$ rpki-client -vvf rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft File: W6misTDnBTYhO9nUaJ_nvVTwrSM.mft (raw, json) Hash identifier: 3yZ3Lyr7U2FcXkgW38lVOm3OPTmftQiAxwkQJXZ/PD0= Subject key identifier: BD:05:68:4E:E9:41:77:53:66:B0:41:59:E9:7E:B6:3F:2C:B5:BA:83 Authority key identifier: 5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23 Certificate issuer: /CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft Manifest number: 0BED Signing time: Wed 20 Aug 2025 18:54:02 +0000 Manifest this update: Wed 20 Aug 2025 18:54:01 +0000 Manifest next update: Wed 27 Aug 2025 18:54:01 +0000 Files and hashes: 1: W6misTDnBTYhO9nUaJ_nvVTwrSM.crl (hash: ZeSLmpoKr+FMNKkD/8ScsfC3NJ2jOeHNaWpQe+xGh3k=) 2: 8D720AC81D9211EA88894911C4F9AE02.roa (hash: eDzZS0BLQQgZmboEzi1MeyFIGvpWBV3MnFnzSkClZZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BF70, serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23 Validity Not Before: Aug 20 18:54:01 2025 GMT Not After : Aug 27 18:54:01 2025 GMT Subject: CN=68a619c9-613a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:c3:9f:c3:e5:b7:69:e9:99:23:f6:98:13: ec:8c:76:92:e7:6a:05:89:3f:b7:93:a9:39:7b:97: ad:d8:c2:dd:e4:34:21:78:23:8a:6c:a3:8e:e2:32: 76:66:cf:63:9a:4d:40:3a:b0:33:21:0e:2b:3d:19: 92:01:7e:77:89:d1:32:24:96:b6:45:4b:92:21:ce: 23:5f:8f:f8:08:d5:fe:99:d7:10:92:4e:0a:21:75: e0:1d:45:53:c9:b2:de:a5:4c:50:95:6a:d4:72:59: 96:cd:c6:28:e3:d9:cf:c6:85:8d:5a:86:41:31:b0: 92:9c:88:92:b8:f7:9a:8d:f4:c9:0e:04:68:f5:e3: 3c:3a:d2:29:22:5d:da:8c:7d:a9:20:87:08:6a:b5: a0:b0:79:fc:01:c5:de:c0:7d:d0:3c:bd:ed:51:72: 77:80:a9:b0:57:36:a8:fd:8f:9f:a3:41:0a:3c:71: 3a:db:10:7a:92:ef:d6:7b:41:d3:05:7d:2a:7b:66: a3:78:d7:3a:a7:16:68:7a:bc:13:14:d0:cc:29:16: 6b:5b:8a:8e:30:20:4d:99:e0:f6:e2:7b:c1:8f:54: af:b5:81:1f:6d:14:73:f9:81:65:81:1a:bd:d8:cf: 7c:25:0c:f5:7d:ee:39:b5:34:28:17:8b:64:ba:cb: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:05:68:4E:E9:41:77:53:66:B0:41:59:E9:7E:B6:3F:2C:B5:BA:83 X509v3 Authority Key Identifier: keyid:5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:cb:2c:61:15:d0:3e:f4:5f:5d:88:ea:cf:46:5e:81:a8:2a: 79:4b:06:3d:7e:25:a3:8b:4b:57:e2:2a:f1:8f:64:9e:d9:b4: b3:10:e1:c0:7c:c4:a8:cb:33:ef:94:e2:25:63:55:17:ea:46: ae:9b:c2:fd:f7:3e:33:d0:5d:83:12:20:50:34:24:9b:3f:91: c8:b2:a0:00:cb:10:e9:78:9f:f0:1b:ba:7f:de:c2:fc:7e:94: 34:15:21:c4:0d:26:cc:d2:5c:81:9a:14:1a:51:c8:b5:ee:55: a5:57:b3:ca:f7:05:47:cd:02:0f:fa:a4:cf:b1:33:5f:c2:48: ab:6d:2b:d5:c1:66:67:b6:f6:e1:89:0c:0a:19:36:72:7c:bd: 3a:58:61:07:0a:48:0e:dc:70:f3:13:e1:fe:71:13:e7:6a:72: 3d:4b:57:87:0d:91:35:8c:be:ec:80:92:09:e7:e0:1d:3d:10: 8a:2e:83:ce:56:02:f7:78:e9:95:91:ee:62:fb:33:6d:b0:27: a1:71:56:c9:49:f1:a2:08:b1:34:b2:60:9b:92:23:83:cd:f6: e5:ea:d1:d5:63:22:c9:61:b9:b7:7b:74:db:41:86:ef:53:00: 64:d7:cd:07:b9:f9:f5:89:b2:45:90:aa:eb:e3:c7:b3:ba:48: 90:fa:af:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGNzAxMTAvBgNVBAUTKDVCQTlBMkIxMzBFNzA1MzYyMTNCRDlENDY4OUZFN0JE NTRGMEFEMjMwHhcNMjUwODIwMTg1NDAxWhcNMjUwODI3MTg1NDAxWjAYMRYwFAYD VQQDEw02OGE2MTljOS02MTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkzDn8Plt2npmSP2mBPsjHaS52oFiT+3k6k5e5et2MLd5DQheCOKbKOO4jJ2 Zs9jmk1AOrAzIQ4rPRmSAX53idEyJJa2RUuSIc4jX4/4CNX+mdcQkk4KIXXgHUVT ybLepUxQlWrUclmWzcYo49nPxoWNWoZBMbCSnIiSuPeajfTJDgRo9eM8OtIpIl3a jH2pIIcIarWgsHn8AcXewH3QPL3tUXJ3gKmwVzao/Y+fo0EKPHE62xB6ku/We0HT BX0qe2ajeNc6pxZoerwTFNDMKRZrW4qOMCBNmeD24nvBj1SvtYEfbRRz+YFlgRq9 2M98JQz1fe45tTQoF4tkusu7OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0FaE7p QXdTZrBBWel+tj8stbqDMB8GA1UdIwQYMBaAFFuporEw5wU2ITvZ1Gif571U8K0j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkY3MC9EMDI4OEMzNjFE OTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJUWWhPOW5VYUpfbnZWVHdy U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2bWlzVERuQlRZaE85blVhSl9udlZUd3JTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkY3MC9EMDI4OEMzNjFEOTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJU WWhPOW5VYUpfbnZWVHdyU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgyyxhFdA+9F9diOrPRl6BqCp5SwY9fiWji0tX4irxj2Se2bSzEOHA fMSoyzPvlOIlY1UX6kaum8L99z4z0F2DEiBQNCSbP5HIsqAAyxDpeJ/wG7p/3sL8 fpQ0FSHEDSbM0lyBmhQaUci17lWlV7PK9wVHzQIP+qTPsTNfwkirbSvVwWZntvbh iQwKGTZyfL06WGEHCkgO3HDzE+H+cRPnanI9S1eHDZE1jL7sgJIJ5+AdPRCKLoPO VgL3eOmVke5i+zNtsCehcVbJSfGiCLE0smCbkiODzfbl6tHVYyLJYbm3e3TbQYbv UwBk180Hufn1ibJFkKrr48ezukiQ+q92 -----END CERTIFICATE-----Generated at Fri Aug 22 16:17:01 2025 by rpki-client