$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json) Hash identifier: jlcHH2veK4EZxItlwS0Sctg7hxWyCS00ihUVu8n7c/4= Subject key identifier: 07:73:C4:C9:EA:FD:07:B5:09:82:CE:4B:C1:26:5F:69:38:F5:92:CE Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Certificate serial: 06EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft Manifest number: 06E9 Signing time: Fri 18 Jul 2025 22:16:20 +0000 Manifest this update: Fri 18 Jul 2025 22:16:19 +0000 Manifest next update: Fri 25 Jul 2025 22:16:19 +0000 Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: uNcrTvpTdcQej2dkjQ9wQN4Wr8ZaXBw6Bkz8f2I5wCY=) 2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: ShBRwbTuBxj9yKQsDtx+jaY1y+xIJPIpBM97g/zTojo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:16:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1775 (0x6ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A Validity Not Before: Jul 18 22:16:19 2025 GMT Not After : Jul 25 22:16:19 2025 GMT Subject: CN=687ac7b3-2e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:fa:c0:a6:49:17:3c:52:c4:c7:b9:ea:21: b2:a7:eb:2f:5c:cc:ac:59:d3:a2:f8:42:c3:da:2e: f6:88:f4:84:d8:b1:9a:f3:fb:68:5a:aa:c2:18:86: 2c:0d:f6:6d:25:4f:a6:c4:13:96:ba:e4:11:5f:8f: e2:d1:1f:87:ed:9c:ed:29:c5:d1:6e:99:75:b3:56: d8:d2:43:2f:78:66:36:07:dc:31:13:85:a5:38:f3: 86:0f:12:ff:53:4f:8a:6b:45:5d:16:62:50:4f:f8: ed:e0:09:e4:fc:36:63:e3:2f:df:9a:1a:0b:53:3a: e3:5b:3b:1c:21:ce:7e:da:60:97:9b:5c:5a:31:7b: 7c:d7:00:6e:74:fc:61:12:ff:24:74:c9:b2:48:4b: c8:6f:b3:1e:86:5c:42:57:60:b7:bc:f5:33:eb:10: c1:c1:c3:86:4c:41:41:bb:d9:86:e9:25:1a:43:b5: 01:b0:d3:73:ff:a3:ac:b4:ed:c6:8d:d3:44:51:65: f1:4a:8a:b2:83:b0:6f:e6:16:1d:ca:32:b4:f9:97: 1b:2b:48:40:46:5e:d7:b3:06:70:c3:51:bb:7e:e0: b6:d1:07:87:ee:52:d7:54:13:eb:fe:d4:1c:59:b7: 9c:9f:f7:24:95:38:a4:db:30:7d:e6:8d:59:b2:f2: 6b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:C4:C9:EA:FD:07:B5:09:82:CE:4B:C1:26:5F:69:38:F5:92:CE X509v3 Authority Key Identifier: keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:e1:cb:84:d2:7e:ca:60:a1:29:97:3f:c2:1e:f0:d9:52:24: 2d:e0:51:5f:85:1c:ba:d9:07:01:7b:46:b5:07:9c:ac:2e:43: a9:fc:e5:29:51:ab:14:27:00:30:9d:db:ce:e9:91:94:00:f5: 91:69:76:3e:31:5f:00:a3:83:a5:f6:c8:1d:0f:52:f1:47:fa: 99:de:10:bb:d0:55:96:e4:e9:41:e7:3b:8f:b5:75:f8:0a:63: 81:1d:a4:e5:8b:74:55:f5:a8:36:6e:99:b5:8a:0a:c9:c6:6b: ad:39:82:03:9b:84:dd:41:69:15:dd:3d:73:b7:18:ce:5c:92: 9f:e3:f2:7d:ca:dc:2a:07:3b:52:87:56:14:5c:03:0c:3c:7f: 14:d5:9d:2a:89:3b:2e:02:e7:36:4e:6f:31:75:0b:76:b7:9c: 5b:f4:3d:16:f3:7a:52:29:88:65:5e:cd:5d:d7:64:3e:cc:70: 0a:12:30:2f:28:1e:44:4b:40:16:ae:ea:6e:06:f2:56:7d:9d: 7c:28:25:d1:c5:6d:a4:92:51:d3:a3:4b:d4:41:d9:48:e0:90: b9:3a:3a:44:40:03:1b:95:93:d3:3e:85:98:85:f7:93:b4:62: ca:b6:63:a5:aa:4a:64:bc:18:d8:98:d4:22:7b:e6:ee:4e:69: 15:b8:97:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG MjkyRDg2NkEwHhcNMjUwNzE4MjIxNjE5WhcNMjUwNzI1MjIxNjE5WjAYMRYwFAYD VQQDEw02ODdhYzdiMy0yZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Sj6wKZJFzxSxMe56iGyp+svXMysWdOi+ELD2i72iPSE2LGa8/toWqrCGIYs DfZtJU+mxBOWuuQRX4/i0R+H7ZztKcXRbpl1s1bY0kMveGY2B9wxE4WlOPOGDxL/ U0+Ka0VdFmJQT/jt4Ank/DZj4y/fmhoLUzrjWzscIc5+2mCXm1xaMXt81wBudPxh Ev8kdMmySEvIb7MehlxCV2C3vPUz6xDBwcOGTEFBu9mG6SUaQ7UBsNNz/6OstO3G jdNEUWXxSoqyg7Bv5hYdyjK0+ZcbK0hARl7XswZww1G7fuC20QeH7lLXVBPr/tQc Wbecn/cklTik2zB95o1ZsvJrOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdzxMnq /Qe1CYLOS8EmX2k49ZLOMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2 RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR SU1YeDkyODdQZEh5a3RobW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy4cuE0n7KYKEplz/CHvDZUiQt4FFfhRy62QcBe0a1B5ysLkOp/OUp UasUJwAwndvO6ZGUAPWRaXY+MV8Ao4Ol9sgdD1LxR/qZ3hC70FWW5OlB5zuPtXX4 CmOBHaTli3RV9ag2bpm1igrJxmutOYIDm4TdQWkV3T1ztxjOXJKf4/J9ytwqBztS h1YUXAMMPH8U1Z0qiTsuAuc2Tm8xdQt2t5xb9D0W83pSKYhlXs1d12Q+zHAKEjAv KB5ES0AWrupuBvJWfZ18KCXRxW2kklHTo0vUQdlI4JC5OjpEQAMblZPTPoWYhfeT tGLKtmOlqkpkvBjYmNQie+buTmkVuJdh -----END CERTIFICATE-----Generated at Sun Jul 20 02:37:12 2025 by rpki-client