$ rpki-client -vvf rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft File: RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft (raw, json) Hash identifier: VOV+V+usO1y0Ivh0hIWd01QgDs1lbmCclX8TAkD2V3Y= Subject key identifier: 0E:E3:E8:F8:54:CF:78:31:A1:0E:A6:D1:B3:66:AE:A7:AC:C3:99:8C Authority key identifier: 45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 Certificate issuer: /CN=A917BD68/serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Certificate serial: 02F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft Manifest number: 02EE Signing time: Sat 23 Aug 2025 01:32:29 +0000 Manifest this update: Sat 23 Aug 2025 01:32:28 +0000 Manifest next update: Sat 30 Aug 2025 01:32:28 +0000 Files and hashes: 1: RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl (hash: dGjoAswgGzbTnROssnzJPpsLLjEpeSfwpTl5kdNdnd8=) 2: AF88A400F15711EC846A5F29C4F9AE02.roa (hash: Q4rmj8ZW9q3ZMhMYZknk/X38qXU9tpt3Fwr+6cA845w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BD68, serialNumber=456320FE970F5CA4BFD7756FC3E27E06B308BE75 Validity Not Before: Aug 23 01:32:28 2025 GMT Not After : Aug 30 01:32:28 2025 GMT Subject: CN=68a91a2d-012e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:5c:01:75:0e:98:9b:4f:51:d7:14:13:47: e6:61:97:a6:6a:ad:61:89:1a:5e:e4:f1:d8:a4:1e: d6:97:27:2f:24:8d:dc:7c:09:e7:14:44:3a:fd:06: 23:b5:08:08:30:98:8f:f3:49:05:8a:e2:fe:1e:50: 86:78:e9:c1:19:3b:00:e3:e2:13:75:95:db:48:49: 53:3c:2f:29:97:0a:20:6e:b9:4a:83:74:4b:c6:ee: fb:0a:32:06:7a:9a:69:61:ff:70:88:f8:13:73:e8: 0d:82:c5:06:49:d1:f1:a0:64:45:f2:f5:34:36:51: be:c2:bf:ee:95:c6:6b:47:cd:ca:e5:c4:56:41:ee: 49:13:a8:aa:59:7b:ec:f9:52:bf:82:15:cb:3c:58: 2e:94:61:d5:17:6d:72:02:a8:6b:bb:69:03:f8:33: 0c:32:22:34:ed:ea:c9:1a:d7:87:17:5d:a7:18:77: 81:9a:af:47:e5:27:77:9b:df:28:79:41:21:c6:82: 89:73:36:0e:b3:bf:e9:62:03:73:a8:55:fa:94:3b: 5a:71:39:b3:09:54:02:27:c5:bb:39:88:74:e5:a8: 9d:af:89:04:49:99:55:d9:68:74:84:d8:65:63:d8: 8d:31:4b:4e:a2:ee:c0:50:f1:de:cf:60:47:89:6b: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:E8:F8:54:CF:78:31:A1:0E:A6:D1:B3:66:AE:A7:AC:C3:99:8C X509v3 Authority Key Identifier: keyid:45:63:20:FE:97:0F:5C:A4:BF:D7:75:6F:C3:E2:7E:06:B3:08:BE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWMg_pcPXKS_13Vvw-J-BrMIvnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BD68/04D74B50F15311ECB07C9F26C4F9AE02/RWMg_pcPXKS_13Vvw-J-BrMIvnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:58:34:88:95:cb:39:91:4b:16:3b:39:5e:9f:c6:3d:53:63: cd:6a:62:80:c9:22:e8:51:64:4b:33:02:fb:fc:b6:76:9a:37: 85:ba:fd:45:fb:84:36:e1:04:f9:9d:39:38:3b:ec:e5:52:91: 4a:c5:0d:24:26:6f:05:fc:80:a6:a5:50:2d:95:2f:47:ec:46: 64:46:e2:fd:00:2b:f5:a5:87:24:79:ae:38:37:91:bd:54:48: 64:65:28:3d:51:d8:63:7c:a9:fb:51:3e:0a:1f:11:90:6d:d1: 82:e6:28:9a:f5:91:13:30:dd:20:91:77:e8:1e:62:1e:c7:4c: 7f:1c:4f:81:c4:f3:a5:32:22:5f:ab:13:91:1b:64:8f:e8:fc: 50:d2:8e:51:23:d3:ab:00:95:f9:99:8a:9c:98:8e:72:ee:32: 32:0d:d8:ee:77:72:fb:14:95:c4:24:35:76:bf:c7:22:d2:12: 3b:3e:78:24:f4:f4:8b:79:eb:69:22:91:b8:a8:5a:2d:7a:94: 15:48:e9:73:8f:9a:99:46:a5:d8:3e:48:f6:20:bc:06:d0:bd: 68:c4:61:2f:2b:a9:81:51:e8:c1:83:85:30:1f:70:a7:46:d9: 6f:f5:f9:a9:59:a6:00:c6:11:07:ed:d6:8a:2e:52:d1:7f:1c: 6a:b2:1d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JENjgxMTAvBgNVBAUTKDQ1NjMyMEZFOTcwRjVDQTRCRkQ3NzU2RkMzRTI3RTA2 QjMwOEJFNzUwHhcNMjUwODIzMDEzMjI4WhcNMjUwODMwMDEzMjI4WjAYMRYwFAYD VQQDEw02OGE5MWEyZC0wMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs2hcAXUOmJtPUdcUE0fmYZemaq1hiRpe5PHYpB7WlycvJI3cfAnnFEQ6/QYj tQgIMJiP80kFiuL+HlCGeOnBGTsA4+ITdZXbSElTPC8plwogbrlKg3RLxu77CjIG epppYf9wiPgTc+gNgsUGSdHxoGRF8vU0NlG+wr/ulcZrR83K5cRWQe5JE6iqWXvs +VK/ghXLPFgulGHVF21yAqhru2kD+DMMMiI07erJGteHF12nGHeBmq9H5Sd3m98o eUEhxoKJczYOs7/pYgNzqFX6lDtacTmzCVQCJ8W7OYh05aidr4kESZlV2Wh0hNhl Y9iNMUtOou7AUPHez2BHiWseAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7j6PhU z3gxoQ6m0bNmrqesw5mMMB8GA1UdIwQYMBaAFEVjIP6XD1ykv9d1b8PifgazCL51 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkQ2OC8wNEQ3NEI1MEYx NTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhLU18xM1Z2dy1KLUJyTUl2 blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXTWdfcGNQWEtTXzEzVnZ3LUotQnJNSXZuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkQ2OC8wNEQ3NEI1MEYxNTMxMUVDQjA3QzlGMjZDNEY5QUUwMi9SV01nX3BjUFhL U18xM1Z2dy1KLUJyTUl2blUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByWDSIlcs5kUsWOzlen8Y9U2PNamKAySLoUWRLMwL7/LZ2mjeFuv1F +4Q24QT5nTk4O+zlUpFKxQ0kJm8F/ICmpVAtlS9H7EZkRuL9ACv1pYckea44N5G9 VEhkZSg9UdhjfKn7UT4KHxGQbdGC5iia9ZETMN0gkXfoHmIex0x/HE+BxPOlMiJf qxORG2SP6PxQ0o5RI9OrAJX5mYqcmI5y7jIyDdjud3L7FJXEJDV2v8ci0hI7Pngk 9PSLeetpIpG4qFotepQVSOlzj5qZRqXYPkj2ILwG0L1oxGEvK6mBUejBg4UwH3Cn Rtlv9fmpWaYAxhEH7daKLlLRfxxqsh35 -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:31 2025 by rpki-client