$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: Td1Z+0azQfzFOnf8xgAqZJ9pc9hYV7TaF+iEATYinag= Subject key identifier: 02:04:43:DD:3F:67:A3:2D:B4:9C:2E:BF:55:61:4A:38:B7:EC:6C:F2 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: A6 Signing time: Mon 21 Jul 2025 06:19:55 +0000 Manifest this update: Mon 21 Jul 2025 06:19:55 +0000 Manifest next update: Mon 28 Jul 2025 06:19:55 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: noSZ+SI0+hJgMdcgfAyS1wE1st6AYPcbCZ51iIq4gn0=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Jul 21 06:19:55 2025 GMT Not After : Jul 28 06:19:55 2025 GMT Subject: CN=687ddc0b-ece2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0e:91:ff:37:23:c4:07:e4:a8:c0:62:fe:61: 34:ef:f8:9a:0a:d2:a7:2c:a5:1c:c7:a0:dc:34:41: bc:5e:30:4c:da:ea:d7:ff:ff:5c:d7:0a:f6:16:57: 80:ee:6e:87:75:e6:43:c4:a3:6e:43:03:17:50:23: 28:4b:15:2b:1b:fe:fb:c7:e6:e7:74:65:2c:80:eb: 50:21:70:aa:88:44:12:30:52:77:3d:a8:df:a6:64: b8:ab:b8:8b:58:0e:05:68:76:04:d0:4f:65:b9:6b: 45:90:7a:0e:e9:17:da:fd:cd:a7:0c:2c:40:91:40: 0b:c2:c8:a1:4d:f3:44:15:c6:61:fa:52:02:f2:07: cf:94:28:9e:de:e7:ad:84:09:2e:37:e1:26:1f:13: f1:7a:92:cf:65:35:41:62:d3:33:4c:a6:06:ff:88: 85:07:cb:db:c8:d2:e6:40:5a:27:9b:68:24:3b:da: 93:e9:32:39:ce:62:6e:39:b0:b9:fe:34:d7:dd:4a: ed:67:27:9e:5d:70:56:4b:4f:8e:57:b0:05:4f:1d: 94:3a:c3:31:cf:d8:f4:7d:ff:83:c9:69:7c:70:cd: 8f:92:6c:e6:96:ce:d7:41:2a:9b:0c:ce:71:50:15: e6:f4:9a:90:56:33:3d:a6:14:c8:d6:e6:9e:e3:2f: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:04:43:DD:3F:67:A3:2D:B4:9C:2E:BF:55:61:4A:38:B7:EC:6C:F2 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:32:38:90:c3:d0:28:18:90:b6:ec:10:41:f1:73:78:3c:a6: 44:53:82:64:30:95:0a:2f:0c:6d:7f:74:2b:e4:16:e6:8f:05: e5:7a:2c:2f:73:1f:5b:87:5a:00:a7:36:1d:8d:68:b0:11:94: 22:39:7a:c0:cf:5d:2e:86:72:2c:5e:2e:55:0a:67:74:0e:73: 2d:92:e2:b2:6b:69:c4:04:33:c3:50:39:4f:04:42:8d:43:e3: 46:1b:50:ec:36:ac:af:d7:15:46:99:c0:1e:d8:79:09:06:50: 9a:63:1a:0b:eb:4d:ab:4f:29:0e:26:94:10:e9:99:67:4f:2b: f0:6d:8b:38:e2:61:58:3d:56:df:70:99:de:d9:2e:90:c1:a2: 48:f2:62:88:b0:2e:7b:d2:0b:0d:17:96:62:f1:52:5b:52:55: 11:c6:14:0e:c6:ca:de:9b:e6:6e:8c:99:5f:bc:d6:b2:2d:58: 75:84:a4:c8:4a:a7:67:f6:29:85:75:fe:6e:bf:05:6a:eb:39: 54:64:42:58:e2:ea:66:47:9f:cf:2e:c6:fd:c2:94:bf:bc:dd: ed:1d:b6:73:e2:9b:e1:9d:88:f4:b2:2e:ea:eb:ba:b9:63:ed: 11:23:92:a7:00:21:0a:60:05:93:7e:95:4b:b0:f0:3d:d0:6a: 9b:4b:0d:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwNzIxMDYxOTU1WhcNMjUwNzI4MDYxOTU1WjAYMRYwFAYD VQQDEw02ODdkZGMwYi1lY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvw6R/zcjxAfkqMBi/mE07/iaCtKnLKUcx6DcNEG8XjBM2urX//9c1wr2FleA 7m6HdeZDxKNuQwMXUCMoSxUrG/77x+bndGUsgOtQIXCqiEQSMFJ3PajfpmS4q7iL WA4FaHYE0E9luWtFkHoO6Rfa/c2nDCxAkUALwsihTfNEFcZh+lIC8gfPlCie3uet hAkuN+EmHxPxepLPZTVBYtMzTKYG/4iFB8vbyNLmQFonm2gkO9qT6TI5zmJuObC5 /jTX3UrtZyeeXXBWS0+OV7AFTx2UOsMxz9j0ff+DyWl8cM2Pkmzmls7XQSqbDM5x UBXm9JqQVjM9phTI1uae4y89FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIEQ90/ Z6MttJwuv1VhSji37GzyMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYMjiQw9AoGJC27BBB8XN4PKZEU4JkMJUKLwxtf3Qr5BbmjwXleiwv cx9bh1oApzYdjWiwEZQiOXrAz10uhnIsXi5VCmd0DnMtkuKya2nEBDPDUDlPBEKN Q+NGG1DsNqyv1xVGmcAe2HkJBlCaYxoL602rTykOJpQQ6ZlnTyvwbYs44mFYPVbf cJne2S6QwaJI8mKIsC570gsNF5Zi8VJbUlURxhQOxsrem+ZujJlfvNayLVh1hKTI Sqdn9imFdf5uvwVq6zlUZEJY4upmR5/PLsb9wpS/vN3tHbZz4pvhnYj0si7q67q5 Y+0RI5KnACEKYAWTfpVLsPA90GqbSw1G -----END CERTIFICATE-----Generated at Wed Jul 23 02:20:22 2025 by rpki-client