$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: vvVzXQHbKQMJZC6DbfX16XqRKL4zI7UjIvTnYrRSDFw= Subject key identifier: B1:91:83:B5:E1:2A:BA:AD:65:02:A7:06:05:A9:2D:57:09:C5:7E:C8 Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 09C7 Signing time: Fri 22 Aug 2025 20:08:39 +0000 Manifest this update: Fri 22 Aug 2025 20:08:39 +0000 Manifest next update: Fri 29 Aug 2025 20:08:39 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: 2IE+UeU3wCnDt6U/RLYqpPu195IlChTOzJXKJTsKt4A=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Aug 22 20:08:39 2025 GMT Not After : Aug 29 20:08:39 2025 GMT Subject: CN=68a8ce47-8761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7e:04:0c:00:c5:6c:fa:a6:ef:f6:e8:13:62: 02:cc:67:c9:0a:fb:ed:13:c0:92:ab:0c:57:01:80: f6:33:b0:de:86:47:69:e0:8d:7f:34:79:3d:17:06: 96:2c:ed:ea:dd:63:d6:4c:08:f1:8e:ae:05:b5:c0: 51:37:30:41:db:81:71:71:4d:95:b1:bc:26:6b:51: cb:fb:4f:cd:5c:50:14:8a:cd:d1:08:d8:d3:94:34: d3:a6:ed:aa:e0:66:69:fc:c0:5a:a7:2f:c7:af:72: c3:3e:0f:59:82:af:87:eb:47:80:17:24:ec:39:ef: 60:70:b0:7c:19:cd:d8:38:03:fb:38:ce:97:b1:8a: e7:4a:4a:62:fb:30:9f:a6:ba:6f:0e:6d:73:81:55: aa:04:00:71:da:cc:9d:0c:d9:ef:25:f9:56:cc:7c: 78:78:d9:5b:1f:c9:60:f2:de:95:07:10:7e:5e:f1: bf:45:b9:f9:4e:bd:70:52:35:1d:30:fd:aa:c5:ab: 75:fe:95:65:e6:8d:46:fd:d9:f8:26:01:49:4c:80: cf:c4:a3:ea:e0:98:88:c8:54:a0:4b:b1:67:a3:a0: 0c:94:96:65:c0:b4:1e:a6:a7:91:95:f5:ad:04:65: 18:d8:de:1e:b6:4c:76:03:a4:76:25:a0:ae:81:4c: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:91:83:B5:E1:2A:BA:AD:65:02:A7:06:05:A9:2D:57:09:C5:7E:C8 X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:19:45:54:fd:f1:1d:97:ad:e8:8d:86:90:cb:9a:3d:c4:1d: 1c:b2:5d:37:b9:ad:5c:dc:e3:f4:78:39:07:8d:ca:0a:8f:7c: 6f:86:ab:57:24:f0:bb:36:81:63:3f:4d:5f:49:c0:59:62:4e: 18:09:6e:e7:ad:db:f5:c1:d5:e2:f5:28:7a:26:09:ae:00:d1: f3:f6:d1:59:56:d9:cb:95:cd:e0:14:06:36:f9:ca:eb:cb:90: 2a:c3:ae:41:4b:f8:d0:47:d1:60:87:a8:45:da:32:4f:17:ad: 90:bd:bc:15:24:1b:be:f6:35:a5:fe:72:d2:20:0b:a3:b2:22: 19:23:52:0f:0d:de:62:62:3a:b5:55:b5:3b:41:8c:3c:b0:fe: c4:a4:e8:36:94:9a:ee:b2:ed:aa:44:d5:21:af:72:b0:07:b4: 2f:80:5d:38:61:86:24:9b:48:f8:07:89:8a:96:ff:6e:0d:e6: 0c:1b:c3:c9:2a:e0:6d:6a:4c:56:f6:f6:00:ec:69:de:3b:95: 53:ce:08:d4:2d:d4:1d:d1:8f:02:cb:d2:08:ed:c3:3d:b8:34: f5:9f:ab:dc:bd:d1:ee:02:b9:06:70:cf:ec:9c:f9:4f:87:f4: 7a:ad:3a:c4:00:16:49:40:be:7b:d3:9f:ec:2a:92:9a:e7:90: f6:07:8b:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjUwODIyMjAwODM5WhcNMjUwODI5MjAwODM5WjAYMRYwFAYD VQQDEw02OGE4Y2U0Ny04NzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtH4EDADFbPqm7/boE2ICzGfJCvvtE8CSqwxXAYD2M7Dehkdp4I1/NHk9FwaW LO3q3WPWTAjxjq4FtcBRNzBB24FxcU2Vsbwma1HL+0/NXFAUis3RCNjTlDTTpu2q 4GZp/MBapy/Hr3LDPg9Zgq+H60eAFyTsOe9gcLB8Gc3YOAP7OM6XsYrnSkpi+zCf prpvDm1zgVWqBABx2sydDNnvJflWzHx4eNlbH8lg8t6VBxB+XvG/Rbn5Tr1wUjUd MP2qxat1/pVl5o1G/dn4JgFJTIDPxKPq4JiIyFSgS7Fno6AMlJZlwLQepqeRlfWt BGUY2N4etkx2A6R2JaCugUxpywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGRg7Xh KrqtZQKnBgWpLVcJxX7IMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKGUVU/fEdl63ojYaQy5o9xB0csl03ua1c3OP0eDkHjcoKj3xvhqtX JPC7NoFjP01fScBZYk4YCW7nrdv1wdXi9Sh6JgmuANHz9tFZVtnLlc3gFAY2+crr y5Aqw65BS/jQR9Fgh6hF2jJPF62QvbwVJBu+9jWl/nLSIAujsiIZI1IPDd5iYjq1 VbU7QYw8sP7EpOg2lJrusu2qRNUhr3KwB7QvgF04YYYkm0j4B4mKlv9uDeYMG8PJ KuBtakxW9vYA7GneO5VTzgjULdQd0Y8Cy9II7cM9uDT1n6vcvdHuArkGcM/snPlP h/R6rTrEABZJQL5705/sKpKa55D2B4s3 -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:08 2025 by rpki-client