$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json) Hash identifier: noqCPsHQBZ+Tl6LhJashpXute346XrCuDSyi3I9KSMg= Subject key identifier: EF:C6:CC:AB:CD:4A:42:F4:89:5C:F4:07:72:E1:31:4B:E6:5A:5C:CE Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft Manifest number: 0C80 Signing time: Mon 08 Sep 2025 18:22:05 +0000 Manifest this update: Mon 08 Sep 2025 18:22:05 +0000 Manifest next update: Mon 15 Sep 2025 18:22:05 +0000 Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: pyumLd1B7HHIOvLERyB9hkwceg6DIzpVmeaD8jpdV8I=) 2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: TFFXR7HvdoBBfkYQcKZFG8C4IZWcW3CzAFgZ6vyFYeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Sep 8 18:22:05 2025 GMT Not After : Sep 15 18:22:05 2025 GMT Subject: CN=68bf1ecd-d2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:61:42:d6:3f:46:f6:39:41:70:78:c3:47: 28:90:f9:17:54:55:c4:c5:3b:b6:74:83:35:4e:41: d5:79:1a:ef:4f:0a:80:1d:fe:cf:eb:9b:2d:d5:93: 9c:a8:dd:24:fb:60:0a:6e:c5:05:fd:a7:f5:07:e6: 4e:31:7c:76:74:7e:86:da:34:ca:f5:c7:77:01:82: 3b:b9:cd:68:68:f2:38:c5:d8:ed:5a:06:46:bf:c6: cd:69:0b:d0:bd:7e:02:8b:f8:f4:10:52:a9:44:91: f4:2d:6f:06:21:80:7e:e6:c2:eb:75:73:dc:80:f3: d5:9e:9e:72:a0:f2:a8:ca:c7:13:64:fb:11:c8:97: 36:9e:e1:f5:5b:88:bc:d4:0e:ac:c5:1f:6f:51:6d: 80:bb:aa:3f:11:56:a5:0a:67:4c:30:53:02:36:20: a0:ff:ae:cb:17:fa:1b:5a:f3:2b:a8:0a:a3:62:53: a1:1c:6f:21:55:aa:9f:fc:60:0e:a7:c6:28:39:fd: 4d:58:87:30:e2:c5:c5:3f:ea:c9:3a:d9:f1:b1:8e: 51:8e:1b:67:4d:9b:67:16:5c:03:c3:35:ad:6a:c2: 1e:f2:e6:67:38:38:cc:fc:dd:4e:cc:5b:71:d2:49: 7d:05:57:28:8d:8a:5c:27:66:6f:b5:49:40:68:a4: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C6:CC:AB:CD:4A:42:F4:89:5C:F4:07:72:E1:31:4B:E6:5A:5C:CE X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:28:56:39:91:9f:29:49:f9:dd:5f:27:57:cb:0b:65:8b:f1: d2:07:7b:e0:35:d1:02:6e:59:31:2a:59:f1:91:25:d2:c0:01: 0e:ed:e7:b3:e3:46:e2:5f:f3:e2:cd:86:8b:ae:ab:6b:0e:85: 64:61:c3:7d:3b:15:da:e4:26:8b:ca:ab:58:f2:97:b3:e2:90: 0a:4d:6a:0f:97:3a:fb:29:ec:c2:a9:d3:74:6c:9c:fb:cd:94: 71:ce:40:23:16:02:7c:1e:99:cd:f0:57:ee:75:43:f8:4c:71: dd:45:89:de:9a:8b:b9:28:66:9b:11:35:bc:5e:77:48:27:1f: e1:cc:20:54:0b:db:c4:3a:ce:84:3c:e3:ce:13:3f:bd:cb:9a: dd:25:e2:81:f0:ad:16:51:92:4d:79:2a:ae:c7:c2:77:25:96: 0d:13:bd:18:d4:87:27:10:7c:8f:e8:a5:cf:2e:2c:22:60:cb: 5b:79:10:eb:7c:80:49:38:90:a0:e3:2e:0b:59:bb:99:ec:84: ba:78:f2:18:25:c7:d5:80:87:73:43:16:6b:fb:58:60:ac:c8: c6:1c:4f:18:40:72:56:1e:a4:03:58:ee:45:11:d6:72:ac:1c: c9:ba:fc:a9:3c:f4:83:78:22:a7:84:0e:c0:41:d1:30:a5:49: 33:54:03:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjUwOTA4MTgyMjA1WhcNMjUwOTE1MTgyMjA1WjAYMRYwFAYD VQQDEw02OGJmMWVjZC1kMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0xhQtY/RvY5QXB4w0cokPkXVFXExTu2dIM1TkHVeRrvTwqAHf7P65st1ZOc qN0k+2AKbsUF/af1B+ZOMXx2dH6G2jTK9cd3AYI7uc1oaPI4xdjtWgZGv8bNaQvQ vX4Ci/j0EFKpRJH0LW8GIYB+5sLrdXPcgPPVnp5yoPKoyscTZPsRyJc2nuH1W4i8 1A6sxR9vUW2Au6o/EValCmdMMFMCNiCg/67LF/obWvMrqAqjYlOhHG8hVaqf/GAO p8YoOf1NWIcw4sXFP+rJOtnxsY5RjhtnTZtnFlwDwzWtasIe8uZnODjM/N1OzFtx 0kl9BVcojYpcJ2ZvtUlAaKRLQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/GzKvN SkL0iVz0B3LhMUvmWlzOMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdCQS82RTc0OTUxMDA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNv c0I2N29HSUIwRUZRNkdUUVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiKFY5kZ8pSfndXydXywtli/HSB3vgNdECblkxKlnxkSXSwAEO7eez 40biX/PizYaLrqtrDoVkYcN9OxXa5CaLyqtY8pez4pAKTWoPlzr7KezCqdN0bJz7 zZRxzkAjFgJ8HpnN8FfudUP4THHdRYnemou5KGabETW8XndIJx/hzCBUC9vEOs6E POPOEz+9y5rdJeKB8K0WUZJNeSqux8J3JZYNE70Y1IcnEHyP6KXPLiwiYMtbeRDr fIBJOJCg4y4LWbuZ7IS6ePIYJcfVgIdzQxZr+1hgrMjGHE8YQHJWHqQDWO5FEdZy rBzJuvypPPSDeCKnhA7AQdEwpUkzVANl -----END CERTIFICATE-----Generated at Tue Sep 9 13:34:59 2025 by rpki-client