$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft File: wsO6iC7D3Pwn8TzociVgfaqheE0.mft (raw, json) Hash identifier: ++skQCLK56/DbTPcwavTQ/eHb+RlVgsN5CNk4IdQhvw= Subject key identifier: 67:6F:08:7F:1D:27:47:35:BE:27:81:2A:BF:6A:36:5F:83:A7:AF:C5 Authority key identifier: C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D Certificate issuer: /CN=A91D3ED4/serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Certificate serial: 058F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft Manifest number: 0588 Signing time: Mon 08 Sep 2025 23:18:45 +0000 Manifest this update: Mon 08 Sep 2025 23:18:44 +0000 Manifest next update: Mon 15 Sep 2025 23:18:44 +0000 Files and hashes: 1: wsO6iC7D3Pwn8TzociVgfaqheE0.crl (hash: tSALZr40kljAWK5cf6RfFNXGHrBKlbURYGrkLXaO9gw=) 2: B84B847AEF3911EBACC9E938C4F9AE02.roa (hash: z4OD50JJqcb5eLqgxPYFpu+0WPLJOBG84/py9BkQ1lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1423 (0x58f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3ED4, serialNumber=C2C3BA882EC3DCFC27F13CE87225607DAAA1784D Validity Not Before: Sep 8 23:18:44 2025 GMT Not After : Sep 15 23:18:44 2025 GMT Subject: CN=68bf6454-2394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:15:c9:15:88:19:48:ff:64:d3:42:f9:bb:d8: 89:e2:48:52:e5:47:b5:29:b3:17:82:2d:89:7d:d0: 48:dd:a5:ef:23:2c:24:02:df:bc:fd:21:5b:9f:9e: e6:ca:1d:51:be:f8:2e:9c:ea:db:b4:0c:73:c3:e9: a1:6f:2a:d7:e1:48:e7:f3:cb:fe:7a:76:83:e6:df: d7:d4:3f:14:41:32:fb:2c:99:7e:d0:c5:e4:3c:58: eb:4d:25:cc:49:b8:27:03:1f:21:1f:14:22:7e:d4: 02:8c:39:63:d4:ef:06:de:da:f9:e2:e3:07:e3:1f: 91:a0:05:22:3d:1a:4e:50:2e:8b:47:0f:b7:17:17: 8e:62:51:c9:ef:de:33:9d:f8:74:1d:ea:a6:65:ce: 87:44:a3:cf:4d:5d:8f:e4:7d:ad:05:ec:0f:c7:66: 6b:9f:7b:f3:63:5e:bd:35:5c:fb:35:99:51:fa:70: fa:43:d0:75:95:46:21:d2:8f:7a:86:ca:e3:49:ba: 74:fe:dd:46:28:ab:94:f3:ce:61:3c:3a:fc:67:b9: c1:0f:86:5f:10:4b:0f:fa:38:59:58:9c:da:0c:18: 59:ba:88:26:66:66:45:47:1c:75:70:46:16:1e:1f: 4f:d0:bc:f8:ac:4b:7c:85:f2:6f:93:e0:ce:e0:f6: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:08:7F:1D:27:47:35:BE:27:81:2A:BF:6A:36:5F:83:A7:AF:C5 X509v3 Authority Key Identifier: keyid:C2:C3:BA:88:2E:C3:DC:FC:27:F1:3C:E8:72:25:60:7D:AA:A1:78:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsO6iC7D3Pwn8TzociVgfaqheE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3ED4/29078A72EF3711EB91768A36C4F9AE02/wsO6iC7D3Pwn8TzociVgfaqheE0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b9:b7:aa:11:eb:0f:c7:fb:a0:06:19:09:18:7e:ae:11:f1: 