$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: wPyeXvX/NPFn29vHa4ExibOkNHpTTmWMxKzvEvLQc8g= Subject key identifier: 16:82:8A:87:1D:94:EE:B4:99:18:F4:1B:5E:57:EB:3C:B0:AE:BD:F6 Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 0586 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 057F Signing time: Fri 22 Aug 2025 23:27:58 +0000 Manifest this update: Fri 22 Aug 2025 23:27:58 +0000 Manifest next update: Fri 29 Aug 2025 23:27:58 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: XVlVGVZU8qoIrA11zli/JexHFOUUrV2AiJdLVFm7los=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: z4OD50JJqcb5eLqgxPYFpu+0WPLJOBG84/py9BkQ1lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1414 (0x586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: Aug 22 23:27:58 2025 GMT Not After : Aug 29 23:27:58 2025 GMT Subject: CN=68a8fcfe-7bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:f8:73:85:4a:86:0a:26:10:6c:92:c5:b6: 45:93:a6:91:8d:7c:a6:c7:eb:58:27:52:60:18:89: d5:ab:87:37:ff:39:64:b4:86:a7:c6:38:2f:56:a4: be:86:49:4c:28:ea:31:01:cd:48:ad:f9:f2:a2:d2: 97:97:36:95:c9:6b:8c:60:eb:4a:80:5f:8f:bf:fd: c7:62:60:d2:3a:91:50:3c:88:89:55:bb:fb:52:76: e2:23:b1:69:dc:64:a8:f0:02:3c:ef:1d:1f:4d:a8: dd:2a:e4:a0:a1:0d:f1:4c:b1:13:12:dc:2e:9d:d9: 8d:b3:ba:71:c3:16:00:73:49:a4:a2:3e:6f:92:c7: 58:8a:f1:7e:1c:4a:2e:02:c3:97:18:59:78:7f:37: cb:8f:3a:df:d0:4b:53:b6:b6:66:d7:79:86:f8:6e: d9:60:64:8b:ea:6e:e1:c0:64:b8:9a:28:2e:55:ef: c9:98:fa:af:37:94:32:05:aa:a6:e9:f6:c8:6e:d9: 8a:66:db:11:06:69:4b:ca:a5:f3:75:eb:36:38:57: 08:ab:70:63:a5:58:47:de:b6:60:ee:7f:75:ea:ad: 47:3d:ed:a3:60:47:ee:47:fe:c4:71:97:2f:6e:c7: d1:6d:df:8a:9a:92:45:2e:b0:06:05:7f:4e:46:3a: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:82:8A:87:1D:94:EE:B4:99:18:F4:1B:5E:57:EB:3C:B0:AE:BD:F6 X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e0:62:6e:05:38:1d:fb:46:9e:4f:f8:aa:ee:b2:f5:9f:66: 58:13:6a:fd:d8:7e:93:fa:26:28:0e:e1:15:70:6e:a7:ec:99: 12:30:66:4d:58:bb:e1:b9:ad:4d:21:64:c6:55:47:fd:8d:84: cc:be:a2:bb:f3:04:29:6b:7d:60:53:6a:10:db:e2:29:d2:70: 8e:29:53:33:48:5c:82:1b:50:a8:b1:ad:c7:5b:eb:1e:83:b7: 4b:51:d3:a5:4c:94:20:2c:d9:b9:bf:c6:f4:c6:1e:25:60:a7: 5e:69:49:de:7c:52:28:1e:2c:50:eb:a5:a1:05:74:84:e9:f9: bc:e1:a6:d5:8c:05:cd:d3:f7:ea:21:92:e2:fb:23:a5:c7:2b: 29:19:c0:4a:c0:cf:47:96:50:d8:f1:2b:62:61:13:4c:a9:85: f2:e4:c0:71:a7:73:0c:b4:72:5a:85:d7:8b:35:2c:6a:58:97: 14:95:4d:45:91:24:3d:2c:a2:dc:35:b4:bb:83:7e:0c:6e:84: b3:69:af:37:39:22:be:f5:5b:c1:01:16:d2:df:79:1d:d0:97: c3:10:5e:eb:51:82:3d:c2:e1:90:70:e9:3c:df:24:1c:b4:63: 24:1c:21:b9:a4:b5:31:df:26:8c:ee:46:ea:90:6a:3a:85:5e: cb:06:3b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUwODIyMjMyNzU4WhcNMjUwODI5MjMyNzU4WjAYMRYwFAYD VQQDEw02OGE4ZmNmZS03YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+D4c4VKhgomEGySxbZFk6aRjXymx+tYJ1JgGInVq4c3/zlktIanxjgvVqS+ hklMKOoxAc1IrfnyotKXlzaVyWuMYOtKgF+Pv/3HYmDSOpFQPIiJVbv7UnbiI7Fp 3GSo8AI87x0fTajdKuSgoQ3xTLETEtwundmNs7pxwxYAc0mkoj5vksdYivF+HEou AsOXGFl4fzfLjzrf0EtTtrZm13mG+G7ZYGSL6m7hwGS4miguVe/JmPqvN5QyBaqm 6fbIbtmKZtsRBmlLyqXzdes2OFcIq3BjpVhH3rZg7n916q1HPe2jYEfuR/7EcZcv bsfRbd+KmpJFLrAGBX9ORjomXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaCiocd lO60mRj0G15X6zywrr32MB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc4GJuBTgd+0aeT/iq7rL1n2ZYE2r92H6T+iYoDuEVcG6n7JkSMGZN WLvhua1NIWTGVUf9jYTMvqK78wQpa31gU2oQ2+Ip0nCOKVMzSFyCG1Cosa3HW+se g7dLUdOlTJQgLNm5v8b0xh4lYKdeaUnefFIoHixQ66WhBXSE6fm84abVjAXN0/fq IZLi+yOlxyspGcBKwM9HllDY8StiYRNMqYXy5MBxp3MMtHJahdeLNSxqWJcUlU1F kSQ9LKLcNbS7g34MboSzaa83OSK+9VvBARbS33kd0JfDEF7rUYI9wuGQcOk83yQc tGMkHCG5pLUx3yaM7kbqkGo6hV7LBjvX -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:51 2025 by rpki-client