$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: bp6XwJziNvI11tCjWmGjLVr2OVgiJ1QA6NtnXhiPn3U= Subject key identifier: 93:71:38:BD:E8:6D:22:04:26:E4:6A:54:D7:A9:23:47:0C:2F:8B:DA Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 10CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 10C5 Signing time: Fri 22 Aug 2025 17:26:12 +0000 Manifest this update: Fri 22 Aug 2025 17:26:12 +0000 Manifest next update: Fri 29 Aug 2025 17:26:12 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: tlodHN9wjDK1TUFYkDEir8WJco8QcIJHYWywU6J6yn8=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4301 (0x10cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Aug 22 17:26:12 2025 GMT Not After : Aug 29 17:26:12 2025 GMT Subject: CN=68a8a834-d209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:91:9a:a3:de:7f:dd:df:8d:12:fb:da:1d:27: 8c:e0:1f:e2:cd:c4:77:a8:5e:4f:eb:7d:3a:5a:ae: 20:28:b0:58:7b:91:93:9d:82:20:ce:35:8d:d5:a6: 92:71:87:d9:9a:56:50:7c:25:5f:e6:69:81:86:62: 56:9b:13:56:fd:01:74:b9:02:e6:3f:d6:54:6a:1f: 8d:e0:52:1b:b2:bf:de:30:f9:a2:84:ed:20:c7:b5: ad:62:68:8b:74:49:57:94:0c:cc:bc:1b:ef:14:f0: a8:86:fe:99:93:a8:28:46:8b:d7:4a:24:dc:82:35: f6:78:4c:c6:d8:40:1a:fc:62:e5:fb:3c:29:76:db: 60:b6:da:0e:01:0d:27:da:63:5c:55:ef:45:aa:a2: 85:8b:c1:6b:21:80:7c:77:a7:ba:98:6f:18:60:96: d2:47:d2:c6:8d:25:86:a5:cb:50:f2:fc:2f:3d:ce: 14:6e:cf:4e:4d:77:89:cb:b3:e2:ff:94:3b:23:92: 00:63:28:b8:ca:1e:5d:e2:10:b2:d9:05:6f:8f:1d: 70:55:86:fe:f7:99:56:2e:11:c5:79:a1:fc:40:85: 1a:10:a5:60:14:a7:73:37:18:cf:a2:5b:33:3e:a1: ba:e4:d1:ae:db:c6:c6:83:3a:77:b2:e0:4a:b6:c2: 22:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:71:38:BD:E8:6D:22:04:26:E4:6A:54:D7:A9:23:47:0C:2F:8B:DA X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:9e:7a:2c:e2:07:56:44:e2:c1:9f:cf:8b:e6:86:14:85:dd: c4:33:d5:f0:ee:81:48:0d:52:fb:c2:84:3b:02:c5:71:ff:75: 86:62:4e:77:a7:d1:fe:ee:97:92:45:e6:38:91:7d:d1:99:ee: 2b:bc:0f:d1:e7:b7:48:13:54:d1:a0:d0:70:9a:f1:34:d3:32: cc:08:a6:42:2b:c4:e5:ae:9e:45:d0:90:c7:cd:1a:72:44:26: 25:2a:46:e7:94:e0:1a:cc:1f:4c:8b:03:3f:60:95:7b:e4:01: 86:3a:f3:0e:14:e5:ca:c5:8a:e2:fa:7c:9d:53:3b:e3:03:55: c3:9c:50:a2:a3:86:fb:ac:c5:d3:1b:d2:ba:70:53:e8:17:c4: d0:fc:22:e3:8d:ce:fc:8c:ab:33:b5:3c:d1:d1:b9:d5:02:eb: d4:d5:f2:9b:f6:1d:4b:49:f3:77:a3:e8:6c:48:1b:cb:4e:a6: 93:de:17:d2:e7:95:61:56:25:7e:a5:32:3a:5d:3f:49:54:91: 17:c5:ab:db:6b:31:9b:d0:03:43:9f:56:d1:79:a0:70:89:aa: 4e:bd:98:5f:d9:9b:b1:fd:23:26:66:ed:9b:9d:e9:75:26:0d: 5e:1e:e5:66:1a:cc:93:06:c0:71:61:c3:bb:41:37:87:aa:26: 74:48:0c:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjUwODIyMTcyNjEyWhcNMjUwODI5MTcyNjEyWjAYMRYwFAYD VQQDEw02OGE4YTgzNC1kMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JGao95/3d+NEvvaHSeM4B/izcR3qF5P6306Wq4gKLBYe5GTnYIgzjWN1aaS cYfZmlZQfCVf5mmBhmJWmxNW/QF0uQLmP9ZUah+N4FIbsr/eMPmihO0gx7WtYmiL dElXlAzMvBvvFPCohv6Zk6goRovXSiTcgjX2eEzG2EAa/GLl+zwpdttgttoOAQ0n 2mNcVe9FqqKFi8FrIYB8d6e6mG8YYJbSR9LGjSWGpctQ8vwvPc4Ubs9OTXeJy7Pi /5Q7I5IAYyi4yh5d4hCy2QVvjx1wVYb+95lWLhHFeaH8QIUaEKVgFKdzNxjPolsz PqG65NGu28bGgzp3suBKtsIioQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNxOL3o bSIEJuRqVNepI0cML4vaMB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQnnos4gdWROLBn8+L5oYUhd3EM9Xw7oFIDVL7woQ7AsVx/3WGYk53 p9H+7peSReY4kX3Rme4rvA/R57dIE1TRoNBwmvE00zLMCKZCK8Tlrp5F0JDHzRpy RCYlKkbnlOAazB9MiwM/YJV75AGGOvMOFOXKxYri+nydUzvjA1XDnFCio4b7rMXT G9K6cFPoF8TQ/CLjjc78jKsztTzR0bnVAuvU1fKb9h1LSfN3o+hsSBvLTqaT3hfS 55VhViV+pTI6XT9JVJEXxavbazGb0ANDn1bReaBwiapOvZhf2Zux/SMmZu2bnel1 Jg1eHuVmGsyTBsBxYcO7QTeHqiZ0SAyZ -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:13 2025 by rpki-client