$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft File: cwyRiCmzP6bI58jQUnsmzFC5NS0.mft (raw, json) Hash identifier: UtsJ15kiuJa2rtLOzjAcvZdtcYoz0FwtTEW7YYTKprI= Subject key identifier: 93:2E:38:C3:C8:2C:B6:40:FE:52:6C:59:AF:8C:FA:31:62:71:C3:E7 Authority key identifier: 73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D Certificate issuer: /CN=A91A0FB6/serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft Manifest number: 01C6 Signing time: Sat 23 Aug 2025 03:05:35 +0000 Manifest this update: Sat 23 Aug 2025 03:05:34 +0000 Manifest next update: Sat 30 Aug 2025 03:05:34 +0000 Files and hashes: 1: cwyRiCmzP6bI58jQUnsmzFC5NS0.crl (hash: xzEi3frj7TfRepCWd8dOvappTwP26IZWtR4XmKsce50=) 2: 1B010960CD2211ED8A66486BC4F9AE02.roa (hash: gexTzIiKhgLcrcI1jyC1eZ1O4wMhCdNKof8sdrmuHDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FB6, serialNumber=730C918829B33FA6C8E7C8D0527B26CC50B9352D Validity Not Before: Aug 23 03:05:34 2025 GMT Not After : Aug 30 03:05:34 2025 GMT Subject: CN=68a92ffe-6864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:44:88:18:30:30:17:d2:ce:9a:b0:69:61:a0: 08:87:e4:cf:17:29:f9:15:94:20:6f:2c:98:d5:a4: 98:ca:ef:71:c9:7d:7c:78:3c:b7:28:3f:47:f6:c5: d3:08:98:7e:0c:f3:cf:80:31:76:01:60:98:ba:b8: 96:4f:53:3b:81:75:5a:33:60:fd:83:4a:7a:66:00: c7:da:41:f4:c4:b7:c5:7f:19:33:7f:56:5b:5d:57: 49:05:6c:fd:60:aa:4e:4e:00:0c:e2:5b:6e:dd:f2: 1b:58:67:7a:43:85:f5:53:8a:26:2e:e5:e7:7c:5e: 72:5d:6e:84:1a:56:cd:71:f3:f8:30:9f:1f:7b:7f: f2:af:7a:ad:fb:94:a8:8f:10:34:c4:4f:19:e0:d8: f4:7a:19:0d:f9:fd:90:9c:c4:57:83:4a:79:83:5c: 02:94:fb:12:42:2c:38:cc:85:73:88:9b:9e:65:0c: 7a:78:9b:7d:15:65:b6:73:e0:c6:d8:23:8b:2c:74: 6f:56:d2:33:c7:7a:9c:df:c3:cd:46:60:90:88:32: ea:5d:61:e2:c1:42:b9:28:7d:1c:b7:bf:52:2b:80: cd:a2:ee:8b:e8:9f:59:49:19:df:ad:ae:3f:6f:9b: d9:3d:d9:b8:a9:4e:6d:dd:25:cb:50:82:36:99:23: 05:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2E:38:C3:C8:2C:B6:40:FE:52:6C:59:AF:8C:FA:31:62:71:C3:E7 X509v3 Authority Key Identifier: keyid:73:0C:91:88:29:B3:3F:A6:C8:E7:C8:D0:52:7B:26:CC:50:B9:35:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwyRiCmzP6bI58jQUnsmzFC5NS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FB6/BE4DF222CD1D11EDA266EA39C4F9AE02/cwyRiCmzP6bI58jQUnsmzFC5NS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8e:a3:3a:53:71:42:71:2b:5d:90:dd:df:e5:8c:3a:87:15: