$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft File: iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft (raw, json) Hash identifier: CnUuyf0xmsuVmb8yTBCLMbQBOm0dcEUx4/TS37I44Vw= Subject key identifier: 9A:34:BF:BA:DC:49:8F:BB:6F:D0:B0:43:74:D1:BC:03:89:E0:73:8A Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 1146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft Manifest number: 113C Signing time: Wed 20 Aug 2025 17:20:55 +0000 Manifest this update: Wed 20 Aug 2025 17:20:55 +0000 Manifest next update: Wed 27 Aug 2025 17:20:55 +0000 Files and hashes: 1: iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl (hash: 7HPgDe87WrL5nlX5Y8WrN8sRtZtGtFVOr1PF3jL1YeY=) 2: 6127B9001FE711ECB8454E83C4F9AE02.roa (hash: +yvtNS8LKQHKe3DTi4wIovOu3eQ4uVvjs9/gUB2eHD0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4422 (0x1146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Aug 20 17:20:55 2025 GMT Not After : Aug 27 17:20:55 2025 GMT Subject: CN=68a603f7-b529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d6:ec:5d:bb:72:20:d2:23:f8:40:80:d9:6d: e0:72:08:01:93:c2:25:34:83:e4:99:43:f5:7b:2b: ef:b2:56:79:10:ff:0c:5a:cf:4a:41:d5:a9:40:80: e7:ce:fe:80:4a:84:f1:7f:91:d5:fa:1d:71:86:02: 55:e1:17:83:e2:24:0f:f6:67:6e:96:66:f9:1e:c0: 31:ba:c7:8e:a8:1a:ea:97:6e:8b:b5:21:15:44:14: f9:a7:09:ca:69:67:5f:fc:cd:d6:5b:6c:6a:5e:17: 66:1c:f5:74:a2:97:9d:c9:fd:ab:1c:21:57:02:e1: 3e:55:cc:dd:4e:4c:ab:0b:9b:eb:77:52:fc:a9:21: e6:8f:ab:f4:12:78:3f:93:59:66:6d:e3:83:64:75: 4e:ce:0e:a2:a4:47:be:a0:9c:6d:59:a3:13:07:eb: 68:84:d7:0e:f7:de:fe:db:81:a2:94:2a:84:34:96: 0a:da:5b:91:38:88:5f:a7:46:70:14:93:48:9b:a2: 7e:e1:93:ae:b1:0e:3e:bd:58:66:32:9b:f5:73:0f: 34:99:86:f0:a3:e8:e1:f9:cf:c1:02:cc:11:08:b2: a6:38:84:ba:64:c5:bb:00:18:37:c3:0d:ef:ec:d1: dc:d1:a2:dc:de:6c:53:09:80:0c:ac:a5:f3:37:40: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:34:BF:BA:DC:49:8F:BB:6F:D0:B0:43:74:D1:BC:03:89:E0:73:8A X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:34:36:8e:d6:16:d9:d5:be:fd:a6:dc:d7:a2:01:a2:82:d6: a1:4a:24:a7:32:6e:7a:e9:6b:6e:8e:60:dc:a1:79:8f:9a:dd: 50:93:50:3b:31:0f:c7:ca:c7:37:ce:a5:6a:06:b8:8e:d9:e3: 93:70:f5:9e:d8:30:8b:eb:f9:13:b1:1f:03:a1:28:81:25:3e: df:27:5e:22:fa:44:a3:17:d0:2c:e2:84:f5:d1:c0:22:ec:e1: 53:a8:52:77:b8:13:25:87:62:dc:d5:4d:c7:7f:2c:9c:37:af: 6f:bd:ea:f2:5e:0b:a0:b9:e0:b8:1a:ac:59:99:02:8c:30:bd: 64:f8:40:1e:ae:dd:e7:01:e5:88:e0:02:c6:fc:e6:10:2c:bd: ea:55:eb:43:2a:03:b3:c1:9c:f2:87:6c:2f:3b:5a:17:ed:8d: 3b:54:a1:f8:a2:16:77:a8:49:53:14:9a:b5:c8:53:97:ec:94: 4d:32:b0:f5:57:7d:12:c2:59:e3:e5:75:35:c7:54:3a:66:e9: ab:d0:2a:fd:c9:cc:25:a4:a3:04:c4:0b:fd:3d:fb:72:ff:06: 17:72:74:45:e9:f3:a4:9a:3a:49:12:98:15:65:f8:54:0c:fb: 79:e3:89:2b:fc:82:79:ad:cc:e2:d9:a5:b5:98:a7:3d:73:fe: 81:a8:e3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjUwODIwMTcyMDU1WhcNMjUwODI3MTcyMDU1WjAYMRYwFAYD VQQDEw02OGE2MDNmNy1iNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdbsXbtyINIj+ECA2W3gcggBk8IlNIPkmUP1eyvvslZ5EP8MWs9KQdWpQIDn zv6ASoTxf5HV+h1xhgJV4ReD4iQP9mdulmb5HsAxuseOqBrql26LtSEVRBT5pwnK aWdf/M3WW2xqXhdmHPV0opedyf2rHCFXAuE+VczdTkyrC5vrd1L8qSHmj6v0Eng/ k1lmbeODZHVOzg6ipEe+oJxtWaMTB+tohNcO997+24GilCqENJYK2luROIhfp0Zw FJNIm6J+4ZOusQ4+vVhmMpv1cw80mYbwo+jh+c/BAswRCLKmOIS6ZMW7ABg3ww3v 7NHc0aLc3mxTCYAMrKXzN0CVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo0v7rc SY+7b9CwQ3TRvAOJ4HOKMB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzA3OC82NkM4MzAyQzEzQkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRz OXI5VWpOTlZsdDZwWF9XRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0NDaO1hbZ1b79ptzXogGigtahSiSnMm566WtujmDcoXmPmt1Qk1A7 MQ/Hysc3zqVqBriO2eOTcPWe2DCL6/kTsR8DoSiBJT7fJ14i+kSjF9As4oT10cAi 7OFTqFJ3uBMlh2Lc1U3HfyycN69vveryXgugueC4GqxZmQKMML1k+EAert3nAeWI 4ALG/OYQLL3qVetDKgOzwZzyh2wvO1oX7Y07VKH4ohZ3qElTFJq1yFOX7JRNMrD1 V30Swlnj5XU1x1Q6Zumr0Cr9ycwlpKMExAv9Pfty/wYXcnRF6fOkmjpJEpgVZfhU DPt544kr/IJ5rczi2aW1mKc9c/6BqOP7 -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:15 2025 by rpki-client