$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft File: scWMB4UVntc2lq-zEtI1z0DzxEE.mft (raw, json) Hash identifier: n4oNgOxjqqiuUXYlCVubiOTCLQYXklhAEXMzm+1ypCc= Subject key identifier: 36:C4:E0:24:0F:E5:C7:2C:6D:6A:49:69:0B:B7:A8:BF:96:86:EE:3B Authority key identifier: B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 Certificate issuer: /CN=A91D6DBD/serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft Manifest number: 015E Signing time: Tue 09 Sep 2025 04:08:09 +0000 Manifest this update: Tue 09 Sep 2025 04:08:09 +0000 Manifest next update: Tue 16 Sep 2025 04:08:09 +0000 Files and hashes: 1: scWMB4UVntc2lq-zEtI1z0DzxEE.crl (hash: jW6tNvVGLDPSivxwfTU3ssbKWbOxEphu0GDz120r9Mo=) 2: FA39CA70790E11EE86665E43C4F9AE02.roa (hash: PywpmG3Ulp9yYEUj3QCP+G6Bg3pUo/7QBSMXR75Q4mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=B1C58C0785159ED73696AFB312D235CF40F3C441 Validity Not Before: Sep 9 04:08:09 2025 GMT Not After : Sep 16 04:08:09 2025 GMT Subject: CN=68bfa829-0e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:a7:d7:2b:09:45:87:d3:bd:c0:f8:fe:5f: fe:03:b9:f5:41:10:5d:98:d1:61:9a:bc:de:08:24: b1:81:ef:d6:8a:62:cb:08:25:f2:b4:da:35:b4:a9: 87:cc:3e:ee:07:85:73:30:ba:36:c1:05:46:77:ce: 54:2a:95:80:d4:09:4f:d5:09:ec:ba:da:20:a3:e9: b9:8d:a5:ff:5a:65:ef:df:db:0c:0d:23:07:33:58: 11:6e:68:41:3b:c0:7b:35:f6:75:6d:8c:7a:ce:21: 39:0e:c0:11:79:54:b1:92:f6:a8:7e:fb:d8:ef:e8: 2b:a2:01:c8:0e:7c:b9:0d:02:40:33:40:52:6c:e0: 30:1a:f5:dd:be:f7:3d:04:3a:08:02:cb:6f:a7:f5: 69:86:c4:2a:cf:30:22:cc:49:c1:14:6b:b9:79:3d: e4:f8:35:a1:c7:fc:37:c2:4b:d2:51:f7:e1:8f:ff: 5b:76:d1:42:d0:92:44:58:a3:da:48:dd:4b:48:c8: b6:74:36:35:c1:74:4d:2c:72:e4:1b:98:c5:29:1b: 62:02:00:dd:9e:54:10:2c:b3:3c:0d:34:3e:b1:4f: 6b:3d:09:8c:b4:f0:8e:fb:c5:83:f4:a3:cb:ed:e2: d7:20:bb:6e:20:2f:ac:72:75:3d:05:ed:c7:b9:fd: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C4:E0:24:0F:E5:C7:2C:6D:6A:49:69:0B:B7:A8:BF:96:86:EE:3B X509v3 Authority Key Identifier: keyid:B1:C5:8C:07:85:15:9E:D7:36:96:AF:B3:12:D2:35:CF:40:F3:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scWMB4UVntc2lq-zEtI1z0DzxEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/02AA4950790A11EE99EDD11FC4F9AE02/scWMB4UVntc2lq-zEtI1z0DzxEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:5e:7d:1d:bb:c7:38:f9:a0:c7:ad:7c:27:48:7c:5b:45:4a: 