$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json) Hash identifier: JKxZrxNkgM4/dQUA2OYJqVspWCSjcynZfQF/+Fl9gVU= Subject key identifier: 69:CF:68:8F:4A:B0:06:D4:18:64:80:A4:9A:70:95:22:B1:FE:64:F5 Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 1147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft Manifest number: 113D Signing time: Fri 22 Aug 2025 17:23:20 +0000 Manifest this update: Fri 22 Aug 2025 17:23:19 +0000 Manifest next update: Fri 29 Aug 2025 17:23:19 +0000 Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: UDLJGRbF9qCt5qJjezOFRumi1HDjoIHjBm9mg/Q2x9g=) 2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: +yvtNS8LKQHKe3DTi4wIovOu3eQ4uVvjs9/gUB2eHD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4423 (0x1147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Aug 22 17:23:19 2025 GMT Not After : Aug 29 17:23:19 2025 GMT Subject: CN=68a8a787-acc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:3e:51:20:68:3e:7b:b3:5f:63:0b:58:2b: 1a:6a:25:0a:e5:64:8a:df:7a:98:ca:d4:0e:93:3f: 24:4a:62:c2:e5:6e:fc:3e:9a:06:78:34:10:01:c5: ef:b2:5e:74:2a:ff:d1:72:f9:ce:0d:6a:f5:b0:15: c7:85:ab:20:5a:19:c6:8a:43:4c:49:05:ad:c1:02: c9:fc:38:dc:44:42:33:84:54:f8:37:79:a4:25:41: 22:ed:30:43:64:86:bd:2c:68:e3:18:b3:7b:f9:88: 2b:fc:0b:3a:1c:08:24:50:55:8f:6b:8f:5b:e8:c0: a4:dd:31:78:26:fe:a0:60:3b:cc:8c:29:6f:a3:fd: 55:d7:6b:03:eb:4c:3a:e0:c3:13:6d:da:9f:dc:c2: 74:16:12:98:dd:a0:31:2e:b3:29:a4:41:d3:95:be: b0:af:33:ed:6a:34:de:1a:a3:bc:64:b1:d2:80:05: 89:a3:f7:8d:e0:b5:06:c4:4d:fe:16:d8:f6:85:47: 35:3d:12:50:68:98:42:c8:f7:2c:f8:a9:8e:7f:cb: 2b:9b:07:5f:be:7a:44:b4:9c:b8:0c:df:c1:85:99: 75:24:5a:54:dd:1a:4a:4e:50:ff:55:04:8a:3a:61: 7b:7d:44:4e:e2:05:d7:23:ca:dc:ac:3b:1b:65:23: 66:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CF:68:8F:4A:B0:06:D4:18:64:80:A4:9A:70:95:22:B1:FE:64:F5 X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:fa:94:55:a4:d6:16:d6:27:ab:2d:85:c3:93:11:8b:23:e5: 18:d1:7c:09:84:ac:45:34:df:5e:cc:71:aa:e5:db:c5:9b:56: f4:4d:e5:a5:be:e3:9d:b5:40:06:3e:4e:86:9c:7e:ac:c6:22: c5:e1:15:93:8c:66:d8:c9:dc:3a:38:a9:95:ab:ae:d2:50:8c: 84:45:08:70:84:35:b0:f6:f3:44:32:05:9e:91:7b:3e:56:6a: 49:06:31:62:0f:26:3c:25:6e:8c:63:52:1e:96:57:98:f1:99: a5:a6:70:18:37:17:3c:1d:b2:af:01:4c:7a:ab:a9:0b:76:be: 79:a3:75:6c:30:f4:32:03:c6:31:e2:7d:03:f5:cd:92:a7:79: 34:bb:72:ed:a6:3f:90:db:87:e3:bc:b4:50:3c:5a:66:61:d9: 86:10:c6:18:43:0f:ea:79:29:6d:4b:04:04:73:53:ff:f1:39: 48:56:8d:f8:58:d0:ed:94:8c:cf:b5:70:6d:58:ff:55:f9:74: ab:b0:2f:2b:b1:a3:1b:fb:69:04:3a:e1:58:93:7d:14:25:76: d5:9f:d7:93:83:6b:d5:a7:19:e2:d7:ec:1b:3a:7b:bc:8e:2b: 34:82:f3:e3:18:59:c2:30:a7:f6:a0:5b:fa:3e:45:6a:ec:83: 05:f0:cf:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjUwODIyMTcyMzE5WhcNMjUwODI5MTcyMzE5WjAYMRYwFAYD VQQDEw02OGE4YTc4Ny1hY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx88+USBoPnuzX2MLWCsaaiUK5WSK33qYytQOkz8kSmLC5W78PpoGeDQQAcXv sl50Kv/RcvnODWr1sBXHhasgWhnGikNMSQWtwQLJ/DjcREIzhFT4N3mkJUEi7TBD ZIa9LGjjGLN7+Ygr/As6HAgkUFWPa49b6MCk3TF4Jv6gYDvMjClvo/1V12sD60w6 4MMTbdqf3MJ0FhKY3aAxLrMppEHTlb6wrzPtajTeGqO8ZLHSgAWJo/eN4LUGxE3+ Ftj2hUc1PRJQaJhCyPcs+KmOf8srmwdfvnpEtJy4DN/BhZl1JFpU3RpKTlD/VQSK OmF7fURO4gXXI8rcrDsbZSNmEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnPaI9K sAbUGGSApJpwlSKx/mT1MB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRz OXI5VWpOTlZsdDZwWF9XRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0+pRVpNYW1ierLYXDkxGLI+UY0XwJhKxFNN9ezHGq5dvFm1b0TeWl vuOdtUAGPk6GnH6sxiLF4RWTjGbYydw6OKmVq67SUIyERQhwhDWw9vNEMgWekXs+ VmpJBjFiDyY8JW6MY1IelleY8ZmlpnAYNxc8HbKvAUx6q6kLdr55o3VsMPQyA8Yx 4n0D9c2Sp3k0u3Ltpj+Q24fjvLRQPFpmYdmGEMYYQw/qeSltSwQEc1P/8TlIVo34 WNDtlIzPtXBtWP9V+XSrsC8rsaMb+2kEOuFYk30UJXbVn9eTg2vVpxni1+wbOnu8 jis0gvPjGFnCMKf2oFv6PkVq7IMF8M94 -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:53 2025 by rpki-client