$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: Ch2QEdYrkRsjrltpgs7ZFGOaCghMUIAoiZFBFQfdAqo= Subject key identifier: BD:CF:D6:B4:EF:0D:9F:A8:77:A5:F2:29:25:09:4A:35:36:A2:ED:30 Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 28 Signing time: Sat 23 Aug 2025 08:00:35 +0000 Manifest this update: Sat 23 Aug 2025 08:00:35 +0000 Manifest next update: Sat 30 Aug 2025 08:00:35 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: kLRxuowMO90KDLwvffsvy4m8dsDfWOjfLhy1XoERADA=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Aug 23 08:00:35 2025 GMT Not After : Aug 30 08:00:35 2025 GMT Subject: CN=68a97523-0e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:09:7f:6f:64:fe:e8:61:9d:fc:b6:12:a4: 42:9f:b4:93:a5:f2:f8:89:39:74:ca:6a:73:cc:37: 39:34:ef:7a:b6:61:13:e2:db:47:d5:f5:3a:ae:89: 07:19:ba:5c:ae:c5:5f:a9:23:cd:06:61:27:e0:5f: 29:46:4a:91:db:0a:82:9e:87:62:0e:83:fc:0e:01: fb:98:0f:98:8f:76:fc:fe:3d:b1:8e:5e:d0:6b:9d: c9:24:a4:cc:c5:67:c0:bc:19:11:bc:89:6e:66:8a: ad:d4:a8:00:9e:92:10:90:b2:ab:b9:b8:8d:94:b7: c7:1d:8e:b2:bb:4f:1e:75:1a:ce:c7:c1:e2:0d:bc: 54:21:c2:bb:38:88:f9:9c:22:4d:9f:5d:ce:87:30: de:eb:77:78:21:7e:9d:84:6d:9d:37:12:a1:fd:5d: 73:32:f7:3e:cc:96:18:93:18:9f:60:85:d4:74:a4: 5f:ed:d4:c4:83:b4:8b:5a:63:f0:4a:c2:fa:2e:7c: de:cc:89:ce:f9:af:0b:00:c2:fb:80:80:ad:6f:78: 47:68:23:d7:4c:89:3e:66:b4:a6:44:7f:7e:64:5f: f1:42:96:d1:4b:ee:68:32:ca:18:5d:52:59:3d:7d: f7:03:87:b9:91:21:42:5f:b6:25:7b:bc:a5:d9:76: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CF:D6:B4:EF:0D:9F:A8:77:A5:F2:29:25:09:4A:35:36:A2:ED:30 X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:86:42:46:74:bc:92:c6:c2:f5:45:88:d1:20:18:81:6e:24: 96:35:ed:b5:a1:f5:ad:b7:83:9e:2b:fb:88:86:50:ef:98:d6: 00:bc:05:9e:3b:df:ad:66:06:38:8e:91:79:07:48:d7:e2:98: 67:82:8e:13:13:b1:7f:32:1d:38:50:07:4f:e2:3f:a9:81:4b: d1:c1:b0:0d:e3:eb:6f:4d:76:75:9e:20:68:84:04:f3:03:0c: 21:43:78:b3:da:da:14:44:4f:3f:96:06:d1:96:0c:22:b7:58: 65:b4:52:48:7f:99:82:b8:a0:a6:a8:6f:07:ea:72:fe:cb:f0: bd:31:ad:cd:29:13:74:ad:b9:94:7e:24:15:19:06:d6:40:3a: 4b:6c:8b:a1:9d:b2:b0:c9:c0:b4:53:1c:5d:13:7c:80:2b:1b: 52:54:81:5b:de:e4:2b:92:f7:6e:40:b4:bd:48:ff:36:6f:71: 92:c0:28:07:d4:14:68:6f:68:36:49:18:58:b4:61:bc:91:20: 7d:b0:0f:01:b2:25:8d:5a:7d:a9:44:bd:8b:77:b3:27:d7:a6: 45:d7:42:13:a9:22:44:a9:f3:9d:f2:6b:5e:0f:49:b2:03:38: e6:8a:4d:c4:3a:59:c1:01:e9:1f:dd:68:d2:1b:74:d0:bc:03: 7a:c1:0b:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTA4MjMwODAwMzVaFw0yNTA4MzAwODAwMzVaMBgxFjAUBgNV BAMTDTY4YTk3NTIzLTBlMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu9Ql/b2T+6GGd/LYSpEKftJOl8viJOXTKanPMNzk073q2YRPi20fV9TquiQcZ ulyuxV+pI80GYSfgXylGSpHbCoKeh2IOg/wOAfuYD5iPdvz+PbGOXtBrnckkpMzF Z8C8GRG8iW5miq3UqACekhCQsqu5uI2Ut8cdjrK7Tx51Gs7HweINvFQhwrs4iPmc Ik2fXc6HMN7rd3ghfp2EbZ03EqH9XXMy9z7MlhiTGJ9ghdR0pF/t1MSDtItaY/BK wvoufN7Mic75rwsAwvuAgK1veEdoI9dMiT5mtKZEf35kX/FCltFL7mgyyhhdUlk9 ffcDh7mRIUJftiV7vKXZdkgRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvc/WtO8N n6h3pfIpJQlKNTai7TAwHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADKGQkZ0vJLGwvVFiNEgGIFuJJY17bWh9a23g54r+4iGUO+Y1gC8BZ47 361mBjiOkXkHSNfimGeCjhMTsX8yHThQB0/iP6mBS9HBsA3j629NdnWeIGiEBPMD DCFDeLPa2hRETz+WBtGWDCK3WGW0Ukh/mYK4oKaobwfqcv7L8L0xrc0pE3StuZR+ JBUZBtZAOktsi6GdsrDJwLRTHF0TfIArG1JUgVve5CuS925AtL1I/zZvcZLAKAfU FGhvaDZJGFi0YbyRIH2wDwGyJY1afalEvYt3syfXpkXXQhOpIkSp853ya14PSbID OOaKTcQ6WcEB6R/daNIbdNC8A3rBCzU= -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:26 2025 by rpki-client