$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft File: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json) Hash identifier: SnUVbvHsrc7GRoGmVYYzrwgYs08mwh9BUl161UwbF7Q= Subject key identifier: 6F:B7:4E:76:D3:26:83:0B:AC:88:92:1B:A7:C5:40:81:3A:0A:0F:75 Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B Certificate issuer: /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Certificate serial: 1154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft Manifest number: 1140 Signing time: Sun 24 Aug 2025 17:14:04 +0000 Manifest this update: Sun 24 Aug 2025 17:14:04 +0000 Manifest next update: Sun 31 Aug 2025 17:14:04 +0000 Files and hashes: 1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: vs0YaZ//8/mHet+RbvkEIeaZM/qbZvpmBqatL4wJJqA=) 2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: tE2E6js3kYa62zkqmiLT/NNljtVICethnlU6hDIPGMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4436 (0x1154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B Validity Not Before: Aug 24 17:14:04 2025 GMT Not After : Aug 31 17:14:04 2025 GMT Subject: CN=68ab485c-03f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:a2:b1:9a:72:dd:02:c7:b8:60:9d:2f:f4: 7e:db:43:98:11:36:9c:53:fe:e8:94:92:4d:a1:c5: e8:8f:a9:5a:34:d1:7c:c1:e3:48:37:0c:19:51:bf: b8:7b:a8:9a:79:c3:d4:cc:87:45:ee:a9:b5:75:bf: 64:6e:88:f3:92:90:13:00:e2:ce:f4:9f:5e:3a:a1: e3:6f:90:99:75:52:ab:4c:6a:ad:c0:58:3a:21:b4: 85:f2:88:4c:0d:ca:15:2e:04:27:cd:5c:fa:13:f3: 16:72:9e:64:af:d7:c6:7e:d3:21:56:ab:9f:ad:d3: f4:b5:36:3d:e4:e7:67:36:34:6b:18:42:92:6c:82: 3e:22:eb:cc:94:4c:74:5f:cc:fe:15:fc:3b:b1:ba: fd:f1:e1:fa:93:e3:91:4d:58:83:cc:22:e1:fe:5a: 4b:28:01:99:db:c9:cb:e4:95:7d:27:09:87:0a:98: 9d:2a:8d:e9:ca:2e:e1:2a:6f:8e:84:24:32:03:39: 5e:c7:85:87:b8:e3:72:4b:74:30:ec:3f:53:43:e3: 20:55:77:de:99:81:ea:77:2f:0e:59:e8:c2:90:d4: 56:30:f7:8b:f9:6b:43:ee:b6:64:04:75:ae:ae:4a: 5b:0c:1e:be:9a:a5:24:1d:d9:89:d2:6e:cb:14:a0: 35:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B7:4E:76:D3:26:83:0B:AC:88:92:1B:A7:C5:40:81:3A:0A:0F:75 X509v3 Authority Key Identifier: keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:bb:4f:42:69:dd:77:b4:4b:ff:09:c9:7c:c4:89:f6:eb:73: 46:61:a2:73:c8:45:e0:0d:4d:c9:93:ee:10:02:81:b7:0c:1d: 2f:a9:d2:7d:d5:c8:b8:2f:af:f5:8f:30:3f:7f:1a:30:21:4c: 43:07:1e:17:02:fc:92:e8:55:f9:3f:8d:73:7f:1d:71:38:d2: cb:2b:19:92:dd:89:c6:c8:a5:2b:f9:d5:65:94:63:dd:fd:f6: 97:bd:1f:31:a0:66:3c:9b:d1:c2:6d:f6:d8:73:bd:09:84:84: 1a:17:93:ae:2a:5c:7c:23:85:28:3a:17:69:78:30:b0:bb:dc: 77:e4:f2:67:cf:fd:a1:a6:14:d9:b6:da:9f:95:f6:b3:76:dc: 09:70:26:9f:5f:e2:65:62:6a:1d:d7:06:f2:29:22:8f:87:3b: 7a:78:ff:0d:7e:dc:3f:ca:c0:11:b4:19:c4:f7:9b:3c:15:dc: 29:58:43:58:bb:05:fd:90:64:17:dd:02:e6:02:f4:98:dc:db: 0a:b4:01:e8:47:3c:03:79:af:29:a6:fd:43:95:04:2d:81:ef: fc:2c:f2:f6:75:88:c6:c3:50:de:a1:4a:46:5f:07:a7:55:8a: e4:46:43:5e:b0:f8:59:83:1a:ef:ec:55:dc:f9:02:63:02:89: 0c:cd:62:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBCNjUxMTAvBgNVBAUTKEMwNTcxMTlDQTQ1REQzMTQyMTVDNjFFMDlCRjg3MUQ0 OEFCQjVGOUIwHhcNMjUwODI0MTcxNDA0WhcNMjUwODMxMTcxNDA0WjAYMRYwFAYD VQQDEw02OGFiNDg1Yy0wM2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKyisZpy3QLHuGCdL/R+20OYETacU/7olJJNocXoj6laNNF8weNINwwZUb+4 e6iaecPUzIdF7qm1db9kbojzkpATAOLO9J9eOqHjb5CZdVKrTGqtwFg6IbSF8ohM DcoVLgQnzVz6E/MWcp5kr9fGftMhVqufrdP0tTY95OdnNjRrGEKSbII+IuvMlEx0 X8z+Ffw7sbr98eH6k+ORTViDzCLh/lpLKAGZ28nL5JV9JwmHCpidKo3pyi7hKm+O hCQyAzlex4WHuONyS3Qw7D9TQ+MgVXfemYHqdy8OWejCkNRWMPeL+WtD7rZkBHWu rkpbDB6+mqUkHdmJ0m7LFKA1KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+3TnbT JoMLrIiSG6fFQIE6Cg91MB8GA1UdIwQYMBaAFMBXEZykXdMUIVxh4Jv4cdSKu1+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEI2NS9FNkU0MjJBNjE1 NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4UWhYR0hnbV9oeDFJcTdY NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dGY1JuS1JkMHhRaFhHSGdtX2h4MUlxN1g1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEI2NS9FNkU0MjJBNjE1NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4 UWhYR0hnbV9oeDFJcTdYNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABu09Cad13tEv/Ccl8xIn263NGYaJzyEXgDU3Jk+4QAoG3DB0vqdJ9 1ci4L6/1jzA/fxowIUxDBx4XAvyS6FX5P41zfx1xONLLKxmS3YnGyKUr+dVllGPd /faXvR8xoGY8m9HCbfbYc70JhIQaF5OuKlx8I4UoOhdpeDCwu9x35PJnz/2hphTZ ttqflfazdtwJcCafX+JlYmod1wbyKSKPhzt6eP8Nftw/ysARtBnE95s8FdwpWENY uwX9kGQX3QLmAvSY3NsKtAHoRzwDea8ppv1DlQQtge/8LPL2dYjGw1DeoUpGXwen VYrkRkNesPhZgxrv7FXc+QJjAokMzWIY -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:16 2025 by rpki-client