fd:76:30:10:98:43:9e:8c:8b:da:f1:ec:d7:e6:0a:3a:26:e5: 9c:98:bb:3f:f9:cc:ca:6e:5b:33:6c:f9:23:ae:49:89:34:8f: 28:5c:cf:49:7c:ed:cf:c2:be:76:5c:9d:c0:d9:ca:26:87:26: bb:15:0b:a3:62:ba:c5:3d:08:2b:83:e5:44:f5:1d:1d:69:f2: ef:84:29:0a:6e:d7:1e:43:1c:fb:06:2a:1f:14:bd:f9:0b:22: 88:74:b4:d8:6e:c9:48:8c:8d:7a:85:a8:0c:b2:fe:5f:70:8b: 70:5b:f6:b7:fb:e5:34:0b:e2:e5:fa:e1:dd:75:a0:4e:66:37: cc:d8:d4:25:28:81:f6:cd:11:eb:f6:f5:2a:f9:28:e5:f2:f9: c5:3a:6d:ed:de:9d:aa:17:46:1a:af:82:c6:43:d0:9c:7f:46: 1d:2d:e0:66:2c:e0:8a:39:af:9a:1c:45:4f:bc:d7:86:d3:cf: c4:c2:76:e4:b2:ff:bd:7e:12:7f:d8:d0:c4:ad:1d:c8:9c:05: 68:9f:19:86:e5:6b:82:0f:a8:16:13:5a:28:55:f7:4a:ca:33: a3:8d:88:1d:a4:51:e2:12:bd:9a:37:7c:99:11:1a:01:ce:50: d3:1e:20:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQjYxMTAvBgNVBAUTKDczMEM5MTg4MjlCMzNGQTZDOEU3QzhEMDUyN0IyNkND NTBCOTM1MkQwHhcNMjUwODIzMDMwNTM0WhcNMjUwODMwMDMwNTM0WjAYMRYwFAYD VQQDEw02OGE5MmZmZS02ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2USIGDAwF9LOmrBpYaAIh+TPFyn5FZQgbyyY1aSYyu9xyX18eDy3KD9H9sXT CJh+DPPPgDF2AWCYuriWT1M7gXVaM2D9g0p6ZgDH2kH0xLfFfxkzf1ZbXVdJBWz9 YKpOTgAM4ltu3fIbWGd6Q4X1U4omLuXnfF5yXW6EGlbNcfP4MJ8fe3/yr3qt+5So jxA0xE8Z4Nj0ehkN+f2QnMRXg0p5g1wClPsSQiw4zIVziJueZQx6eJt9FWW2c+DG 2COLLHRvVtIzx3qc38PNRmCQiDLqXWHiwUK5KH0ct79SK4DNou6L6J9ZSRnfra4/ b5vZPdm4qU5t3SXLUII2mSMFXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMuOMPI LLZA/lJsWa+M+jFiccPnMB8GA1UdIwQYMBaAFHMMkYgpsz+myOfI0FJ7JsxQuTUt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZCNi9CRTRERjIyMkNE MUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2Ykk1OGpRVW5zbXpGQzVO UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3eVJpQ216UDZiSTU4alFVbnNtekZDNU5TMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZCNi9CRTRERjIyMkNEMUQxMUVEQTI2NkVBMzlDNEY5QUUwMi9jd3lSaUNtelA2 Ykk1OGpRVW5zbXpGQzVOUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAljqM6U3FCcStdkN3f5Yw6hxX9djAQmEOejIva8ezX5go6JuWcmLs/ +czKblszbPkjrkmJNI8oXM9JfO3Pwr52XJ3A2comhya7FQujYrrFPQgrg+VE9R0d afLvhCkKbtceQxz7BiofFL35CyKIdLTYbslIjI16hagMsv5fcItwW/a3++U0C+Ll +uHddaBOZjfM2NQlKIH2zRHr9vUq+Sjl8vnFOm3t3p2qF0Yar4LGQ9Ccf0YdLeBm LOCKOa+aHEVPvNeG08/Ewnbksv+9fhJ/2NDErR3InAVonxmG5WuCD6gWE1ooVfdK yjOjjYgdpFHiEr2aN3yZERoBzlDTHiDa -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:30 2025 by rpki-client