$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft File: woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json) Hash identifier: Wo7reSAmWe4qBN03DdPmM5vmlYG6PjrU3Y5gMw07R00= Subject key identifier: D1:B3:0C:06:1D:94:D7:75:EA:39:32:38:45:5F:0B:0E:E8:1A:39:89 Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8 Certificate issuer: /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8 Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft Manifest number: 02C2 Signing time: Fri 05 Sep 2025 01:47:16 +0000 Manifest this update: Fri 05 Sep 2025 01:47:15 +0000 Manifest next update: Fri 12 Sep 2025 01:47:15 +0000 Files and hashes: 1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: LRPPu1pgJCU00IaV7UMMELOtgx8/FuuRzmck3j/rihY=) 2: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (hash: ifFLN+8twN04B6jY6cx/b65AiJj/Z2yB7h3ev34IjTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E11D6, serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8 Validity Not Before: Sep 5 01:47:15 2025 GMT Not After : Sep 12 01:47:15 2025 GMT Subject: CN=68ba4123-e479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:18:fc:b3:71:6e:96:2a:16:cc:6b:32:ca:ee: d6:c5:cf:6f:9d:95:98:a0:54:6b:55:b9:8e:87:ff: 16:ba:2e:72:da:e3:32:ae:39:75:ea:a6:e3:35:6d: 69:03:06:32:3b:be:d5:e2:7f:a6:4a:7f:78:f7:20: d3:be:90:e0:f7:10:66:28:6a:8e:c2:2a:a7:fb:68: 88:a7:16:52:4b:f3:91:b6:77:03:2a:c9:83:4c:75: 12:9b:2b:d9:26:1c:6b:9a:0f:59:0a:8f:55:fe:7c: 4d:6e:0b:0c:87:43:2e:a8:cd:39:90:7c:0d:31:b2: 05:2f:a6:ec:17:01:bd:da:6b:ca:22:86:b6:43:7d: 17:6f:2f:63:53:a0:b3:cd:ce:fd:35:33:b5:7f:f1: af:b9:47:f9:17:1e:11:a0:c5:1c:b3:d9:86:56:2c: 75:dc:d6:d4:6b:0b:65:fb:ad:3d:a5:55:11:29:e0: dc:f7:59:f0:fa:fe:34:b8:4e:94:95:32:54:46:5e: 09:58:65:46:37:b6:98:03:c6:22:3c:47:71:55:66: c5:f5:3c:1c:39:3f:15:1a:37:c7:d5:42:7e:48:14: be:83:4f:55:a1:4b:c9:00:29:54:c2:27:43:fd:6c: 19:37:75:ee:b5:fb:8b:e2:c5:39:e0:2c:b9:99:62: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B3:0C:06:1D:94:D7:75:EA:39:32:38:45:5F:0B:0E:E8:1A:39:89 X509v3 Authority Key Identifier: keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:72:6c:3d:7e:34:c2:d1:d6:6b:9a:a5:74:05:f9:4e:e2:8f: ac:3b:8b:78:00:2f:5b:99:e8:ca:39:a3:1c:e4:4a:71:7a:a1: e3:74:8e:1a:5a:ff:58:e0:93:88:44:74:9f:cf:72:8d:fa:3a: c9:46:25:6e:8a:60:a1:81:fd:c3:f0:81:59:e2:60:aa:b7:9b: a9:c1:6f:0c:09:d1:68:14:5b:e8:3f:c7:4b:c0:ce:6b:67:77: f4:9a:3c:5d:44:cf:60:6e:22:29:2a:31:9b:ca:3e:63:76:f2: ca:3c:e2:71:b3:d7:bd:4b:cb:b9:64:13:76:f6:2f:e9:3f:e5: 9d:d9:85:8c:6a:fb:98:9e:1c:ee:65:22:d4:78:80:6a:b6:bd: 1a:2b:22:c9:53:20:59:89:87:db:3f:8f:d8:56:3c:4f:00:99: b8:0f:a3:7e:f7:71:32:11:62:b6:a7:a8:0b:6a:04:fa:03:53: 99:39:1a:73:0f:89:71:78:71:e1:d3:18:3a:e2:04:35:aa:1f: 13:14:84:94:f5:04:2e:67:d2:12:69:9c:ac:7e:16:88:8e:ce: a4:e5:4c:9e:e7:6c:ca:ac:b0:fb:f9:43:07:2c:9d:88:88:d6: ee:ea:cf:0e:0a:dd:6e:88:df:fd:96:fb:f2:9a:23:a4:d8:7c: 7e:b5:e5:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExRDYxMTAvBgNVBAUTKEMyODYxMDcyMkMxQkM4OUJFMzJCNEQ0QjhBMkNDMjFE RTY3MTdDQzgwHhcNMjUwOTA1MDE0NzE1WhcNMjUwOTEyMDE0NzE1WjAYMRYwFAYD VQQDEw02OGJhNDEyMy1lNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Bj8s3FulioWzGsyyu7Wxc9vnZWYoFRrVbmOh/8Wui5y2uMyrjl16qbjNW1p AwYyO77V4n+mSn949yDTvpDg9xBmKGqOwiqn+2iIpxZSS/ORtncDKsmDTHUSmyvZ Jhxrmg9ZCo9V/nxNbgsMh0MuqM05kHwNMbIFL6bsFwG92mvKIoa2Q30Xby9jU6Cz zc79NTO1f/GvuUf5Fx4RoMUcs9mGVix13NbUawtl+609pVURKeDc91nw+v40uE6U lTJURl4JWGVGN7aYA8YiPEdxVWbF9TwcOT8VGjfH1UJ+SBS+g09VoUvJAClUwidD /WwZN3XutfuL4sU54Cy5mWIAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGzDAYd lNd16jkyOEVfCw7oGjmJMB8GA1UdIwQYMBaAFMKGEHIsG8ib4ytNS4oswh3mcXzI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFENi83N0RFRkQzMjA2 MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlKdmpLMDFMaWl6Q0hlWnhm TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dvWVFjaXdieUp2akswMUxpaXpDSGVaeGZNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTFENi83N0RFRkQzMjA2MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlK dmpLMDFMaWl6Q0hlWnhmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcmw9fjTC0dZrmqV0BflO4o+sO4t4AC9bmejKOaMc5EpxeqHjdI4a Wv9Y4JOIRHSfz3KN+jrJRiVuimChgf3D8IFZ4mCqt5upwW8MCdFoFFvoP8dLwM5r Z3f0mjxdRM9gbiIpKjGbyj5jdvLKPOJxs9e9S8u5ZBN29i/pP+Wd2YWMavuYnhzu ZSLUeIBqtr0aKyLJUyBZiYfbP4/YVjxPAJm4D6N+93EyEWK2p6gLagT6A1OZORpz D4lxeHHh0xg64gQ1qh8TFISU9QQuZ9ISaZysfhaIjs6k5Uye52zKrLD7+UMHLJ2I iNbu6s8OCt1uiN/9lvvymiOk2Hx+teWL -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:09 2025 by rpki-client