$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: NnY3j9HgUR5GN3xO5WnEbKIZpl+ddcEyUUsZRipbcUw= Subject key identifier: 3C:EA:E8:E9:C4:ED:88:53:A1:B8:98:C6:E8:EF:4F:B9:DD:F5:7A:15 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 19EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 19E4 Signing time: Fri 22 Aug 2025 16:28:06 +0000 Manifest this update: Fri 22 Aug 2025 16:28:06 +0000 Manifest next update: Fri 29 Aug 2025 16:28:06 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: KKQGBBBD7q351AIFgQ5fIlVBryOYiUNIMaVQEm91EfY=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6639 (0x19ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Aug 22 16:28:06 2025 GMT Not After : Aug 29 16:28:06 2025 GMT Subject: CN=68a89a96-add3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e7:b7:7b:7d:19:7a:f5:44:3c:ef:27:e4:3b: bd:7e:12:5a:06:9e:d5:75:5c:2e:66:88:81:3c:e8: f3:de:48:8d:a9:a1:fd:7f:26:60:0e:cc:77:44:3f: fc:20:8c:7e:b9:82:f7:49:a4:0c:a6:b6:c0:3e:a1: 45:08:48:44:1c:19:b2:28:01:95:07:da:7b:8f:c9: dd:80:7e:3b:e2:6b:00:de:0a:42:c2:9e:1e:e0:27: c8:e1:7a:8f:e5:b4:b2:0d:9e:11:a7:40:83:44:a4: 65:1e:84:a1:51:d3:f6:b7:2e:14:98:ec:16:eb:23: c4:9b:67:44:cc:1c:14:70:7e:f8:58:88:ec:60:38: e8:9a:58:71:fd:13:e3:14:3e:11:71:48:6e:64:0c: c9:3e:d4:92:b7:c4:37:8b:b8:1f:29:e0:39:82:4f: ea:91:8c:df:77:b6:d7:44:3b:fa:e8:ff:d6:b4:62: 4e:52:38:59:f4:1f:19:49:16:8c:37:57:fb:27:d8: d5:14:84:e1:ee:d7:6d:cd:87:07:5b:5c:3d:72:69: a3:38:eb:9b:f1:50:00:61:39:22:92:dd:c4:25:4e: d8:a9:9f:c9:ea:ac:0a:3c:27:33:a1:97:4b:bc:5d: 68:d9:6a:24:0c:74:2f:a0:6f:4b:bd:5a:0b:2e:0c: f2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:E8:E9:C4:ED:88:53:A1:B8:98:C6:E8:EF:4F:B9:DD:F5:7A:15 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:7f:bb:3e:27:b3:43:86:e9:34:75:63:4e:90:78:b0:6b:a4: 4e:98:05:da:17:c9:05:55:9a:d9:af:a9:5e:38:0a:f9:e1:5d: b6:ed:5a:16:02:e5:38:39:24:a9:5d:94:c9:35:45:e2:23:c7: 1b:e4:b8:d8:63:b9:92:bf:c1:57:9d:9e:e7:78:87:a1:01:68: d5:72:79:0f:6d:93:6f:d8:6f:4b:db:0e:02:d5:73:a3:93:43: 2b:d8:54:8c:3e:53:a8:41:8d:2b:a5:8d:cc:4b:4c:9b:90:07: e1:28:6c:80:29:1b:92:42:42:5a:47:3b:09:c7:9b:d0:f0:6f: 2b:09:b4:d9:a0:a2:b4:ac:f6:4a:f8:76:c5:5a:71:45:43:b4: b9:d4:68:d0:4e:85:b0:40:99:f6:07:ab:69:c2:d6:ab:cc:f1: b7:40:83:5b:eb:1e:0e:fa:ae:98:f3:54:da:53:9d:53:4f:57: 90:76:b1:2c:5d:c0:b8:79:cf:6d:3c:4f:25:b7:c7:b5:88:35: cf:18:fa:61:ad:f3:d9:9a:05:51:94:c3:99:12:54:73:51:61: be:67:06:29:42:de:11:3c:aa:1a:7f:07:dd:9b:ea:aa:9a:fe: d7:f3:6d:65:ec:ad:43:09:33:1d:f8:54:38:eb:65:4a:9b:28: b3:96:a7:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUwODIyMTYyODA2WhcNMjUwODI5MTYyODA2WjAYMRYwFAYD VQQDEw02OGE4OWE5Ni1hZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOe3e30ZevVEPO8n5Du9fhJaBp7VdVwuZoiBPOjz3kiNqaH9fyZgDsx3RD/8 IIx+uYL3SaQMprbAPqFFCEhEHBmyKAGVB9p7j8ndgH474msA3gpCwp4e4CfI4XqP 5bSyDZ4Rp0CDRKRlHoShUdP2ty4UmOwW6yPEm2dEzBwUcH74WIjsYDjomlhx/RPj FD4RcUhuZAzJPtSSt8Q3i7gfKeA5gk/qkYzfd7bXRDv66P/WtGJOUjhZ9B8ZSRaM N1f7J9jVFITh7tdtzYcHW1w9cmmjOOub8VAAYTkikt3EJU7YqZ/J6qwKPCczoZdL vF1o2WokDHQvoG9LvVoLLgzyNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzq6OnE 7YhTobiYxujvT7nd9XoVMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZf7s+J7NDhuk0dWNOkHiwa6ROmAXaF8kFVZrZr6leOAr54V227VoW AuU4OSSpXZTJNUXiI8cb5LjYY7mSv8FXnZ7neIehAWjVcnkPbZNv2G9L2w4C1XOj k0Mr2FSMPlOoQY0rpY3MS0ybkAfhKGyAKRuSQkJaRzsJx5vQ8G8rCbTZoKK0rPZK +HbFWnFFQ7S51GjQToWwQJn2B6tpwtarzPG3QINb6x4O+q6Y81TaU51TT1eQdrEs XcC4ec9tPE8lt8e1iDXPGPphrfPZmgVRlMOZElRzUWG+ZwYpQt4RPKoafwfdm+qq mv7X821l7K1DCTMd+FQ462VKmyizlqc/ -----END CERTIFICATE-----Generated at Sun Aug 24 05:15:54 2025 by rpki-client