$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: J4jRu5Tvxfg0/ts49tRJGxkwdV/SnlcraWu9yBg+1As= Subject key identifier: 64:A4:FE:B5:58:11:51:A2:7B:74:A4:D9:F1:3B:66:07:CE:F8:5C:F7 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 09CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 09B1 Signing time: Fri 22 Aug 2025 20:11:36 +0000 Manifest this update: Fri 22 Aug 2025 20:11:35 +0000 Manifest next update: Fri 29 Aug 2025 20:11:35 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: hJRNO7qscUjsdoYXsDUOQNcvJlP0BNPZmh9yMZd62NY=) 2: E5D4B662020C11EF924D0064C4F9AE02.roa (hash: IkyskfhLUyW1yx2giFNIDMuWmCfItwii/AjLG1p3y/8=) 3: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: xL/jB9qeoO4hEyco8SsjaJm9EZaDpQtDcufIiVgH0FU=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60vQ8kVDVV/kA3AIvbiQCGxiXjWMJQiVAoePrCklNbA=) 5: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: kqrF4dNluJ8Lnc9MKXnQ+C0n9upk2RyWbJ/mtacgHEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2508 (0x9cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Aug 22 20:11:35 2025 GMT Not After : Aug 29 20:11:35 2025 GMT Subject: CN=68a8cef7-a011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:a8:99:47:50:08:fd:f7:c8:42:73:8d:72: 99:e2:fd:57:fd:99:21:3d:d5:ed:57:2c:0d:ab:0b: d9:ce:87:db:43:dd:23:f6:fe:26:92:0b:96:60:a4: 69:32:ee:a8:f6:9d:c2:5f:cb:a7:7b:36:15:3f:df: 39:69:cc:01:bb:de:c0:44:4f:e8:f3:50:58:42:11: e7:e4:f3:1e:ef:75:0b:90:be:cc:fa:10:4a:e7:db: 87:be:29:05:4f:0a:3e:ad:c6:92:eb:94:01:68:a8: 73:b0:96:fe:28:d7:ac:65:4a:14:f3:d8:bf:34:4e: e5:ad:28:47:74:2c:16:08:1a:6e:70:bd:8e:80:df: 6b:0d:2a:43:d8:7c:90:14:88:14:be:0a:05:02:63: 07:b1:cd:e3:4a:e2:1c:4d:90:59:20:90:a0:cb:50: f6:5c:7a:1b:9c:2e:c3:ee:c9:c2:44:5d:90:18:54: 84:ca:31:91:92:d9:94:ac:29:7a:61:1d:f0:ee:71: 4d:e9:c5:28:8e:9b:81:83:3a:28:ca:a2:e5:29:37: 2e:c6:11:70:51:4f:0d:43:c7:27:d5:8d:27:9a:22: 3d:e8:6f:ac:7f:be:60:6c:2e:14:ae:ab:09:7c:fc: b8:cf:62:42:8a:4a:14:e9:cc:b5:51:5b:92:6a:52: 58:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A4:FE:B5:58:11:51:A2:7B:74:A4:D9:F1:3B:66:07:CE:F8:5C:F7 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:a1:80:59:eb:ae:a9:71:17:ce:89:82:ca:8f:c1:c0:ac:b1: 94:f4:24:e4:10:fd:00:92:84:92:27:8a:56:7b:3d:f9:f8:02: f4:c7:ef:31:b7:83:fe:68:ec:3c:9f:5d:e8:e0:14:e3:9b:bf: e1:3c:83:87:09:e9:46:dc:9f:ea:60:d9:4c:40:7d:ee:23:13: 27:b3:34:07:93:d5:11:86:c4:d5:86:5b:1d:6e:72:63:e9:60: 8d:5e:52:97:b9:74:98:e8:d2:e4:84:aa:7f:68:05:e0:88:3d: 98:0f:42:98:5d:51:09:10:c6:60:22:95:88:e7:3b:3f:c8:f3: f8:3b:2c:4f:f3:de:95:57:58:46:df:c3:6d:e4:97:63:23:27: cd:a0:ba:40:da:17:0b:56:61:a1:5b:68:96:90:f7:22:97:80: 32:fd:d7:75:8a:8f:cd:32:eb:20:05:57:b2:f8:4e:04:c3:f9: 7e:3a:09:ce:80:72:7e:f0:d7:ee:b0:1a:df:9b:c3:d7:07:bc: 52:f5:db:dc:c9:50:22:9e:8f:14:71:f6:0f:4d:1a:17:3c:7e: bb:e0:3b:25:61:ab:57:81:32:90:00:d2:8a:91:c0:10:04:30: 07:db:4a:2c:61:17:9a:ce:91:b1:11:eb:cf:4d:24:2b:4f:ea: 53:b0:1f:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjUwODIyMjAxMTM1WhcNMjUwODI5MjAxMTM1WjAYMRYwFAYD VQQDEw02OGE4Y2VmNy1hMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gSomUdQCP33yEJzjXKZ4v1X/ZkhPdXtVywNqwvZzofbQ90j9v4mkguWYKRp Mu6o9p3CX8unezYVP985acwBu97ARE/o81BYQhHn5PMe73ULkL7M+hBK59uHvikF Two+rcaS65QBaKhzsJb+KNesZUoU89i/NE7lrShHdCwWCBpucL2OgN9rDSpD2HyQ FIgUvgoFAmMHsc3jSuIcTZBZIJCgy1D2XHobnC7D7snCRF2QGFSEyjGRktmUrCl6 YR3w7nFN6cUojpuBgzooyqLlKTcuxhFwUU8NQ8cn1Y0nmiI96G+sf75gbC4UrqsJ fPy4z2JCikoU6cy1UVuSalJY2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSk/rVY EVGie3Sk2fE7ZgfO+Fz3MB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRoYBZ666pcRfOiYLKj8HArLGU9CTkEP0AkoSSJ4pWez35+AL0x+8x t4P+aOw8n13o4BTjm7/hPIOHCelG3J/qYNlMQH3uIxMnszQHk9URhsTVhlsdbnJj 6WCNXlKXuXSY6NLkhKp/aAXgiD2YD0KYXVEJEMZgIpWI5zs/yPP4OyxP896VV1hG 38Nt5JdjIyfNoLpA2hcLVmGhW2iWkPcil4Ay/dd1io/NMusgBVey+E4Ew/l+OgnO gHJ+8NfusBrfm8PXB7xS9dvcyVAino8UcfYPTRoXPH674DslYatXgTKQANKKkcAQ BDAH20osYReazpGxEevPTSQrT+pTsB9G -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:05 2025 by rpki-client