$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft File: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft (raw, json) Hash identifier: CWWIAewGrOLecvfnAQLHQt49zyYbkXcikyAEu9l9zLI= Subject key identifier: 38:1F:40:0F:9A:55:C8:BA:2F:AA:61:D3:BA:ED:70:0A:89:83:3F:EB Authority key identifier: 5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 Certificate issuer: /CN=A91A3859/serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft Manifest number: 07AF Signing time: Fri 18 Jul 2025 21:30:57 +0000 Manifest this update: Fri 18 Jul 2025 21:30:57 +0000 Manifest next update: Fri 25 Jul 2025 21:30:57 +0000 Files and hashes: 1: Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl (hash: 4SzPL3QO3NyhXPCA9EuUzo7AO8LHsbNGiED5S7YbBmQ=) 2: EEC2740A08A811EBB9370955C4F9AE02.roa (hash: 9uP3caieQ9R/E3ygi+poq9n2v4lqPTCGWeJ156owEWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3859, serialNumber=5B0EA0945119E53E9FB820D92210357441E4ACD6 Validity Not Before: Jul 18 21:30:57 2025 GMT Not After : Jul 25 21:30:57 2025 GMT Subject: CN=687abd11-0488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4c:6f:90:21:04:75:25:c7:41:d4:07:e9:39: d9:25:4f:3a:cd:bf:e2:92:c4:8c:b7:41:b3:54:18: 7b:c6:93:d7:d5:dc:04:9a:08:1a:b1:03:e4:57:92: 0a:31:a0:92:ed:57:f1:a4:10:e4:55:ef:34:b7:be: 18:f7:62:3c:ee:70:85:3f:e2:fc:5d:c7:29:75:0b: c8:c9:9c:9a:14:f0:9f:5e:7e:68:51:e1:f8:72:56: 35:76:3f:20:82:83:db:87:44:f1:79:41:23:f3:d8: 7b:be:17:01:5b:d4:76:46:00:fa:1d:2e:91:dc:0d: 06:9d:47:ad:b3:9e:d4:82:32:e0:dc:1e:1b:3c:07: 6e:60:3a:c2:05:2c:59:ca:6c:54:5c:ea:26:89:fa: 84:de:21:8d:5a:1c:a9:d1:de:a6:c5:53:c9:2e:38: 72:f6:9c:23:03:a6:7a:f8:90:1b:41:98:32:a7:d3: c9:64:8e:7c:a1:08:15:b7:e0:d5:f9:13:f0:f6:cb: 00:0f:56:ef:87:e8:63:b0:49:51:cc:d1:f8:6c:cb: bb:bd:fe:ae:df:70:b4:03:0e:21:3f:82:26:7a:3e: 0f:88:7e:78:23:c8:73:e8:a8:c5:56:91:26:6d:cf: 93:f8:dc:c2:cc:38:75:df:c5:52:58:77:49:65:21: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1F:40:0F:9A:55:C8:BA:2F:AA:61:D3:BA:ED:70:0A:89:83:3F:EB X509v3 Authority Key Identifier: keyid:5B:0E:A0:94:51:19:E5:3E:9F:B8:20:D9:22:10:35:74:41:E4:AC:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3859/EE7E0C0408A611EB87E29A39C4F9AE02/Ww6glFEZ5T6fuCDZIhA1dEHkrNY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:2d:4f:bf:0b:e4:70:6d:2f:0a:f1:9f:19:78:3a:1a:2c:64: 