08:d8:04:ba:cd:61:0c:e1:20:b4:68:b6:de:7a:74:87:27:ea: a6:b6:60:5a:1a:11:4d:a5:68:a6:4a:c7:fd:e2:f5:0e:23:e9: df:67:47:23:e0:ad:77:be:c9:98:54:6f:55:9c:74:53:bc:13: e7:07:82:14:bc:ff:73:f4:b5:74:ef:b4:ee:2c:a7:89:09:b4: 30:e7:7d:51:9d:18:ad:5e:3d:33:9f:b2:00:92:d1:a2:89:4a: c1:84:cc:98:bd:95:f0:5e:16:52:f9:b2:08:e3:e4:af:aa:05: 31:48:c2:da:43:f7:ce:b0:9e:dc:5c:76:3f:6a:e6:82:fd:62: ef:1b:0e:fb:90:59:df:9f:6e:9e:ec:a5:05:6f:c5:6e:b9:0a: 0e:cf:1f:26:55:9f:db:0b:fb:12:d9:78:08:0d:bd:40:73:32: 07:31:39:a4:b6:81:5c:6e:1f:b1:43:69:f1:ee:33:a1:30:28: 7c:2a:92:1d:bd:03:05:05:5c:f2:8b:2d:0a:11:bc:7f:0b:04: e9:fa:db:86:54:ff:64:90:ce:67:e6:67:6c:af:bc:e4:fb:27: 51:b8:74:69:9d:0c:7c:70:c1:38:dd:bf:bf:5c:a5:0c:93:58: d0:21:72:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKEIxQzU4QzA3ODUxNTlFRDczNjk2QUZCMzEyRDIzNUNG NDBGM0M0NDEwHhcNMjUwOTA5MDQwODA5WhcNMjUwOTE2MDQwODA5WjAYMRYwFAYD VQQDEw02OGJmYTgyOS0wZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSin1ysJRYfTvcD4/l/+A7n1QRBdmNFhmrzeCCSxge/WimLLCCXytNo1tKmH zD7uB4VzMLo2wQVGd85UKpWA1AlP1Qnsutogo+m5jaX/WmXv39sMDSMHM1gRbmhB O8B7NfZ1bYx6ziE5DsAReVSxkvaofvvY7+grogHIDny5DQJAM0BSbOAwGvXdvvc9 BDoIAstvp/VphsQqzzAizEnBFGu5eT3k+DWhx/w3wkvSUffhj/9bdtFC0JJEWKPa SN1LSMi2dDY1wXRNLHLkG5jFKRtiAgDdnlQQLLM8DTQ+sU9rPQmMtPCO+8WD9KPL 7eLXILtuIC+scnU9Be3Huf2FcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbE4CQP 5ccsbWpJaQu3qL+Whu47MB8GA1UdIwQYMBaAFLHFjAeFFZ7XNpavsxLSNc9A88RB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC8wMkFBNDk1MDc5 MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50YzJscS16RXRJMXowRHp4 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjV01CNFVWbnRjMmxxLXpFdEkxejBEenhFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC8wMkFBNDk1MDc5MEExMUVFOTlFREQxMUZDNEY5QUUwMi9zY1dNQjRVVm50 YzJscS16RXRJMXowRHp4RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGXn0du8c4+aDHrXwnSHxbRUoI2AS6zWEM4SC0aLbeenSHJ+qmtmBa GhFNpWimSsf94vUOI+nfZ0cj4K13vsmYVG9VnHRTvBPnB4IUvP9z9LV077TuLKeJ CbQw531RnRitXj0zn7IAktGiiUrBhMyYvZXwXhZS+bII4+SvqgUxSMLaQ/fOsJ7c XHY/auaC/WLvGw77kFnfn26e7KUFb8VuuQoOzx8mVZ/bC/sS2XgIDb1AczIHMTmk toFcbh+xQ2nx7jOhMCh8KpIdvQMFBVzyiy0KEbx/CwTp+tuGVP9kkM5n5mdsr7zk +ydRuHRpnQx8cME43b+/XKUMk1jQIXIQ -----END CERTIFICATE-----Generated at Tue Sep 9 13:15:13 2025 by rpki-client