$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: EJwmokkd3Uf1+a1pI8vtnP8duZ5ImaO1PVI9Dk6O9hg= Subject key identifier: 05:3C:DF:54:18:55:7A:2C:CE:A4:E6:23:D9:4C:F5:5D:58:8B:F7:8C Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 0148 Signing time: Sat 23 Aug 2025 04:33:55 +0000 Manifest this update: Sat 23 Aug 2025 04:33:54 +0000 Manifest next update: Sat 30 Aug 2025 04:33:54 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: f8xIepFGCEzY1WLWSK6tWuH6jdzW5gNaPCR//+Z+F3U=) 2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: bPMBzJr4bTR5Bhy4yYB9L04MYvX8u/mjmsw/KhMBj+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: Aug 23 04:33:54 2025 GMT Not After : Aug 30 04:33:54 2025 GMT Subject: CN=68a944b3-78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:ba:58:69:68:3f:89:99:3a:72:82:a8:72: 2a:a6:10:fb:5b:e3:b2:4f:bc:63:11:a7:e8:cf:a5: f3:17:49:34:dd:a5:b3:d4:32:e7:66:a4:b6:d9:b0: 57:34:d0:7a:9d:e3:c1:cf:78:b0:d6:3c:91:59:d9: 51:37:b0:10:43:cd:6b:9f:2a:c7:70:fe:7c:e1:6c: c6:28:85:59:f0:21:40:2f:ff:6b:ee:63:75:f0:6b: 81:f7:8f:14:cc:95:9e:27:4d:f2:ab:f4:53:1c:60: 1f:76:7a:c2:12:b0:2b:4a:6e:b4:2b:03:0e:7c:0d: fb:39:36:a6:1f:36:4c:e5:12:d0:7c:7f:3b:65:c4: b4:da:4e:c5:77:bc:5a:95:6a:d6:a8:78:aa:8d:9b: 57:db:06:9c:5f:1c:4b:ec:65:de:47:48:1c:d0:3f: ea:ed:c4:e9:97:51:84:cd:0a:ee:6b:07:a9:f0:0c: 41:b3:6d:ec:60:cf:2e:b0:24:a5:e2:c1:3f:7a:0f: d1:02:20:25:e3:e0:d6:a0:1f:ac:23:94:13:9d:1a: 6e:7c:b9:f4:aa:e3:3d:fd:94:30:84:56:bd:8a:5b: d0:12:6f:08:16:f6:03:6f:a8:44:a0:36:29:2f:b2: c1:8d:7a:80:c7:7a:9a:3c:10:ff:70:fe:46:c8:03: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3C:DF:54:18:55:7A:2C:CE:A4:E6:23:D9:4C:F5:5D:58:8B:F7:8C X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:f1:0e:d5:cb:4b:71:d3:6d:e2:87:5f:0d:d1:f1:6f:90:ea: 6b:8a:7f:d7:f0:32:56:fe:9d:88:38:22:3d:27:62:23:70:3f: 3a:a1:8e:07:0e:81:53:2d:8c:c3:5a:21:5f:8c:00:7a:1d:e9: 52:d3:a9:43:64:e0:18:00:f2:be:15:2c:f7:72:5d:bd:c6:b8: bb:32:88:36:05:0b:b7:7e:c5:86:a6:0d:61:d8:aa:fb:f9:0a: b1:48:6a:bb:3c:4b:70:00:c7:08:8d:11:17:ac:33:99:a6:5f: b0:fa:ca:17:83:0e:e4:16:f1:d6:8f:b2:07:02:95:53:67:3a: 4d:f5:7d:1a:55:98:4b:fb:1d:e4:95:b7:35:ea:16:30:54:ce: 23:05:b3:81:a0:a8:c1:c5:3c:bf:e7:dc:f2:70:91:2b:08:a4: f9:35:00:fb:77:e7:c2:34:d6:4a:6d:8e:af:38:55:d6:74:1f: 4b:8b:54:51:36:85:8b:e8:ca:e9:46:bb:6f:20:e6:37:e5:83: e6:9e:08:a1:6e:91:0b:ad:f1:59:c6:a9:bf:fe:f7:28:ba:81: 82:ed:33:da:65:2c:be:97:54:eb:07:72:a3:e8:f7:4e:b2:40: 8e:ee:f7:c0:eb:b5:63:d8:f1:0b:e1:61:d4:11:5e:36:73:16: cc:f2:ef:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjUwODIzMDQzMzU0WhcNMjUwODMwMDQzMzU0WjAYMRYwFAYD VQQDEw02OGE5NDRiMy03OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tu6WGloP4mZOnKCqHIqphD7W+OyT7xjEafoz6XzF0k03aWz1DLnZqS22bBX NNB6nePBz3iw1jyRWdlRN7AQQ81rnyrHcP584WzGKIVZ8CFAL/9r7mN18GuB948U zJWeJ03yq/RTHGAfdnrCErArSm60KwMOfA37OTamHzZM5RLQfH87ZcS02k7Fd7xa lWrWqHiqjZtX2wacXxxL7GXeR0gc0D/q7cTpl1GEzQruawep8AxBs23sYM8usCSl 4sE/eg/RAiAl4+DWoB+sI5QTnRpufLn0quM9/ZQwhFa9ilvQEm8IFvYDb6hEoDYp L7LBjXqAx3qaPBD/cP5GyAPmcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAU831QY VXoszqTmI9lM9V1Yi/eMMB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU8Q7Vy0tx023ih18N0fFvkOprin/X8DJW/p2IOCI9J2IjcD86oY4H DoFTLYzDWiFfjAB6HelS06lDZOAYAPK+FSz3cl29xri7Mog2BQu3fsWGpg1h2Kr7 +QqxSGq7PEtwAMcIjREXrDOZpl+w+soXgw7kFvHWj7IHApVTZzpN9X0aVZhL+x3k lbc16hYwVM4jBbOBoKjBxTy/59zycJErCKT5NQD7d+fCNNZKbY6vOFXWdB9Li1RR NoWL6MrpRrtvIOY35YPmngihbpELrfFZxqm//vcouoGC7TPaZSy+l1TrB3Kj6PdO skCO7vfA67Vj2PEL4WHUEV42cxbM8u/Z -----END CERTIFICATE-----Generated at Sat Aug 23 16:34:12 2025 by rpki-client