$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft File: W2pwDO4aU9VRnlolxk0a0ro3zac.mft (raw, json) Hash identifier: UtItaZP6anY4pyNCwALckim0aCePwcj/7B5adtO7qKQ= Subject key identifier: 88:53:2C:A3:D0:4B:35:3C:3D:74:89:C0:F9:9B:09:59:A7:7F:BD:DD Authority key identifier: 5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 Certificate issuer: /CN=A91AAB94/serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Certificate serial: 029C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft Manifest number: 0298 Signing time: Wed 17 Sep 2025 02:06:38 +0000 Manifest this update: Wed 17 Sep 2025 02:06:37 +0000 Manifest next update: Wed 24 Sep 2025 02:06:37 +0000 Files and hashes: 1: W2pwDO4aU9VRnlolxk0a0ro3zac.crl (hash: /lmSbhKT5DfFdXym0NC7rgsXls4ybDwOnQV5vYCLo/Y=) 2: 53AA673C16A911ED88058C80C4F9AE02.roa (hash: TZ/n2fdCp6It0G4ugsLwMjkFuDgasyyKStMAe77+R34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 668 (0x29c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAB94, serialNumber=5B6A700CEE1A53D5519E5A25C64D1AD2BA37CDA7 Validity Not Before: Sep 17 02:06:37 2025 GMT Not After : Sep 24 02:06:37 2025 GMT Subject: CN=68ca17ad-ce8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:64:4c:8c:fa:7f:46:e5:14:17:5e:cd:b0: 82:65:84:f2:5b:a7:df:e7:cd:b0:ca:e6:b2:a9:9d: f0:a4:51:ee:ca:58:46:8a:3e:79:c8:13:aa:35:93: dd:d5:0c:41:45:55:dd:8d:bd:d7:62:b9:a1:50:8c: 86:f0:c0:21:10:63:80:7a:31:4f:2f:63:4c:fc:ea: d8:d4:43:19:ee:b8:95:96:db:b6:3c:fa:40:09:25: e7:7a:36:a1:54:ee:3b:a6:ab:50:4c:09:1c:97:9c: e6:2b:62:69:4b:0b:fd:de:a9:ff:5c:14:c6:a7:2f: 4f:23:ec:cd:06:e4:b8:9a:2a:5b:d7:50:6e:eb:d2: b2:76:c0:ce:eb:81:21:5f:a6:c1:00:d8:9d:d5:39: 36:0b:c9:ea:f7:e2:d4:3a:66:b9:02:6b:6e:0c:46: 2a:69:0c:ad:de:72:36:f3:cc:88:3f:ae:b1:e4:be: b7:0b:97:3f:05:ec:05:82:55:3c:bc:d0:c2:78:cc: 9a:3b:53:c4:4b:53:24:6f:de:46:5f:5d:7c:c0:b3: c8:21:f1:50:95:71:c0:22:7c:b6:ce:07:3d:03:7f: 5d:a0:60:4c:36:79:0c:35:ff:6f:bc:19:e8:c6:c4: 02:ac:44:93:3e:6f:b3:77:11:09:00:68:55:c1:64: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:53:2C:A3:D0:4B:35:3C:3D:74:89:C0:F9:9B:09:59:A7:7F:BD:DD X509v3 Authority Key Identifier: keyid:5B:6A:70:0C:EE:1A:53:D5:51:9E:5A:25:C6:4D:1A:D2:BA:37:CD:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W2pwDO4aU9VRnlolxk0a0ro3zac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAB94/707023FA16A611EDAC3CA17DC4F9AE02/W2pwDO4aU9VRnlolxk0a0ro3zac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:25:d0:eb:da:12:f7:ff:33:bc:f8:4f:10:bb:2b:bc:ed:9c: