$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft File: buWafawHoiW5GzRmrRoHRkk9jiQ.mft (raw, json) Hash identifier: lpelyu6zPrSnd0H8E9PfZOnrI31PEoikeBmxYk/dTMM= Subject key identifier: 93:23:C0:2E:3F:01:B4:56:42:77:A2:1F:91:5D:F4:2C:FD:CA:C1:E1 Authority key identifier: 6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 Certificate issuer: /CN=A91E9D5D/serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Certificate serial: 05E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft Manifest number: 05DB Signing time: Thu 24 Jul 2025 23:20:19 +0000 Manifest this update: Thu 24 Jul 2025 23:20:18 +0000 Manifest next update: Thu 31 Jul 2025 23:20:18 +0000 Files and hashes: 1: buWafawHoiW5GzRmrRoHRkk9jiQ.crl (hash: XcOektuRWn2tVnNw7RKeXggVSfOBJyh2btuqxRvic2o=) 2: 581F68DAD48A11EEB7A00557C4F9AE02.roa (hash: vvGapGaGNGJH4S/SUbpLb9IjES+dem4UiH0RpBmA3po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1505 (0x5e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D5D, serialNumber=6EE59A7DAC07A225B91B3466AD1A0746493D8E24 Validity Not Before: Jul 24 23:20:18 2025 GMT Not After : Jul 31 23:20:18 2025 GMT Subject: CN=6882bfb2-1f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:8b:cf:5c:8e:b0:36:b1:72:c9:d7:34:b6: 5b:ec:12:a0:40:36:bc:23:68:d5:18:2f:04:04:f8: db:fc:d1:e7:29:d3:27:5c:6d:79:b6:48:22:85:a8: 04:3d:a1:81:92:c9:a5:59:ff:81:b4:f8:9a:a6:41: 57:c2:f9:a1:b8:5a:e2:10:92:92:d2:8c:4d:39:59: f0:64:77:e9:e6:54:1d:ba:f2:e2:7b:0c:47:dd:9e: 7a:04:ee:c3:30:fd:41:b0:df:f5:f6:8d:ac:d4:e7: 92:31:5a:2a:de:fe:de:73:6b:cb:73:4a:e4:3e:4e: 8a:b8:f5:38:06:2d:b6:a9:6a:c9:82:2a:dc:6f:0f: 1d:dc:63:1f:9d:cf:04:48:9c:e0:27:31:a6:0f:1a: 06:3a:68:3e:66:39:e0:ab:6d:fd:d2:0e:20:b9:e6: f0:44:99:dd:1b:ed:81:82:83:fc:f5:2a:cc:94:85: d3:69:96:1b:32:1f:42:08:60:dd:36:67:d5:50:aa: 44:b8:d9:2f:ee:94:5a:f7:fd:40:bb:e7:55:8d:ed: 83:52:71:7c:69:f0:9f:d9:ee:dd:9e:b5:bb:a0:ae: f7:67:fa:27:1f:56:20:e0:c8:42:8e:62:6a:85:fd: 2d:40:fb:94:9b:4b:16:5f:62:f9:79:f5:19:fb:b5: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:23:C0:2E:3F:01:B4:56:42:77:A2:1F:91:5D:F4:2C:FD:CA:C1:E1 X509v3 Authority Key Identifier: keyid:6E:E5:9A:7D:AC:07:A2:25:B9:1B:34:66:AD:1A:07:46:49:3D:8E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/buWafawHoiW5GzRmrRoHRkk9jiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D5D/4001A16CC45E11EBB29B4C4CC4F9AE02/buWafawHoiW5GzRmrRoHRkk9jiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9e:84:67:d1:54:46:6b:e6:9f:03:d9:77:34:f3:8b:cf:08: