$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft File: RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json) Hash identifier: H4ySdJNrx/1Xqbh5ChB1Mj1yxLq9yu7nxmOELnTnpKs= Subject key identifier: 91:BB:B6:13:E8:BF:79:1B:03:5E:93:C5:00:2A:C0:74:51:22:3C:25 Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 Certificate issuer: /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft Manifest number: 01FD Signing time: Sat 23 Aug 2025 02:39:30 +0000 Manifest this update: Sat 23 Aug 2025 02:39:30 +0000 Manifest next update: Sat 30 Aug 2025 02:39:30 +0000 Files and hashes: 1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: FhKCRSNfC7C6fvLVMTkPnHNRTj/dilTqkJWEsZMRx8U=) 2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: GsQb9OViPtlvdrFlGnTmdER4z6tAGgYqQ3UiB63DzdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8 Validity Not Before: Aug 23 02:39:30 2025 GMT Not After : Aug 30 02:39:30 2025 GMT Subject: CN=68a929e2-2abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e0:96:62:e4:a6:91:7e:d0:fd:76:69:cb:0e: 4a:68:17:bc:18:2a:fa:9f:40:c0:d1:96:24:b0:54: a2:73:18:7f:73:4f:ac:b7:72:b6:2d:7e:ad:aa:dc: a8:8c:c9:71:6c:b3:d4:d8:d1:b0:b1:15:0a:52:52: a8:61:c5:98:64:5c:e5:22:2d:19:65:1a:f0:87:e2: 79:16:b8:ea:bf:b8:fa:12:0d:f5:aa:b8:29:b7:73: ea:ac:df:d4:76:48:f7:37:60:f9:0e:c1:dc:be:8a: df:8e:2a:bd:05:7d:d3:8d:8a:fe:66:54:47:1f:02: e1:d0:5e:22:f8:78:db:50:90:1f:20:84:b8:8d:6b: 2d:c9:ba:e7:e4:aa:63:ba:cd:c7:87:96:62:94:26: b6:66:69:22:a4:2b:72:1a:e6:61:fa:f7:45:a6:27: 26:60:79:3a:72:69:1e:09:0d:94:0d:63:1d:f3:7f: e9:00:bd:6b:a4:29:1d:f5:dd:82:59:5b:49:e8:8a: 4d:44:dc:9e:0c:91:37:3d:fe:dc:b6:57:5c:fe:75: 34:43:01:99:10:16:11:ba:d4:98:be:50:ef:a7:a4: 25:64:46:ed:3b:b1:fd:fc:8c:36:cd:87:d1:55:11: 56:c7:a9:f7:3a:33:e0:53:58:63:e8:88:6b:61:fb: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BB:B6:13:E8:BF:79:1B:03:5E:93:C5:00:2A:C0:74:51:22:3C:25 X509v3 Authority Key Identifier: keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:65:12:99:ec:97:87:b0:34:1d:46:a4:65:21:13:ac:e0:67: 66:26:b9:93:62:92:0f:75:6e:c7:54:7e:49:20:09:5a:61:a3: 99:1e:ff:e2:de:aa:c9:7d:81:c1:70:2f:a1:c9:d8:09:b1:f6: 26:3e:03:c3:fc:27:2f:9e:49:99:19:bc:9c:0f:cd:ae:6f:02: 74:78:b4:a8:ce:ea:81:fb:14:9a:de:77:8b:b8:87:b3:3b:83: 77:37:b2:43:f4:f8:ce:8e:77:a0:e0:54:bd:cb:22:53:88:97: 31:ec:0a:c7:7c:81:a5:97:f4:3d:b2:30:a3:44:2b:7b:47:23: 2b:8c:37:f9:9e:2e:d0:f0:46:e3:c5:31:02:72:95:5a:8a:43: 19:26:a8:12:59:2f:3f:bd:2e:8e:70:33:a8:9f:58:13:03:b3: 9e:4d:e3:e6:67:b2:70:15:85:a4:4b:3c:df:f9:fe:fe:77:64: ad:a3:5a:7e:cd:58:a7:19:d3:fa:b4:3d:47:35:4a:86:d6:0d: d5:e8:69:2c:a0:30:ec:7e:84:ec:99:c4:b2:71:22:02:bf:2c: db:3c:d8:b1:b0:bd:60:6f:72:f8:e8:a2:b0:e3:07:68:46:98: c9:96:f3:8d:d9:d6:95:26:17:ae:51:ce:70:23:51:95:e5:61: 23:e1:c3:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz RDNFRDZGQTgwHhcNMjUwODIzMDIzOTMwWhcNMjUwODMwMDIzOTMwWjAYMRYwFAYD VQQDEw02OGE5MjllMi0yYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5OCWYuSmkX7Q/XZpyw5KaBe8GCr6n0DA0ZYksFSicxh/c0+st3K2LX6tqtyo jMlxbLPU2NGwsRUKUlKoYcWYZFzlIi0ZZRrwh+J5Frjqv7j6Eg31qrgpt3PqrN/U dkj3N2D5DsHcvorfjiq9BX3TjYr+ZlRHHwLh0F4i+HjbUJAfIIS4jWstybrn5Kpj us3Hh5ZilCa2ZmkipCtyGuZh+vdFpicmYHk6cmkeCQ2UDWMd83/pAL1rpCkd9d2C WVtJ6IpNRNyeDJE3Pf7ctldc/nU0QwGZEBYRutSYvlDvp6QlZEbtO7H9/Iw2zYfR VRFWx6n3OjPgU1hj6IhrYft5MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG7thPo v3kbA16TxQAqwHRRIjwlMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjZRKZ7JeHsDQdRqRlIROs4GdmJrmTYpIPdW7HVH5JIAlaYaOZHv/i 3qrJfYHBcC+hydgJsfYmPgPD/CcvnkmZGbycD82ubwJ0eLSozuqB+xSa3neLuIez O4N3N7JD9PjOjneg4FS9yyJTiJcx7ArHfIGll/Q9sjCjRCt7RyMrjDf5ni7Q8Ebj xTECcpVaikMZJqgSWS8/vS6OcDOon1gTA7OeTePmZ7JwFYWkSzzf+f7+d2Sto1p+ zVinGdP6tD1HNUqG1g3V6GksoDDsfoTsmcSycSICvyzbPNixsL1gb3L46KKw4wdo RpjJlvON2daVJheuUc5wI1GV5WEj4cOj -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:01 2025 by rpki-client