e3:28:49:b8:5f:dd:8a:96:f7:71:d4:a0:ad:eb:2b:47:25:47: c8:b2:cc:7a:25:cc:5d:4c:be:53:c6:f1:7a:bd:1d:c3:1f:27: 97:99:1d:b1:cf:4b:a2:2e:c9:d7:a7:2c:6b:45:b8:52:0f:6b: 05:d3:0c:5e:55:59:be:00:f5:f1:01:ef:51:13:de:91:d2:b6: 42:f6:53:da:93:c0:1b:ad:38:f0:49:25:31:24:0b:a2:b4:85: 9b:9f:0e:de:b5:42:86:5f:b9:06:ed:5e:84:fb:c0:d0:b9:64: 04:4d:26:4b:b8:66:48:5f:e2:f8:09:3f:8b:2e:da:44:d5:a1: 85:aa:b6:0a:ad:a8:0a:70:2d:48:b5:75:16:48:8f:f5:6c:87: 64:75:72:09:19:71:6f:22:47:2d:cd:95:68:5d:b1:03:f9:90: 1a:82:8c:65:31:c1:fd:88:28:7b:f1:9a:06:ad:a7:e7:23:3a: 60:8f:f2:d3:b1:06:db:46:d5:b2:d8:3b:5c:79:4a:ef:28:ab: 71:5b:0c:00:d7:4a:ca:e0:29:e1:b0:52:0f:cf:58:27:b3:5e: d4:d2:08:1a:5a:ed:9b:e3:32:65:76:15:a7:a7:8e:29:78:fb: 81:ad:69:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCOTQxMTAvBgNVBAUTKDVCNkE3MDBDRUUxQTUzRDU1MTlFNUEyNUM2NEQxQUQy QkEzN0NEQTcwHhcNMjUwOTE3MDIwNjM3WhcNMjUwOTI0MDIwNjM3WjAYMRYwFAYD VQQDEw02OGNhMTdhZC1jZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QhkTIz6f0blFBdezbCCZYTyW6ff582wyuayqZ3wpFHuylhGij55yBOqNZPd 1QxBRVXdjb3XYrmhUIyG8MAhEGOAejFPL2NM/OrY1EMZ7riVltu2PPpACSXnejah VO47pqtQTAkcl5zmK2JpSwv93qn/XBTGpy9PI+zNBuS4mipb11Bu69KydsDO64Eh X6bBANid1Tk2C8nq9+LUOma5AmtuDEYqaQyt3nI288yIP66x5L63C5c/BewFglU8 vNDCeMyaO1PES1Mkb95GX118wLPIIfFQlXHAIny2zgc9A39doGBMNnkMNf9vvBno xsQCrESTPm+zdxEJAGhVwWTvBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhTLKPQ SzU8PXSJwPmbCVmnf73dMB8GA1UdIwQYMBaAFFtqcAzuGlPVUZ5aJcZNGtK6N82n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUI5NC83MDcwMjNGQTE2 QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5VlJubG9seGswYTBybzN6 YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cycHdETzRhVTlWUm5sb2x4azBhMHJvM3phYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUI5NC83MDcwMjNGQTE2QTYxMUVEQUMzQ0ExN0RDNEY5QUUwMi9XMnB3RE80YVU5 VlJubG9seGswYTBybzN6YWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3JdDr2hL3/zO8+E8Quyu87ZzjKEm4X92Klvdx1KCt6ytHJUfIssx6 JcxdTL5TxvF6vR3DHyeXmR2xz0uiLsnXpyxrRbhSD2sF0wxeVVm+APXxAe9RE96R 0rZC9lPak8AbrTjwSSUxJAuitIWbnw7etUKGX7kG7V6E+8DQuWQETSZLuGZIX+L4 CT+LLtpE1aGFqrYKragKcC1ItXUWSI/1bIdkdXIJGXFvIkctzZVoXbED+ZAagoxl McH9iCh78ZoGrafnIzpgj/LTsQbbRtWy2DtceUrvKKtxWwwA10rK4CnhsFIPz1gn s17U0ggaWu2b4zJldhWnp44pePuBrWk5 -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:36 2025 by rpki-client