$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft File: w5bB5QN9M19zQcouz4ImEwDN_pU.mft (raw, json) Hash identifier: v47nxiupGOvRHDI4iBgWDPgG+ZIy03GnOH8fi4An5pk= Subject key identifier: 24:8E:86:7E:E0:8F:1F:43:44:0E:F4:06:1D:DE:42:E3:F6:61:7F:C8 Authority key identifier: C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 Certificate issuer: /CN=A91EC38C/serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft Manifest number: 04E2 Signing time: Sun 07 Sep 2025 00:08:34 +0000 Manifest this update: Sun 07 Sep 2025 00:08:33 +0000 Manifest next update: Sun 14 Sep 2025 00:08:33 +0000 Files and hashes: 1: w5bB5QN9M19zQcouz4ImEwDN_pU.crl (hash: XN1mYeFeRvHWynqti2COgJAeIc6ApOZseQasDat6IUk=) 2: FCF7126E310711ECBFFF5E62C4F9AE02.roa (hash: F3pgM3DGI+wP2jrjrPXa65ZGlXf9TnXpF1OSKK2H5GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC38C, serialNumber=C396C1E5037D335F7341CA2ECF82261300CDFE95 Validity Not Before: Sep 7 00:08:33 2025 GMT Not After : Sep 14 00:08:33 2025 GMT Subject: CN=68bccd02-6651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:4e:2b:83:51:ac:68:9c:cc:25:0a:c8:e1: 2b:6f:3d:11:af:b1:5f:c8:cf:c3:b4:6b:b0:32:5d: 1e:49:cd:82:d9:2a:c6:e9:1f:9c:0c:20:f5:79:3a: 17:14:59:a1:dd:e4:a0:c1:c0:2b:3c:0b:52:03:d5: 76:d0:ca:48:2d:20:a8:bf:fc:66:d9:c3:c2:2c:1d: c0:c6:d8:8a:cc:ee:5d:df:49:bf:0f:f0:92:41:fc: d9:81:4c:3c:a7:c2:c9:d5:f5:c3:54:98:25:be:c8: 85:c4:6b:e8:0d:10:29:32:5c:8d:54:0b:16:b6:8b: 93:e8:1d:09:98:f9:d7:c0:72:e5:fc:c9:47:9e:af: 25:77:cd:3f:9c:43:54:8e:a6:50:86:ad:56:35:32: e2:02:72:a0:71:aa:9d:30:88:62:b4:6a:a3:85:8c: 5f:5d:96:11:9b:14:e5:f8:dc:f6:14:59:88:fb:28: 6f:66:70:36:ca:8b:68:21:f1:b0:ea:e1:6b:9e:f8: 5a:24:47:12:7b:05:7d:bf:12:2c:fe:f3:be:7e:7a: 39:72:fc:43:f4:94:69:07:e1:e1:e4:a3:a9:af:a6: f2:e6:fb:e6:da:85:d8:98:21:0a:70:2e:41:cd:1f: 47:75:de:cc:60:f9:61:85:b6:b6:8e:2b:4e:60:24: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:86:7E:E0:8F:1F:43:44:0E:F4:06:1D:DE:42:E3:F6:61:7F:C8 X509v3 Authority Key Identifier: keyid:C3:96:C1:E5:03:7D:33:5F:73:41:CA:2E:CF:82:26:13:00:CD:FE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5bB5QN9M19zQcouz4ImEwDN_pU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC38C/87048DAA310411EC83DF2C5BC4F9AE02/w5bB5QN9M19zQcouz4ImEwDN_pU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:bc:4a:83:c1:3a:54:b6:98:92:c2:d5:01:10:ad:3f:bc:bb: 