$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft File: 0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json) Hash identifier: 3KribePHWMmLbvZtZfKbNhS+9ISMGlsF57U0KPo0LFo= Subject key identifier: 6D:13:CC:5B:6A:CF:26:B4:33:16:45:69:43:B5:B0:11:39:87:2F:F5 Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 Certificate issuer: /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft Manifest number: 42 Signing time: Fri 05 Sep 2025 07:55:43 +0000 Manifest this update: Fri 05 Sep 2025 07:55:42 +0000 Manifest next update: Fri 12 Sep 2025 07:55:42 +0000 Files and hashes: 1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: YjEW0wp6X77LYiwFsxy6pWYHffqmM6Ioa6JjOHfrJUI=) 2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=) 3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59 Validity Not Before: Sep 5 07:55:42 2025 GMT Not After : Sep 12 07:55:42 2025 GMT Subject: CN=68ba977f-be75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:b0:d2:e7:f6:9a:ea:06:38:6a:ee:a3:be: e6:d8:af:9f:75:0a:73:77:f7:07:eb:4d:30:6c:ca: d9:ef:f7:63:d8:40:a2:34:80:fe:63:67:7e:4c:e9: ee:1d:6c:a1:90:58:7b:02:51:1d:c0:7b:21:29:2d: 3e:19:f1:e7:9e:dc:24:0f:7e:c6:be:e5:55:22:82: 2d:89:77:6e:29:58:ae:8e:10:27:6d:f5:d7:16:8f: e3:48:77:aa:da:9e:3d:23:53:c7:43:a9:67:0e:5e: f7:18:60:18:07:ce:af:20:85:b3:a9:32:85:b6:e3: bb:00:13:d1:96:51:0c:f9:a7:eb:01:ef:88:f8:d6: 2c:27:7c:4b:ba:3d:71:d2:f7:d4:c9:2f:fa:85:3d: e9:79:3c:0d:32:72:5f:7d:7f:5d:93:64:21:76:2c: 5e:c1:3a:2a:9c:bb:07:28:7e:66:85:fb:28:47:40: 8b:ed:1b:be:b9:aa:5a:83:52:c2:13:3f:ff:51:c0: 60:4e:57:fe:c7:be:b6:c9:aa:53:64:04:48:3c:fe: 07:9e:49:62:96:c4:2f:83:ac:64:e0:1b:e7:30:b1: c8:d2:a2:15:67:7a:50:18:4e:62:6d:a5:22:a0:72: 95:7f:9a:8d:ef:b2:43:8f:0c:b7:1b:f8:7f:b6:3e: e0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:13:CC:5B:6A:CF:26:B4:33:16:45:69:43:B5:B0:11:39:87:2F:F5 X509v3 Authority Key Identifier: keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:70:ba:30:24:7a:c6:47:4c:99:7e:18:c4:ed:24:c8:65: 88:3c:d2:60:c4:1f:41:5f:32:96:61:0b:9f:58:53:06:70:6a: 83:fd:7e:9e:32:37:66:23:92:e6:2c:00:ab:b1:97:ee:ec:6b: ea:5e:90:c7:e6:e6:91:a0:4d:bb:51:63:0d:51:b6:dd:02:fd: 40:e3:e8:e6:b5:d8:72:8a:03:62:c6:f5:d9:eb:f4:95:8e:85: 43:00:cb:a8:15:f5:ca:f5:5e:95:59:6f:51:df:34:c8:71:a7: 85:74:1d:be:9d:0b:aa:32:3d:69:9a:f3:48:7a:75:4a:4e:27: 2a:cd:1c:78:53:95:12:a0:ef:5a:21:1b:6a:bf:fa:80:19:0e: b4:04:40:16:42:fa:28:cd:ad:de:da:f4:41:9a:3b:cf:56:42: e1:0e:d5:ba:d8:e0:2e:cb:ae:3f:6c:bd:51:0b:64:09:b3:36: d8:55:6e:d3:03:79:a4:6e:67:79:98:59:e8:ad:6f:a1:fe:6c: 05:f8:0d:fb:74:5e:7a:3b:95:9e:24:b5:c1:0d:eb:34:68:c3: fc:22:f0:2a:fb:a1:e4:42:23:87:c3:8b:6f:ed:76:39:60:a8: 11:15:62:b0:1d:46:0d:06:3c:3b:89:fe:5e:74:ec:58:16:97: 33:8d:8e:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTJCQzExMC8GA1UEBRMoRDMwOTQwQ0M2RjBDMTAyNEI4NDBCQkI3RDNEODAxMjYz NjA2Q0E1OTAeFw0yNTA5MDUwNzU1NDJaFw0yNTA5MTIwNzU1NDJaMBgxFjAUBgNV BAMTDTY4YmE5NzdmLWJlNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrNbDS5/aa6gY4au6jvubYr591CnN39wfrTTBsytnv92PYQKI0gP5jZ35M6e4d bKGQWHsCUR3AeyEpLT4Z8eee3CQPfsa+5VUigi2Jd24pWK6OECdt9dcWj+NId6ra nj0jU8dDqWcOXvcYYBgHzq8ghbOpMoW247sAE9GWUQz5p+sB74j41iwnfEu6PXHS 99TJL/qFPel5PA0ycl99f12TZCF2LF7BOiqcuwcofmaF+yhHQIvtG765qlqDUsIT P/9RwGBOV/7HvrbJqlNkBEg8/geeSWKWxC+DrGTgG+cwscjSohVnelAYTmJtpSKg cpV/mo3vskOPDLcb+H+2PuBnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbRPMW2rP JrQzFkVpQ7WwETmHL/UwHwYDVR0jBBgwFoAU0wlAzG8MECS4QLu309gBJjYGylkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMkJDLzIxQTk1MzE0MjQ4 QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3ls ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMHdsQXpHOE1FQ1M0UUx1MzA5Z0JKallHeWxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MkJDLzIxQTk1MzE0MjQ4QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNT NFFMdTMwOWdCSmpZR3lsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE9BcLowJHrGR0yZfhjE7STIZYg80mDEH0FfMpZhC59YUwZwaoP9fp4y N2YjkuYsAKuxl+7sa+pekMfm5pGgTbtRYw1Rtt0C/UDj6Oa12HKKA2LG9dnr9JWO hUMAy6gV9cr1XpVZb1HfNMhxp4V0Hb6dC6oyPWma80h6dUpOJyrNHHhTlRKg71oh G2q/+oAZDrQEQBZC+ijNrd7a9EGaO89WQuEO1brY4C7Lrj9svVELZAmzNthVbtMD eaRuZ3mYWeitb6H+bAX4Dft0Xno7lZ4ktcEN6zRow/wi8Cr7oeRCI4fDi2/tdjlg qBEVYrAdRg0GPDuJ/l507FgWlzONjqA= -----END CERTIFICATE-----Generated at Sat Sep 6 08:15:07 2025 by rpki-client