$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft File: _wY0PKmaZBAAxxHzLWn1nBms8EM.mft (raw, json) Hash identifier: BGqRy6upYD+QrGFWFxmwRHnjXYc5XVzxnMt/7Ghj5Dw= Subject key identifier: 00:B6:CC:36:0F:07:F9:EF:B2:DE:B5:3D:F2:E9:8E:C4:AF:AB:38:A9 Authority key identifier: FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 Certificate issuer: /CN=A91AF2D9/serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft Manifest number: A7 Signing time: Wed 23 Jul 2025 06:29:18 +0000 Manifest this update: Wed 23 Jul 2025 06:29:18 +0000 Manifest next update: Wed 30 Jul 2025 06:29:18 +0000 Files and hashes: 1: _wY0PKmaZBAAxxHzLWn1nBms8EM.crl (hash: 9r7HrpPLkPvvAwL8bWyEe9bbjVcn6YwXjV28GeUN0hI=) 2: 971BD34C68FB11EFB3A4CD61C4F9AE02.roa (hash: hiMuJQBsL6nU5RUTNfHNIpezqly7KDVywZa1LBbCC64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 06:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9, serialNumber=FF06343CA99A641000C711F32D69F59C19ACF043 Validity Not Before: Jul 23 06:29:18 2025 GMT Not After : Jul 30 06:29:18 2025 GMT Subject: CN=6880813e-074b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:ee:fb:15:f7:43:bd:28:d9:3a:f7:62:4c: 05:d2:f9:98:0b:17:16:66:71:92:d6:c6:17:ac:2d: 9a:b7:41:79:6c:6e:16:62:5a:26:b3:33:66:dd:5e: f0:0f:2e:ee:77:ae:02:c4:0c:35:1e:60:fa:0d:b7: 49:99:8e:fc:0f:70:d0:79:f1:00:be:01:eb:51:5f: 0b:97:43:32:77:ae:1f:81:34:76:36:1d:4b:fe:cf: fd:31:43:94:bc:c2:93:25:7f:db:e3:35:94:da:5d: 65:31:ea:f1:32:75:2f:f8:1c:15:b5:e6:28:6e:bf: 26:56:80:bf:41:95:cf:1f:ac:18:ec:69:ab:ff:4b: ae:df:d5:03:e5:ab:35:bc:c0:61:31:a1:65:c2:03: 9e:b6:e9:91:8b:6f:16:e3:95:2c:e2:bd:45:92:73: 15:c3:d2:12:55:c6:a2:b7:b1:58:36:2f:92:f3:e8: 16:57:99:fe:00:ef:cf:2e:a6:b9:83:a5:1d:74:e1: 1d:d9:9b:08:6e:e9:46:88:3d:5c:ba:53:64:0d:dc: e9:8c:fa:29:1f:91:06:a8:7c:58:cc:b7:7c:cc:a7: 90:7d:b8:99:31:b1:43:c0:cb:5d:98:94:07:19:2f: 02:b9:9a:00:b6:38:da:dc:f4:3f:61:09:e8:fa:cf: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B6:CC:36:0F:07:F9:EF:B2:DE:B5:3D:F2:E9:8E:C4:AF:AB:38:A9 X509v3 Authority Key Identifier: keyid:FF:06:34:3C:A9:9A:64:10:00:C7:11:F3:2D:69:F5:9C:19:AC:F0:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wY0PKmaZBAAxxHzLWn1nBms8EM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/B31201E067AA11EF8F498A27C4F9AE02/_wY0PKmaZBAAxxHzLWn1nBms8EM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d8:80:e9:79:44:fa:a9:1e:ea:97:a4:7d:4c:d4:af:00:55: 