$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: sDiLPAYNiQsB0h7SCfjVWn617FTOwvab3g6hOxH4aEE= Subject key identifier: 45:FA:3E:A8:F0:11:CF:B1:F7:A9:37:99:10:C0:5A:B9:03:86:93:8F Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: 0120 Signing time: Sat 23 Aug 2025 04:34:51 +0000 Manifest this update: Sat 23 Aug 2025 04:34:50 +0000 Manifest next update: Sat 30 Aug 2025 04:34:50 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: ZR2I6ORcwIp3f5+te/2WSjdsEoiDkmgL+i94d/OtmPU=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Aug 23 04:34:50 2025 GMT Not After : Aug 30 04:34:50 2025 GMT Subject: CN=68a944eb-d7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:e9:59:14:5f:52:15:3c:28:c3:9d:42:ac: 0c:4b:16:cf:67:ec:a1:ec:6f:e7:a8:d9:c3:7a:94: fd:05:86:3e:61:22:59:b0:e1:e1:69:11:12:07:fb: 4d:fc:5d:2a:ce:03:68:26:1c:1f:26:ec:3c:1c:7d: ba:34:1c:21:4c:b1:60:13:b3:db:b0:b3:79:6d:a1: f6:14:0e:70:62:6f:9c:fc:17:34:e6:c9:9d:bb:d2: 2e:f5:89:cc:2b:07:c6:88:f6:ba:21:e9:2c:11:d6: 52:b4:66:39:98:14:51:46:ff:ef:96:9e:b1:ea:e8: 31:d9:63:10:7c:81:c8:d9:83:89:cc:16:9a:9f:ad: 65:10:ce:5e:9e:bf:08:fc:b3:89:db:d9:6b:cf:e8: 00:25:a1:eb:cf:61:d7:d6:35:bf:b3:d1:3c:bf:dc: 90:80:2a:31:1a:d6:34:bb:4e:65:ff:76:8e:a5:73: 3b:65:b5:60:20:20:21:bc:4d:e3:c2:2a:d3:43:6a: cc:2c:1e:d0:2c:c2:fa:06:68:59:00:bd:c4:bf:95: ba:3c:86:76:f9:72:ee:7b:8e:f2:10:03:2a:8a:2c: 85:71:24:6e:92:9f:49:a5:d3:cb:22:0e:b6:3c:57: a5:d0:30:a3:8d:99:ab:44:c4:0b:43:d8:e5:aa:cd: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:3E:A8:F0:11:CF:B1:F7:A9:37:99:10:C0:5A:B9:03:86:93:8F X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:b8:6e:17:1f:8e:ff:c9:45:98:e9:66:95:70:d5:8a:24:a5: b4:f4:ba:7f:5e:f6:4a:00:9b:fb:60:f8:eb:ee:d3:db:1f:98: f6:e7:9d:45:46:a3:48:5c:61:ff:56:aa:98:28:05:dc:d6:a7: 08:2f:3e:82:5a:76:26:e4:2d:3c:79:c4:21:22:ab:d7:2e:73: 13:ea:ed:2c:1e:8c:b2:44:c1:8a:6c:78:ca:9f:5d:5b:af:08: d1:54:79:fb:85:76:13:3b:2f:ce:14:fd:7b:42:be:7a:21:ee: f2:ca:65:27:18:94:2c:91:26:a3:c5:7f:41:77:c3:61:d3:25: 97:77:8a:d2:0b:08:8e:a4:0d:6f:7e:e6:55:ac:bb:d0:48:52: 16:17:e4:fd:8a:4e:0d:93:e6:d6:ab:ba:ea:7c:85:79:a1:56: 1c:0f:a9:08:a1:b3:28:8c:cb:c5:f3:61:1b:96:ae:de:74:1e: c8:db:1d:03:4b:ed:77:87:c1:4e:5a:fe:91:9e:05:d3:8c:a0: 65:4d:41:d3:ff:a9:20:84:ca:f0:3f:0d:e1:7e:af:8b:05:51: 7b:7d:22:02:de:54:93:03:16:18:b0:46:60:f3:3e:69:dd:6a: 7d:7f:a3:f1:e7:fd:13:36:e5:fb:16:79:2d:31:74:80:5a:68: 60:9a:d3:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUwODIzMDQzNDUwWhcNMjUwODMwMDQzNDUwWjAYMRYwFAYD VQQDEw02OGE5NDRlYi1kN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx3pWRRfUhU8KMOdQqwMSxbPZ+yh7G/nqNnDepT9BYY+YSJZsOHhaRESB/tN /F0qzgNoJhwfJuw8HH26NBwhTLFgE7PbsLN5baH2FA5wYm+c/Bc05smdu9Iu9YnM KwfGiPa6IeksEdZStGY5mBRRRv/vlp6x6ugx2WMQfIHI2YOJzBaan61lEM5enr8I /LOJ29lrz+gAJaHrz2HX1jW/s9E8v9yQgCoxGtY0u05l/3aOpXM7ZbVgICAhvE3j wirTQ2rMLB7QLML6BmhZAL3Ev5W6PIZ2+XLue47yEAMqiiyFcSRukp9JpdPLIg62 PFel0DCjjZmrRMQLQ9jlqs3eFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEX6Pqjw Ec+x96k3mRDAWrkDhpOPMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGuG4XH47/yUWY6WaVcNWKJKW09Lp/XvZKAJv7YPjr7tPbH5j2551F RqNIXGH/VqqYKAXc1qcILz6CWnYm5C08ecQhIqvXLnMT6u0sHoyyRMGKbHjKn11b rwjRVHn7hXYTOy/OFP17Qr56Ie7yymUnGJQskSajxX9Bd8Nh0yWXd4rSCwiOpA1v fuZVrLvQSFIWF+T9ik4Nk+bWq7rqfIV5oVYcD6kIobMojMvF82Eblq7edB7I2x0D S+13h8FOWv6RngXTjKBlTUHT/6kghMrwPw3hfq+LBVF7fSIC3lSTAxYYsEZg8z5p 3Wp9f6Px5/0TNuX7FnktMXSAWmhgmtME -----END CERTIFICATE-----Generated at Sat Aug 23 12:42:00 2025 by rpki-client