31:3a:42:e5:0a:30:fd:ea:c4:b4:42:28:81:29:59:d9:30:bb: 07:e2:41:90:f3:b0:3a:25:4a:b5:6c:40:f6:34:ae:ec:50:21: 73:e1:36:bf:97:79:36:c9:d4:0b:91:90:30:92:db:40:ae:83: 66:a7:90:9a:0d:7b:c7:99:90:41:58:39:6c:79:bd:02:11:62: 04:a3:58:3f:4f:64:26:7d:b8:31:7a:4c:11:d9:d0:bb:dd:1c: 48:59:a2:f2:44:34:77:c3:13:86:8a:62:63:9d:38:94:32:46: 57:2f:1f:70:8d:21:eb:32:78:0e:c3:9e:3d:0b:ea:13:06:ef: 79:69:a4:b6:67:12:65:63:5e:b1:15:b5:a3:5b:84:9f:5b:fd: d1:3c:1b:bf:8e:e7:e2:6c:0a:92:41:2a:39:92:6d:e8:14:69: fb:74:7b:6c:32:2b:ff:39:1b:f1:68:c8:c8:4c:32:7b:1b:e0: a3:46:d7:32:51:a4:65:c5:8c:41:23:f4:b3:68:48:cb:a3:b9: d6:9a:7a:fc:c7:54:6d:c8:0b:c4:d1:17:71:87:4c:66:29:20: c0:8b:a0:ce:a4:be:50:af:c0:d2:f0:83:53:3b:de:74:8b:b6: 9f:c5:c3:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM4NTkxMTAvBgNVBAUTKDVCMEVBMDk0NTExOUU1M0U5RkI4MjBEOTIyMTAzNTc0 NDFFNEFDRDYwHhcNMjUwNzE4MjEzMDU3WhcNMjUwNzI1MjEzMDU3WjAYMRYwFAYD VQQDEw02ODdhYmQxMS0wNDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkxvkCEEdSXHQdQH6TnZJU86zb/iksSMt0GzVBh7xpPX1dwEmggasQPkV5IK MaCS7VfxpBDkVe80t74Y92I87nCFP+L8XccpdQvIyZyaFPCfXn5oUeH4clY1dj8g goPbh0TxeUEj89h7vhcBW9R2RgD6HS6R3A0GnUets57UgjLg3B4bPAduYDrCBSxZ ymxUXOomifqE3iGNWhyp0d6mxVPJLjhy9pwjA6Z6+JAbQZgyp9PJZI58oQgVt+DV +RPw9ssAD1bvh+hjsElRzNH4bMu7vf6u33C0Aw4hP4Imej4PiH54I8hz6KjFVpEm bc+T+NzCzDh138VSWHdJZSFYwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgfQA+a Vci6L6ph07rtcAqJgz/rMB8GA1UdIwQYMBaAFFsOoJRRGeU+n7gg2SIQNXRB5KzW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzg1OS9FRTdFMEMwNDA4 QTYxMUVCODdFMjlBMzlDNEY5QUUwMi9XdzZnbEZFWjVUNmZ1Q0RaSWhBMWRFSGty TlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d3NmdsRkVaNVQ2ZnVDRFpJaEExZEVIa3JOWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzg1OS9FRTdFMEMwNDA4QTYxMUVCODdFMjlBMzlDNEY5QUUwMi9XdzZnbEZFWjVU NmZ1Q0RaSWhBMWRFSGtyTlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAULU+/C+RwbS8K8Z8ZeDoaLGQxOkLlCjD96sS0QiiBKVnZMLsH4kGQ 87A6JUq1bED2NK7sUCFz4Ta/l3k2ydQLkZAwkttAroNmp5CaDXvHmZBBWDlseb0C EWIEo1g/T2QmfbgxekwR2dC73RxIWaLyRDR3wxOGimJjnTiUMkZXLx9wjSHrMngO w549C+oTBu95aaS2ZxJlY16xFbWjW4SfW/3RPBu/jufibAqSQSo5km3oFGn7dHts Miv/ORvxaMjITDJ7G+CjRtcyUaRlxYxBI/SzaEjLo7nWmnr8x1RtyAvE0Rdxh0xm KSDAi6DOpL5Qr8DS8INTO950i7afxcMa -----END CERTIFICATE-----Generated at Sun Jul 20 02:55:32 2025 by rpki-client