$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: mbYiXJsbQqZECMgIOQHNWrebuQv5yG4u9wmmcaDQ038= Subject key identifier: 01:EE:C2:5D:13:56:EA:96:62:A1:DD:1A:C4:97:A7:3E:F1:A8:3F:C0 Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 34D8 Signing time: Mon 08 Sep 2025 15:11:29 +0000 Manifest this update: Mon 08 Sep 2025 15:11:28 +0000 Manifest next update: Mon 15 Sep 2025 15:11:28 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: DKljrVqrgAB3BTZkn04KuMQBLTidvzwcfJWQhomjX4k=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Sep 8 15:11:28 2025 GMT Not After : Sep 15 15:11:28 2025 GMT Subject: CN=68bef220-df64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:c2:cc:1f:ad:28:e6:9c:f2:76:24:3a:4b: 21:dd:99:c2:2f:25:27:a4:fd:0a:49:fa:6d:9b:79: d6:21:fc:1f:07:14:e3:60:26:24:b5:62:da:35:a8: a2:26:21:5d:6f:83:24:c0:d9:5d:cb:49:16:a0:08: 8e:fd:33:8c:70:1d:64:f0:a1:f0:09:bc:18:19:45: b9:ac:85:0b:a1:d3:9d:48:f6:97:1d:ee:64:1f:b9: 0e:2a:7e:14:b3:d5:7a:2e:bc:39:9c:a2:c6:43:42: 23:68:cd:0b:3d:94:10:21:15:38:12:a3:80:44:03: 3a:34:3b:b7:2c:2e:c1:1c:ec:90:ce:3a:e2:4f:ac: 90:75:22:02:72:9a:1e:75:79:88:60:2f:61:fb:50: 61:6b:0d:50:fc:5d:4c:02:1a:11:52:c0:2c:6c:00: ab:93:54:d9:05:98:61:47:d8:06:07:21:de:b5:23: 1a:e8:e5:83:2f:dd:18:26:82:42:96:cb:59:c8:3c: 49:82:dc:9b:99:4d:95:6f:d4:b2:b8:f9:33:d4:1d: 60:57:9f:14:9d:97:e7:a1:37:27:15:82:d3:dd:ba: 0c:5d:25:c9:16:b3:3c:06:82:81:74:02:fe:e6:4d: 4f:52:96:91:d9:fa:ec:09:39:b9:10:84:21:36:82: 1e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:C2:5D:13:56:EA:96:62:A1:DD:1A:C4:97:A7:3E:F1:A8:3F:C0 X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0f:59:10:fa:bd:60:8f:48:15:fc:74:08:ad:5a:fb:2b:7a: a3:f0:5f:ee:17:b9:b2:6b:25:c6:7a:01:4d:a5:b5:9a:67:cd: 1f:d0:0a:c6:92:2b:b0:88:40:4d:87:d9:d7:6b:68:ad:75:98: bc:00:87:3b:e2:1f:a3:fc:fc:d9:3f:16:79:c4:ec:e1:c4:e3: 87:14:23:83:4d:f6:62:53:e3:d6:53:24:e3:ab:e8:4e:d0:98: 7f:a4:f0:d7:43:4b:61:d4:5f:ea:f9:63:96:48:30:e5:83:97: e7:14:ec:33:81:bc:4e:e5:14:75:90:9a:0c:fd:ec:9d:c8:e4: 56:13:d7:bc:7f:fd:bc:85:19:e3:33:28:ac:ae:06:ae:81:92: 82:45:62:58:71:1c:d9:59:2a:a1:8f:91:37:91:00:33:51:70: 03:4d:ba:c2:93:f2:c6:49:82:4d:a4:db:b0:d5:99:a3:22:03: 77:eb:44:53:8f:89:80:c1:49:05:c9:87:de:6c:4f:eb:20:06: f1:6a:14:b0:63:4b:ac:7e:4d:cd:3b:f3:81:2d:45:85:42:c3: d3:98:02:98:80:aa:89:2a:94:95:44:98:0d:f2:34:44:8d:c6: f3:ed:90:02:8e:d1:34:90:b5:1c:06:dc:41:28:d5:40:fd:51: 0f:1b:28:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUwOTA4MTUxMTI4WhcNMjUwOTE1MTUxMTI4WjAYMRYwFAYD VQQDEw02OGJlZjIyMC1kZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe/CzB+tKOac8nYkOksh3ZnCLyUnpP0KSfptm3nWIfwfBxTjYCYktWLaNaii JiFdb4MkwNldy0kWoAiO/TOMcB1k8KHwCbwYGUW5rIULodOdSPaXHe5kH7kOKn4U s9V6Lrw5nKLGQ0IjaM0LPZQQIRU4EqOARAM6NDu3LC7BHOyQzjriT6yQdSICcpoe dXmIYC9h+1Bhaw1Q/F1MAhoRUsAsbACrk1TZBZhhR9gGByHetSMa6OWDL90YJoJC lstZyDxJgtybmU2Vb9SyuPkz1B1gV58UnZfnoTcnFYLT3boMXSXJFrM8BoKBdAL+ 5k1PUpaR2frsCTm5EIQhNoIeWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHuwl0T VuqWYqHdGsSXpz7xqD/AMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOD1kQ+r1gj0gV/HQIrVr7K3qj8F/uF7myayXGegFNpbWaZ80f0ArG kiuwiEBNh9nXa2itdZi8AIc74h+j/PzZPxZ5xOzhxOOHFCODTfZiU+PWUyTjq+hO 0Jh/pPDXQ0th1F/q+WOWSDDlg5fnFOwzgbxO5RR1kJoM/eydyORWE9e8f/28hRnj MyisrgaugZKCRWJYcRzZWSqhj5E3kQAzUXADTbrCk/LGSYJNpNuw1ZmjIgN360RT j4mAwUkFyYfebE/rIAbxahSwY0usfk3NO/OBLUWFQsPTmAKYgKqJKpSVRJgN8jRE jcbz7ZACjtE0kLUcBtxBKNVA/VEPGyiX -----END CERTIFICATE-----Generated at Tue Sep 9 08:48:42 2025 by rpki-client