$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: FKYaT7SNKE/IDQvYy05jvfTwlL83gJPTB9RlHkQwIo4= Subject key identifier: 75:7D:5A:F9:E4:ED:BE:F7:BB:07:A7:30:82:FF:76:90:AA:62:B1:22 Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 0D Signing time: Tue 01 Jul 2025 08:54:27 +0000 Manifest this update: Tue 01 Jul 2025 08:54:26 +0000 Manifest next update: Tue 08 Jul 2025 08:54:26 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: f0HPaadwnFJ4RXm6tkGGhumEuLIIWMnPboRyOqlal10=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Jul 1 08:54:26 2025 GMT Not After : Jul 8 08:54:26 2025 GMT Subject: CN=6863a243-bd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:c3:45:d3:8b:b8:b8:63:b3:ba:b2:71:9a: 17:af:b5:49:27:00:b7:50:00:f3:be:9a:6d:a9:34: 0a:82:2c:d7:db:1c:7e:15:69:bc:5d:63:47:dc:c3: 26:e4:ce:1f:15:83:bd:94:1c:e5:a6:ac:a8:00:4c: d1:d2:87:f4:db:f3:73:bb:7b:da:2f:d4:dd:b2:43: 44:9d:5a:35:88:db:a9:fb:b9:a0:5e:7c:9d:7b:4d: 0f:33:df:3f:ad:71:51:e4:6b:87:8b:e8:c0:b9:48: 9f:ee:b9:c3:b4:96:2d:d3:72:ce:4f:01:73:cb:19: 79:c3:25:35:95:3a:41:78:c6:44:9e:f8:aa:c2:c2: 4a:f4:2a:ba:c4:7e:32:18:95:2f:00:69:77:1d:c0: fc:e0:f7:7e:5c:de:a4:37:7f:d0:5d:c5:6f:58:1d: a4:ad:c6:cc:84:2f:59:bb:65:66:4c:0c:10:be:86: 84:e8:9b:da:aa:f7:4a:d0:10:73:58:a7:aa:e5:cd: ea:42:1c:2a:f0:17:b7:a0:70:bb:09:7f:eb:32:ea: 55:49:c5:33:83:9f:2d:12:cd:f2:09:3b:ac:d8:3c: 39:cf:5a:42:c9:99:5d:12:6c:4d:da:52:70:c8:a5: 3d:29:e6:79:58:9f:a0:d3:cd:1a:66:45:79:93:32: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7D:5A:F9:E4:ED:BE:F7:BB:07:A7:30:82:FF:76:90:AA:62:B1:22 X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f3:34:6c:b9:a6:49:13:b6:e2:53:49:11:d7:45:09:26:9e: b5:21:51:09:a2:95:86:dd:2f:66:35:b5:ad:40:95:36:fc:07: d2:ed:16:83:74:e9:65:9f:df:8a:3a:b3:2a:c3:87:d6:1f:57: 25:42:6c:cf:9f:03:6c:42:f8:2e:6b:9c:2c:d5:83:50:16:96: ba:9d:72:e2:42:2a:40:0b:1a:83:4d:bd:38:b7:ea:df:f9:63: 89:40:2f:4c:e5:78:6e:21:57:0a:2d:50:ea:08:54:59:6c:92: 7e:6f:01:96:a5:fa:bc:7d:a0:98:17:27:d1:03:13:c4:46:b0: ab:2b:f6:fe:09:61:f3:0b:78:aa:49:45:df:86:ca:6b:cf:dd: 42:b5:0a:26:b7:ae:e1:f8:33:86:c4:d0:49:4e:b5:d8:0c:42: 90:31:a1:83:85:a5:40:76:dc:d5:4b:4c:99:59:9e:84:2c:52: 4c:ae:09:82:28:60:40:8c:e3:c7:ea:0f:a4:6c:8b:33:0f:8b: a3:63:32:65:a5:cb:09:e4:5b:b9:9c:ca:8d:0d:73:86:31:91: a9:05:a6:69:ef:12:d4:f6:2f:bb:e2:75:c1:d4:ce:b5:44:ea: 0d:fe:b7:38:6f:00:58:59:bd:6c:a7:a0:ca:a8:20:df:91:bd: 7a:a1:59:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTA3MDEwODU0MjZaFw0yNTA3MDgwODU0MjZaMBgxFjAUBgNV BAMTDTY4NjNhMjQzLWJkNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeJMNF04u4uGOzurJxmhevtUknALdQAPO+mm2pNAqCLNfbHH4VabxdY0fcwybk zh8Vg72UHOWmrKgATNHSh/Tb83O7e9ov1N2yQ0SdWjWI26n7uaBefJ17TQ8z3z+t cVHka4eL6MC5SJ/uucO0li3Tcs5PAXPLGXnDJTWVOkF4xkSe+KrCwkr0KrrEfjIY lS8AaXcdwPzg935c3qQ3f9BdxW9YHaStxsyEL1m7ZWZMDBC+hoTom9qq90rQEHNY p6rlzepCHCrwF7egcLsJf+sy6lVJxTODny0SzfIJO6zYPDnPWkLJmV0SbE3aUnDI pT0p5nlYn6DTzRpmRXmTMq2lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdX1a+eTt vve7B6cwgv92kKpisSIwHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QjlBLzIyN0FDNDg2NDVDNzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVP NWgweHVUV3M1Njg0VUxOUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI3zNGy5pkkTtuJTSRHXRQkmnrUhUQmilYbdL2Y1ta1AlTb8B9LtFoN0 6WWf34o6syrDh9YfVyVCbM+fA2xC+C5rnCzVg1AWlrqdcuJCKkALGoNNvTi36t/5 Y4lAL0zleG4hVwotUOoIVFlskn5vAZal+rx9oJgXJ9EDE8RGsKsr9v4JYfMLeKpJ Rd+GymvP3UK1Cia3ruH4M4bE0ElOtdgMQpAxoYOFpUB23NVLTJlZnoQsUkyuCYIo YECM48fqD6RsizMPi6NjMmWlywnkW7mcyo0Nc4YxkakFpmnvEtT2L7vidcHUzrVE 6g3+tzhvAFhZvWynoMqoIN+RvXqhWc4= -----END CERTIFICATE-----Generated at Wed Jul 2 05:13:52 2025 by rpki-client