$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft File: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json) Hash identifier: BYezFa/FpvB0oVOobuxlm/ScA9V3Fxxvz9ALS3H5rWA= Subject key identifier: 04:4D:9B:3B:A0:29:35:3A:6F:42:40:F6:FD:D2:A6:D3:97:F6:51:55 Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD Certificate issuer: /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft Manifest number: 33 Signing time: Sat 23 Aug 2025 07:52:20 +0000 Manifest this update: Sat 23 Aug 2025 07:52:20 +0000 Manifest next update: Sat 30 Aug 2025 07:52:19 +0000 Files and hashes: 1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: k+k7PnPrcMXnaBQHHMY/cd86Bb1XbV3QQXSSlzQQrSw=) 2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: slKnmbx+8GFjxzbTLlGteNrzM3mXfRGAHKxnN7Hj2s4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD Validity Not Before: Aug 23 07:52:20 2025 GMT Not After : Aug 30 07:52:19 2025 GMT Subject: CN=68a97334-2990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:6e:e9:20:23:6f:1f:ac:c0:00:ca:6e:4c: 49:a6:11:bf:0e:9a:7a:18:b8:db:53:d1:2b:f5:0c: 07:96:33:67:5d:9a:ab:43:e8:6d:30:3c:7d:f8:1c: 11:cd:9d:b1:27:49:03:8c:25:cd:da:5c:cc:31:2a: 32:ec:f2:f7:dd:f1:80:12:4e:c0:2c:75:6a:a3:e8: ee:b8:4c:f8:ac:bc:54:6c:b1:3b:3a:e9:60:14:87: d3:88:5b:ec:77:7b:28:7a:25:2d:5d:8f:11:ae:78: 71:65:e6:52:d1:88:1a:75:73:0b:f6:18:04:48:6f: db:53:d4:9b:e1:7b:91:26:49:8f:af:dc:f4:1d:72: 8c:f4:99:77:18:32:6b:63:8b:d1:f5:eb:b0:22:90: af:c5:5c:3e:04:8b:78:dc:f2:f3:95:92:ab:b3:a0: 00:ee:42:e4:29:d3:20:7a:3f:a2:8e:74:85:39:44: 4a:04:12:8b:a6:8b:49:9c:13:eb:8a:9e:40:49:bc: fd:04:97:fe:94:52:76:6e:cf:eb:4e:ae:0b:0f:66: db:97:69:4d:75:e3:14:0e:6a:27:69:93:1a:30:8e: 7f:94:18:ca:cc:ee:74:12:52:49:d6:a4:51:c0:c6: bf:a1:e7:a1:3f:59:d1:e7:8b:36:d6:9b:cb:6b:73: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4D:9B:3B:A0:29:35:3A:6F:42:40:F6:FD:D2:A6:D3:97:F6:51:55 X509v3 Authority Key Identifier: keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:c3:af:d3:38:8f:f5:bc:96:04:48:00:34:5f:4d:94:b3:18: 68:6e:98:ba:8b:23:c8:de:6a:3d:05:4e:b0:1a:7e:01:5b:62: e8:53:20:a8:fe:ea:fb:81:56:fe:09:d5:34:94:08:55:f2:b6: 5c:ed:dc:0f:d7:2a:15:4f:eb:b1:cb:fe:6e:4d:62:78:4d:a3: 73:12:d0:31:39:5d:18:d5:86:ba:76:60:b1:34:71:1a:b6:73: c6:c8:4b:98:26:ae:39:67:4d:c0:ff:87:ca:03:bb:68:42:e3: 13:01:ce:d1:7f:db:15:41:97:e2:a0:0e:c9:cb:69:18:10:11: bb:53:8d:79:2e:2b:7b:ed:09:09:79:56:7f:72:7e:60:04:41: e1:4a:42:dc:ae:bc:6e:9c:dd:d4:ae:76:35:7a:dc:b9:34:d3: 95:a1:27:2d:ec:ee:46:6c:66:58:92:e8:db:b3:f8:9c:76:f0: ff:a8:ae:5e:cf:e7:75:a8:ea:1e:da:1d:9d:f9:4f:0a:83:cf: 95:0a:0e:57:ff:51:8d:59:3f:10:9b:6f:dd:b7:cb:17:a7:4d: e3:80:17:d9:2a:3b:94:55:eb:04:48:d5:2a:f2:8a:65:69:ca: 18:30:46:93:98:cd:9e:20:06:fb:75:8d:98:02:3d:50:81:57: ba:33:58:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB ODM5RTExMC8GA1UEBRMoQzEyMTA5RjU1QzU1ODczQTQxQzM3NzgzNzJGQjA5QTBC NzQwRDJDRDAeFw0yNTA4MjMwNzUyMjBaFw0yNTA4MzAwNzUyMTlaMBgxFjAUBgNV BAMTDTY4YTk3MzM0LTI5OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5/W7pICNvH6zAAMpuTEmmEb8OmnoYuNtT0Sv1DAeWM2ddmqtD6G0wPH34HBHN nbEnSQOMJc3aXMwxKjLs8vfd8YASTsAsdWqj6O64TPisvFRssTs66WAUh9OIW+x3 eyh6JS1djxGueHFl5lLRiBp1cwv2GARIb9tT1Jvhe5EmSY+v3PQdcoz0mXcYMmtj i9H167AikK/FXD4Ei3jc8vOVkquzoADuQuQp0yB6P6KOdIU5REoEEoumi0mcE+uK nkBJvP0El/6UUnZuz+tOrgsPZtuXaU114xQOaidpkxowjn+UGMrM7nQSUknWpFHA xr+h56E/WdHnizbWm8trcxgXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBE2bO6Ap NTpvQkD2/dKm05f2UVUwHwYDVR0jBBgwFoAUwSEJ9VxVhzpBw3eDcvsJoLdA0s0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4MzlFLzM0NUQwNTg2MzM2 ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1NFSjlWeFZoenBCdzNlRGN2c0pvTGRBMHMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE4 MzlFLzM0NUQwNTg2MzM2ODExRjBCMUI1NkQ2Q0M0RjlBRTAyL3dTRUo5VnhWaHpw QnczZURjdnNKb0xkQTBzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjDr9M4j/W8lgRIADRfTZSzGGhumLqLI8jeaj0FTrAafgFbYuhTIKj+ 6vuBVv4J1TSUCFXytlzt3A/XKhVP67HL/m5NYnhNo3MS0DE5XRjVhrp2YLE0cRq2 c8bIS5gmrjlnTcD/h8oDu2hC4xMBztF/2xVBl+KgDsnLaRgQEbtTjXkuK3vtCQl5 Vn9yfmAEQeFKQtyuvG6c3dSudjV63Lk005WhJy3s7kZsZliS6Nuz+Jx28P+orl7P 53Wo6h7aHZ35TwqDz5UKDlf/UY1ZPxCbb923yxenTeOAF9kqO5RV6wRI1SryimVp yhgwRpOYzZ4gBvt1jZgCPVCBV7ozWOE= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:51 2025 by rpki-client