1f:73:16:42:17:38:75:e8:32:b4:21:2d:5d:3b:08:d4:d1:04: 93:92:74:ad:7a:95:fa:b9:0c:44:01:aa:c3:1e:c4:58:a8:f9: c6:4a:bb:c7:8e:49:d5:24:08:0f:d4:ea:3a:58:4e:be:66:ba: 77:0e:04:02:77:2d:b7:88:63:b4:44:aa:b5:8e:40:65:cc:a7: 09:76:33:54:b8:68:84:27:93:85:c5:38:9c:ac:e5:e9:eb:e0: ed:13:f6:d3:f4:50:ec:a6:d4:72:51:67:01:32:fc:4a:cd:0e: 4c:5e:94:9b:ab:55:59:7e:35:fc:84:5a:00:63:fd:85:79:d4: 48:3f:da:ed:d7:b6:fe:4a:f7:16:02:00:af:8d:2f:77:c9:99: 60:be:68:7e:48:81:6c:45:e3:f4:44:22:87:73:b2:85:84:f5: 40:35:0f:32:f6:1e:80:c7:e4:c9:f3:24:16:5e:74:42:a1:93: e0:9e:a0:f6:44:42:a0:c6:f2:55:1f:61:2d:c9:ae:6d:a7:11: 13:8b:59:c0:88:bc:aa:31:f6:0c:93:8d:ae:26:a9:68:69:5a: 1e:58:cf:c7:f6:65:c4:72:cc:36:69:a3:0a:26:6f:ee:c2:d4: 1d:ba:e4:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNFRDQxMTAvBgNVBAUTKEMyQzNCQTg4MkVDM0RDRkMyN0YxM0NFODcyMjU2MDdE QUFBMTc4NEQwHhcNMjUwOTA4MjMxODQ0WhcNMjUwOTE1MjMxODQ0WjAYMRYwFAYD VQQDEw02OGJmNjQ1NC0yMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xXJFYgZSP9k00L5u9iJ4khS5Ue1KbMXgi2JfdBI3aXvIywkAt+8/SFbn57m yh1RvvgunOrbtAxzw+mhbyrX4Ujn88v+enaD5t/X1D8UQTL7LJl+0MXkPFjrTSXM SbgnAx8hHxQiftQCjDlj1O8G3tr54uMH4x+RoAUiPRpOUC6LRw+3FxeOYlHJ794z nfh0HeqmZc6HRKPPTV2P5H2tBewPx2Zrn3vzY169NVz7NZlR+nD6Q9B1lUYh0o96 hsrjSbp0/t1GKKuU885hPDr8Z7nBD4ZfEEsP+jhZWJzaDBhZuogmZmZFRxx1cEYW Hh9P0Lz4rEt8hfJvk+DO4Pb1RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdvCH8d J0c1vieBKr9qNl+Dp6/FMB8GA1UdIwQYMBaAFMLDuoguw9z8J/E86HIlYH2qoXhN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0VENC8yOTA3OEE3MkVG MzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQd244VHpvY2lWZ2ZhcWhl RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzTzZpQzdEM1B3bjhUem9jaVZnZmFxaGVFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE M0VENC8yOTA3OEE3MkVGMzcxMUVCOTE3NjhBMzZDNEY5QUUwMi93c082aUM3RDNQ d244VHpvY2lWZ2ZhcWhlRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtubeqEesPx/ugBhkJGH6uEfEfcxZCFzh16DK0IS1dOwjU0QSTknSt epX6uQxEAarDHsRYqPnGSrvHjknVJAgP1Oo6WE6+Zrp3DgQCdy23iGO0RKq1jkBl zKcJdjNUuGiEJ5OFxTicrOXp6+DtE/bT9FDsptRyUWcBMvxKzQ5MXpSbq1VZfjX8 hFoAY/2FedRIP9rt17b+SvcWAgCvjS93yZlgvmh+SIFsReP0RCKHc7KFhPVANQ8y 9h6Ax+TJ8yQWXnRCoZPgnqD2REKgxvJVH2Etya5tpxETi1nAiLyqMfYMk42uJqlo aVoeWM/H9mXEcsw2aaMKJm/uwtQduuQw -----END CERTIFICATE-----Generated at Wed Sep 10 00:02:39 2025 by rpki-client