$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: I5qBnzL4P+cpK7zzGZ3bPNG5h7FQyVMIOfmOKwzZIbk= Subject key identifier: D2:3A:A3:EC:FE:32:FD:16:A5:23:8D:BB:AE:0B:62:73:F4:DF:32:8A Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: B7 Signing time: Sat 23 Aug 2025 06:09:31 +0000 Manifest this update: Sat 23 Aug 2025 06:09:30 +0000 Manifest next update: Sat 30 Aug 2025 06:09:30 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: 6D5LV20nfNCpJw0LSR6K4PbEVTXMWbS4mhSvR9xrtKg=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Aug 23 06:09:30 2025 GMT Not After : Aug 30 06:09:30 2025 GMT Subject: CN=68a95b1a-ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e6:0f:02:1a:fe:42:b6:26:d5:65:23:fd:c2: c1:c0:82:16:43:81:ea:9d:07:df:50:11:7c:96:a7: 0f:20:84:32:06:d0:7a:02:c6:31:d7:86:e0:89:f5: 27:bd:0d:3f:19:2d:17:37:83:40:36:8e:48:a5:40: 0f:19:ff:d5:89:45:38:ff:81:e9:d0:ad:fa:83:15: d8:2d:d4:7a:ce:73:3e:33:3a:d3:ff:ee:00:41:44: 86:44:27:4a:61:9d:33:bf:e9:b0:72:4a:11:ee:96: 92:c6:9a:fb:46:99:20:fd:ee:be:72:45:bf:4b:69: 25:e8:9a:a6:fd:bf:57:3c:04:6c:84:8b:44:5b:b7: 28:89:99:c9:8e:5d:92:26:89:30:e6:de:e5:50:96: a6:75:27:a7:51:b1:66:49:09:2a:b0:ff:c0:7a:bc: 39:c9:8a:f3:b5:63:a5:fc:9e:03:c7:ff:67:42:78: 4f:c8:9b:fe:69:98:ee:c6:2a:8a:c1:0c:50:a6:af: 86:9f:85:37:4d:29:e3:32:b4:55:d3:eb:39:2d:16: fa:61:ce:4e:30:8e:b5:5d:fd:56:70:c9:0a:eb:3f: 50:14:0b:7f:06:c7:25:2c:8f:eb:08:25:d9:47:84: 0b:db:52:a0:18:e2:dd:05:e3:34:e1:3d:c3:c5:09: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3A:A3:EC:FE:32:FD:16:A5:23:8D:BB:AE:0B:62:73:F4:DF:32:8A X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:3c:5c:14:47:d4:b1:79:c0:d8:db:b8:82:e1:07:19:70:7a: d1:be:30:1b:c2:df:d8:9a:ec:d0:04:9e:30:63:d9:f7:5e:d3: e9:f5:96:f1:38:61:da:b3:59:76:0a:92:64:5f:9d:ff:d4:7f: 3c:40:17:6d:c3:37:b5:1e:7d:32:93:e4:9d:cf:76:1d:0a:3b: 95:b7:3a:4e:10:3d:ab:18:59:23:e0:83:33:ce:45:c5:87:1b: b5:7c:bf:f5:3d:4c:23:a0:d1:e7:58:18:c9:59:9b:33:ac:5d: bc:e6:47:a8:03:c2:8f:ca:5a:41:c0:3c:86:37:b2:e0:a2:50: 78:97:00:3c:fd:6e:35:ef:fe:5b:d6:a2:83:79:74:ee:3b:21: 83:9f:ca:d6:67:b7:f1:89:1c:c1:40:40:00:62:df:52:9e:82: b9:30:21:a9:71:b7:ce:42:7f:c7:ad:e9:2c:e6:b0:52:b8:7d: 80:e9:a1:5c:0f:02:71:3b:3e:ed:24:16:9f:2a:52:e3:87:c5: fd:88:7b:e8:4a:7b:60:cb:c4:65:0e:df:84:35:6c:05:db:78: af:62:f8:c8:4e:05:75:56:20:65:5f:55:c5:dd:77:a5:92:fd: ff:c2:5f:18:43:22:6a:5f:9e:40:ab:03:11:cd:ad:6c:ed:4d: 5e:f1:e0:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwODIzMDYwOTMwWhcNMjUwODMwMDYwOTMwWjAYMRYwFAYD VQQDEw02OGE5NWIxYS1lZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5uYPAhr+QrYm1WUj/cLBwIIWQ4HqnQffUBF8lqcPIIQyBtB6AsYx14bgifUn vQ0/GS0XN4NANo5IpUAPGf/ViUU4/4Hp0K36gxXYLdR6znM+MzrT/+4AQUSGRCdK YZ0zv+mwckoR7paSxpr7Rpkg/e6+ckW/S2kl6Jqm/b9XPARshItEW7coiZnJjl2S Jokw5t7lUJamdSenUbFmSQkqsP/Aerw5yYrztWOl/J4Dx/9nQnhPyJv+aZjuxiqK wQxQpq+Gn4U3TSnjMrRV0+s5LRb6Yc5OMI61Xf1WcMkK6z9QFAt/BsclLI/rCCXZ R4QL21KgGOLdBeM04T3DxQkiqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI6o+z+ Mv0WpSONu64LYnP03zKKMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmPFwUR9SxecDY27iC4QcZcHrRvjAbwt/YmuzQBJ4wY9n3XtPp9Zbx OGHas1l2CpJkX53/1H88QBdtwze1Hn0yk+Sdz3YdCjuVtzpOED2rGFkj4IMzzkXF hxu1fL/1PUwjoNHnWBjJWZszrF285keoA8KPylpBwDyGN7LgolB4lwA8/W417/5b 1qKDeXTuOyGDn8rWZ7fxiRzBQEAAYt9SnoK5MCGpcbfOQn/Hreks5rBSuH2A6aFc DwJxOz7tJBafKlLjh8X9iHvoSntgy8RlDt+ENWwF23ivYvjITgV1ViBlX1XF3Xel kv3/wl8YQyJqX55AqwMRza1s7U1e8eBo -----END CERTIFICATE-----Generated at Sat Aug 23 18:14:40 2025 by rpki-client