$ rpki-client -vvf rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft File: W9l8Mex4xvFX13LBu1drgCSCtyg.mft (raw, json) Hash identifier: JB6Ex1CunJw8gP8rr78AynJYbyh7/C90hEdNoN93EQI= Subject key identifier: 7F:D5:B8:1C:FB:D3:87:41:96:0A:72:BC:F8:89:44:EB:EF:25:6B:03 Authority key identifier: 5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 Certificate issuer: /CN=A91764A1/serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Certificate serial: 0C7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft Manifest number: 0C74 Signing time: Wed 20 Aug 2025 18:25:11 +0000 Manifest this update: Wed 20 Aug 2025 18:25:10 +0000 Manifest next update: Wed 27 Aug 2025 18:25:10 +0000 Files and hashes: 1: W9l8Mex4xvFX13LBu1drgCSCtyg.crl (hash: AgxwWPMqNIXywBc0z7CXqUMnzL0eFNV/iXRemrYMYk8=) 2: 753703FE045C11EAB8BF0932C4F9AE02.roa (hash: iEFdnNUSTVmlnEmHIkSfOkDzcc3pJG72lpQKbTvUl98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3199 (0xc7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764A1, serialNumber=5BD97C31EC78C6F157D772C1BB576B802482B728 Validity Not Before: Aug 20 18:25:10 2025 GMT Not After : Aug 27 18:25:10 2025 GMT Subject: CN=68a61306-4162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7f:27:6f:2d:24:61:91:98:04:c3:2e:3d:27: 85:a6:5b:ac:fd:b4:cc:22:e3:34:52:d4:34:78:94: e2:9e:2d:fa:e2:56:14:e8:4b:c0:7a:f9:63:10:2c: b6:57:42:08:4b:3d:b4:6f:a8:11:c4:2c:b5:83:2b: 0a:ce:fa:0f:0e:91:cd:8c:67:05:ba:6f:69:09:79: de:5c:42:de:bc:ee:f8:19:94:5b:7f:7d:ad:2d:79: 63:d8:c8:4a:2b:36:e9:d9:bd:f5:83:26:a0:01:af: f1:ba:7f:5a:9f:85:b5:2d:1a:34:c8:f4:61:07:63: f1:b2:61:30:54:07:48:89:9d:4e:14:d4:4f:3f:eb: bf:0d:73:7c:35:3f:b4:90:e6:3e:13:91:aa:72:f6: 8b:bf:a4:cd:3d:c7:b4:0a:30:ad:b7:eb:25:51:06: 39:d1:f3:4a:dc:be:1e:d5:2d:6f:cf:6d:f7:98:f9: 71:ea:18:73:6c:60:2f:3f:86:77:19:97:5e:4d:9d: 33:4a:70:e4:e6:b1:37:2f:12:b9:15:08:ff:9f:72: 49:6a:0c:11:5c:8f:2d:29:bb:f2:8e:7b:85:a2:16: 11:ac:b8:c2:64:49:e8:97:69:86:0e:02:cf:93:62: 0d:c0:84:45:d9:48:55:30:5b:16:78:bb:7b:08:b4: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D5:B8:1C:FB:D3:87:41:96:0A:72:BC:F8:89:44:EB:EF:25:6B:03 X509v3 Authority Key Identifier: keyid:5B:D9:7C:31:EC:78:C6:F1:57:D7:72:C1:BB:57:6B:80:24:82:B7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9l8Mex4xvFX13LBu1drgCSCtyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764A1/6B7D69A6045311EAA8F8EC1DC4F9AE02/W9l8Mex4xvFX13LBu1drgCSCtyg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:07:e7:8c:c4:d0:49:77:d4:ae:52:93:46:81:9f:96:9a:62: