$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft File: vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft (raw, json) Hash identifier: CkxXKslwmi610fLVCYAqcZrdSjnTpyi1aBRFnkJS1Dw= Subject key identifier: 79:E6:D7:07:B5:D3:60:A0:E4:CD:52:99:78:44:76:95:68:EE:3C:47 Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 Certificate issuer: /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft Manifest number: 08C0 Signing time: Sun 24 Aug 2025 20:30:08 +0000 Manifest this update: Sun 24 Aug 2025 20:30:07 +0000 Manifest next update: Sun 31 Aug 2025 20:30:07 +0000 Files and hashes: 1: vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl (hash: j4rquyOqB5iSBUt9mbrpnOyDpIPqC9mHzq3uvn5uMPU=) 2: 1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (hash: MbzDlkokZBR/aS6/hcoRXo43UcCAHhzz3LI8ih+FSVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6 Validity Not Before: Aug 24 20:30:07 2025 GMT Not After : Aug 31 20:30:07 2025 GMT Subject: CN=68ab7650-3c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c4:ce:e3:c3:cc:d2:47:c4:1a:66:d5:38:0f: 56:78:c4:8f:9c:45:3e:fe:4c:6a:a3:f0:c9:c4:6f: 5d:ca:7f:0a:ff:91:2c:8f:55:eb:97:b7:8f:21:88: d2:e3:77:3d:3e:9a:ab:7e:8c:12:a5:21:96:27:ff: b5:50:2b:22:36:11:c3:2b:1f:52:4c:9b:fd:3c:e6: 6d:4b:96:ba:be:cf:79:95:d5:05:69:31:cb:e5:c0: e1:c5:4b:f4:cb:f1:4d:a2:17:47:1c:4f:24:1b:57: 78:17:54:fa:5a:26:c2:f7:ab:d3:57:26:89:57:6f: 58:0d:de:72:47:c5:b4:46:0f:0c:35:89:d3:80:b6: e4:e5:d5:13:c1:68:8d:e9:68:d2:22:f5:30:67:47: 87:20:82:78:1b:e5:ff:01:09:0a:d0:37:8c:1b:57: 98:a3:da:c6:ca:10:31:c8:b2:8b:11:78:1f:98:68: 96:82:62:63:2c:80:39:57:0e:82:60:81:21:2c:17: 59:70:6b:58:fd:82:f6:20:74:67:1d:5f:72:10:2f: 0b:0d:b2:00:cf:3f:ac:6f:54:73:cc:01:9f:35:a4: 0b:22:48:a9:23:0a:f3:00:48:91:f1:b7:d2:50:9a: 62:a6:67:34:b3:18:41:ea:35:7e:c0:81:31:11:ac: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E6:D7:07:B5:D3:60:A0:E4:CD:52:99:78:44:76:95:68:EE:3C:47 X509v3 Authority Key Identifier: keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f7:3b:81:de:e1:04:b8:16:88:da:a4:57:e2:97:6c:86:6c:f7: 26:03:ed:1e:7d:85:05:b8:d4:d7:50:bb:b6:2a:19:84:52:d5: 94:a2:40:d9:4e:f0:f2:3d:fb:61:6b:af:a5:ef:bd:f2:1c:22: e6:a7:42:e7:ec:96:ec:de:25:af:45:b4:b3:b6:87:ad:8c:c8: 98:86:6e:04:a7:da:85:83:bb:d4:3c:40:d9:85:49:23:4b:52: c3:f3:01:82:d2:0b:de:7b:98:8c:01:f2:3c:12:87:ec:1f:97: fc:11:2f:6f:6c:c7:b5:9e:f4:68:88:5f:bb:da:c6:28:1b:ed: 7c:f5:18:2e:b5:6a:86:69:c3:48:28:96:46:1e:b8:26:c1:9a: c9:e1:9d:20:bb:10:3c:d0:b5:38:46:20:80:22:44:0d:9e:dc: c9:88:66:83:73:d6:37:a5:be:a5:9a:91:63:f8:0b:5a:b7:34: 8a:5f:90:31:fd:50:5e:54:1f:4d:bd:eb:94:cd:f8:5e:0c:42: 14:5b:c8:f4:99:42:a8:d1:b4:1a:ed:a2:f6:cb:4b:67:a1:89: 1c:1c:78:97:cd:8e:0e:4b:b0:20:7a:cf:1d:e4:de:33:77:5c: 7e:ae:2b:72:07:71:e0:b5:be:24:ad:f8:3f:fb:d6:01:ba:64: d9:09:10:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzQzMxMTAvBgNVBAUTKEJENjA5NjYzRTM5NjMyRTJFN0I3NEZEQ0QzNzJBN0RD QzVGMDI5QTYwHhcNMjUwODI0MjAzMDA3WhcNMjUwODMxMjAzMDA3WjAYMRYwFAYD VQQDEw02OGFiNzY1MC0zYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMTO48PM0kfEGmbVOA9WeMSPnEU+/kxqo/DJxG9dyn8K/5Esj1Xrl7ePIYjS 43c9PpqrfowSpSGWJ/+1UCsiNhHDKx9STJv9POZtS5a6vs95ldUFaTHL5cDhxUv0 y/FNohdHHE8kG1d4F1T6WibC96vTVyaJV29YDd5yR8W0Rg8MNYnTgLbk5dUTwWiN 6WjSIvUwZ0eHIIJ4G+X/AQkK0DeMG1eYo9rGyhAxyLKLEXgfmGiWgmJjLIA5Vw6C YIEhLBdZcGtY/YL2IHRnHV9yEC8LDbIAzz+sb1RzzAGfNaQLIkipIwrzAEiR8bfS UJpipmc0sxhB6jV+wIExEax7YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnm1we1 02Cg5M1SmXhEdpVo7jxHMB8GA1UdIwQYMBaAFL1glmPjljLi57dP3NNyp9zF8Cmm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDNDMy85OEQ4NTAwNkJD RTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011TG50MF9jMDNLbjNNWHdL YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZXQ1dZLU9XTXVMbnQwX2MwM0tuM01Yd0thWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDNDMy85OEQ4NTAwNkJDRTQxMUVBQjhENkQzNjJDNEY5QUUwMi92V0NXWS1PV011 TG50MF9jMDNLbjNNWHdLYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD3O4He4QS4FojapFfil2yGbPcmA+0efYUFuNTXULu2KhmEUtWUokDZ TvDyPftha6+l773yHCLmp0Ln7Jbs3iWvRbSztoetjMiYhm4Ep9qFg7vUPEDZhUkj S1LD8wGC0gvee5iMAfI8EofsH5f8ES9vbMe1nvRoiF+72sYoG+189RgutWqGacNI KJZGHrgmwZrJ4Z0guxA80LU4RiCAIkQNntzJiGaDc9Y3pb6lmpFj+AtatzSKX5Ax /VBeVB9NveuUzfheDEIUW8j0mUKo0bQa7aL2y0tnoYkcHHiXzY4OS7Ages8d5N4z d1x+rityB3Hgtb4krfg/+9YBumTZCRBv -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:55 2025 by rpki-client