$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft File: w7rY8KXaBY6fklA30EqnHJKLoXM.mft (raw, json) Hash identifier: 8OLGvdnZ+tc3fxTR/gA8ao4hDDfExouzdWFEg8DzuZM= Subject key identifier: 78:3C:4C:25:46:11:A8:45:01:00:F3:D0:E5:E7:ED:27:09:59:78:19 Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Certificate serial: 19F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft Manifest number: 19EB Signing time: Thu 04 Sep 2025 16:29:30 +0000 Manifest this update: Thu 04 Sep 2025 16:29:30 +0000 Manifest next update: Thu 11 Sep 2025 16:29:30 +0000 Files and hashes: 1: w7rY8KXaBY6fklA30EqnHJKLoXM.crl (hash: b/dDrXIsiu19+8JMbfZKOeU6UfxJywXNYdHMszPL0Qw=) 2: 885DA760AA8811E799348329C4F9AE02.roa (hash: QtE9Adpom4Nm5iw3CCvblvKPpzJSJvhQFoud1x1FLEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6646 (0x19f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173 Validity Not Before: Sep 4 16:29:30 2025 GMT Not After : Sep 11 16:29:30 2025 GMT Subject: CN=68b9be6a-f60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:ff:77:85:ea:46:99:1b:2f:64:9c:74:94: df:82:48:c3:8b:be:59:f4:6b:03:9e:22:67:5f:b1: 15:5f:65:f0:cc:60:15:b5:37:74:ac:59:68:a6:5e: 14:c3:44:70:ea:4e:09:c1:b6:c8:26:16:49:8b:f9: b9:1a:b6:48:8b:d8:70:31:aa:8f:4b:55:f2:2d:a2: 5d:00:15:a0:ac:c7:d1:09:d6:17:1d:69:98:ee:9b: ef:1d:eb:a7:a9:0f:75:87:ee:c4:e6:23:d8:ce:7e: 05:8e:c9:8c:63:8f:a5:f8:95:d3:54:a4:c8:66:3a: cf:b4:68:21:a3:29:83:7e:95:8b:23:97:8b:7a:31: 3d:2c:60:f5:2b:3b:e3:40:70:2e:51:84:e3:5e:f9: 67:bb:bc:d0:89:5b:ac:86:3b:b9:e4:02:07:ef:25: 04:12:7e:8d:ec:2a:16:7b:52:6d:6d:25:dc:5a:b8: 04:26:7a:6a:f6:79:99:6d:28:be:bb:da:d7:e3:4a: 1f:12:25:1c:d3:ac:e2:1c:e8:61:f6:cb:9d:e5:a4: a0:16:0e:8c:35:82:20:7f:2b:4f:9b:fe:b9:5e:ea: 17:ef:8d:ec:8e:bb:fc:82:e3:27:eb:5a:d2:57:23: ec:08:2c:17:7e:60:ea:5f:a0:f3:a3:d9:06:a7:61: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3C:4C:25:46:11:A8:45:01:00:F3:D0:E5:E7:ED:27:09:59:78:19 X509v3 Authority Key Identifier: keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fc:03:b4:17:ee:c7:ec:50:15:30:ce:f8:41:47:66:d4:04: b2:aa:3d:a1:35:59:69:70:57:f1:2c:dc:ba:0b:d1:a3:bb:d5: ff:29:3c:71:15:69:48:0f:eb:f8:e7:a3:ea:94:61:14:4b:fd: d7:d9:10:f3:b7:44:d7:f4:48:6a:0f:48:88:8d:72:d6:dd:ee: 26:e2:45:f3:dc:11:43:eb:0a:1d:45:50:aa:b8:ff:1a:a0:15: c0:dc:fb:36:00:f9:a2:1e:bb:82:4e:5f:30:86:a7:cf:04:04: aa:65:14:6c:a1:29:42:a6:1d:6f:40:10:5a:6a:83:77:73:04: c1:df:f5:1e:ff:78:da:14:81:5d:d7:dc:10:a1:09:db:2e:bd: 18:e3:68:c1:fa:6a:f0:ae:95:ec:f7:33:59:5a:bb:f6:bd:63: 4b:9b:40:82:03:4e:79:09:e4:13:61:7a:f9:93:1e:d5:d3:7a: 1c:fe:6f:b6:66:53:ea:09:cd:de:56:d6:c7:1e:1f:25:17:75: d0:df:c5:05:fc:ee:e4:5a:d6:81:84:5e:bd:47:6b:19:e1:1d: 49:2d:ee:a1:f0:8e:59:9d:e6:06:99:c2:09:61:e9:45:09:35: 39:50:57:b2:1a:51:08:86:59:9e:30:31:dd:13:1a:ed:11:66: 15:90:25:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD OTI4QkExNzMwHhcNMjUwOTA0MTYyOTMwWhcNMjUwOTExMTYyOTMwWjAYMRYwFAYD VQQDEw02OGI5YmU2YS1mNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolL/d4XqRpkbL2ScdJTfgkjDi75Z9GsDniJnX7EVX2XwzGAVtTd0rFlopl4U w0Rw6k4JwbbIJhZJi/m5GrZIi9hwMaqPS1XyLaJdABWgrMfRCdYXHWmY7pvvHeun qQ91h+7E5iPYzn4FjsmMY4+l+JXTVKTIZjrPtGghoymDfpWLI5eLejE9LGD1Kzvj QHAuUYTjXvlnu7zQiVushju55AIH7yUEEn6N7CoWe1JtbSXcWrgEJnpq9nmZbSi+ u9rX40ofEiUc06ziHOhh9sud5aSgFg6MNYIgfytPm/65XuoX743sjrv8guMn61rS VyPsCCwXfmDqX6Dzo9kGp2HD4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg8TCVG EahFAQDz0OXn7ScJWXgZMB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTI2NS9EOEI0QjYxRTYwMjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZ NmZrbEEzMEVxbkhKS0xvWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE/AO0F+7H7FAVMM74QUdm1ASyqj2hNVlpcFfxLNy6C9Gju9X/KTxx FWlID+v456PqlGEUS/3X2RDzt0TX9EhqD0iIjXLW3e4m4kXz3BFD6wodRVCquP8a oBXA3Ps2APmiHruCTl8whqfPBASqZRRsoSlCph1vQBBaaoN3cwTB3/Ue/3jaFIFd 19wQoQnbLr0Y42jB+mrwrpXs9zNZWrv2vWNLm0CCA055CeQTYXr5kx7V03oc/m+2 ZlPqCc3eVtbHHh8lF3XQ38UF/O7kWtaBhF69R2sZ4R1JLe6h8I5ZneYGmcIJYelF CTU5UFeyGlEIhlmeMDHdExrtEWYVkCVk -----END CERTIFICATE-----Generated at Sat Sep 6 16:33:51 2025 by rpki-client