$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft File: w-IA1ABdmiPkv66uDtty6kPx0JY.mft (raw, json) Hash identifier: tP0hCvtf13C8zDXyR1QqMabNk07b2jqjkBCNtSgVn90= Subject key identifier: 4C:D1:11:74:2C:36:A3:1B:13:06:F3:24:7A:91:D1:D6:6C:FF:A0:E6 Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft Manifest number: 0127 Signing time: Fri 05 Sep 2025 04:43:33 +0000 Manifest this update: Fri 05 Sep 2025 04:43:33 +0000 Manifest next update: Fri 12 Sep 2025 04:43:33 +0000 Files and hashes: 1: w-IA1ABdmiPkv66uDtty6kPx0JY.crl (hash: Z/vFF3db3hB9bf7Y9MopUr7NnRmkX1DKq3qUmNr9hio=) 2: C19C2720CA2711EE82C12B0CC4F9AE02.roa (hash: VHJTWsm4wzJziIer/htU6hv3gqL/KMd1K2nOD3+RJsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096 Validity Not Before: Sep 5 04:43:33 2025 GMT Not After : Sep 12 04:43:33 2025 GMT Subject: CN=68ba6a75-2e51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:71:ca:de:a8:b1:49:cd:91:ab:c0:4d:97: 0d:9d:3f:df:49:3c:a8:27:bf:70:d4:d6:26:44:45: 27:62:04:59:d5:f3:29:07:3d:9e:a7:45:b6:97:63: 19:22:aa:1f:17:a6:9a:fa:95:a3:0b:d8:45:b9:3f: ee:ee:07:b7:bd:00:57:de:24:84:66:0c:e3:e3:b2: 38:bd:c8:44:ba:b4:18:82:98:79:a4:b4:4e:e0:a9: fc:d0:22:f8:0e:31:4a:f6:3f:d1:7d:c7:e8:19:c7: c1:1e:d5:6d:86:35:c0:c8:5d:3a:65:e6:a7:d5:1d: a8:b8:a5:b5:80:cb:0e:56:b9:d8:be:dd:23:09:26: d3:86:47:44:c6:66:9f:69:47:a5:d0:7c:fd:6f:85: a1:19:81:45:08:a9:fa:bc:32:46:35:fc:ec:61:64: a9:d9:ad:05:74:d9:4f:12:c9:fe:9d:12:15:b7:bd: ab:1e:ec:cf:c0:f1:c5:32:b4:58:d2:c0:9c:e5:aa: 01:d1:10:a4:fc:a4:0b:51:c5:b1:17:1e:3e:62:33: b7:6b:2d:85:fc:1e:69:c7:79:00:74:fd:0c:be:50: f2:a6:df:be:d7:b4:67:69:59:57:7e:6c:50:1b:77: 8a:52:7b:5d:b7:cb:0e:f2:cb:09:cd:cb:bb:81:5f: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D1:11:74:2C:36:A3:1B:13:06:F3:24:7A:91:D1:D6:6C:FF:A0:E6 X509v3 Authority Key Identifier: keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b8:72:72:f9:26:54:3b:eb:99:87:10:12:04:b8:c3:32:a4: 86:e4:f0:1c:7c:31:6c:0a:0c:a7:90:f0:33:28:97:c9:02:ad: f3:f6:2a:90:c2:70:02:8a:a8:8f:36:d2:b1:83:e5:58:bf:5d: 7a:e1:c5:cd:77:0b:6a:73:5f:bb:13:3a:c1:b9:77:01:64:ec: 84:5c:2b:de:0f:5c:ab:5b:fb:5a:44:93:4e:62:98:52:39:73: a4:19:ef:59:33:ca:6a:04:13:fa:77:cc:5e:5a:09:fe:1e:e0: 77:96:42:d3:68:39:31:53:8b:06:00:c5:04:d4:e3:28:d3:a1: f5:21:c0:17:8b:ee:6d:dc:25:9a:01:24:85:2a:4a:2c:f4:5d: 5d:6e:52:1c:ff:2c:f6:5f:29:ac:c1:0c:0a:dc:12:10:a5:03: ba:9b:df:d0:c4:68:74:47:c4:dd:26:38:bd:8e:65:8c:f1:35: 26:e1:85:74:45:5f:a6:07:c2:43:fc:5d:67:dc:07:97:10:34: 92:60:d2:42:92:67:1a:4a:ce:4d:25:de:7b:ec:08:bd:7a:87: ea:79:01:34:a7:5e:0a:d9:9c:a2:70:3f:4a:15:a6:bd:cc:d6: 6f:57:21:45:52:b5:06:d4:88:a8:b1:cd:ae:b9:0c:ff:c7:93: bd:91:53:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QxQTIxMTAvBgNVBAUTKEMzRTIwMEQ0MDA1RDlBMjNFNEJGQUVBRTBFREI3MkVB NDNGMUQwOTYwHhcNMjUwOTA1MDQ0MzMzWhcNMjUwOTEyMDQ0MzMzWjAYMRYwFAYD VQQDEw02OGJhNmE3NS0yZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5xxyt6osUnNkavATZcNnT/fSTyoJ79w1NYmREUnYgRZ1fMpBz2ep0W2l2MZ IqofF6aa+pWjC9hFuT/u7ge3vQBX3iSEZgzj47I4vchEurQYgph5pLRO4Kn80CL4 DjFK9j/RfcfoGcfBHtVthjXAyF06Zean1R2ouKW1gMsOVrnYvt0jCSbThkdExmaf aUel0Hz9b4WhGYFFCKn6vDJGNfzsYWSp2a0FdNlPEsn+nRIVt72rHuzPwPHFMrRY 0sCc5aoB0RCk/KQLUcWxFx4+YjO3ay2F/B5px3kAdP0MvlDypt++17RnaVlXfmxQ G3eKUntdt8sO8ssJzcu7gV+2qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzREXQs NqMbEwbzJHqR0dZs/6DmMB8GA1UdIwQYMBaAFMPiANQAXZoj5L+urg7bcupD8dCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDFBMi8xQTFFM0RFNEM5 RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1pUGt2NjZ1RHR0eTZrUHgw SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ctSUExQUJkbWlQa3Y2NnVEdHR5NmtQeDBKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDFBMi8xQTFFM0RFNEM5RkExMUVFODNGNUIwMjlDNEY5QUUwMi93LUlBMUFCZG1p UGt2NjZ1RHR0eTZrUHgwSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/uHJy+SZUO+uZhxASBLjDMqSG5PAcfDFsCgynkPAzKJfJAq3z9iqQ wnACiqiPNtKxg+VYv1164cXNdwtqc1+7EzrBuXcBZOyEXCveD1yrW/taRJNOYphS OXOkGe9ZM8pqBBP6d8xeWgn+HuB3lkLTaDkxU4sGAMUE1OMo06H1IcAXi+5t3CWa ASSFKkos9F1dblIc/yz2XymswQwK3BIQpQO6m9/QxGh0R8TdJji9jmWM8TUm4YV0 RV+mB8JD/F1n3AeXEDSSYNJCkmcaSs5NJd577Ai9eofqeQE0p14K2ZyicD9KFaa9 zNZvVyFFUrUG1Iiosc2uuQz/x5O9kVMz -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:06 2025 by rpki-client