$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft File: W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json) Hash identifier: L/P+PYd7STD5XKPUtJAtwFG33sJRztUWurC9MLS9bB0= Subject key identifier: 79:B0:FD:7F:DA:FE:57:56:B6:D2:02:68:A2:E2:DD:80:38:E7:AB:7E Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft Manifest number: 0126 Signing time: Wed 03 Sep 2025 05:09:22 +0000 Manifest this update: Wed 03 Sep 2025 05:09:21 +0000 Manifest next update: Wed 10 Sep 2025 05:09:21 +0000 Files and hashes: 1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: ulpR9Sx772/Lx477Lofz7DvLY7oH5IJFarIcutdyUFI=) 2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: q9sVPpnGHT0TBWPu4k07DgCGJ80E6prLVfQ+m+J3OXE=) 3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: EBWBEqR3i5PxLdfH1mN7syf09hARUIbnkSV4IoogUv4=) 4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: QXK92fzcUKDMjTiStNYvMQ27jRd0fX97PndGvgz1laU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Validity Not Before: Sep 3 05:09:21 2025 GMT Not After : Sep 10 05:09:21 2025 GMT Subject: CN=68b7cd81-8842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:50:d5:46:47:31:c7:53:2e:19:ed:48:e9: 1a:2d:75:52:db:29:0a:34:dd:3b:05:c3:94:25:5c: 91:fc:47:3d:74:83:14:cc:cd:70:73:32:20:d9:2d: 6f:61:9e:ec:75:96:7b:97:90:23:31:c5:67:76:00: c2:a6:5e:c7:ba:b8:5f:41:4e:ca:a0:a9:a3:f1:38: d5:a6:46:35:d7:ab:90:1c:41:ee:c8:b9:8b:5e:9c: 97:4a:7f:ad:0f:6c:b4:02:88:f0:86:6f:50:e0:fe: 4f:fc:c8:b1:e0:67:c1:b4:ec:c7:50:bc:55:3f:05: bd:48:7a:bf:d8:d1:47:5d:0a:e6:e9:8f:46:13:e3: 57:87:4e:20:21:55:1f:f6:b0:b4:e1:03:c0:98:e8: c7:be:78:06:7f:fa:28:26:c8:32:c1:a7:05:8f:92: ee:26:72:b3:07:62:8f:f2:d9:ab:0a:77:4b:05:6e: 0a:2e:da:e9:68:25:bc:af:b4:0f:10:2d:5c:6a:86: f8:e8:2c:46:90:a7:c1:77:01:1c:a5:11:e0:8c:27: a3:b8:5e:4d:ba:1f:73:48:f3:f4:52:a7:fe:4b:c7: 68:e6:41:92:98:e7:16:cd:7d:5b:0c:32:5b:1b:52: 44:2c:fd:6a:6b:f4:63:f2:2e:24:8b:a8:a9:36:ce: 6f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B0:FD:7F:DA:FE:57:56:B6:D2:02:68:A2:E2:DD:80:38:E7:AB:7E X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d7:0d:aa:4c:66:aa:27:ce:05:18:b2:72:b5:55:c8:95:18: 55:1b:55:72:b9:9b:75:cd:c7:9f:e1:1c:9a:74:14:83:a2:eb: 75:80:65:dd:fa:a3:73:41:d9:e5:8e:2a:81:33:71:6a:4f:98: be:d7:81:62:51:82:e7:aa:9e:03:56:c8:4f:3e:ef:68:50:b9: 22:2b:79:ac:99:93:26:d8:54:7d:be:2b:96:dc:05:e7:cc:d7: 8c:89:1c:9a:d5:e9:cb:d8:b9:e8:b0:e2:53:5c:73:6a:a1:61: e8:5a:76:e0:f4:03:ff:f3:25:7a:57:2e:89:27:5d:ff:a4:80: b3:90:c3:63:8e:0d:e4:a0:a0:8b:4e:e6:67:d4:e7:af:9f:b8: f8:c8:8f:16:77:62:4f:5d:bf:55:0a:55:72:94:f2:8e:0f:c0: 3c:15:66:16:8d:2b:f6:c2:3f:4b:41:6b:92:4b:1d:69:35:93: 99:fc:bd:b3:cf:5f:62:c1:5a:84:b3:57:9e:d7:3f:79:99:66: 55:88:57:1a:33:94:25:f9:af:ba:cd:ab:1c:18:d7:97:c6:78: 67:c5:ff:46:dc:f0:22:1c:2d:5a:a2:fd:3a:54:a3:31:48:64: f7:8a:fd:4a:b3:6c:95:19:59:f9:0f:33:aa:5c:73:4f:8b:7a: 41:81:82:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5 NTBCRkIwNDEwHhcNMjUwOTAzMDUwOTIxWhcNMjUwOTEwMDUwOTIxWjAYMRYwFAYD VQQDEw02OGI3Y2Q4MS04ODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CNQ1UZHMcdTLhntSOkaLXVS2ykKNN07BcOUJVyR/Ec9dIMUzM1wczIg2S1v YZ7sdZZ7l5AjMcVndgDCpl7HurhfQU7KoKmj8TjVpkY116uQHEHuyLmLXpyXSn+t D2y0Aojwhm9Q4P5P/Mix4GfBtOzHULxVPwW9SHq/2NFHXQrm6Y9GE+NXh04gIVUf 9rC04QPAmOjHvngGf/ooJsgywacFj5LuJnKzB2KP8tmrCndLBW4KLtrpaCW8r7QP EC1caob46CxGkKfBdwEcpRHgjCejuF5Nuh9zSPP0Uqf+S8do5kGSmOcWzX1bDDJb G1JELP1qa/Rj8i4ki6ipNs5vlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmw/X/a /ldWttICaKLi3YA456t+MB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTkzNi82RUI5QzAzRUM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZB UGZDMk1FX05oQS1WQ19zRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw1w2qTGaqJ84FGLJytVXIlRhVG1VyuZt1zcef4RyadBSDout1gGXd +qNzQdnljiqBM3FqT5i+14FiUYLnqp4DVshPPu9oULkiK3msmZMm2FR9viuW3AXn zNeMiRya1enL2LnosOJTXHNqoWHoWnbg9AP/8yV6Vy6JJ13/pICzkMNjjg3koKCL TuZn1Oevn7j4yI8Wd2JPXb9VClVylPKOD8A8FWYWjSv2wj9LQWuSSx1pNZOZ/L2z z19iwVqEs1ee1z95mWZViFcaM5Ql+a+6zascGNeXxnhnxf9G3PAiHC1aov06VKMx SGT3iv1Ks2yVGVn5DzOqXHNPi3pBgYIL -----END CERTIFICATE-----Generated at Thu Sep 4 13:56:47 2025 by rpki-client