fa:f5:11:ea:81:fc:29:95:40:d4: bf:7a:2e:2e:33:f8:99:33:f1:f2:0f:34:5a:b2:b3: 70:d2:4c:f9:b4:6e:57:e8:b8:28:f9:4a:8a:34:7e: 88:16:8f:2d:42:7c:a1:30:08:f3:25:85:99:95:fa: 0e:52:0e:92:d4:c9:ca:56:d9:f3:fa:20:5d:b2:cc: 02:f8:99:c9:ca:4c:da:ad:a7:51:35:f9:58:c7:26: b7:73:c5:e9:58:df:93:5a:5e:50:da:25:16:13:c5: 2a:d9:dc:fa:30:aa:76:76:56:97:a8:ba:e8:a7:1f: 07:a1:6f:ae:ef:db:e4:d0:0f:0c:a9:93:4b:9a:a7: 99:3a:37:81:f1:2e:3d:5a:e5:17:d6:8f:71:d5:ff: d2:49:77:bf:94:3c:4e:1a:2a:d5:6e:b8:a1:f1:c0: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1D:4A:47:F1:A2:3D:DB:A6:C5:E8:C9:91:92:D5:3D:5D:CF:9B:82 X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f6:0e:53:a9:a3:1f:f6:37:c3:dd:fe:a0:1a:d8:3b:ce:0d: bc:21:e8:d8:dc:5d:b4:8e:c3:63:a4:7a:80:1a:d7:4b:11:17: b6:4c:0d:32:39:0d:48:65:74:ba:81:c3:7f:7e:50:cd:71:92: e2:bb:00:fc:e3:dc:c3:df:51:c7:04:4b:b9:90:0b:02:56:8e: 31:77:b8:ae:84:6b:6c:eb:9a:42:da:e7:98:8e:e7:cf:d5:0f: 12:05:e9:d7:6f:c3:6d:84:d8:f7:fa:26:71:ea:6b:24:77:61: 1f:a1:64:72:12:ea:17:b6:af:70:82:46:c2:cf:44:98:35:2e: 8a:6a:21:c8:b5:bf:c7:92:71:5c:89:e5:11:36:94:6c:26:bd: 4f:84:94:45:9c:4b:80:11:39:aa:42:e7:18:1f:7a:29:14:59: 7f:c2:bc:c8:ff:26:82:ea:f2:be:85:50:9c:66:6e:c4:e2:b2: aa:a3:9b:02:61:1e:e4:99:68:6d:b0:58:77:c5:be:86:8d:3a: ff:e8:a2:8e:37:09:02:5d:0c:ce:73:3b:f6:33:ad:66:76:14: 28:42:eb:b6:c6:49:af:ac:d9:f5:55:ff:ee:0c:6d:56:95:67: 04:d3:08:75:b0:b3:c5:92:c5:0b:a5:cc:ac:ec:cd:ee:39:b1: 8c:62:29:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjUwODExMDMwNDU5WhcNMjUwODE4MDMwNDU5WjAYMRYwFAYD VQQDEw02ODk5NWRkYi0yMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1yRVfDDqMrR/aOHBKNk5Zt3l8kW4Frn+8JN4Vi5hBVNITE4LeX78RWFdrLD 2bEnQfYUaEVeBmXKO8VMHyK3HKVBUXKsN5fyYZGVkSNha61pw6Lb8DFzRiJEyqrI zPr1EeqB/CmVQNS/ei4uM/iZM/HyDzRasrNw0kz5tG5X6Lgo+UqKNH6IFo8tQnyh MAjzJYWZlfoOUg6S1MnKVtnz+iBdsswC+JnJykzaradRNflYxya3c8XpWN+TWl5Q 2iUWE8Uq2dz6MKp2dlaXqLropx8HoW+u79vk0A8MqZNLmqeZOjeB8S49WuUX1o9x 1f/SSXe/lDxOGirVbrih8cD+8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwdSkfx oj3bpsXoyZGS1T1dz5uCMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV9g5TqaMf9jfD3f6gGtg7zg28IejY3F20jsNjpHqAGtdLERe2TA0y OQ1IZXS6gcN/flDNcZLiuwD849zD31HHBEu5kAsCVo4xd7iuhGts65pC2ueYjufP 1Q8SBenXb8NthNj3+iZx6mskd2EfoWRyEuoXtq9wgkbCz0SYNS6KaiHItb/HknFc ieURNpRsJr1PhJRFnEuAETmqQucYH3opFFl/wrzI/yaC6vK+hVCcZm7E4rKqo5sC YR7kmWhtsFh3xb6GjTr/6KKONwkCXQzOczv2M61mdhQoQuu2xkmvrNn1Vf/uDG1W lWcE0wh1sLPFksULpcys7M3uObGMYilO -----END CERTIFICATE-----Generated at Mon Aug 11 04:38:33 2025 by rpki-client