$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft File: 1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json) Hash identifier: 8+fJqt+IMmdQCpQcEQJbzSPn322Qrm1IXM/yWNiR9iI= Subject key identifier: C4:78:ED:C9:70:E3:BF:F1:35:46:93:CB:D1:E7:9A:CA:A5:F3:25:BA Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft Manifest number: 66 Signing time: Mon 21 Jul 2025 07:17:01 +0000 Manifest this update: Mon 21 Jul 2025 07:17:01 +0000 Manifest next update: Mon 28 Jul 2025 07:17:01 +0000 Files and hashes: 1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: KtrUpgJaNpaLP36a9voIL302iCvEKakTGk4kFD3S6+8=) 2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: PQLVpWWHthzNnD5URwix2MJ4GqKKAheIHq2d7TmXEW0=) 3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: QHLRTEx6Qgh4+lTDIbuuL3PGb+4V0jC1oeBCPhaLkPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Jul 21 07:17:01 2025 GMT Not After : Jul 28 07:17:01 2025 GMT Subject: CN=687de96d-e2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:3a:a4:35:5b:82:92:47:6a:d1:18:3e:c4: b6:06:54:9d:f0:f5:b8:4d:e6:41:94:e5:ca:9d:d5: 6d:3a:a8:bd:94:08:40:71:0b:73:14:48:ad:e2:00: 19:6c:03:82:a6:c8:12:fb:84:65:47:b6:52:c9:9d: f9:17:f5:32:37:41:5f:c8:ce:76:af:39:99:24:d6: fd:48:6a:95:99:48:ee:2a:28:05:83:7b:f7:b8:c0: 4f:15:33:d7:cf:0f:c2:0b:16:2c:79:d1:3b:8f:c7: 11:76:4f:55:dc:d6:ea:a0:b1:c8:16:75:0f:d2:fb: 26:bf:b9:8e:f2:f6:d9:3f:0e:f5:03:d2:89:15:c6: 37:60:98:2a:6d:e2:11:ed:e0:45:25:33:e9:c2:41: fd:e8:1f:db:3a:de:64:fc:ee:c2:68:05:54:57:7f: 45:da:b1:23:c3:51:13:4c:3d:1b:82:13:b5:fd:25: 9f:ca:e8:5b:98:f4:e9:f3:37:ca:00:73:c7:25:56: 70:1d:6d:eb:2a:09:64:20:34:51:4f:9e:47:23:5f: ea:cd:4e:04:40:0b:38:07:f9:e3:cb:fe:f7:e7:e2: 74:86:61:a5:96:c5:0a:f0:df:3d:07:14:29:b0:59: 50:a1:ad:2c:04:1b:eb:bc:95:e3:26:03:ce:ea:62: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:ED:C9:70:E3:BF:F1:35:46:93:CB:D1:E7:9A:CA:A5:F3:25:BA X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ea:e9:4c:ae:c3:1e:1f:dc:c5:e8:0a:0d:0b:af:b6:30:91: 2a:04:41:f9:5f:82:03:ac:7c:12:50:48:5e:c4:09:ef:6d:d7: 43:58:f9:fc:62:f1:28:6d:8b:65:ff:38:e9:ec:38:4c:e4:fa: d0:c5:2e:dc:0f:4e:64:ee:e3:4a:2f:7e:6a:4c:07:78:34:00: 65:65:73:51:77:77:a9:f3:f9:39:3a:df:c3:5c:4c:c0:e1:9e: 01:79:bd:c8:2d:14:2b:c9:69:29:85:b5:65:8c:34:1a:86:1d: f7:80:2b:16:1a:3b:37:33:88:13:34:de:05:23:a4:9a:c0:d6: 16:29:3a:a1:4a:8a:00:37:2a:55:0e:86:bd:40:4b:46:3e:e2: a6:3a:40:44:d4:c7:98:a5:c9:0e:d1:1c:59:2a:bb:82:03:9f: 0c:68:23:79:f7:12:c4:55:11:77:4d:2f:90:a9:c8:e8:1e:7b: 21:49:81:31:88:fd:98:82:a7:99:d1:ed:ab:6d:c7:74:62:f1: 79:73:d4:c5:82:1b:a4:e1:bd:61:85:84:62:4e:ef:59:d6:75: e4:63:bd:68:ec:8b:52:0e:63:8c:1b:a1:02:84:1e:fc:61:31: 9e:5d:51:a5:77:bf:6c:a6:44:10:f1:7a:0e:41:94:b7:d5:d8: 96:52:3b:da -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NUVFQTExMC8GA1UEBRMoRDYwQzMwQjFBOUY1OUM5NTlBRDQ5NjdGMkY2RDU3MkFD Qjc1Mjk5QzAeFw0yNTA3MjEwNzE3MDFaFw0yNTA3MjgwNzE3MDFaMBgxFjAUBgNV BAMTDTY4N2RlOTZkLWUyYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwVzqkNVuCkkdq0Rg+xLYGVJ3w9bhN5kGU5cqd1W06qL2UCEBxC3MUSK3iABls A4KmyBL7hGVHtlLJnfkX9TI3QV/IznavOZkk1v1IapWZSO4qKAWDe/e4wE8VM9fP D8ILFix50TuPxxF2T1Xc1uqgscgWdQ/S+ya/uY7y9tk/DvUD0okVxjdgmCpt4hHt 4EUlM+nCQf3oH9s63mT87sJoBVRXf0XasSPDURNMPRuCE7X9JZ/K6FuY9OnzN8oA c8clVnAdbesqCWQgNFFPnkcjX+rNTgRACzgH+ePL/vfn4nSGYaWWxQrw3z0HFCmw WVChrSwEG+u8leMmA87qYrPTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxHjtyXDj v/E1RpPL0eeayqXzJbowHwYDVR0jBBgwFoAU1gwwsan1nJWa1JZ/L21XKst1KZww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUVBL0UzRkNEMTQ0RDRD RjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUta dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWd3d3NhbjFuSldhMUpaX0wyMVhLc3QxS1p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1 RUVBL0UzRkNEMTQ0RDRDRjExRUY5OERGOTgyQkM0RjlBRTAyLzFnd3dzYW4xbkpX YTFKWl9MMjFYS3N0MUtady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3q6Uyuwx4f3MXoCg0Lr7YwkSoEQflfggOsfBJQSF7ECe9t10NY+fxi 8Shti2X/OOnsOEzk+tDFLtwPTmTu40ovfmpMB3g0AGVlc1F3d6nz+Tk638NcTMDh ngF5vcgtFCvJaSmFtWWMNBqGHfeAKxYaOzcziBM03gUjpJrA1hYpOqFKigA3KlUO hr1AS0Y+4qY6QETUx5ilyQ7RHFkqu4IDnwxoI3n3EsRVEXdNL5CpyOgeeyFJgTGI /ZiCp5nR7attx3Ri8Xlz1MWCG6ThvWGFhGJO71nWdeRjvWjsi1IOY4wboQKEHvxh MZ5dUaV3v2ymRBDxeg5BlLfV2JZSO9o= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:48 2025 by rpki-client