$ rpki-client -vvf rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft File: RSWIQffwT7Odkdo-P6u1KehSj0k.mft (raw, json) Hash identifier: wa/YQfoFPQD9bg2xyIhMcmxyIW5LXTPn2nulXIhCpaE= Subject key identifier: FF:52:30:5F:70:D7:DA:4C:7F:46:24:DE:82:3E:B4:1C:A0:1B:99:FB Authority key identifier: 45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 Certificate issuer: /CN=A91317E5/serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft Manifest number: 0653 Signing time: Thu 18 Sep 2025 22:57:12 +0000 Manifest this update: Thu 18 Sep 2025 22:57:11 +0000 Manifest next update: Thu 25 Sep 2025 22:57:11 +0000 Files and hashes: 1: RSWIQffwT7Odkdo-P6u1KehSj0k.crl (hash: ogO57SbdRljv6bPESCdfBxxMyTUBwQwc+mOzpc5HzwA=) 2: 53E7583E3D0511EF99169B21C4F9AE02.roa (hash: qCXzkeKuPVL2AFCLekUycL2ac1PSk1oLXnC7v+nyDIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91317E5, serialNumber=45258841F7F04FB39D91DA3E3FABB529E8528F49 Validity Not Before: Sep 18 22:57:11 2025 GMT Not After : Sep 25 22:57:11 2025 GMT Subject: CN=68cc8e47-c234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:46:ff:41:be:6b:ca:19:15:ce:1e:7a:b3: f4:03:96:25:c1:2d:1b:17:aa:22:c7:c4:e3:09:b3: 50:1f:41:ba:c9:18:bd:38:39:c9:d4:f9:a7:60:aa: c7:70:c8:3a:af:e3:ba:99:0e:cc:9a:e9:d8:cd:e2: 1b:26:4f:76:26:87:ad:1d:d2:b2:3f:e6:10:fc:5d: 76:20:fd:98:84:03:5c:0f:3e:76:03:b6:72:df:fe: 3f:c5:7d:65:bd:9f:c9:a5:df:8c:8b:27:56:d7:09: 51:4b:b4:29:93:28:41:84:99:8f:c1:ed:23:de:d0: 51:f7:fd:50:5c:e0:4f:8d:7f:57:d4:a4:12:c6:f1: 0d:41:9b:92:e8:7c:8d:1b:82:7b:1d:7e:cb:39:7f: 56:d8:b9:e7:95:24:2c:8e:ab:29:ba:5a:67:e0:98: 32:79:19:e8:3f:8b:fd:93:12:ec:98:82:17:59:bc: 1a:50:0b:f1:04:51:d8:a2:0c:3a:3c:b6:a6:4d:65: 89:50:09:ff:41:94:67:04:84:65:e8:45:6e:a4:f9: 57:2c:5a:4e:79:98:62:70:1e:3f:56:0f:40:a3:72: df:ac:49:af:a0:c8:88:95:7a:2b:df:b2:6f:02:b8: ed:59:d6:eb:9c:93:65:d8:e6:9f:32:05:a1:60:82: 40:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:52:30:5F:70:D7:DA:4C:7F:46:24:DE:82:3E:B4:1C:A0:1B:99:FB X509v3 Authority Key Identifier: keyid:45:25:88:41:F7:F0:4F:B3:9D:91:DA:3E:3F:AB:B5:29:E8:52:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RSWIQffwT7Odkdo-P6u1KehSj0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91317E5/DB00F802A0FA11EBBC09943AC4F9AE02/RSWIQffwT7Odkdo-P6u1KehSj0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:43:5f:61:5d:55:ac:0c:e1:14:14:aa:c6:aa:75:92:c5:56: 