$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft File: mWY2odRf01oWXBULxfYjk0u7tnk.mft (raw, json) Hash identifier: SpgC5dfWuJOrpFuklSG1Gr9bD6T+rjCeoePdsHExKZw= Subject key identifier: E3:9F:D8:72:FB:A5:CA:A1:6A:4F:0A:A6:12:47:F7:2B:7F:3A:59:EB Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft Manifest number: 01CD Signing time: Sat 23 Aug 2025 02:58:40 +0000 Manifest this update: Sat 23 Aug 2025 02:58:40 +0000 Manifest next update: Sat 30 Aug 2025 02:58:40 +0000 Files and hashes: 1: mWY2odRf01oWXBULxfYjk0u7tnk.crl (hash: bVGVeu6ZVFkuE5xqK2GBG3j+hbcbS3lM28R619BlPFg=) 2: A1EB38DEF23D11EDAF983380C4F9AE02.roa (hash: EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Aug 23 02:58:40 2025 GMT Not After : Aug 30 02:58:40 2025 GMT Subject: CN=68a92e60-103f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4b:1d:20:c0:67:c5:ae:4e:a6:7e:08:c9:79: 59:59:76:99:4a:77:e0:67:e5:69:6b:8d:47:19:e8: db:96:9a:6c:5d:f5:82:89:46:82:cd:37:d2:87:97: a3:e5:5a:14:e6:6d:8f:b4:ba:d7:fd:78:4f:53:46: 43:c8:b2:0b:0e:5c:35:24:16:0e:ba:eb:98:2b:50: 65:52:f2:57:1f:4c:82:ca:51:c5:d2:11:db:ba:11: 8c:a8:2c:bb:12:fe:3f:9e:ca:94:36:2d:3c:0e:9a: c2:b6:ce:f6:11:71:99:5d:2c:89:1d:c9:02:d1:16: 9e:7d:8d:db:c8:37:33:40:a2:4e:ac:32:7a:ef:ae: 3a:91:e0:41:7b:34:7a:e4:73:9e:a5:0b:36:ce:08: 13:1d:87:93:6b:26:c7:03:69:70:be:5f:07:96:cd: c3:b9:08:00:cd:8c:1f:95:a7:df:d7:66:d9:10:d6: 4f:8d:c8:a6:e2:04:43:76:44:e0:b1:da:71:9b:af: 28:c5:22:87:e9:df:c1:d8:e5:37:cd:e9:4c:9a:ee: 49:d6:72:9c:cf:71:e2:04:11:85:9d:98:3c:e1:1d: ea:0a:89:d0:8e:b5:e1:9c:1b:15:b7:f8:36:fa:62: ab:22:89:72:aa:73:d8:82:55:11:d5:63:91:f3:1d: 34:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9F:D8:72:FB:A5:CA:A1:6A:4F:0A:A6:12:47:F7:2B:7F:3A:59:EB X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c3:af:13:c0:76:31:e7:b1:0f:cc:4e:ae:6f:08:fe:24:7a: 42:35:a6:79:d8:8d:62:b1:92:4a:b9:f7:46:83:17:7d:f5:2e: 60:df:48:d6:cf:6f:8b:a8:69:f1:6e:09:0f:11:2b:7e:26:f6: 00:a6:71:8a:8d:c7:22:8f:1f:71:96:79:7a:96:da:d6:e9:8c: a9:4d:87:80:3e:aa:12:5a:9a:6e:5f:32:cf:5a:31:bf:6e:80: 87:5e:7e:1b:85:48:dd:1f:18:21:0f:b4:b2:e3:04:13:8f:3b: 69:f1:08:dc:19:50:61:64:0a:fd:fe:34:58:40:b2:3b:bf:9a: 6c:04:6f:d7:93:b9:99:76:a7:3f:4b:11:48:eb:3e:01:42:69: f8:24:c7:33:6f:77:19:27:1d:7d:7d:ec:be:90:07:fa:5f:ec: a6:cc:40:d4:9f:b6:4f:85:1e:70:a5:50:ac:6b:40:3e:f6:12: 5f:63:f0:81:cb:ee:fa:8e:98:c0:28:21:41:0c:e6:25:fc:1a: e1:6d:21:fe:f6:c2:04:4d:b7:41:4d:3b:54:73:65:97:00:f5: 70:50:47:a1:8a:2c:33:30:4a:e8:69:c1:90:03:a6:df:63:98: 2e:e8:8a:60:ee:db:ab:da:70:ee:63:35:ca:3f:7b:0a:31:66: 06:25:ec:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjUwODIzMDI1ODQwWhcNMjUwODMwMDI1ODQwWjAYMRYwFAYD VQQDEw02OGE5MmU2MC0xMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUsdIMBnxa5Opn4IyXlZWXaZSnfgZ+Vpa41HGejblppsXfWCiUaCzTfSh5ej 5VoU5m2PtLrX/XhPU0ZDyLILDlw1JBYOuuuYK1BlUvJXH0yCylHF0hHbuhGMqCy7 Ev4/nsqUNi08DprCts72EXGZXSyJHckC0RaefY3byDczQKJOrDJ67646keBBezR6 5HOepQs2zggTHYeTaybHA2lwvl8Hls3DuQgAzYwflaff12bZENZPjcim4gRDdkTg sdpxm68oxSKH6d/B2OU3zelMmu5J1nKcz3HiBBGFnZg84R3qConQjrXhnBsVt/g2 +mKrIolyqnPYglUR1WOR8x00LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOf2HL7 pcqhak8KphJH9yt/OlnrMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUJCNy84NzM3Rjc2RUJFODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAx b1dYQlVMeGZZamswdTd0bmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtw68TwHYx57EPzE6ubwj+JHpCNaZ52I1isZJKufdGgxd99S5g30jW z2+LqGnxbgkPESt+JvYApnGKjccijx9xlnl6ltrW6YypTYeAPqoSWppuXzLPWjG/ boCHXn4bhUjdHxghD7Sy4wQTjztp8QjcGVBhZAr9/jRYQLI7v5psBG/Xk7mZdqc/ SxFI6z4BQmn4JMczb3cZJx19fey+kAf6X+ymzEDUn7ZPhR5wpVCsa0A+9hJfY/CB y+76jpjAKCFBDOYl/BrhbSH+9sIETbdBTTtUc2WXAPVwUEehiiwzMEroacGQA6bf Y5gu6Ipg7tur2nDuYzXKP3sKMWYGJezO -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:38 2025 by rpki-client