$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft File: cwYbqQQBgewK602PbgA_g4_JxI8.mft (raw, json) Hash identifier: AqsqQIk3PwfuvVrNFx1ks72O0xZhAHKov6H8liZAhm8= Subject key identifier: A3:13:24:75:97:8B:66:85:D1:42:2A:6C:EE:D2:26:7A:64:77:3C:C4 Authority key identifier: 73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F Certificate issuer: /CN=A91B65AC/serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft Manifest number: 010F Signing time: Sat 23 Aug 2025 05:05:28 +0000 Manifest this update: Sat 23 Aug 2025 05:05:28 +0000 Manifest next update: Sat 30 Aug 2025 05:05:27 +0000 Files and hashes: 1: cwYbqQQBgewK602PbgA_g4_JxI8.crl (hash: RErTVewcx09kEkiPNQNLhBVyHoesZEM1g113FSvASBQ=) 2: 7D2E766CE5AF11EE9A0A642FC4F9AE02.roa (hash: Fb0vXPsGENJ9HpaLetk+Rjo+o9pYvcloVY8N7cgyCIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65AC, serialNumber=73061BA9040181EC0AEB4D8F6E003F838FC9C48F Validity Not Before: Aug 23 05:05:28 2025 GMT Not After : Aug 30 05:05:27 2025 GMT Subject: CN=68a94c18-1898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:fa:b7:3c:e4:a6:f9:49:b9:60:9a:35:b6: e1:97:60:e3:78:8f:ee:8b:63:bb:a7:bc:c3:f6:35: 1d:de:ec:e9:e7:6b:20:43:f4:c5:4d:25:56:f4:00: 03:dc:d2:76:b6:a2:ff:be:b3:f3:0c:b9:19:3a:c3: 46:d1:0f:f7:50:5c:91:62:34:3a:ea:71:21:71:c0: 99:a4:b0:1a:00:ea:e3:4f:4f:ef:6f:b4:f2:e0:ee: 7f:78:25:1f:9d:10:0a:0d:c6:e6:3f:8c:d0:fe:8b: fd:2c:c4:dc:7a:9e:7d:9e:1a:16:e6:e8:51:be:79: c7:d7:ac:4e:28:b0:b5:bb:9d:ef:ac:3e:6f:20:fe: 08:3a:19:19:1a:13:43:31:75:97:fd:8a:70:76:97: cc:0f:12:4a:e6:09:49:6e:6f:bc:c4:4a:1f:c2:ab: 94:e8:90:43:7c:17:e0:e4:36:07:cd:24:b8:95:d2: 43:91:87:2e:89:fe:c5:b7:e1:0b:86:20:7f:3a:75: ff:ff:b1:b6:89:fb:d9:a1:b0:71:ea:75:bc:b2:b3: 04:9c:c6:cc:8c:14:fb:62:01:88:c3:11:a2:b9:ee: f8:7c:dd:c3:b0:9e:94:07:47:f6:30:97:20:4a:4a: 20:fa:7d:2b:ed:d1:fb:ed:e1:bf:85:f2:dd:3d:a4: d6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:13:24:75:97:8B:66:85:D1:42:2A:6C:EE:D2:26:7A:64:77:3C:C4 X509v3 Authority Key Identifier: keyid:73:06:1B:A9:04:01:81:EC:0A:EB:4D:8F:6E:00:3F:83:8F:C9:C4:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwYbqQQBgewK602PbgA_g4_JxI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65AC/D4F3DB9EE1E011EEAF6E1E68C4F9AE02/cwYbqQQBgewK602PbgA_g4_JxI8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:69:8e:e0:1b:87:8c:9f:fa:dd:f1:c1:e6:46:d5:bd:9c:ab: 