1c:64:e2:81:d6:48:b1:9f:db:1e:b6:00:ba:29:4c:21:43:75: 52:dd:fc:9a:0b:48:c9:57:03:a5:94:8e:50:f3:0c:ad:c2:cc: 91:92:2c:54:e4:95:22:e6:77:9d:c4:19:15:11:3d:6e:c8:8b: f1:5f:f9:f5:58:80:4b:76:62:bd:4c:ea:87:e3:ad:e9:a4:d6: 04:74:e3:78:bf:4c:0e:79:1f:c7:d5:bb:7f:ae:1a:07:b1:67: 53:8a:78:60:59:fd:1e:b0:cc:74:02:15:7e:71:aa:ce:ae:fd: 64:87:ba:fc:31:76:c1:0c:11:20:16:67:9e:f6:7d:6e:61:ba: 2b:a9:67:5e:f1:14:07:a7:d0:1f:aa:a6:db:3b:5d:3d:b4:bb: 24:98:f8:4e:d1:02:d0:63:16:71:6c:df:84:36:28:82:8b:4a: 12:e0:74:0e:80:6c:ee:8b:9f:17:a6:e9:52:53:63:d4:6d:32: c4:b3:ff:6a:45:48:4f:c4:91:b5:2a:0d:1c:c9:c7:20:04:2a: 66:a7:00:6f:0a:2a:8f:99:6c:b8:e4:76:01:b5:4f:a2:b7:b5: f5:67:50:c8:ca:fb:1c:d7:b2:c7:91:ad:aa:3b:2f:35:af:f5: 49:16:a5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzOEMxMTAvBgNVBAUTKEMzOTZDMUU1MDM3RDMzNUY3MzQxQ0EyRUNGODIyNjEz MDBDREZFOTUwHhcNMjUwOTA3MDAwODMzWhcNMjUwOTE0MDAwODMzWjAYMRYwFAYD VQQDEw02OGJjY2QwMi02NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCxOK4NRrGiczCUKyOErbz0Rr7FfyM/DtGuwMl0eSc2C2SrG6R+cDCD1eToX FFmh3eSgwcArPAtSA9V20MpILSCov/xm2cPCLB3AxtiKzO5d30m/D/CSQfzZgUw8 p8LJ1fXDVJglvsiFxGvoDRApMlyNVAsWtouT6B0JmPnXwHLl/MlHnq8ld80/nENU jqZQhq1WNTLiAnKgcaqdMIhitGqjhYxfXZYRmxTl+Nz2FFmI+yhvZnA2yotoIfGw 6uFrnvhaJEcSewV9vxIs/vO+fno5cvxD9JRpB+Hh5KOpr6by5vvm2oXYmCEKcC5B zR9Hdd7MYPlhhba2jitOYCSX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSOhn7g jx9DRA70Bh3eQuP2YX/IMB8GA1UdIwQYMBaAFMOWweUDfTNfc0HKLs+CJhMAzf6V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzM4Qy84NzA0OERBQTMx MDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0xOXpRY291ejRJbUV3RE5f cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c1YkI1UU45TTE5elFjb3V6NEltRXdETl9wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzM4Qy84NzA0OERBQTMxMDQxMUVDODNERjJDNUJDNEY5QUUwMi93NWJCNVFOOU0x OXpRY291ejRJbUV3RE5fcFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHvEqDwTpUtpiSwtUBEK0/vLscZOKB1kixn9setgC6KUwhQ3VS3fya C0jJVwOllI5Q8wytwsyRkixU5JUi5nedxBkVET1uyIvxX/n1WIBLdmK9TOqH463p pNYEdON4v0wOeR/H1bt/rhoHsWdTinhgWf0esMx0AhV+carOrv1kh7r8MXbBDBEg Fmee9n1uYborqWde8RQHp9AfqqbbO109tLskmPhO0QLQYxZxbN+ENiiCi0oS4HQO gGzui58XpulSU2PUbTLEs/9qRUhPxJG1Kg0cyccgBCpmpwBvCiqPmWy45HYBtU+i t7X1Z1DIyvsc17LHka2qOy81r/VJFqWq -----END CERTIFICATE-----Generated at Mon Sep 8 08:15:45 2025 by rpki-client