$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: 70zv1J46Ib8a0HL2MM2Mu8Vj5ACeU0dnNCHpwlNAtOk= Subject key identifier: 31:BB:88:AD:E2:8C:91:AD:B0:C6:56:2E:27:3C:63:D5:9F:82:84:CF Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 05F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 05EC Signing time: Fri 22 Aug 2025 23:09:37 +0000 Manifest this update: Fri 22 Aug 2025 23:09:36 +0000 Manifest next update: Fri 29 Aug 2025 23:09:36 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: 5sFgFCUyiEra9LMxWpRYAgpCAroELIs/NzQK5k9OIW8=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: Cb+Fd72gPRV5Z7Th9MT+3K1J11y33W768SuL3j3Pm7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1523 (0x5f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Aug 22 23:09:36 2025 GMT Not After : Aug 29 23:09:36 2025 GMT Subject: CN=68a8f8b1-27d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f5:7d:e4:bf:be:96:69:c4:d4:ab:9a:9d:ab: 77:62:01:3f:41:22:c6:00:57:a9:0d:0f:7f:c9:7a: 52:13:d7:3d:46:83:df:4b:bf:5a:51:e6:c8:d1:91: c1:f3:ce:a7:19:fe:59:28:16:54:0d:f5:36:20:41: 70:94:3e:69:d6:97:b1:d7:3f:1a:ce:1d:3f:31:3b: c8:06:8f:79:f4:16:9a:08:ae:d7:82:df:7a:b7:ad: 44:2d:f4:75:e5:0c:e4:66:03:cc:ee:54:d5:93:dd: af:ff:fa:2f:ba:8a:58:f4:e1:d3:cf:3f:00:3b:a0: df:7a:38:4e:72:08:6c:92:31:59:d2:94:68:64:53: 47:4e:04:15:fc:9e:ee:7c:04:d0:a8:1a:f1:56:72: c1:41:48:75:b9:b5:65:af:ba:30:c8:aa:4c:05:35: 4d:d4:f3:af:5a:e3:1c:17:7c:b1:9d:58:fe:60:72: b4:e4:4c:ec:4d:bf:63:03:1b:71:3a:0c:53:f8:f9: 5b:8a:e7:ba:cb:73:65:44:8e:bb:08:92:2b:a8:9b: 2b:c9:43:ff:0e:07:41:e0:6d:c8:1c:29:37:73:aa: ad:e7:c8:76:f2:61:60:e5:f3:cc:7f:33:fc:22:8e: 3e:16:fb:98:b2:b9:1e:2f:bc:ff:b9:8a:bf:cb:89: e1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:88:AD:E2:8C:91:AD:B0:C6:56:2E:27:3C:63:D5:9F:82:84:CF X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0f:39:c0:b4:27:7c:17:24:1f:69:46:47:32:d4:68:51:12: d9:e0:27:15:10:e2:c7:11:46:6e:14:35:69:4c:57:ce:6d:37: f3:1d:85:fa:da:09:7d:13:c5:52:fe:e6:41:83:c5:f2:b1:18: a2:42:65:73:1a:ee:1a:a6:da:14:f9:c7:57:44:e1:ea:72:16: 16:9c:8e:7d:3d:e0:4d:fb:7e:39:36:35:f6:bf:2e:ac:81:c8: 37:00:c5:da:05:f3:96:8f:ed:c0:82:3e:d8:3f:be:f0:0e:06: 38:18:d9:df:4d:69:8f:71:0c:30:cd:0f:64:54:f3:84:7d:ac: ab:12:e9:da:2a:8e:e4:95:dd:b5:27:5d:59:e1:aa:99:72:db: 7c:43:d4:96:81:39:34:f9:5a:b3:75:36:fd:b1:09:91:04:31: 75:86:1e:cc:54:fa:41:2e:70:31:dd:91:31:82:01:72:25:0b: aa:4e:26:57:b3:c9:9f:c2:e7:ff:be:9b:04:f0:1c:99:94:6b: 2d:0b:31:c6:71:6b:aa:89:08:6a:39:7a:4b:e6:96:15:b0:92: 85:c8:ab:f7:d1:27:d0:9f:06:d9:15:2b:d3:ce:34:ee:da:46: 08:19:72:a8:b3:75:bd:ac:05:c4:fc:46:a8:da:ff:d3:c9:e5: ab:70:cb:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjUwODIyMjMwOTM2WhcNMjUwODI5MjMwOTM2WjAYMRYwFAYD VQQDEw02OGE4ZjhiMS0yN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/V95L++lmnE1Kuanat3YgE/QSLGAFepDQ9/yXpSE9c9RoPfS79aUebI0ZHB 886nGf5ZKBZUDfU2IEFwlD5p1pex1z8azh0/MTvIBo959BaaCK7Xgt96t61ELfR1 5QzkZgPM7lTVk92v//ovuopY9OHTzz8AO6DfejhOcghskjFZ0pRoZFNHTgQV/J7u fATQqBrxVnLBQUh1ubVlr7owyKpMBTVN1POvWuMcF3yxnVj+YHK05EzsTb9jAxtx OgxT+Plbiue6y3NlRI67CJIrqJsryUP/DgdB4G3IHCk3c6qt58h28mFg5fPMfzP8 Io4+FvuYsrkeL7z/uYq/y4nhoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG7iK3i jJGtsMZWLic8Y9WfgoTPMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfDznAtCd8FyQfaUZHMtRoURLZ4CcVEOLHEUZuFDVpTFfObTfzHYX6 2gl9E8VS/uZBg8XysRiiQmVzGu4aptoU+cdXROHqchYWnI59PeBN+345NjX2vy6s gcg3AMXaBfOWj+3Agj7YP77wDgY4GNnfTWmPcQwwzQ9kVPOEfayrEunaKo7kld21 J11Z4aqZctt8Q9SWgTk0+VqzdTb9sQmRBDF1hh7MVPpBLnAx3ZExggFyJQuqTiZX s8mfwuf/vpsE8ByZlGstCzHGcWuqiQhqOXpL5pYVsJKFyKv30SfQnwbZFSvTzjTu 2kYIGXKos3W9rAXE/Eao2v/TyeWrcMut -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:17 2025 by rpki-client