42:5d:a7:4a:ce:48:97:9c:29:82:3d:d9:b9:1f:24:62:5a:49: 50:1c:f1:60:08:b2:4f:4e:b7:a8:29:9a:9d:2e:e5:29:39:25: a1:de:40:ff:0c:4b:e9:f9:04:81:a5:aa:3c:77:8a:14:bf:45: 22:28:4c:36:fd:0d:be:6f:cb:4d:50:57:39:0e:72:7a:24:45: a6:5d:3d:cf:74:54:0b:a1:1c:c4:be:bc:7f:64:14:4c:37:00: ab:16:0f:fb:60:37:15:49:e6:fb:99:b5:3b:db:63:ea:d9:49: 37:e3:ab:5f:73:01:83:5c:57:91:08:33:f6:46:b8:f7:7c:bf: 09:a9:04:3f:9e:d7:9c:f2:94:aa:85:2a:3e:da:05:e9:9c:9a: 5d:fa:63:d3:c3:af:dd:96:fc:c2:6f:34:4e:aa:42:ae:f7:68: 6c:6c:07:df:8b:ab:cf:80:76:9c:9b:7c:03:47:8a:96:50:48: f8:b3:b9:92:d0:00:44:02:24:bf:c3:f7:4b:ce:58:c7:1d:1d: 4a:73:b3:c8:4d:9e:c5:5a:a9:42:43:2f:b2:54:34:1c:a3:bd: ed:c3:37:28:8e:a3:66:a8:94:80:e9:9d:70:5e:1a:bb:12:98: 15:31:fb:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1QUMxMTAvBgNVBAUTKDczMDYxQkE5MDQwMTgxRUMwQUVCNEQ4RjZFMDAzRjgz OEZDOUM0OEYwHhcNMjUwODIzMDUwNTI4WhcNMjUwODMwMDUwNTI3WjAYMRYwFAYD VQQDEw02OGE5NGMxOC0xODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2D6tzzkpvlJuWCaNbbhl2DjeI/ui2O7p7zD9jUd3uzp52sgQ/TFTSVW9AAD 3NJ2tqL/vrPzDLkZOsNG0Q/3UFyRYjQ66nEhccCZpLAaAOrjT0/vb7Ty4O5/eCUf nRAKDcbmP4zQ/ov9LMTcep59nhoW5uhRvnnH16xOKLC1u53vrD5vIP4IOhkZGhND MXWX/YpwdpfMDxJK5glJbm+8xEofwquU6JBDfBfg5DYHzSS4ldJDkYcuif7Ft+EL hiB/OnX//7G2ifvZobBx6nW8srMEnMbMjBT7YgGIwxGiue74fN3DsJ6UB0f2MJcg Skog+n0r7dH77eG/hfLdPaTWzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMTJHWX i2aF0UIqbO7SJnpkdzzEMB8GA1UdIwQYMBaAFHMGG6kEAYHsCutNj24AP4OPycSP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVBQy9ENEYzREI5RUUx RTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdld0s2MDJQYmdBX2c0X0p4 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N3WWJxUVFCZ2V3SzYwMlBiZ0FfZzRfSnhJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjVBQy9ENEYzREI5RUUxRTAxMUVFQUY2RTFFNjhDNEY5QUUwMi9jd1licVFRQmdl d0s2MDJQYmdBX2c0X0p4STgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZaY7gG4eMn/rd8cHmRtW9nKtCXadKzkiXnCmCPdm5HyRiWklQHPFg CLJPTreoKZqdLuUpOSWh3kD/DEvp+QSBpao8d4oUv0UiKEw2/Q2+b8tNUFc5DnJ6 JEWmXT3PdFQLoRzEvrx/ZBRMNwCrFg/7YDcVSeb7mbU722Pq2Uk346tfcwGDXFeR CDP2Rrj3fL8JqQQ/ntec8pSqhSo+2gXpnJpd+mPTw6/dlvzCbzROqkKu92hsbAff i6vPgHacm3wDR4qWUEj4s7mS0ABEAiS/w/dLzljHHR1Kc7PITZ7FWqlCQy+yVDQc o73twzcojqNmqJSA6Z1wXhq7EpgVMfsN -----END CERTIFICATE-----Generated at Sun Aug 24 05:06:09 2025 by rpki-client