$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: S4W64LSe+jJyulkK82+6FPJU0CiFihlcWsnqI7POPPg= Subject key identifier: 4A:BB:9D:4B:DA:1B:2C:F3:89:FC:C2:2C:A9:3D:96:6F:52:2B:F6:BE Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 34E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 34CF Signing time: Fri 22 Aug 2025 15:14:38 +0000 Manifest this update: Fri 22 Aug 2025 15:14:37 +0000 Manifest next update: Fri 29 Aug 2025 15:14:37 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: aTn85/83YzM5Hkl2+VRl0aSxlD93IjZwpsy+QPVG0GU=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13543 (0x34e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Aug 22 15:14:37 2025 GMT Not After : Aug 29 15:14:37 2025 GMT Subject: CN=68a8895e-9eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:d5:71:03:b4:23:fe:93:91:ac:98:40:ad: 90:67:ee:b3:7f:de:b7:84:52:30:4d:25:e4:b8:2a: 9d:47:a8:b0:1c:0a:93:29:95:aa:c1:56:d0:84:65: 97:f6:7b:77:0c:93:7c:de:43:cd:a7:da:98:eb:cf: 84:c1:25:d8:fc:56:a3:4c:a0:7b:66:33:92:9b:b0: 1d:69:52:b1:82:bc:9a:34:92:88:8e:b8:20:23:ec: e5:30:b2:a5:75:6a:95:41:92:88:fe:f1:b1:62:3d: a2:8a:84:25:04:f0:a6:46:09:78:2b:46:2a:76:cc: 2e:bd:5c:56:b5:67:3b:41:6c:5a:32:35:11:a1:84: 4b:18:92:03:3d:d4:96:d2:75:7c:9b:b7:e8:7b:cd: ce:ce:41:7a:d3:1c:1e:88:81:e5:d2:76:75:15:cf: 6e:15:76:d1:82:c7:8e:7a:d2:fb:2b:d4:ea:56:f8: 91:fa:a1:cf:db:fa:bc:33:70:57:87:ba:5b:04:fd: 62:a6:32:90:5a:85:6a:b8:fe:3e:68:f8:7c:0b:4c: 74:a5:7b:78:74:2b:ea:95:94:d5:08:a6:92:86:d5: bf:05:11:df:e4:6f:06:a7:57:7d:27:99:cf:f9:22: 84:e1:4f:63:59:46:c8:e5:35:4f:c1:56:c8:35:26: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BB:9D:4B:DA:1B:2C:F3:89:FC:C2:2C:A9:3D:96:6F:52:2B:F6:BE X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:d7:59:c3:bc:c7:db:ae:0a:42:21:34:54:fb:6e:a6:18:1c: b4:c5:98:b2:1a:ed:f0:58:2f:85:19:e1:7f:b8:38:d0:15:81: 06:81:7b:59:52:e7:85:a4:23:f2:47:2c:a1:90:78:72:b0:88: 78:57:c2:57:04:ef:ed:6e:64:50:bb:17:d5:85:85:e0:aa:4e: 92:34:97:2e:d3:0a:22:76:06:26:81:f1:77:b0:0b:5e:bd:eb: 6b:dc:31:3c:71:c6:79:77:26:ae:2b:28:3a:57:47:fd:9b:28: 42:15:a9:7e:d6:dc:25:99:ca:7a:92:85:a2:8d:e7:71:83:e1: a4:92:67:0a:3e:1e:11:0d:33:44:9e:e8:31:34:b9:8a:ed:9c: df:53:97:fe:ee:fc:98:65:45:a7:1a:50:76:b6:84:7d:22:df: d9:13:18:8f:8d:33:ed:46:9f:0b:6f:6b:ab:70:1f:67:7e:92: f9:84:1e:53:fb:45:c9:02:e7:48:74:49:66:84:a7:10:b9:28: 3e:f8:d8:0e:f9:4f:a7:fe:57:60:67:01:5b:ec:21:4a:97:0c: 8b:37:d2:9b:af:38:67:dc:d9:e5:8a:eb:4b:89:2a:d9:56:73: 0f:44:06:5e:eb:5e:55:bc:40:6e:c7:09:2c:4e:b8:75:5c:33: a9:d3:75:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwODIyMTUxNDM3WhcNMjUwODI5MTUxNDM3WjAYMRYwFAYD VQQDEw02OGE4ODk1ZS05ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQLVcQO0I/6TkayYQK2QZ+6zf963hFIwTSXkuCqdR6iwHAqTKZWqwVbQhGWX 9nt3DJN83kPNp9qY68+EwSXY/FajTKB7ZjOSm7AdaVKxgryaNJKIjrggI+zlMLKl dWqVQZKI/vGxYj2iioQlBPCmRgl4K0YqdswuvVxWtWc7QWxaMjURoYRLGJIDPdSW 0nV8m7foe83OzkF60xweiIHl0nZ1Fc9uFXbRgseOetL7K9TqVviR+qHP2/q8M3BX h7pbBP1ipjKQWoVquP4+aPh8C0x0pXt4dCvqlZTVCKaShtW/BRHf5G8Gp1d9J5nP +SKE4U9jWUbI5TVPwVbINSZHPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq7nUva GyzzifzCLKk9lm9SK/a+MB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF11nDvMfbrgpCITRU+26mGBy0xZiyGu3wWC+FGeF/uDjQFYEGgXtZ UueFpCPyRyyhkHhysIh4V8JXBO/tbmRQuxfVhYXgqk6SNJcu0woidgYmgfF3sAte vetr3DE8ccZ5dyauKyg6V0f9myhCFal+1twlmcp6koWijedxg+GkkmcKPh4RDTNE nugxNLmK7ZzfU5f+7vyYZUWnGlB2toR9It/ZExiPjTPtRp8Lb2urcB9nfpL5hB5T +0XJAudIdElmhKcQuSg++NgO+U+n/ldgZwFb7CFKlwyLN9Kbrzhn3NnliutLiSrZ VnMPRAZe615VvEBuxwksTrh1XDOp03UL -----END CERTIFICATE-----Generated at Sun Aug 24 04:33:22 2025 by rpki-client