fb:ed:df:80:3f:f9:22:f6:84:a0:38:13:4f:da:3c:fa:17:f7: c5:a1:06:12:55:88:d0:a9:bc:2b:5d:5e:0e:99:0c:de:fe:05: a0:b6:0c:b4:28:1f:a4:9f:f1:0e:26:d3:e4:db:9b:ee:d5:74: 15:da:17:75:a6:03:f0:6d:2a:06:49:f8:96:52:ca:77:ff:bc: 8e:4b:a9:6d:5a:24:69:7a:41:1f:6b:6e:f0:32:17:2a:39:98: 51:f2:91:7a:87:f7:8a:1b:9a:78:7b:6d:65:f8:49:e0:6d:5f: 5c:b0:32:72:38:6d:c1:be:a5:b5:d5:19:3c:53:ea:ba:67:e8: 10:2d:6f:b6:d5:2d:20:06:eb:30:2c:93:40:fd:42:c9:63:5e: 3a:13:dd:be:5a:32:c6:f0:b0:62:47:01:e8:2b:6e:5b:1b:65: 82:db:94:20:a3:27:cb:90:e0:da:b6:d7:40:62:48:21:f7:d5: 27:be:b9:64:f7:a9:e4:8e:10:59:ac:49:37:20:71:b4:35:75: f7:0c:ba:1e:04:0d:8f:d1:17:e3:e2:b2:ba:4a:e6:27:4f:5e: 44:c4:34:ff:ea:65:ad:c4:ca:7c:c9:50:ac:9a:86:45:21:f9: 50:a8:bf:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlENUQxMTAvBgNVBAUTKDZFRTU5QTdEQUMwN0EyMjVCOTFCMzQ2NkFEMUEwNzQ2 NDkzRDhFMjQwHhcNMjUwNzI0MjMyMDE4WhcNMjUwNzMxMjMyMDE4WjAYMRYwFAYD VQQDEw02ODgyYmZiMi0xZjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZmLz1yOsDaxcsnXNLZb7BKgQDa8I2jVGC8EBPjb/NHnKdMnXG15tkgihagE PaGBksmlWf+BtPiapkFXwvmhuFriEJKS0oxNOVnwZHfp5lQduvLiewxH3Z56BO7D MP1BsN/19o2s1OeSMVoq3v7ec2vLc0rkPk6KuPU4Bi22qWrJgircbw8d3GMfnc8E SJzgJzGmDxoGOmg+Zjngq2390g4guebwRJndG+2BgoP89SrMlIXTaZYbMh9CCGDd NmfVUKpEuNkv7pRa9/1Au+dVje2DUnF8afCf2e7dnrW7oK73Z/onH1Yg4MhCjmJq hf0tQPuUm0sWX2L5efUZ+7WknwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMjwC4/ AbRWQneiH5Fd9Cz9ysHhMB8GA1UdIwQYMBaAFG7lmn2sB6IluRs0Zq0aB0ZJPY4k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQ1RC80MDAxQTE2Q0M0 NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9pVzVHelJtclJvSFJrazlq aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1V2FmYXdIb2lXNUd6Um1yUm9IUmtrOWppUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQ1RC80MDAxQTE2Q0M0NUUxMUVCQjI5QjRDNENDNEY5QUUwMi9idVdhZmF3SG9p VzVHelJtclJvSFJrazlqaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwnoRn0VRGa+afA9l3NPOLzwj77d+AP/ki9oSgOBNP2jz6F/fFoQYS VYjQqbwrXV4OmQze/gWgtgy0KB+kn/EOJtPk25vu1XQV2hd1pgPwbSoGSfiWUsp3 /7yOS6ltWiRpekEfa27wMhcqOZhR8pF6h/eKG5p4e21l+EngbV9csDJyOG3BvqW1 1Rk8U+q6Z+gQLW+21S0gBuswLJNA/ULJY146E92+WjLG8LBiRwHoK25bG2WC25Qg oyfLkODattdAYkgh99Unvrlk96nkjhBZrEk3IHG0NXX3DLoeBA2P0Rfj4rK6SuYn T15ExDT/6mWtxMp8yVCsmoZFIflQqL/E -----END CERTIFICATE-----Generated at Fri Jul 25 04:05:15 2025 by rpki-client