$ rpki-client -vvf rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft File: WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft (raw, json) Hash identifier: x4aE5eGJ/GmfAKktOxaZ3vDhDFn1Wu0Vo9nq1B3JqWE= Subject key identifier: 1B:29:5A:F0:2F:4C:4D:EE:A1:E4:48:15:56:8A:8F:72:AF:82:BD:FE Authority key identifier: 59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 Certificate issuer: /CN=A91172C6/serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Certificate serial: 0F85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft Manifest number: 0F7D Signing time: Fri 22 Aug 2025 17:39:57 +0000 Manifest this update: Fri 22 Aug 2025 17:39:56 +0000 Manifest next update: Fri 29 Aug 2025 17:39:56 +0000 Files and hashes: 1: WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl (hash: gXsKb2CYogLjvEQUJW5VtQrdZiCFT4BD87jKo8W+KDE=) 2: 16FA72386A4E11E992F4832FC4F9AE02.roa (hash: OgNGu/mRKm6xVdHYanAV24opwQSD/lMEZY85nUgEHHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3973 (0xf85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91172C6, serialNumber=5976EF5D0BF16688E25EC5E2DC8CA9F5AFAE1B53 Validity Not Before: Aug 22 17:39:56 2025 GMT Not After : Aug 29 17:39:56 2025 GMT Subject: CN=68a8ab6c-d346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:63:88:67:93:48:84:d9:99:11:1f:36:48: a7:7c:d4:df:a1:a4:3c:a4:92:e2:35:1d:2e:bc:39: 26:8d:7f:4a:8f:62:ba:d4:87:27:d0:b3:44:cb:69: 5d:93:57:4b:34:a3:47:3e:67:be:99:bc:bc:3d:f2: e7:99:62:93:76:69:07:6b:9c:ab:12:19:69:2c:9b: 57:c5:59:6e:1b:d6:02:6a:9e:4d:85:72:04:df:ec: 8d:56:cd:89:3b:85:75:e8:c7:54:f9:f6:8d:34:68: b9:f0:79:a9:28:0d:c2:35:b2:ce:35:35:b2:18:83: b7:6a:58:88:c0:68:ab:91:db:54:d5:40:95:1e:ef: 49:5f:39:82:f7:49:0b:4c:94:ef:e2:e2:70:1d:5f: 3c:bb:ef:ea:0f:c6:13:22:29:3a:48:49:87:1a:06: 16:94:1c:d4:1e:cd:6c:09:60:ab:f5:e6:c9:69:10: 6d:f4:98:30:1c:ce:83:e7:3d:92:9d:3f:8d:ab:6a: b1:6f:92:52:32:e7:d8:af:f7:54:46:3b:8c:32:da: 0b:34:fb:bc:0f:cc:74:57:39:e3:7e:7a:65:f9:ab: 60:2a:c1:98:63:bb:b9:5f:a7:9e:44:91:25:d2:c4: ed:e3:f7:f9:e2:e2:fd:09:0a:91:e5:7e:0a:84:61: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:29:5A:F0:2F:4C:4D:EE:A1:E4:48:15:56:8A:8F:72:AF:82:BD:FE X509v3 Authority Key Identifier: keyid:59:76:EF:5D:0B:F1:66:88:E2:5E:C5:E2:DC:8C:A9:F5:AF:AE:1B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WXbvXQvxZojiXsXi3Iyp9a-uG1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91172C6/0AA4D6646A4D11E99F05432EC4F9AE02/WXbvXQvxZojiXsXi3Iyp9a-uG1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:18:b5:57:ff:20:21:71:6b:bb:ee:b5:2b:3d:fc:4b:92:30: 