$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json) Hash identifier: rEYYXIObyLIlKFJFqK0Z434hf8gjrJXznYvAKJSehyY= Subject key identifier: 97:D6:3B:AB:79:6F:3D:C9:AD:87:21:34:9F:13:A2:F1:7D:58:62:D1 Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 0351 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft Manifest number: 0349 Signing time: Sat 23 Aug 2025 01:15:51 +0000 Manifest this update: Sat 23 Aug 2025 01:15:50 +0000 Manifest next update: Sat 30 Aug 2025 01:15:50 +0000 Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: Vw+GudxPJN5cHv/1mxp9U9DigqrdevUH31yEw6x+ahc=) 2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=) 3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 849 (0x351) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Aug 23 01:15:50 2025 GMT Not After : Aug 30 01:15:50 2025 GMT Subject: CN=68a91646-207c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:12:4b:98:14:6c:b6:37:c5:60:bd:28:9e: 4d:17:29:49:f5:fe:0e:95:8f:3f:de:af:15:1b:75: 92:c6:6b:6b:9e:6a:81:3b:11:52:76:f9:22:d5:81: 05:98:3c:d4:66:3f:e5:23:5d:4b:50:e5:95:e2:b6: 9b:66:97:f9:3c:19:8f:7c:de:df:0e:1a:b8:cb:6b: f1:64:e1:9a:bf:94:1b:5d:07:61:db:a5:77:f1:6a: 6e:70:92:f7:c0:83:68:6c:1b:95:62:94:d6:6e:0c: 7b:20:38:6e:b8:15:c4:e9:4a:05:fd:17:aa:3c:a7: 10:0b:14:0a:20:df:9e:1f:c1:26:00:5d:ff:05:0e: 27:48:bb:b4:22:19:59:c5:4c:92:0b:bd:5b:6d:a2: c5:a9:9e:9d:06:d5:69:04:b0:77:85:5e:9c:09:8d: fb:af:37:5b:00:b6:5c:06:8b:f1:ee:99:06:cd:c8: 05:41:e6:2b:09:d0:84:b2:88:0f:9f:2d:54:e3:28: b7:e0:a8:f7:84:6b:1b:77:19:61:ab:fb:c2:f9:ec: b1:1d:4b:27:4c:1d:e5:64:21:17:31:00:51:93:cc: 37:1d:79:3d:45:75:2e:7f:0e:49:2f:be:6e:dc:c9: fa:b7:01:ef:27:0d:5c:70:3b:c4:f1:09:7f:be:f7: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D6:3B:AB:79:6F:3D:C9:AD:87:21:34:9F:13:A2:F1:7D:58:62:D1 X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:0a:d5:38:bc:44:72:6e:47:68:20:18:7f:f5:98:a1:cb:2d: e5:7e:6a:6f:86:6c:d6:45:a4:16:64:5c:95:e2:e8:dd:38:ad: fc:20:84:d5:3c:88:68:e1:6b:af:35:dc:ed:a2:c9:6e:14:d2: ed:6d:20:c0:0d:06:72:a7:a9:74:8e:33:9c:64:c5:c6:20:06: 25:ed:bb:58:ad:ba:70:85:ca:9d:16:15:74:1c:f6:f1:c6:00: 3b:ea:1d:09:3e:92:70:2f:8a:bc:b4:89:db:fa:ec:54:26:e0: 5c:56:2e:cb:d0:21:a4:7a:ac:93:c7:a0:94:88:dc:91:5c:0c: c0:94:74:c5:4c:e5:94:97:05:3d:d5:8e:ca:28:75:6e:c3:7f: 3e:08:4f:7f:fd:68:a6:a4:03:ca:05:4e:2a:ec:3a:50:80:fc: 8c:80:55:44:61:2d:61:08:bf:9f:7c:b3:5f:9d:cd:7b:07:87: 71:88:d1:a6:12:3c:47:a4:dd:4a:45:e8:9b:db:89:1e:32:8d: 85:31:a9:dd:d3:4d:24:a1:31:88:28:72:a0:2a:a6:ba:d2:a5: e9:3a:09:40:38:88:bf:f3:71:28:b7:85:5a:c5:eb:c8:d1:2a: be:b4:b9:05:5b:67:b4:2b:92:f8:c1:be:e5:e0:68:a9:25:4a: f6:d0:4c:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjUwODIzMDExNTUwWhcNMjUwODMwMDExNTUwWjAYMRYwFAYD VQQDEw02OGE5MTY0Ni0yMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2oSS5gUbLY3xWC9KJ5NFylJ9f4OlY8/3q8VG3WSxmtrnmqBOxFSdvki1YEF mDzUZj/lI11LUOWV4rabZpf5PBmPfN7fDhq4y2vxZOGav5QbXQdh26V38WpucJL3 wINobBuVYpTWbgx7IDhuuBXE6UoF/ReqPKcQCxQKIN+eH8EmAF3/BQ4nSLu0IhlZ xUySC71bbaLFqZ6dBtVpBLB3hV6cCY37rzdbALZcBovx7pkGzcgFQeYrCdCEsogP ny1U4yi34Kj3hGsbdxlhq/vC+eyxHUsnTB3lZCEXMQBRk8w3HXk9RXUufw5JL75u 3Mn6twHvJw1ccDvE8Ql/vvcQaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfWO6t5 bz3JrYchNJ8TovF9WGLRMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4 QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWCtU4vERybkdoIBh/9Zihyy3lfmpvhmzWRaQWZFyV4ujdOK38IITV PIho4WuvNdztosluFNLtbSDADQZyp6l0jjOcZMXGIAYl7btYrbpwhcqdFhV0HPbx xgA76h0JPpJwL4q8tInb+uxUJuBcVi7L0CGkeqyTx6CUiNyRXAzAlHTFTOWUlwU9 1Y7KKHVuw38+CE9//WimpAPKBU4q7DpQgPyMgFVEYS1hCL+ffLNfnc17B4dxiNGm EjxHpN1KReib24keMo2FMand000koTGIKHKgKqa60qXpOglAOIi/83Eot4VaxevI 0Sq+tLkFW2e0K5L4wb7l4GipJUr20EwV -----END CERTIFICATE-----Generated at Sat Aug 23 19:28:20 2025 by rpki-client