$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: ozGPY484jcVxCYhx0Z7YnulSNtcUVlVdTbO9i/JfO8E= Subject key identifier: F9:6F:28:62:97:4E:D5:49:81:15:EF:31:DF:09:4E:11:DC:6E:21:D2 Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 01C6 Signing time: Sat 23 Aug 2025 03:06:50 +0000 Manifest this update: Sat 23 Aug 2025 03:06:50 +0000 Manifest next update: Sat 30 Aug 2025 03:06:50 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: dOwAYpcEfFGcXGkiH6XO0C5cfyZ1wXY1P/cbUmwXtOA=) 2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: e9UJAcJ07X5sik6oJ0l9nVp35GOCmRSlbj3wJmjgBrI=) 3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: W+oeT9rREoYMeOrigBJ91wQkGtgMzcafqibSzxam1Bk=) 4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: oqC6m15GvkoEhYAheA3+Yegw0Ae9mcHaCs/xuTvq3ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Aug 23 03:06:50 2025 GMT Not After : Aug 30 03:06:50 2025 GMT Subject: CN=68a9304a-bde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:57:c3:3a:36:6d:03:a7:b7:bf:a6:06:d7:57: 98:7a:ac:89:ae:21:56:79:8a:7d:b7:81:0a:ec:88: 50:f4:f3:5e:9e:03:26:32:07:48:6e:d3:28:de:37: 32:eb:b6:c6:0a:a0:44:a6:cf:27:88:c8:84:4f:5b: 2a:af:12:df:39:58:a6:94:ce:01:51:52:66:8b:eb: 16:70:3a:09:5a:cc:4d:91:7e:97:30:a9:b6:14:b2: 7e:0d:6b:fa:24:d6:f5:8b:ff:58:88:be:80:4c:ac: 0f:a7:60:f2:06:06:1a:16:07:5e:cc:02:56:66:ad: fa:f6:29:7a:c5:b4:0b:e1:a2:ee:ca:60:22:d6:5c: 3d:3d:be:2d:75:bd:5b:40:97:24:dd:fb:41:c0:c9: a3:d0:7f:e2:85:54:20:8f:4a:64:46:5a:c6:71:a5: 9c:4a:c0:7a:cd:5a:d3:dc:4e:37:f3:a8:b8:85:cf: 36:fd:51:70:a8:f8:85:8b:52:47:05:05:4f:79:70: 2b:56:e2:aa:6c:f2:c5:64:91:3a:98:ba:61:f4:f0: 89:66:21:d9:99:2b:30:8a:b9:ee:5c:4c:1e:5a:53: b2:50:f6:c5:6f:bf:d7:6a:4d:0d:60:a6:e2:da:4c: ea:32:ed:f6:0b:81:1f:53:7b:23:35:79:4b:03:23: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6F:28:62:97:4E:D5:49:81:15:EF:31:DF:09:4E:11:DC:6E:21:D2 X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:0e:38:de:e3:76:a4:da:d7:cf:7d:20:20:f1:64:c2:a0:79: f7:86:0e:9a:b5:a5:ae:a8:50:15:5c:63:d3:0e:c9:36:f3:39: 56:3e:08:03:1f:58:a3:a4:06:e1:3d:c2:37:10:97:7c:81:5b: b5:ff:43:52:ef:3c:ad:75:f3:8d:74:3c:6c:64:99:69:1a:8a: 35:58:d3:d1:93:6b:30:e9:4f:4a:c3:91:d4:ae:27:7f:61:ab: 20:14:e0:66:e7:fb:c7:6f:07:60:df:e8:3b:ba:97:ac:e4:f3: f8:4a:91:00:ac:4e:4e:d6:88:7f:9f:7f:3e:f7:2b:16:76:9d: 67:8f:0d:4f:26:c1:bb:df:2a:c0:24:13:31:86:e6:dd:ab:ab: 0c:28:76:a1:32:90:08:ff:0b:1b:76:01:52:90:24:2d:c6:44: f2:e2:80:e4:6a:8a:41:b7:cb:d0:f1:4a:b1:71:d0:59:90:a8: 1c:be:56:2d:a5:f5:35:67:d0:ec:6d:b9:76:46:e7:13:ee:a2: 15:39:53:f0:f8:83:33:b4:a7:cb:f0:e4:28:f2:ce:37:92:08: be:39:8e:0e:ce:af:2c:cb:e4:3c:c5:33:a9:e2:a1:cc:46:31: b7:8c:40:1d:a8:9a:60:0c:0d:06:71:c6:9d:ea:40:b7:96:16: b5:c8:5b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjUwODIzMDMwNjUwWhcNMjUwODMwMDMwNjUwWjAYMRYwFAYD VQQDEw02OGE5MzA0YS1iZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVfDOjZtA6e3v6YG11eYeqyJriFWeYp9t4EK7IhQ9PNengMmMgdIbtMo3jcy 67bGCqBEps8niMiET1sqrxLfOVimlM4BUVJmi+sWcDoJWsxNkX6XMKm2FLJ+DWv6 JNb1i/9YiL6ATKwPp2DyBgYaFgdezAJWZq369il6xbQL4aLuymAi1lw9Pb4tdb1b QJck3ftBwMmj0H/ihVQgj0pkRlrGcaWcSsB6zVrT3E4386i4hc82/VFwqPiFi1JH BQVPeXArVuKqbPLFZJE6mLph9PCJZiHZmSswirnuXEweWlOyUPbFb7/Xak0NYKbi 2kzqMu32C4EfU3sjNXlLAyMoTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlvKGKX TtVJgRXvMd8JThHcbiHSMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Djje43ak2tfPfSAg8WTCoHn3hg6ataWuqFAVXGPTDsk28zlWPggD H1ijpAbhPcI3EJd8gVu1/0NS7zytdfONdDxsZJlpGoo1WNPRk2sw6U9Kw5HUrid/ YasgFOBm5/vHbwdg3+g7upes5PP4SpEArE5O1oh/n38+9ysWdp1njw1PJsG73yrA JBMxhubdq6sMKHahMpAI/wsbdgFSkCQtxkTy4oDkaopBt8vQ8UqxcdBZkKgcvlYt pfU1Z9Dsbbl2RucT7qIVOVPw+IMztKfL8OQo8s43kgi+OY4Ozq8sy+Q8xTOp4qHM RjG3jEAdqJpgDA0Gccad6kC3lha1yFu9 -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:01 2025 by rpki-client