$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: 5SLHwVOoYXdSdJF+hmaEkQU6HmD7Ta2MOv5QZ9o4Uns= Subject key identifier: D3:BB:24:E5:FD:4F:C3:A4:2E:97:40:BD:5A:53:74:61:1D:8A:59:96 Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 064D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0645 Signing time: Fri 22 Aug 2025 22:52:18 +0000 Manifest this update: Fri 22 Aug 2025 22:52:18 +0000 Manifest next update: Fri 29 Aug 2025 22:52:18 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: fNlSERHdzFpdh1Nh3nrT+6yoZU1FY/+r2P1kkQDf0u4=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1613 (0x64d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Aug 22 22:52:18 2025 GMT Not After : Aug 29 22:52:18 2025 GMT Subject: CN=68a8f4a2-f4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7e:b9:41:67:e0:b2:97:a8:c5:98:d5:f0:56: 61:c4:b2:56:45:e8:6a:de:a5:91:21:93:6d:9a:00: df:77:a2:4e:4a:63:76:10:54:55:0d:6b:dc:42:36: 66:56:2d:88:87:98:66:7c:c3:91:0c:d7:d3:2d:2c: 1c:53:14:83:a0:fe:f2:65:55:ca:07:cf:4f:19:f1: 25:7d:ad:32:c2:4a:f3:d1:08:9c:07:db:6a:f2:f8: 9a:21:39:f7:9e:9a:fc:13:26:c8:7d:01:d0:29:7d: 57:3d:30:73:23:8c:15:5e:e8:13:6b:8b:bf:66:29: 7a:d5:1d:87:33:3b:c3:a6:59:d9:10:97:c5:5e:3b: 0b:13:66:69:cd:3f:12:c7:9e:39:5d:80:43:31:d8: 1e:9e:a9:3c:be:49:b4:15:d7:02:42:35:1b:4b:a8: f9:8b:3b:2b:e3:3f:4e:38:c7:7c:91:28:c6:ac:3c: b2:b2:ca:88:b8:83:dd:59:3b:18:e7:f4:2c:aa:72: d4:09:8d:06:02:3b:d8:dc:38:b9:05:7e:f9:16:e7: 7b:bf:d0:26:fc:7c:77:a5:ff:d5:39:90:94:fa:96: d9:b6:5a:f2:fd:0c:9f:bb:fe:4e:9e:1e:a4:17:b9: e0:f9:80:64:cc:47:68:c6:16:a0:85:06:31:e6:ee: 9e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BB:24:E5:FD:4F:C3:A4:2E:97:40:BD:5A:53:74:61:1D:8A:59:96 X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:56:3d:72:20:8b:49:15:e4:0d:f4:32:2d:fc:91:de:2b:8a: d3:65:8d:a0:39:e5:30:ff:ab:8b:2a:2b:2c:43:0d:53:26:29: 10:3d:c9:fe:79:0c:87:c9:4b:50:79:9d:da:f1:6b:44:61:7d: 31:73:e5:1b:06:2c:97:cc:80:7e:58:29:11:00:ac:39:9b:37: f5:88:f1:44:f2:49:ed:c9:d0:2a:50:df:f2:21:29:61:b0:95: ea:be:ed:63:f9:fe:0f:2e:89:58:d2:45:e8:60:ca:fb:16:39: 28:fd:97:00:fb:47:9c:b3:04:9d:92:48:df:6a:2a:ec:95:f5: db:2d:cb:f7:a2:65:52:3d:1f:b5:e8:2b:24:3d:8b:ee:a7:b4: d6:48:0d:f7:38:5a:c4:84:1a:a4:bf:fc:9a:30:af:53:a3:6d: 1c:9b:6b:cb:6d:1e:85:1a:a7:45:50:e4:65:04:5d:ff:82:b0: 92:c1:b0:76:1f:64:ac:49:de:d3:83:f1:d9:a6:76:a1:ea:c0: a2:ea:c2:e8:d5:d7:37:ec:08:37:5e:71:77:b0:fc:74:b7:b6: 2b:13:eb:28:53:b6:00:aa:ea:5d:eb:46:fd:bc:a9:85:88:63: 10:a4:4b:ab:3d:b6:6c:1b:6a:5a:51:76:68:31:a5:1e:e6:aa: 69:b1:95:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwODIyMjI1MjE4WhcNMjUwODI5MjI1MjE4WjAYMRYwFAYD VQQDEw02OGE4ZjRhMi1mNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6n65QWfgspeoxZjV8FZhxLJWRehq3qWRIZNtmgDfd6JOSmN2EFRVDWvcQjZm Vi2Ih5hmfMORDNfTLSwcUxSDoP7yZVXKB89PGfElfa0ywkrz0QicB9tq8viaITn3 npr8EybIfQHQKX1XPTBzI4wVXugTa4u/Zil61R2HMzvDplnZEJfFXjsLE2ZpzT8S x545XYBDMdgenqk8vkm0FdcCQjUbS6j5izsr4z9OOMd8kSjGrDyyssqIuIPdWTsY 5/QsqnLUCY0GAjvY3Di5BX75Fud7v9Am/Hx3pf/VOZCU+pbZtlry/Qyfu/5Onh6k F7ng+YBkzEdoxhaghQYx5u6ekwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO7JOX9 T8OkLpdAvVpTdGEdilmWMB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmVj1yIItJFeQN9DIt/JHeK4rTZY2gOeUw/6uLKissQw1TJikQPcn+ eQyHyUtQeZ3a8WtEYX0xc+UbBiyXzIB+WCkRAKw5mzf1iPFE8kntydAqUN/yISlh sJXqvu1j+f4PLolY0kXoYMr7Fjko/ZcA+0ecswSdkkjfairslfXbLcv3omVSPR+1 6CskPYvup7TWSA33OFrEhBqkv/yaMK9To20cm2vLbR6FGqdFUORlBF3/grCSwbB2 H2SsSd7Tg/HZpnah6sCi6sLo1dc37Ag3XnF3sPx0t7YrE+soU7YAqupd60b9vKmF iGMQpEurPbZsG2paUXZoMaUe5qppsZVm -----END CERTIFICATE-----Generated at Sat Aug 23 21:20:29 2025 by rpki-client