$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft File: wW7sB30zjEI6rx3reXZAZxt_yb4.mft (raw, json) Hash identifier: owjcsH6TDyeW9Wz4ZLdoZ+Na4V/F4iTxUeb17jOam7A= Subject key identifier: 5F:DA:17:F1:ED:BB:F4:E4:6C:8F:64:AA:C2:5C:ED:97:EE:D9:0A:AD Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Certificate serial: 0DBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft Manifest number: 0DB4 Signing time: Wed 20 Aug 2025 17:59:27 +0000 Manifest this update: Wed 20 Aug 2025 17:59:26 +0000 Manifest next update: Wed 27 Aug 2025 17:59:26 +0000 Files and hashes: 1: wW7sB30zjEI6rx3reXZAZxt_yb4.crl (hash: CN49e2yXul5DzigGtb3C9FUGO7wp9Bbm60U1xAuDPdU=) 2: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (hash: Jn/++SfV1VdnkIlweTbZK1B7H5Xpb4S9KYcvJi/sW94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3516 (0xdbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE Validity Not Before: Aug 20 17:59:26 2025 GMT Not After : Aug 27 17:59:26 2025 GMT Subject: CN=68a60cfe-9bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:11:39:bc:74:b5:6e:d5:c8:eb:4f:23:51:89: 20:26:3d:7c:81:65:8a:cd:99:77:8c:86:92:da:6c: 7b:69:79:4b:6e:27:40:c3:86:81:3d:30:d3:8f:f3: d9:cf:86:2f:be:e5:6b:75:09:6f:ed:51:77:32:88: b4:d2:c8:ea:36:f0:59:cf:d4:99:7c:5b:6c:a4:1f: e5:14:57:51:43:5e:f0:5f:ee:23:69:ca:ab:1f:23: bf:d3:47:ed:47:83:64:84:0f:8c:fe:85:59:58:87: 35:5f:b1:25:33:b8:b6:be:2c:44:e2:9b:89:3e:0f: 7b:66:57:21:4f:8d:c3:a5:4c:bf:e6:03:89:c8:38: 33:57:c2:96:b3:b0:d7:c1:89:a8:50:cb:2d:5a:ba: 94:10:a5:51:c3:f0:4a:47:ce:d0:8c:cb:79:08:05: 07:da:9c:55:32:ea:9d:d2:04:be:5b:82:df:ae:2f: 56:a9:df:98:9c:09:41:c9:95:7c:f3:a7:2a:41:a5: e0:f6:1e:32:b0:d5:58:d9:12:5d:c7:65:2e:a2:ad: 4d:be:d8:5d:bd:d6:48:c2:2e:64:02:17:b0:0c:11: 81:1f:e9:2a:2e:3f:2e:da:66:4e:42:17:77:dd:7a: d2:13:95:d6:8f:73:44:13:15:a6:7f:ae:7d:82:4e: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DA:17:F1:ED:BB:F4:E4:6C:8F:64:AA:C2:5C:ED:97:EE:D9:0A:AD X509v3 Authority Key Identifier: keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:08:d2:e8:53:08:4d:98:ca:a1:64:7e:15:80:0a:c4:5c:4a: aa:c3:ad:9d:5c:4a:28:9c:7c:23:e9:a9:b9:57:2f:e0:a7:c6: 16:55:eb:7c:f3:aa:7c:75:da:a7:06:b1:d7:8e:0e:10:49:1c: b0:2a:93:9a:87:ed:50:a7:29:32:70:15:c0:78:3f:d4:a1:b1: 0e:50:2b:e5:4e:01:3c:e4:a1:06:88:3a:5b:0c:0c:85:8f:e0: 9f:50:3d:58:a6:67:7e:c5:ba:a7:80:12:a0:2e:0b:b5:8a:d1: 08:38:d2:c1:21:64:b3:09:6c:a9:8e:f3:ff:df:2b:5b:fc:cd: 77:cf:98:c5:29:6d:8c:28:ba:f8:1d:f1:3e:be:a7:ef:5c:4f: 04:ae:2f:8f:87:f5:ec:a8:51:8c:f2:95:ce:ff:fd:d9:a1:52: 7f:97:d8:6d:97:a8:c0:66:bf:24:53:91:a2:31:39:3c:c3:53: 23:1b:a1:f2:7a:35:0c:db:8d:7a:1e:87:59:a6:d9:26:af:25: e3:5e:b1:44:72:77:91:35:f3:32:17:8a:41:8f:bd:00:9c:2e: d4:bc:9c:42:09:f2:5f:ac:7f:de:6c:e9:47:e4:75:5f:03:5d: 72:65:fc:7f:f7:20:cd:7e:21:ba:aa:46:04:bb:e9:9c:7b:2d: a5:d2:d2:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFOUIxMTAvBgNVBAUTKEMxNkVFQzA3N0QzMzhDNDIzQUFGMURFQjc5NzY0MDY3 MUI3RkM5QkUwHhcNMjUwODIwMTc1OTI2WhcNMjUwODI3MTc1OTI2WjAYMRYwFAYD VQQDEw02OGE2MGNmZS05YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RE5vHS1btXI608jUYkgJj18gWWKzZl3jIaS2mx7aXlLbidAw4aBPTDTj/PZ z4YvvuVrdQlv7VF3Moi00sjqNvBZz9SZfFtspB/lFFdRQ17wX+4jacqrHyO/00ft R4NkhA+M/oVZWIc1X7ElM7i2vixE4puJPg97ZlchT43DpUy/5gOJyDgzV8KWs7DX wYmoUMstWrqUEKVRw/BKR87QjMt5CAUH2pxVMuqd0gS+W4Lfri9Wqd+YnAlByZV8 86cqQaXg9h4ysNVY2RJdx2Uuoq1NvthdvdZIwi5kAhewDBGBH+kqLj8u2mZOQhd3 3XrSE5XWj3NEExWmf659gk6WaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/aF/Ht u/TkbI9kqsJc7Zfu2QqtMB8GA1UdIwQYMBaAFMFu7Ad9M4xCOq8d63l2QGcbf8m+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUU5Qi9CMDdFNEIyNkM1 QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempFSTZyeDNyZVhaQVp4dF95 YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dXN3NCMzB6akVJNnJ4M3JlWFpBWnh0X3liNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUU5Qi9CMDdFNEIyNkM1QkQxMUU5QjE5MTNDMUNDNEY5QUUwMi93VzdzQjMwempF STZyeDNyZVhaQVp4dF95YjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3CNLoUwhNmMqhZH4VgArEXEqqw62dXEoonHwj6am5Vy/gp8YWVet8 86p8ddqnBrHXjg4QSRywKpOah+1QpykycBXAeD/UobEOUCvlTgE85KEGiDpbDAyF j+CfUD1Ypmd+xbqngBKgLgu1itEIONLBIWSzCWypjvP/3ytb/M13z5jFKW2MKLr4 HfE+vqfvXE8Eri+Ph/XsqFGM8pXO//3ZoVJ/l9htl6jAZr8kU5GiMTk8w1MjG6Hy ejUM2416HodZptkmryXjXrFEcneRNfMyF4pBj70AnC7UvJxCCfJfrH/ebOlH5HVf A11yZfx/9yDNfiG6qkYEu+mcey2l0tKo -----END CERTIFICATE-----Generated at Fri Aug 22 16:36:08 2025 by rpki-client