$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft File: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json) Hash identifier: r6XtBgcuM6hvSiNSUELJSwASqG1MX//TWIdIBMc9wjE= Subject key identifier: 24:93:E8:60:0A:6E:E9:37:B2:D5:06:20:3C:64:C7:63:A6:E2:C4:07 Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C Certificate issuer: /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft Manifest number: 08F2 Signing time: Fri 22 Aug 2025 20:29:50 +0000 Manifest this update: Fri 22 Aug 2025 20:29:50 +0000 Manifest next update: Fri 29 Aug 2025 20:29:50 +0000 Files and hashes: 1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: igpre1kuU5WbLbhupoWs9mrEXy5/z9ewP3DXvt+DWwU=) 2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: qTuGE1JcRtd/cW9n5J8BXF2j1PTZne38og2GGYl8DqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C Validity Not Before: Aug 22 20:29:50 2025 GMT Not After : Aug 29 20:29:50 2025 GMT Subject: CN=68a8d33e-0445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:7a:a0:d8:fa:fb:f4:00:8b:87:06:39:87: 5c:36:d9:26:e8:f3:e9:ba:60:0f:01:59:4a:69:ff: 35:65:ec:fb:87:21:89:e3:2f:e4:59:9f:37:ab:16: 9f:44:f9:1f:e2:3a:93:4a:28:99:e6:6a:e0:65:47: fe:aa:3b:e6:96:ea:6e:fd:88:12:bc:f6:27:46:8e: d7:53:4b:9b:6c:75:30:c9:3d:72:44:87:8b:b0:ae: ba:a6:30:18:68:73:06:3b:ad:92:12:4c:79:8c:f9: 14:74:5b:2c:59:03:13:a1:08:9a:3b:ce:ad:20:43: 25:71:72:99:2c:e9:45:7c:6f:db:cd:44:8b:75:bb: 3f:42:e1:17:d7:4b:5f:af:fa:25:26:11:77:7a:33: cf:aa:9b:81:c8:0d:4e:37:15:63:b7:e9:0f:ce:8b: 70:93:bc:e5:93:8b:40:a1:cf:77:a9:e1:ae:74:18: 65:37:1d:67:07:c6:29:95:ec:86:a8:da:91:83:4f: e1:b1:24:bb:82:52:81:9b:2e:b6:f3:38:2d:2d:b8: a0:6d:6e:1b:61:f1:40:34:76:15:f2:b6:6f:61:b2: 1e:e4:80:e6:4a:b7:c4:58:03:3d:85:e9:ff:66:9e: 10:97:dc:61:84:1d:0a:fd:4f:eb:34:ed:cf:3e:95: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:E8:60:0A:6E:E9:37:B2:D5:06:20:3C:64:C7:63:A6:E2:C4:07 X509v3 Authority Key Identifier: keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ce:e6:7c:7e:55:56:01:31:31:f1:6a:43:44:9f:7c:67:b8: 70:54:5f:4d:00:1a:e2:c3:09:3e:57:9c:d1:f9:d9:9b:51:d8: 87:f4:91:5d:76:3e:b0:bf:d0:d7:f3:27:9e:f8:6a:d9:8b:3e: 7a:57:31:26:8f:89:9d:76:f4:8a:4d:b8:ad:ee:3d:85:04:67: 79:59:e9:bd:4e:41:48:fb:8f:08:62:4c:7f:4f:7e:fa:3b:4c: 6b:1f:08:2d:db:00:72:41:dd:f1:b0:a7:ec:39:b8:94:5a:d6: 39:44:3e:02:e0:cf:e0:0d:04:aa:ba:64:b2:91:a7:33:5c:3f: 63:08:1f:2e:dd:23:e0:75:a8:37:4f:d2:fa:50:12:f8:1b:fc: 5f:d6:b4:3d:33:c4:05:94:9c:bb:84:43:ac:64:e7:fc:a5:80: b7:07:30:0f:c1:73:46:af:ad:20:41:a2:be:97:39:60:cb:42: 1b:c7:e2:91:14:9b:a6:70:6f:ae:86:5f:62:0c:4b:b1:8d:01: ce:32:5b:20:34:c8:f1:53:4e:f0:5a:f0:ad:19:ed:49:92:4c: 89:61:4a:5a:af:43:d5:4d:e7:83:5a:d5:99:2e:eb:8e:b7:2f: d2:e6:00:c9:9e:48:2b:5d:e9:5a:a3:98:d4:60:18:a7:08:5a: 90:1c:ca:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMjkxMTAvBgNVBAUTKDVCRjYyNDM5OTBBOTQ2NEM4NUI3ODIzREI0MjZFMkFC OTY3MjBBM0MwHhcNMjUwODIyMjAyOTUwWhcNMjUwODI5MjAyOTUwWjAYMRYwFAYD VQQDEw02OGE4ZDMzZS0wNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9p6oNj6+/QAi4cGOYdcNtkm6PPpumAPAVlKaf81Zez7hyGJ4y/kWZ83qxaf RPkf4jqTSiiZ5mrgZUf+qjvmlupu/YgSvPYnRo7XU0ubbHUwyT1yRIeLsK66pjAY aHMGO62SEkx5jPkUdFssWQMToQiaO86tIEMlcXKZLOlFfG/bzUSLdbs/QuEX10tf r/olJhF3ejPPqpuByA1ONxVjt+kPzotwk7zlk4tAoc93qeGudBhlNx1nB8YpleyG qNqRg0/hsSS7glKBmy628zgtLbigbW4bYfFANHYV8rZvYbIe5IDmSrfEWAM9hen/ Zp4Ql9xhhB0K/U/rNO3PPpVX+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCST6GAK buk3stUGIDxkx2Om4sQHMB8GA1UdIwQYMBaAFFv2JDmQqUZMhbeCPbQm4quWcgo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUyOS9ERDEzRjhGMEIy OUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJreUZ0NEk5dENiaXE1WnlD ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dfWWtPWkNwUmt5RnQ0STl0Q2JpcTVaeUNqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUyOS9ERDEzRjhGMEIyOUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJr eUZ0NEk5dENiaXE1WnlDancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2zuZ8flVWATEx8WpDRJ98Z7hwVF9NABriwwk+V5zR+dmbUdiH9JFd dj6wv9DX8yee+GrZiz56VzEmj4mddvSKTbit7j2FBGd5Wem9TkFI+48IYkx/T376 O0xrHwgt2wByQd3xsKfsObiUWtY5RD4C4M/gDQSqumSykaczXD9jCB8u3SPgdag3 T9L6UBL4G/xf1rQ9M8QFlJy7hEOsZOf8pYC3BzAPwXNGr60gQaK+lzlgy0Ibx+KR FJumcG+uhl9iDEuxjQHOMlsgNMjxU07wWvCtGe1JkkyJYUpar0PVTeeDWtWZLuuO ty/S5gDJnkgrXelao5jUYBinCFqQHMpu -----END CERTIFICATE-----Generated at Sat Aug 23 07:07:14 2025 by rpki-client