$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: XJfFnAUvJU2C94fKlp0UXV8cA4l9xkEHlD1CURi0C/o= Subject key identifier: 6C:7B:C3:2C:5F:E4:EB:D4:DC:12:42:B4:FA:F3:D6:B1:E5:9D:9D:39 Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0DBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0DB5 Signing time: Fri 22 Aug 2025 18:01:23 +0000 Manifest this update: Fri 22 Aug 2025 18:01:22 +0000 Manifest next update: Fri 29 Aug 2025 18:01:22 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: NArjehjqSdQDDICg3lpctFgIiXg5TTrAfSqfznIiDis=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3517 (0xdbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: Aug 22 18:01:22 2025 GMT Not After : Aug 29 18:01:22 2025 GMT Subject: CN=68a8b073-c0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:3e:dc:1c:03:79:95:b6:e4:8c:bc:0a:a9: 97:48:46:29:cf:7e:c3:2d:85:65:9b:63:4e:9f:d6: 0f:7a:31:d7:12:44:20:59:d7:ce:63:67:42:76:5d: 1f:d0:02:18:c4:88:fa:bc:76:c5:42:d1:a6:c1:88: 24:02:1e:65:3d:59:11:48:ba:0a:ae:38:d8:7d:28: 54:65:b7:68:d3:8b:26:e5:22:ab:f4:0e:94:d3:56: db:da:2c:d9:58:8e:7c:50:e0:c8:88:0c:b2:53:c3: a2:6e:f4:37:72:5e:f6:80:5f:ab:2c:06:a0:95:82: 05:62:20:cd:8b:29:a1:33:d8:8b:10:94:d4:8e:54: 61:9e:6e:7b:c4:d3:b4:d8:cb:c2:2f:db:fd:0e:e5: 8f:7a:b8:ee:62:86:bb:4d:2e:71:23:3c:ac:ad:bd: 1f:c9:5f:b5:66:ea:f8:17:98:bf:64:b8:6c:91:1c: 2d:a2:bd:f0:98:07:26:c5:90:bd:08:f9:c6:be:47: 32:24:26:b3:53:2f:e5:ed:3a:39:4c:37:de:c0:8b: 08:48:44:4d:c8:a3:9e:14:72:eb:11:03:87:fc:66: fe:98:f3:6a:53:48:cf:a0:38:97:aa:fd:fb:df:8d: d2:d4:cf:9c:ca:3b:24:a0:5d:86:f2:be:43:fb:46: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:C3:2C:5F:E4:EB:D4:DC:12:42:B4:FA:F3:D6:B1:E5:9D:9D:39 X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:49:98:c6:fa:91:8f:87:58:08:a1:1d:b8:36:a7:aa:48:2b: 68:7c:23:ed:c1:58:da:1a:ef:10:2a:98:ac:25:9a:88:a3:9f: 58:d5:b0:02:38:e8:8d:df:a7:4d:bd:11:54:5c:1a:d9:6c:73: 5f:32:ff:ec:7d:b2:3a:37:8b:ff:2e:a8:b3:df:0e:31:72:ed: cc:29:f1:46:7a:21:84:e6:ab:0d:5c:f1:53:c2:87:f9:61:d7: 44:d7:74:3d:dd:ff:2a:0c:a2:ad:19:ae:4a:e1:00:92:bd:fc: 69:2c:88:74:74:d4:6b:5e:26:c2:b4:06:0e:63:be:51:f8:bf: 27:d4:bc:c9:6d:25:73:72:a3:cf:e1:f0:82:d5:5f:1c:de:0a: c6:96:7a:fc:6e:20:b1:6a:75:9c:48:59:5b:4d:63:2c:9a:2f: e8:ee:13:a1:05:c6:86:e3:2f:c9:92:38:60:5d:e1:97:35:b4: 77:70:7b:99:ac:c3:de:d3:42:63:8e:f5:90:6c:78:2f:aa:45: ce:ee:05:7b:24:8d:04:8c:a9:0b:44:23:45:15:aa:2e:f6:7c: 8f:23:36:e0:cf:4d:01:51:ce:67:dc:30:ca:7a:3d:21:47:4f: d6:0e:25:3d:7d:d4:16:67:b5:72:9d:bb:c2:32:99:fc:3a:1c: e1:66:85:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUwODIyMTgwMTIyWhcNMjUwODI5MTgwMTIyWjAYMRYwFAYD VQQDEw02OGE4YjA3My1jMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPw+3BwDeZW25Iy8CqmXSEYpz37DLYVlm2NOn9YPejHXEkQgWdfOY2dCdl0f 0AIYxIj6vHbFQtGmwYgkAh5lPVkRSLoKrjjYfShUZbdo04sm5SKr9A6U01bb2izZ WI58UODIiAyyU8OibvQ3cl72gF+rLAaglYIFYiDNiymhM9iLEJTUjlRhnm57xNO0 2MvCL9v9DuWPerjuYoa7TS5xIzysrb0fyV+1Zur4F5i/ZLhskRwtor3wmAcmxZC9 CPnGvkcyJCazUy/l7To5TDfewIsISERNyKOeFHLrEQOH/Gb+mPNqU0jPoDiXqv37 343S1M+cyjskoF2G8r5D+0Y0gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx7wyxf 5OvU3BJCtPrz1rHlnZ05MB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFSZjG+pGPh1gIoR24NqeqSCtofCPtwVjaGu8QKpisJZqIo59Y1bAC OOiN36dNvRFUXBrZbHNfMv/sfbI6N4v/Lqiz3w4xcu3MKfFGeiGE5qsNXPFTwof5 YddE13Q93f8qDKKtGa5K4QCSvfxpLIh0dNRrXibCtAYOY75R+L8n1LzJbSVzcqPP 4fCC1V8c3grGlnr8biCxanWcSFlbTWMsmi/o7hOhBcaG4y/JkjhgXeGXNbR3cHuZ rMPe00JjjvWQbHgvqkXO7gV7JI0EjKkLRCNFFaou9nyPIzbgz00BUc5n3DDKej0h R0/WDiU9fdQWZ7VynbvCMpn8OhzhZoUE -----END CERTIFICATE-----Generated at Sun Aug 24 00:55:43 2025 by rpki-client