$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft File: vAWTxH2s9senekHgfeuaBhYxpIQ.mft (raw, json) Hash identifier: w5cT9cWfspUNgXSALuADhGFf/CZ+/DqT9e66BMpHP2Y= Subject key identifier: 1C:00:8F:13:D5:6C:73:DB:C1:5D:B0:C8:11:D3:C8:84:3B:55:59:8E Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 Certificate issuer: /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft Manifest number: C6 Signing time: Mon 21 Jul 2025 05:55:20 +0000 Manifest this update: Mon 21 Jul 2025 05:55:19 +0000 Manifest next update: Mon 28 Jul 2025 05:55:19 +0000 Files and hashes: 1: vAWTxH2s9senekHgfeuaBhYxpIQ.crl (hash: vWZuSfKmwJ8UHeUuB6QiXdnXJF6p1h2VKBPMSiNFmTA=) 2: 0D5C00AC38E311EF99F62432C4F9AE02.roa (hash: xQMEY6P6f4jmqeDgv/TImb1ka64GtPCQvQqQLQx2M8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484 Validity Not Before: Jul 21 05:55:19 2025 GMT Not After : Jul 28 05:55:19 2025 GMT Subject: CN=687dd648-4984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:6d:eb:8b:3d:4e:7d:c4:86:a7:9c:6e:21: 39:79:71:c0:a8:bb:d6:92:9b:ad:9f:08:22:26:86: 29:95:7c:59:9c:0f:0a:fb:5e:41:e2:04:b3:3c:a7: 82:dc:d9:64:6d:ab:28:4c:a7:84:79:c8:e7:7f:d6: f2:66:c8:c2:4c:2c:f3:4f:d6:5a:42:5d:96:ce:0e: 0c:c9:ee:ed:7a:e9:d9:a6:73:d5:37:7b:8e:ee:3b: 2e:89:d8:c0:3f:d1:f0:96:c6:51:ba:0b:7d:d8:e3: 9b:5f:15:14:32:03:55:54:2d:39:66:47:d7:78:45: ea:35:88:b1:5f:a3:c5:96:59:56:59:ee:97:6b:e0: 49:8d:b4:51:90:7b:03:a9:81:14:47:ae:47:1d:84: 6b:50:22:fa:80:83:ff:67:eb:40:1d:1e:07:11:a3: 75:48:1e:0c:c1:eb:a7:5c:22:3b:f2:93:ac:a1:d6: 4c:0c:eb:a9:c0:f3:40:c9:bc:fa:0a:d8:d1:56:7b: e9:96:d5:6c:9e:bd:f2:75:45:f8:ac:30:28:aa:ca: c4:9f:c1:3a:9d:d3:22:a0:f1:4b:4f:b8:a2:98:91: 50:e1:50:34:ea:2d:03:6d:b6:cb:24:75:22:68:6b: bd:8d:1f:43:e5:23:e6:d0:d8:25:7a:0b:fa:57:21: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:00:8F:13:D5:6C:73:DB:C1:5D:B0:C8:11:D3:C8:84:3B:55:59:8E X509v3 Authority Key Identifier: keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0b:72:86:40:c5:d1:b2:57:22:10:8b:9f:f8:b0:60:02:40: d7:2d:36:62:3e:17:05:fa:4a:5a:a2:d5:b0:54:67:6e:e9:8e: cc:1b:77:3e:60:1b:d6:61:31:ba:d4:d8:c6:78:4f:54:94:5a: 94:62:da:55:59:50:5b:02:62:67:bf:d9:b3:f6:9d:c7:36:2e: 2e:a1:a2:e0:96:e4:8b:dd:13:55:6e:9d:b3:d1:4b:f2:7f:38: 7d:91:43:2c:a9:93:0d:ce:7d:52:d6:18:13:c1:09:66:3c:2d: 73:27:76:f9:81:6c:cf:04:44:08:52:8e:8d:2a:df:2f:5e:d3: b7:bc:d7:a3:ab:7e:82:4e:85:e9:a4:6b:ac:2b:82:db:3a:6e: 56:2d:79:62:03:0d:7f:81:0d:e2:c1:25:d2:22:5e:ec:0f:bd: 3c:57:f8:9f:cb:f8:58:80:c0:05:c0:e4:62:f5:dd:4e:5c:40: df:90:b7:97:16:14:b0:85:37:45:8e:cd:e7:50:e6:0d:ec:6f: 91:5c:e5:1b:cc:4d:57:14:26:d4:3c:2f:a7:34:a8:d5:cc:05: 60:3c:26:1d:52:f3:2f:c6:37:b9:48:5b:9c:f2:a4:91:1b:3b: 5f:10:fe:34:ff:ac:4f:22:14:72:88:52:b9:22:86:e3:8c:0a: 69:08:85:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKEJDMDU5M0M0N0RBQ0Y2QzdBNzdBNDFFMDdERUI5QTA2 MTYzMUE0ODQwHhcNMjUwNzIxMDU1NTE5WhcNMjUwNzI4MDU1NTE5WjAYMRYwFAYD VQQDEw02ODdkZDY0OC00OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSdt64s9Tn3EhqecbiE5eXHAqLvWkputnwgiJoYplXxZnA8K+15B4gSzPKeC 3NlkbasoTKeEecjnf9byZsjCTCzzT9ZaQl2Wzg4Mye7teunZpnPVN3uO7jsuidjA P9HwlsZRugt92OObXxUUMgNVVC05ZkfXeEXqNYixX6PFlllWWe6Xa+BJjbRRkHsD qYEUR65HHYRrUCL6gIP/Z+tAHR4HEaN1SB4MweunXCI78pOsodZMDOupwPNAybz6 CtjRVnvpltVsnr3ydUX4rDAoqsrEn8E6ndMioPFLT7iimJFQ4VA06i0DbbbLJHUi aGu9jR9D5SPm0Nglegv6VyE67QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwAjxPV bHPbwV2wyBHTyIQ7VVmOMB8GA1UdIwQYMBaAFLwFk8R9rPbHp3pB4H3rmgYWMaSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8yODQwQzhBNjM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlzZW5la0hnZmV1YUJoWXhw SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZBV1R4SDJzOXNlbmVrSGdmZXVhQmhZeHBJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8yODQwQzhBNjM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi92QVdUeEgyczlz ZW5la0hnZmV1YUJoWXhwSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2C3KGQMXRslciEIuf+LBgAkDXLTZiPhcF+kpaotWwVGdu6Y7MG3c+ YBvWYTG61NjGeE9UlFqUYtpVWVBbAmJnv9mz9p3HNi4uoaLgluSL3RNVbp2z0Uvy fzh9kUMsqZMNzn1S1hgTwQlmPC1zJ3b5gWzPBEQIUo6NKt8vXtO3vNejq36CToXp pGusK4LbOm5WLXliAw1/gQ3iwSXSIl7sD708V/ify/hYgMAFwORi9d1OXEDfkLeX FhSwhTdFjs3nUOYN7G+RXOUbzE1XFCbUPC+nNKjVzAVgPCYdUvMvxje5SFuc8qSR GztfEP40/6xPIhRyiFK5IobjjAppCIX9 -----END CERTIFICATE-----Generated at Wed Jul 23 02:10:56 2025 by rpki-client