$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft File: W6jQXcmakxBGLGPF0CafXoheSJ0.mft (raw, json) Hash identifier: Bo4erH1KXYxww/2s2UCvOWVLMBYAfvnbibSTrggBjis= Subject key identifier: 5B:9D:86:2D:86:87:E9:C5:F0:C0:94:DC:50:A1:0D:56:DF:44:6F:CF Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft Manifest number: 0339 Signing time: Wed 23 Jul 2025 01:31:23 +0000 Manifest this update: Wed 23 Jul 2025 01:31:22 +0000 Manifest next update: Wed 30 Jul 2025 01:31:22 +0000 Files and hashes: 1: W6jQXcmakxBGLGPF0CafXoheSJ0.crl (hash: PtuJFnspKz2CicBKAiCfOdmoJjVvzjy+Pfc9cjZnbvw=) 2: 40C76F3ACC1611EC80603209C4F9AE02.roa (hash: funaLOdihXHnoiN/MAj0kYq33Ii2xz4Wv3dJLCj94AQ=) 3: 41789B66CC1611EC80603209C4F9AE02.roa (hash: aQPXBLkKXQRYudRraxZx4K6XPZ1KAKtrkSRU5qsrVkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Jul 23 01:31:22 2025 GMT Not After : Jul 30 01:31:22 2025 GMT Subject: CN=68803b6b-24b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:79:41:5e:a0:4e:c2:48:ef:97:8f:e9:a7: 4b:e1:1f:47:26:b9:9c:30:b0:be:d0:fc:17:3a:82: 5a:7e:78:be:79:65:53:e2:4e:ce:ec:16:4a:dc:e2: f2:1f:3d:02:f0:3d:8e:1b:ee:74:7c:76:de:2e:ca: a5:0f:d5:eb:52:ac:57:67:80:99:58:22:10:b6:51: 45:00:04:62:5e:63:53:c0:d8:3d:e8:e8:74:a2:b3: 22:5b:a5:f5:83:84:d7:54:e1:82:b4:a7:8b:2a:1a: bf:77:28:40:93:2f:f3:ed:18:36:b9:ae:ea:f2:30: f3:3a:3a:ea:83:3d:32:c3:d6:b6:3e:2f:52:24:d2: ea:5c:be:9e:af:26:d3:d1:6d:8c:c2:47:a3:6d:fb: 3b:35:6f:6e:3d:e7:20:6d:bf:66:57:60:d9:0e:04: 3a:31:bb:e2:02:e0:07:9e:61:2a:fd:27:b4:03:6a: ab:42:00:75:2b:18:d3:59:06:be:81:9d:c1:ea:0b: e7:81:68:27:9b:cd:5a:de:68:b9:06:49:19:a3:73: 8e:eb:f3:77:3f:1d:1d:44:1b:a8:45:9e:a9:f5:8b: b7:74:58:77:b2:91:c2:e3:f5:f7:27:81:16:ab:3d: bd:fd:8e:4f:87:be:e3:7b:00:df:e7:33:1c:f5:c5: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9D:86:2D:86:87:E9:C5:F0:C0:94:DC:50:A1:0D:56:DF:44:6F:CF X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3b:0b:bb:4e:a8:fd:1e:d4:1f:59:70:c9:01:14:2a:df:cb: 96:9e:da:d0:5a:b7:cb:a7:09:a8:02:8b:03:4e:c4:fd:e6:c1: 7e:45:15:82:6c:cc:1f:c1:86:ba:e9:57:d9:36:db:c2:46:ce: 60:ac:f7:e2:3d:fd:cc:98:ab:50:40:8e:34:05:2e:eb:4f:67: 69:b1:e7:f4:8f:db:5b:a4:56:ee:45:0f:b5:d9:97:ee:81:be: 8c:f1:c7:c2:fb:36:8f:7a:48:78:33:75:92:9c:6c:72:1e:39: 9a:c4:04:a5:7c:39:47:5d:ce:23:d3:55:64:e8:24:42:0d:4f: 2c:eb:5a:77:46:e2:1f:37:ac:da:ce:fc:eb:90:0a:ab:27:b7: 74:55:e0:7f:67:57:74:5c:19:89:d3:44:db:6a:18:d2:cc:00: e1:4a:f7:02:5a:8b:e2:a1:c9:8c:df:ae:f5:de:2a:fd:e1:99: 9b:95:31:3b:b9:1c:60:9f:24:b3:86:31:68:0c:b6:f0:b4:3a: c5:de:6f:56:a0:02:fc:44:2a:01:ac:af:40:c5:d5:6f:eb:be: 16:f4:d1:3f:2e:d6:8d:ff:48:29:2e:38:15:8b:fb:f5:76:86: 5a:f1:48:39:3a:08:fe:49:74:92:c8:8a:80:fc:30:66:b8:53: 2b:0d:89:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjUwNzIzMDEzMTIyWhcNMjUwNzMwMDEzMTIyWjAYMRYwFAYD VQQDEw02ODgwM2I2Yi0yNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/Z5QV6gTsJI75eP6adL4R9HJrmcMLC+0PwXOoJafni+eWVT4k7O7BZK3OLy Hz0C8D2OG+50fHbeLsqlD9XrUqxXZ4CZWCIQtlFFAARiXmNTwNg96Oh0orMiW6X1 g4TXVOGCtKeLKhq/dyhAky/z7Rg2ua7q8jDzOjrqgz0yw9a2Pi9SJNLqXL6erybT 0W2Mwkejbfs7NW9uPecgbb9mV2DZDgQ6MbviAuAHnmEq/Se0A2qrQgB1KxjTWQa+ gZ3B6gvngWgnm81a3mi5BkkZo3OO6/N3Px0dRBuoRZ6p9Yu3dFh3spHC4/X3J4EW qz29/Y5Ph77jewDf5zMc9cVwDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFudhi2G h+nF8MCU3FChDVbfRG/PMB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODlGOS9GRDgwNkJBMkNDMTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4 QkdMR1BGMENhZlhvaGVTSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdOwu7Tqj9HtQfWXDJARQq38uWntrQWrfLpwmoAosDTsT95sF+RRWC bMwfwYa66VfZNtvCRs5grPfiPf3MmKtQQI40BS7rT2dpsef0j9tbpFbuRQ+12Zfu gb6M8cfC+zaPekh4M3WSnGxyHjmaxASlfDlHXc4j01Vk6CRCDU8s61p3RuIfN6za zvzrkAqrJ7d0VeB/Z1d0XBmJ00TbahjSzADhSvcCWoviocmM36713ir94ZmblTE7 uRxgnySzhjFoDLbwtDrF3m9WoAL8RCoBrK9AxdVv674W9NE/LtaN/0gpLjgVi/v1 doZa8Ug5Ogj+SXSSyIqA/DBmuFMrDYl8 -----END CERTIFICATE-----Generated at Thu Jul 24 12:10:57 2025 by rpki-client