$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: 9gV0lzii6IIxEsBjhuRKS0hrajNmn1PUkqTKabU9ez0= Subject key identifier: 4C:73:FE:47:4B:2D:66:90:01:FD:6B:8F:19:9D:C1:8F:59:EC:D1:4E Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 0223 Signing time: Sat 23 Aug 2025 02:13:08 +0000 Manifest this update: Sat 23 Aug 2025 02:13:08 +0000 Manifest next update: Sat 30 Aug 2025 02:13:08 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: MiFuZ516CN/AG1YyIvysBYyOPEABQyP/QwzpxpVHvz4=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: MniMCaT7GS5dM8liFRmMS+V0grGgkVjsR8fvxiwRJoU=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: yFTXv2eFumW58i8EpayoiAuuDpkxivQ9zhERap37PtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Aug 23 02:13:08 2025 GMT Not After : Aug 30 02:13:08 2025 GMT Subject: CN=68a923b4-5e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:2e:9d:51:4c:eb:c1:5c:29:b5:24:62:e7: 46:e0:6d:7f:33:6f:0a:e8:aa:7d:e4:5c:48:af:bc: 88:04:d7:13:95:2e:b8:9d:40:7d:42:bf:c5:80:aa: 85:64:32:bb:67:dc:5c:15:42:1d:2d:b9:df:a7:88: 9c:65:b8:5e:13:83:5c:52:cb:a9:70:dc:4e:a6:3b: 6c:54:f6:17:8a:a1:61:f2:fe:32:94:d2:3d:3c:3c: 8a:44:3a:61:51:0b:e0:9b:bc:b4:4d:2d:c6:d7:79: 41:e6:ab:fc:7f:3a:c6:e4:11:d6:bf:42:18:c0:72: e5:77:77:a1:c9:1c:05:3a:4c:a9:3d:ef:37:38:a1: 5e:9c:ab:ec:a4:b5:c1:13:1c:79:66:4a:71:95:c0: 08:f0:96:e6:67:d0:24:d7:d8:56:45:58:4b:15:42: c3:9b:91:b1:88:86:1a:9e:f9:f6:0a:60:36:28:07: db:ed:04:9b:44:87:c6:df:e1:91:a3:ad:60:4b:02: e7:62:fc:99:7c:e2:75:0a:09:c8:8b:e1:83:8e:d5: 7d:c4:f4:cb:3f:64:b9:e6:93:da:7a:89:37:f7:9d: 35:8b:fc:c6:7a:06:ee:19:bb:f8:3b:03:61:10:e9: de:ae:11:46:5e:b3:5f:51:2c:2e:f0:24:39:6c:70: 76:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:73:FE:47:4B:2D:66:90:01:FD:6B:8F:19:9D:C1:8F:59:EC:D1:4E X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:6d:f9:c1:96:d2:ea:d6:40:37:98:f7:34:18:47:f5:e8:41: 7f:7c:de:af:f7:41:52:1b:ba:8a:4a:45:58:14:d0:af:08:cd: 34:1e:15:2d:0b:82:3f:88:59:9d:1f:44:d2:09:d9:37:15:88: c3:29:fa:78:19:db:c3:0f:13:79:1c:1c:f7:ec:01:89:a9:64: 7e:ea:ee:0a:99:33:65:20:a7:e5:2e:54:14:a6:37:70:81:73: 8a:21:46:a6:61:9f:45:b3:4b:d1:b9:20:aa:51:9b:b5:a8:38: 95:f3:9d:56:32:b2:28:8a:6f:5e:0b:63:45:f5:e8:99:04:eb: 98:b4:1e:9e:cd:a8:69:6b:ab:29:37:c7:d2:53:48:78:e0:93: ca:60:54:53:78:2c:97:4b:1a:67:7d:29:51:c8:91:01:0f:ce: 5a:a5:c5:f7:37:49:d9:4d:bb:66:f2:e6:8a:b4:26:ea:e4:41: 76:1c:55:35:bf:d4:11:4d:50:71:5e:75:8e:e0:2e:c6:33:48: e4:71:ac:94:46:0e:f4:4a:68:63:a8:43:47:58:fa:c9:09:46: 67:df:54:2d:ec:a9:c5:34:e0:3e:92:26:ff:68:6c:83:ae:a6: 9b:76:be:f8:e1:0f:c3:a3:dc:56:2e:b1:eb:bc:c4:ad:56:ce: dc:bc:ac:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjUwODIzMDIxMzA4WhcNMjUwODMwMDIxMzA4WjAYMRYwFAYD VQQDEw02OGE5MjNiNC01ZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzQunVFM68FcKbUkYudG4G1/M28K6Kp95FxIr7yIBNcTlS64nUB9Qr/FgKqF ZDK7Z9xcFUIdLbnfp4icZbheE4NcUsupcNxOpjtsVPYXiqFh8v4ylNI9PDyKRDph UQvgm7y0TS3G13lB5qv8fzrG5BHWv0IYwHLld3ehyRwFOkypPe83OKFenKvspLXB Exx5ZkpxlcAI8JbmZ9Ak19hWRVhLFULDm5GxiIYanvn2CmA2KAfb7QSbRIfG3+GR o61gSwLnYvyZfOJ1CgnIi+GDjtV9xPTLP2S55pPaeok39501i/zGegbuGbv4OwNh EOnerhFGXrNfUSwu8CQ5bHB2ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExz/kdL LWaQAf1rjxmdwY9Z7NFOMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUbfnBltLq1kA3mPc0GEf16EF/fN6v90FSG7qKSkVYFNCvCM00HhUt C4I/iFmdH0TSCdk3FYjDKfp4GdvDDxN5HBz37AGJqWR+6u4KmTNlIKflLlQUpjdw gXOKIUamYZ9Fs0vRuSCqUZu1qDiV851WMrIoim9eC2NF9eiZBOuYtB6ezahpa6sp N8fSU0h44JPKYFRTeCyXSxpnfSlRyJEBD85apcX3N0nZTbtm8uaKtCbq5EF2HFU1 v9QRTVBxXnWO4C7GM0jkcayURg70SmhjqENHWPrJCUZn31Qt7KnFNOA+kib/aGyD rqabdr744Q/Do9xWLrHrvMStVs7cvKzA -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:43 2025 by rpki-client