c6:e4:df:c6:a2:22:c7:67:ec:f7:d4:0a:70:d9:eb:dd:d3:e3: 66:e1:46:63:ef:2a:6b:7d:7a:75:64:a8:04:e0:39:f5:a6:0a: fe:30:ad:6f:72:bb:84:25:35:a7:40:ce:cc:a1:13:55:dc:91: f5:7f:5b:d6:7b:1a:5b:3a:e5:f9:ab:86:4e:0a:22:48:b4:d0: 59:66:a2:d2:97:f8:dd:42:dc:4d:20:e7:7b:38:e3:fc:57:c4: c7:db:d7:cf:37:9a:88:09:7d:05:9e:de:e9:e6:32:89:4b:f9: 7f:ba:45:99:f2:b1:35:9c:ee:d7:27:56:ed:d8:cb:59:a5:86: bf:8c:99:dc:55:5c:ee:a9:83:63:17:77:e0:37:e3:54:d5:6c: b4:9b:5c:e0:79:af:14:27:9d:ec:0e:d3:dc:b1:e2:62:73:5a: 45:59:53:d3:f1:e2:e2:d7:2f:4c:e0:e8:57:54:0b:08:e3:6a: 78:0e:f5:bd:c4:cc:a4:3e:ab:87:0f:ac:ed:cd:55:00:77:a6: 57:e0:06:c1:42:65:18:d6:6b:c8:68:92:98:06:a2:ea:b4:63: fb:2c:22:4b:96:da:89:bb:67:1c:b9:ca:be:a2:38:52:26:39: 2f:07:c2:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0QTExMTAvBgNVBAUTKDVCRDk3QzMxRUM3OEM2RjE1N0Q3NzJDMUJCNTc2Qjgw MjQ4MkI3MjgwHhcNMjUwODIwMTgyNTEwWhcNMjUwODI3MTgyNTEwWjAYMRYwFAYD VQQDEw02OGE2MTMwNi00MTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5n8nby0kYZGYBMMuPSeFplus/bTMIuM0UtQ0eJTini364lYU6EvAevljECy2 V0IISz20b6gRxCy1gysKzvoPDpHNjGcFum9pCXneXELevO74GZRbf32tLXlj2MhK Kzbp2b31gyagAa/xun9an4W1LRo0yPRhB2PxsmEwVAdIiZ1OFNRPP+u/DXN8NT+0 kOY+E5GqcvaLv6TNPce0CjCtt+slUQY50fNK3L4e1S1vz233mPlx6hhzbGAvP4Z3 GZdeTZ0zSnDk5rE3LxK5FQj/n3JJagwRXI8tKbvyjnuFohYRrLjCZEnol2mGDgLP k2INwIRF2UhVMFsWeLt7CLR+SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/VuBz7 04dBlgpyvPiJROvvJWsDMB8GA1UdIwQYMBaAFFvZfDHseMbxV9dywbtXa4Akgrco MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRBMS82QjdENjlBNjA0 NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2RlgxM0xCdTFkcmdDU0N0 eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c5bDhNZXg0eHZGWDEzTEJ1MWRyZ0NTQ3R5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRBMS82QjdENjlBNjA0NTMxMUVBQThGOEVDMURDNEY5QUUwMi9XOWw4TWV4NHh2 RlgxM0xCdTFkcmdDU0N0eWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCB+eMxNBJd9SuUpNGgZ+WmmLG5N/GoiLHZ+z31Apw2evd0+Nm4UZj 7yprfXp1ZKgE4Dn1pgr+MK1vcruEJTWnQM7MoRNV3JH1f1vWexpbOuX5q4ZOCiJI tNBZZqLSl/jdQtxNIOd7OOP8V8TH29fPN5qICX0Fnt7p5jKJS/l/ukWZ8rE1nO7X J1bt2MtZpYa/jJncVVzuqYNjF3fgN+NU1Wy0m1zgea8UJ53sDtPcseJic1pFWVPT 8eLi1y9M4OhXVAsI42p4DvW9xMykPquHD6ztzVUAd6ZX4AbBQmUY1mvIaJKYBqLq tGP7LCJLltqJu2ccucq+ojhSJjkvB8IR -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:10 2025 by rpki-client