$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: 7pfSDsdVktugfxPt17Jh8lBiXB141z7pSedrPANXwa4= Subject key identifier: 5C:8B:C7:1B:85:F7:2B:22:2E:C1:3E:F1:C2:56:AB:14:65:D1:77:EB Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 34BD Signing time: Fri 18 Jul 2025 15:15:39 +0000 Manifest this update: Fri 18 Jul 2025 15:15:39 +0000 Manifest next update: Fri 25 Jul 2025 15:15:39 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: Ma6FD2c2ZuYczR4zH9RxxfLxYVl7Hxjufh8hvwv1fBI=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Jul 18 15:15:39 2025 GMT Not After : Jul 25 15:15:39 2025 GMT Subject: CN=687a651b-1bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:fa:86:9f:87:45:c6:95:19:f1:37:de:a7: b8:47:7f:93:17:59:c7:a5:77:83:0a:99:97:ac:c0: 5a:d0:43:5e:8d:85:3b:ba:be:c1:1e:ab:86:d8:19: 3a:c0:f1:ab:22:24:8b:e8:4a:9b:d3:8e:a3:0b:5f: 95:8d:57:83:e9:ca:24:27:f1:fb:40:db:ba:e6:c9: fe:01:b3:52:02:ea:21:ba:66:6e:fe:f8:a5:6a:67: 4a:ca:29:61:89:14:18:7d:75:2d:83:16:05:06:8b: 77:31:80:63:f0:b5:05:a9:a4:27:5d:f5:b0:16:62: f4:01:54:d7:e8:56:25:ed:89:7c:e4:2c:d7:0b:d0: 29:48:0a:0e:bf:03:d1:5f:8e:38:40:b8:e9:09:c7: c1:47:3d:fc:c6:51:55:c8:5b:ec:d9:09:2c:db:bd: a9:f6:b4:b5:0e:44:3a:1f:e9:77:87:83:29:2d:72: 51:bd:bf:ba:7d:d3:42:71:19:91:b4:69:ba:0e:63: 72:ca:ca:74:98:8c:e2:cc:08:f8:86:82:1c:c3:3a: 89:7d:ed:cd:4b:ca:ea:bc:de:5e:2b:16:5f:ea:9f: d0:13:1a:ee:e6:eb:72:f4:c7:51:63:6b:01:b1:b3: 23:ef:2f:99:0f:26:46:77:49:fc:eb:47:78:c5:2f: fa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8B:C7:1B:85:F7:2B:22:2E:C1:3E:F1:C2:56:AB:14:65:D1:77:EB X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:2b:ed:b0:8a:5f:b7:53:74:55:70:b6:db:83:72:3d:82:eb: 2a:31:80:33:ab:14:2f:16:bb:67:0c:19:24:a3:f3:fa:fa:ca: 35:82:26:df:90:90:c6:4f:f6:43:8e:58:16:1b:00:2d:ac:11: f1:c8:30:85:66:04:93:b5:90:66:6b:16:3e:c5:04:d7:e9:a9: 03:46:bf:8f:0d:b0:55:80:f4:8d:11:3c:f0:54:25:48:e7:69: 32:79:c5:00:86:7c:6e:30:bd:ae:93:07:d7:61:56:2d:8e:4c: 0d:25:c5:36:44:13:30:99:d2:76:14:d4:d8:01:d8:49:f1:4a: f0:b3:e8:de:28:20:04:9e:20:36:5f:53:20:ff:ea:50:d2:b6: 1b:08:99:19:7e:63:17:ea:51:08:3d:39:4e:b3:67:3e:a8:24: 41:3d:04:d3:ac:89:96:f6:6d:65:4b:5a:52:99:bd:f1:14:22: ce:1e:24:6b:55:57:1c:1a:b6:8d:77:c4:7d:b0:60:38:a6:a4: a8:38:f8:b2:1a:3b:88:ed:7b:10:59:54:61:21:ef:49:88:e7: 97:0e:1e:34:7a:94:84:26:6f:63:24:20:3b:80:c8:e3:d3:b5: 90:f3:bb:70:b4:83:12:8a:1b:4a:59:16:f7:f4:45:66:bc:39: 50:52:ad:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwNzE4MTUxNTM5WhcNMjUwNzI1MTUxNTM5WjAYMRYwFAYD VQQDEw02ODdhNjUxYi0xYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hz6hp+HRcaVGfE33qe4R3+TF1nHpXeDCpmXrMBa0ENejYU7ur7BHquG2Bk6 wPGrIiSL6Eqb046jC1+VjVeD6cokJ/H7QNu65sn+AbNSAuohumZu/vilamdKyilh iRQYfXUtgxYFBot3MYBj8LUFqaQnXfWwFmL0AVTX6FYl7Yl85CzXC9ApSAoOvwPR X444QLjpCcfBRz38xlFVyFvs2Qks272p9rS1DkQ6H+l3h4MpLXJRvb+6fdNCcRmR tGm6DmNyysp0mIzizAj4hoIcwzqJfe3NS8rqvN5eKxZf6p/QExru5uty9MdRY2sB sbMj7y+ZDyZGd0n860d4xS/6qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyLxxuF 9ysiLsE+8cJWqxRl0XfrMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARK+2wil+3U3RVcLbbg3I9gusqMYAzqxQvFrtnDBkko/P6+so1gibf kJDGT/ZDjlgWGwAtrBHxyDCFZgSTtZBmaxY+xQTX6akDRr+PDbBVgPSNETzwVCVI 52kyecUAhnxuML2ukwfXYVYtjkwNJcU2RBMwmdJ2FNTYAdhJ8Urws+jeKCAEniA2 X1Mg/+pQ0rYbCJkZfmMX6lEIPTlOs2c+qCRBPQTTrImW9m1lS1pSmb3xFCLOHiRr VVccGraNd8R9sGA4pqSoOPiyGjuI7XsQWVRhIe9JiOeXDh40epSEJm9jJCA7gMjj 07WQ87twtIMSihtKWRb39EVmvDlQUq1s -----END CERTIFICATE-----Generated at Sun Jul 20 10:36:22 2025 by rpki-client