21:f3:a6:79:db:cd:08:38:43:c3:a7:b7:1e:41:2f:bd:be:08: 34:02:c7:9f:df:aa:04:ea:b7:a5:c0:73:3a:fe:90:f1:a9:96: 96:e8:d5:f4:1d:27:47:17:ef:87:7f:b3:ea:c7:26:49:56:4c: 7b:09:70:ec:d1:7b:66:f5:96:ce:9e:10:4c:f2:fc:86:ef:cb: f4:c1:a3:eb:f5:f9:14:8e:d3:76:c0:2d:df:79:30:77:7d:b0: 29:e8:9a:cb:bf:a0:12:cf:9b:81:91:f5:ce:53:8e:44:e3:2a: a8:d5:8a:0c:82:53:7c:7f:f7:28:41:6c:e1:0b:f3:66:73:39: 50:ce:3e:39:e5:4c:15:55:a4:50:d9:00:25:da:82:74:c2:2c: 4f:64:b6:e9:e8:a9:a7:32:a9:51:ad:ca:54:18:6d:26:37:e4: 15:c9:24:3d:b1:0e:18:1c:43:ad:79:e1:b5:32:5e:c6:99:5d: d7:24:c4:4d:28:76:8e:f0:61:25:a5:a9:22:26:bc:c4:48:84: f5:7f:8e:75:5c:72:74:4f:31:33:14:2a:5b:fb:b7:e4:86:8d: 98:72:e9:09:ae:f1:83:bb:40:51:a0:d5:96:81:6c:d6:ca:7b: d8:2b:b8:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3RTUxMTAvBgNVBAUTKDQ1MjU4ODQxRjdGMDRGQjM5RDkxREEzRTNGQUJCNTI5 RTg1MjhGNDkwHhcNMjUwOTE4MjI1NzExWhcNMjUwOTI1MjI1NzExWjAYMRYwFAYD VQQDEw02OGNjOGU0Ny1jMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrdG/0G+a8oZFc4eerP0A5YlwS0bF6oix8TjCbNQH0G6yRi9ODnJ1PmnYKrH cMg6r+O6mQ7MmunYzeIbJk92JoetHdKyP+YQ/F12IP2YhANcDz52A7Zy3/4/xX1l vZ/Jpd+MiydW1wlRS7QpkyhBhJmPwe0j3tBR9/1QXOBPjX9X1KQSxvENQZuS6HyN G4J7HX7LOX9W2LnnlSQsjqspulpn4JgyeRnoP4v9kxLsmIIXWbwaUAvxBFHYogw6 PLamTWWJUAn/QZRnBIRl6EVupPlXLFpOeZhicB4/Vg9Ao3LfrEmvoMiIlXor37Jv ArjtWdbrnJNl2OafMgWhYIJABQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9SMF9w 19pMf0Yk3oI+tBygG5n7MB8GA1UdIwQYMBaAFEUliEH38E+znZHaPj+rtSnoUo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTdFNS9EQjAwRjgwMkEw RkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3T2RrZG8tUDZ1MUtlaFNq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JTV0lRZmZ3VDdPZGtkby1QNnUxS2VoU2oway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTdFNS9EQjAwRjgwMkEwRkExMUVCQkMwOTk0M0FDNEY5QUUwMi9SU1dJUWZmd1Q3 T2RrZG8tUDZ1MUtlaFNqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwQ19hXVWsDOEUFKrGqnWSxVYh86Z5280IOEPDp7ceQS+9vgg0Asef 36oE6relwHM6/pDxqZaW6NX0HSdHF++Hf7PqxyZJVkx7CXDs0Xtm9ZbOnhBM8vyG 78v0waPr9fkUjtN2wC3feTB3fbAp6JrLv6ASz5uBkfXOU45E4yqo1YoMglN8f/co QWzhC/NmczlQzj455UwVVaRQ2QAl2oJ0wixPZLbp6KmnMqlRrcpUGG0mN+QVySQ9 sQ4YHEOteeG1Ml7GmV3XJMRNKHaO8GElpakiJrzESIT1f451XHJ0TzEzFCpb+7fk ho2YcukJrvGDu0BRoNWWgWzWynvYK7jD -----END CERTIFICATE-----Generated at Fri Sep 19 02:10:30 2025 by rpki-client