$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json) Hash identifier: pBul+JwPPHWxDXvvsSG3obSf0M/VbTGf1eHlUur0rLk= Subject key identifier: 32:93:28:81:8F:8B:68:71:6F:39:B3:1F:FC:46:84:48:F1:1C:A2:8F Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft Manifest number: 0120 Signing time: Sat 23 Aug 2025 04:53:23 +0000 Manifest this update: Sat 23 Aug 2025 04:53:23 +0000 Manifest next update: Sat 30 Aug 2025 04:53:23 +0000 Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: wG+p5SGngwYob4433RZj37p1M/5EtAwA9cjLmqFPkN0=) 2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: q9sVPpnGHT0TBWPu4k07DgCGJ80E6prLVfQ+m+J3OXE=) 3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: EBWBEqR3i5PxLdfH1mN7syf09hARUIbnkSV4IoogUv4=) 4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: QXK92fzcUKDMjTiStNYvMQ27jRd0fX97PndGvgz1laU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Validity Not Before: Aug 23 04:53:23 2025 GMT Not After : Aug 30 04:53:23 2025 GMT Subject: CN=68a94943-6022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:a9:b4:6b:34:d1:04:d0:11:9e:9e:32:90: 2b:e7:80:78:da:49:b8:4b:29:c4:8a:be:2c:89:79: 90:cf:64:b2:96:a5:45:6a:a3:c2:eb:98:06:ad:e1: 2e:d3:1d:5a:5e:6f:a2:1c:2d:34:6d:df:6b:00:54: bd:b5:91:5f:ea:76:16:8b:df:a2:fa:49:6d:0b:34: 46:13:cf:96:e2:09:e1:df:a5:cb:98:e9:0e:4f:ef: df:4e:ad:bd:86:3a:1b:be:c4:c1:c7:8b:f4:37:75: 93:1a:b1:f9:3b:a9:bb:2b:5d:be:4b:6f:c0:12:5e: 96:c3:d5:65:ff:09:47:f6:e1:11:f8:7c:99:04:34: 6e:87:f0:b8:ed:fc:2a:d8:09:cc:0c:59:74:78:ec: 0f:f1:b1:8d:b8:7e:ee:8f:d1:03:7c:ca:68:e5:9b: f6:20:21:4e:6b:fe:23:48:02:8e:74:b6:46:d3:06: a1:65:c6:d1:43:96:98:e5:63:5a:1e:b7:cb:03:e3: d3:85:e7:35:f4:39:c2:80:87:48:4c:cc:6e:36:a8: 72:d6:85:d3:7d:ad:ef:a8:d2:6a:af:45:a0:9d:5c: 46:d3:7a:79:1f:0a:84:6e:99:68:63:02:62:df:cd: 90:cc:bd:fc:05:b7:56:aa:d6:b1:6d:59:79:c2:99: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:93:28:81:8F:8B:68:71:6F:39:B3:1F:FC:46:84:48:F1:1C:A2:8F X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:91:4c:8f:a8:42:c2:20:11:7a:68:10:71:81:5d:ab:fb:ad: 32:3c:6b:cc:af:0f:e0:48:ab:8d:d8:40:7d:38:2c:1b:78:21: bf:9f:a7:55:04:80:36:d5:21:3a:9d:c6:8f:d7:94:8f:b4:ff: 59:8e:7c:8c:45:86:36:80:74:f4:cc:1a:78:4b:d6:26:50:88: 6a:14:25:fe:0c:4e:69:4c:cd:b1:6b:b7:44:02:d3:f7:79:06: c4:ab:3b:ca:ef:09:b7:fa:fb:81:72:41:5c:8e:af:39:1b:e0: 5c:e4:ea:bd:f8:ce:70:05:5b:f9:27:64:0a:1b:b6:00:0b:ae: 79:a4:77:95:13:08:f8:8b:2c:7b:c1:1e:30:d9:ec:e0:7a:ca: fa:6f:ce:25:f9:b6:af:14:de:2c:b7:5b:f0:32:c9:de:97:ff: 21:8c:bd:f6:14:f9:9d:6c:aa:41:77:b6:79:a7:dd:65:fc:ce: 60:01:3c:75:95:1c:ee:3e:36:8d:d8:ea:64:91:4e:7a:f6:9c: 7a:b6:89:81:4a:96:ed:03:3c:47:80:72:75:48:df:eb:02:ff: 7b:e1:0a:28:ca:78:33:20:9e:72:66:f9:43:bb:3f:21:47:d8: c0:77:bd:b8:a2:77:8f:23:17:56:3a:24:0b:f9:5b:cc:ac:60: 68:a0:1b:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5 NTBCRkIwNDEwHhcNMjUwODIzMDQ1MzIzWhcNMjUwODMwMDQ1MzIzWjAYMRYwFAYD VQQDEw02OGE5NDk0My02MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnGptGs00QTQEZ6eMpAr54B42km4SynEir4siXmQz2SylqVFaqPC65gGreEu 0x1aXm+iHC00bd9rAFS9tZFf6nYWi9+i+kltCzRGE8+W4gnh36XLmOkOT+/fTq29 hjobvsTBx4v0N3WTGrH5O6m7K12+S2/AEl6Ww9Vl/wlH9uER+HyZBDRuh/C47fwq 2AnMDFl0eOwP8bGNuH7uj9EDfMpo5Zv2ICFOa/4jSAKOdLZG0wahZcbRQ5aY5WNa HrfLA+PThec19DnCgIdITMxuNqhy1oXTfa3vqNJqr0WgnVxG03p5HwqEbploYwJi 382QzL38BbdWqtaxbVl5wpnnxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKTKIGP i2hxbzmzH/xGhEjxHKKPMB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi82RUI5QzAzRUM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZB UGZDMk1FX05oQS1WQ19zRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgkUyPqELCIBF6aBBxgV2r+60yPGvMrw/gSKuN2EB9OCwbeCG/n6dV BIA21SE6ncaP15SPtP9ZjnyMRYY2gHT0zBp4S9YmUIhqFCX+DE5pTM2xa7dEAtP3 eQbEqzvK7wm3+vuBckFcjq85G+Bc5Oq9+M5wBVv5J2QKG7YAC655pHeVEwj4iyx7 wR4w2ezgesr6b84l+bavFN4st1vwMsnel/8hjL32FPmdbKpBd7Z5p91l/M5gATx1 lRzuPjaN2OpkkU569px6tomBSpbtAzxHgHJ1SN/rAv974QooyngzIJ5yZvlDuz8h R9jAd724onePIxdWOiQL+VvMrGBooBvR -----END CERTIFICATE-----Generated at Sat Aug 23 19:44:13 2025 by rpki-client