69:77:66:ea:d9:51:83:4c:28:63:46:f8:dd:7c:d8:b2:d5:41: c7:2f:a1:66:97:d5:28:4a:ec:2f:9b:6e:9f:c4:83:98:bf:2b: 0e:e2:9e:88:52:73:b8:71:35:10:19:41:64:f7:2e:32:56:7d: 2d:63:3e:96:bc:8d:81:13:43:4c:9f:a4:6f:88:e4:2b:e7:23: 21:82:eb:02:c8:4f:97:85:d5:cf:24:af:ba:2a:32:ca:78:ff: ef:ed:c9:4c:5c:72:9e:57:5b:21:26:32:d8:d2:d9:35:5d:21: 60:43:07:c1:1b:26:1a:ed:00:85:17:81:f0:01:d5:30:73:e5: 1f:ca:b1:bd:49:1e:a7:37:0c:52:a7:d2:2b:89:16:9d:1d:29: 7e:37:3f:5d:de:d2:2d:4b:bd:41:f2:4f:68:7e:55:da:d8:65: d6:03:4b:ee:02:92:4a:f9:18:75:7d:ee:43:f8:dc:65:8f:ad: 6b:79:2e:44:5b:36:05:a5:6c:26:db:0c:71:06:74:63:ce:56: 3b:ad:c3:0b:5e:3c:1a:f1:5d:e9:46:b7:42:fb:0b:20:1f:83: 47:63:4b:46:3c:d3:f6:09:e0:29:cb:38:82:96:34:31:df:90: e4:f3:b9:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcyQzYxMTAvBgNVBAUTKDU5NzZFRjVEMEJGMTY2ODhFMjVFQzVFMkRDOENBOUY1 QUZBRTFCNTMwHhcNMjUwODIyMTczOTU2WhcNMjUwODI5MTczOTU2WjAYMRYwFAYD VQQDEw02OGE4YWI2Yy1kMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXJjiGeTSITZmREfNkinfNTfoaQ8pJLiNR0uvDkmjX9Kj2K61Icn0LNEy2ld k1dLNKNHPme+mby8PfLnmWKTdmkHa5yrEhlpLJtXxVluG9YCap5NhXIE3+yNVs2J O4V16MdU+faNNGi58HmpKA3CNbLONTWyGIO3aliIwGirkdtU1UCVHu9JXzmC90kL TJTv4uJwHV88u+/qD8YTIik6SEmHGgYWlBzUHs1sCWCr9ebJaRBt9JgwHM6D5z2S nT+Nq2qxb5JSMufYr/dURjuMMtoLNPu8D8x0Vznjfnpl+atgKsGYY7u5X6eeRJEl 0sTt4/f54uL9CQqR5X4KhGHGAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBspWvAv TE3uoeRIFVaKj3Kvgr3+MB8GA1UdIwQYMBaAFFl2710L8WaI4l7F4tyMqfWvrhtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzJDNi8wQUE0RDY2NDZB NEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpvamlYc1hpM0l5cDlhLXVH MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dYYnZYUXZ4Wm9qaVhzWGkzSXlwOWEtdUcxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzJDNi8wQUE0RDY2NDZBNEQxMUU5OUYwNTQzMkVDNEY5QUUwMi9XWGJ2WFF2eFpv amlYc1hpM0l5cDlhLXVHMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSGLVX/yAhcWu77rUrPfxLkjBpd2bq2VGDTChjRvjdfNiy1UHHL6Fm l9UoSuwvm26fxIOYvysO4p6IUnO4cTUQGUFk9y4yVn0tYz6WvI2BE0NMn6RviOQr 5yMhgusCyE+XhdXPJK+6KjLKeP/v7clMXHKeV1shJjLY0tk1XSFgQwfBGyYa7QCF F4HwAdUwc+UfyrG9SR6nNwxSp9IriRadHSl+Nz9d3tItS71B8k9oflXa2GXWA0vu ApJK+Rh1fe5D+Nxlj61reS5EWzYFpWwm2wxxBnRjzlY7rcMLXjwa8V3pRrdC+wsg H4NHY0tGPNP2CeApyziCljQx35Dk87nu -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:45 2025 by rpki-client