$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: uICliyzqrD7WDGS1BFodFzufZfq1CurXMGD5KoPlVkg= Subject key identifier: 21:A5:8D:F8:10:CD:6B:EE:E9:ED:BF:ED:55:69:D1:E2:B1:D9:D1:1C Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 57 Signing time: Sat 23 Aug 2025 07:28:06 +0000 Manifest this update: Sat 23 Aug 2025 07:28:06 +0000 Manifest next update: Sat 30 Aug 2025 07:28:06 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: 9P0GQPB0FS3r3UkJWej61KU27SnHc3kfDN/dpXFekMo=) 2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: Aug 23 07:28:06 2025 GMT Not After : Aug 30 07:28:06 2025 GMT Subject: CN=68a96d86-9a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:7e:55:5b:e3:ba:78:8d:d8:28:88:13:c9: ec:94:d7:11:6e:13:c6:3d:03:e1:bf:1b:77:af:0c: 0d:93:a4:13:bd:45:9a:35:5c:eb:7c:d7:e8:54:e4: d9:0d:4e:a3:64:0d:ab:28:a7:44:11:96:d1:cb:dc: f3:3c:ff:fd:7b:f1:f5:e0:5a:e5:a4:e5:37:b5:58: 6c:39:7d:97:26:8c:6f:f0:d6:7f:9e:de:30:70:b9: 5a:b9:95:cb:02:22:ac:ec:52:66:9c:63:46:fc:b2: cc:5d:72:47:be:5c:08:b3:0f:97:63:61:8b:c6:91: 08:45:a4:8d:5d:ca:1b:e1:f7:ed:4d:e7:eb:66:99: b3:b0:94:4e:ec:49:04:38:f1:ad:48:86:e7:b2:e3: fb:6b:63:ec:b7:95:c3:3d:8b:12:cc:56:e3:3f:0d: b4:8e:9f:7e:b6:59:6a:4b:b8:3d:b4:35:8a:0d:02: 4a:9e:86:86:11:25:8a:49:a6:ec:95:16:8c:09:db: 6a:f1:c3:dd:de:14:7b:07:31:b5:3c:e1:5f:b3:6b: 05:8a:40:7d:d5:6f:ad:07:9d:1a:13:7d:68:58:ca: b2:ea:6e:19:2a:e7:d9:69:17:54:73:f7:a4:52:be: 9d:96:43:98:03:a6:2b:a9:98:64:ca:32:13:38:fa: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A5:8D:F8:10:CD:6B:EE:E9:ED:BF:ED:55:69:D1:E2:B1:D9:D1:1C X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:45:4f:a8:47:08:5b:bf:44:d6:69:52:53:b7:d4:a3:50:6e: e3:39:92:fa:af:7f:25:66:a4:68:62:a8:d8:c0:a7:63:f9:64: b8:ee:ec:bf:78:5f:44:46:8c:ff:31:93:1a:0f:55:ef:60:20: 36:09:ac:62:55:ea:23:82:da:e0:cc:a9:9d:72:ba:2b:3c:87: 81:fc:04:1b:3c:10:a4:28:42:05:3e:57:ca:a9:8c:e8:83:14: 27:07:ab:60:f5:63:6b:4b:26:58:e1:44:96:31:6e:c2:60:58: 47:79:55:25:1c:f3:71:08:4c:33:23:c4:3d:7a:9d:1f:8b:97: b3:18:3f:97:d3:e5:54:0a:b1:56:53:9e:cb:96:f2:c0:57:7b: 5a:68:af:d7:e4:a0:38:63:44:d2:a5:88:c6:44:c4:bc:af:02: 63:08:62:05:3d:2e:98:0d:a4:07:d2:7b:7a:df:2e:cc:48:86: 7d:88:cf:29:a6:62:ea:4c:f6:9c:a6:06:cc:fb:a6:ae:59:d1: 6e:3c:83:bf:7e:cd:c3:17:ff:f3:0d:67:9e:d0:c5:11:0a:09: 83:9e:c3:45:89:e8:e8:82:b6:5a:76:a2:ef:8b:c9:13:6c:ff: ce:52:f7:17:4f:c4:1f:68:a5:1a:ac:44:d1:fb:02:f7:13:8f: fa:96:3d:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTA4MjMwNzI4MDZaFw0yNTA4MzAwNzI4MDZaMBgxFjAUBgNV BAMTDTY4YTk2ZDg2LTlhNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsUn5VW+O6eI3YKIgTyeyU1xFuE8Y9A+G/G3evDA2TpBO9RZo1XOt81+hU5NkN TqNkDasop0QRltHL3PM8//178fXgWuWk5Te1WGw5fZcmjG/w1n+e3jBwuVq5lcsC IqzsUmacY0b8ssxdcke+XAizD5djYYvGkQhFpI1dyhvh9+1N5+tmmbOwlE7sSQQ4 8a1Ihuey4/trY+y3lcM9ixLMVuM/DbSOn362WWpLuD20NYoNAkqehoYRJYpJpuyV FowJ22rxw93eFHsHMbU84V+zawWKQH3Vb60HnRoTfWhYyrLqbhkq59lpF1Rz96RS vp2WQ5gDpiupmGTKMhM4+ja9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIaWN+BDN a+7p7b/tVWnR4rHZ0RwwHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIpFT6hHCFu/RNZpUlO31KNQbuM5kvqvfyVmpGhiqNjAp2P5ZLju7L94 X0RGjP8xkxoPVe9gIDYJrGJV6iOC2uDMqZ1yuis8h4H8BBs8EKQoQgU+V8qpjOiD FCcHq2D1Y2tLJljhRJYxbsJgWEd5VSUc83EITDMjxD16nR+Ll7MYP5fT5VQKsVZT nsuW8sBXe1por9fkoDhjRNKliMZExLyvAmMIYgU9LpgNpAfSe3rfLsxIhn2Izymm YupM9pymBsz7pq5Z0W48g79+zcMX//MNZ57QxREKCYOew0WJ6OiCtlp2ou+LyRNs /85S9xdPxB9opRqsRNH7AvcTj/qWPe8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:52 2025 by rpki-client