42:6f:01:a2:0c:74:d9:ad:ec:4f:4a:af:03:03:55:01:ce:f5: ac:cc:8e:79:78:0b:99:8f:0f:e8:11:b9:df:ab:f9:02:8a:83: 01:26:86:ae:0d:fc:ab:45:63:23:87:77:4f:17:04:8a:c6:cb: bd:e1:7e:e4:d5:b7:4a:eb:5e:04:91:d5:f0:09:7d:c9:3c:11: e5:9d:69:56:91:d6:4b:20:05:97:59:f4:be:f1:21:d0:8b:c0: b7:a6:08:14:8a:dc:40:25:d8:08:55:c5:84:10:5e:fe:bb:84: 0a:93:b9:5d:bb:11:ba:03:29:82:5a:1e:00:24:d0:1b:5f:1c: bc:a4:07:f0:4e:60:01:31:9c:13:b9:4f:86:6b:4a:ee:c5:72: d6:47:4f:f7:76:ba:84:7b:fa:8f:d8:ab:9c:aa:fe:72:27:b3: 77:0f:aa:71:66:5e:71:6f:78:ff:2f:34:f6:7a:d0:7f:23:e0: d4:48:53:33:38:c1:4e:dc:58:9f:b1:e7:4c:79:a8:dc:73:0d: 64:06:fc:a4:7b:d8:5b:a6:32:6b:9c:bf:da:46:bf:9e:65:8c: a9:11:65:c3:46:bd:26:8a:b8:fe:e2:cf:24:37:ac:f6:e3:ad: 53:5e:32:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyRDkxMTAvBgNVBAUTKEZGMDYzNDNDQTk5QTY0MTAwMEM3MTFGMzJENjlGNTlD MTlBQ0YwNDMwHhcNMjUwNzIzMDYyOTE4WhcNMjUwNzMwMDYyOTE4WjAYMRYwFAYD VQQDEw02ODgwODEzZS0wNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Pfu+xX3Q70o2Tr3YkwF0vmYCxcWZnGS1sYXrC2at0F5bG4WYlomszNm3V7w Dy7ud64CxAw1HmD6DbdJmY78D3DQefEAvgHrUV8Ll0Myd64fgTR2Nh1L/s/9MUOU vMKTJX/b4zWU2l1lMerxMnUv+BwVteYobr8mVoC/QZXPH6wY7Gmr/0uu39UD5as1 vMBhMaFlwgOetumRi28W45Us4r1FknMVw9ISVcait7FYNi+S8+gWV5n+AO/PLqa5 g6UddOEd2ZsIbulGiD1culNkDdzpjPopH5EGqHxYzLd8zKeQfbiZMbFDwMtdmJQH GS8CuZoAtjja3PQ/YQno+s9WNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAC2zDYP B/nvst61PfLpjsSvqzipMB8GA1UdIwQYMBaAFP8GNDypmmQQAMcR8y1p9ZwZrPBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJEOS9CMzEyMDFFMDY3 QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpCQUF4eEh6TFduMW5CbXM4 RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193WTBQS21hWkJBQXh4SHpMV24xbkJtczhFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9CMzEyMDFFMDY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi9fd1kwUEttYVpC QUF4eEh6TFduMW5CbXM4RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw2IDpeUT6qR7ql6R9TNSvAFVCbwGiDHTZrexPSq8DA1UBzvWszI55 eAuZjw/oEbnfq/kCioMBJoauDfyrRWMjh3dPFwSKxsu94X7k1bdK614EkdXwCX3J PBHlnWlWkdZLIAWXWfS+8SHQi8C3pggUitxAJdgIVcWEEF7+u4QKk7lduxG6AymC Wh4AJNAbXxy8pAfwTmABMZwTuU+Ga0ruxXLWR0/3drqEe/qP2Kucqv5yJ7N3D6px Zl5xb3j/LzT2etB/I+DUSFMzOMFO3FifsedMeajccw1kBvyke9hbpjJrnL/aRr+e ZYypEWXDRr0mirj+4s8kN6z2461TXjI4 -----END CERTIFICATE-----Generated at Fri Jul 25 05:18:53 2025 by rpki-client