$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: 0fHW/DJ8Y84kLNQ0qWDcBJ5jxtpXmQ4RgJhRZ2MCRsA= Subject key identifier: 7F:E5:B9:80:26:35:DF:DB:C9:3B:97:15:BA:0C:A3:DA:23:FA:22:A7 Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 094E Signing time: Fri 22 Aug 2025 20:19:35 +0000 Manifest this update: Fri 22 Aug 2025 20:19:35 +0000 Manifest next update: Fri 29 Aug 2025 20:19:35 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: khjaRv55cMbApjawtMfpyk0fKw24vJxeI/RwIyWng18=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: 0cYkjMp/gtYpvp6HxvXFQpX0b09jvpiPKpMRszh/Xsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Aug 22 20:19:35 2025 GMT Not After : Aug 29 20:19:35 2025 GMT Subject: CN=68a8d0d7-081a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:60:54:a4:52:ea:9b:59:fc:51:09:cd:c9: 7d:57:32:a9:70:8b:13:22:f3:6b:4f:48:b5:65:82: 11:e7:64:0f:40:77:68:8b:e0:1f:0e:de:e7:17:f2: 52:c5:d7:0e:17:4c:81:17:93:f5:29:dd:15:41:3c: 4c:d9:cc:e0:fc:c3:70:6b:ec:dc:72:35:72:f2:cd: 3b:64:3d:41:07:11:58:65:3f:a3:64:a3:17:b0:fa: 83:94:ef:d3:dc:1e:29:0e:73:74:85:29:75:7e:88: df:e6:99:20:16:32:9e:5b:a6:f3:85:a5:69:02:8c: 9d:09:b2:d8:9b:15:35:e3:3b:d7:a5:55:a8:7d:3c: 35:e5:74:87:ba:b1:49:b2:2a:98:ce:6d:18:36:d8: 60:a9:13:ce:08:a4:17:39:36:43:fc:42:60:25:ab: da:bf:6b:62:63:04:8a:22:19:c3:0d:23:6d:02:e6: df:95:2e:d8:05:86:8f:dc:df:69:ac:30:5f:0e:2b: 85:da:8f:7b:1a:ad:6a:d0:bc:0f:1a:47:3e:96:bf: ea:fd:c2:ce:18:85:ce:3a:e2:d2:fd:60:a1:15:8a: 56:63:79:15:12:f7:35:9c:0b:3c:34:07:35:1d:29: 0b:5e:79:4d:72:be:ec:27:62:76:f5:be:96:3a:0f: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E5:B9:80:26:35:DF:DB:C9:3B:97:15:BA:0C:A3:DA:23:FA:22:A7 X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b8:b8:d6:c5:8a:ad:c6:02:53:1d:fb:3e:3f:31:6c:7c:ad: 15:30:bd:f2:63:a2:33:51:0c:19:bb:b8:2f:b4:57:3c:bf:7c: 43:18:b9:82:38:6d:78:1e:16:0b:be:38:a6:f1:94:d5:95:cd: b1:fd:26:f9:ec:e6:55:ca:1e:a4:a9:c1:f7:3b:99:b3:88:71: 6b:1f:1e:c6:b8:60:c7:95:d3:8c:b4:28:23:19:03:46:55:3a: 99:28:9f:93:d5:84:30:91:3c:31:b6:fe:59:53:c8:d5:4f:88: 4c:5a:84:6a:2a:f8:00:42:b3:3b:35:35:6e:09:66:bf:b2:4c: 1f:57:5b:48:7f:af:b2:55:71:03:f7:38:fc:a3:06:07:b5:d8: 21:3e:94:d2:0e:99:2f:99:3d:05:83:43:1e:f8:b4:7d:e5:9d: 54:43:05:4d:6e:04:90:fc:ca:66:e7:ce:60:81:aa:bc:d5:6e: 86:c8:a1:8e:48:fe:3f:06:b5:a8:5b:62:3a:2a:a5:2c:6e:c3: 83:0a:f8:d1:3a:09:1d:85:4a:90:f5:6d:34:ca:df:a4:c9:f7: 01:6f:6c:c7:cb:c7:a3:5a:0c:13:9c:97:b1:c8:f4:8c:e3:cd: 83:89:3c:fd:30:e9:fe:30:3a:b4:f0:92:c4:37:99:ea:a7:c1: 15:98:41:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUwODIyMjAxOTM1WhcNMjUwODI5MjAxOTM1WjAYMRYwFAYD VQQDEw02OGE4ZDBkNy0wODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jtgVKRS6ptZ/FEJzcl9VzKpcIsTIvNrT0i1ZYIR52QPQHdoi+AfDt7nF/JS xdcOF0yBF5P1Kd0VQTxM2czg/MNwa+zccjVy8s07ZD1BBxFYZT+jZKMXsPqDlO/T 3B4pDnN0hSl1fojf5pkgFjKeW6bzhaVpAoydCbLYmxU14zvXpVWofTw15XSHurFJ siqYzm0YNthgqRPOCKQXOTZD/EJgJavav2tiYwSKIhnDDSNtAubflS7YBYaP3N9p rDBfDiuF2o97Gq1q0LwPGkc+lr/q/cLOGIXOOuLS/WChFYpWY3kVEvc1nAs8NAc1 HSkLXnlNcr7sJ2J29b6WOg8c7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/luYAm Nd/byTuXFboMo9oj+iKnMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIuLjWxYqtxgJTHfs+PzFsfK0VML3yY6IzUQwZu7gvtFc8v3xDGLmC OG14HhYLvjim8ZTVlc2x/Sb57OZVyh6kqcH3O5mziHFrHx7GuGDHldOMtCgjGQNG VTqZKJ+T1YQwkTwxtv5ZU8jVT4hMWoRqKvgAQrM7NTVuCWa/skwfV1tIf6+yVXED 9zj8owYHtdghPpTSDpkvmT0Fg0Me+LR95Z1UQwVNbgSQ/Mpm585ggaq81W6GyKGO SP4/BrWoW2I6KqUsbsODCvjROgkdhUqQ9W00yt+kyfcBb2zHy8ejWgwTnJexyPSM 482DiTz9MOn+MDq08JLEN5nqp8EVmEEe -----END CERTIFICATE-----Generated at Sat Aug 23 13:42:00 2025 by rpki-client