$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: KZQoYmUfVbE3/rhZN/JbzcaaavX7KOPTul8Y76x8Jg0= Subject key identifier: 60:6B:11:8A:B5:A6:16:93:F1:3C:92:07:DC:EC:59:3C:39:2E:7B:A1 Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 0136 Signing time: Sat 19 Jul 2025 04:50:03 +0000 Manifest this update: Sat 19 Jul 2025 04:50:02 +0000 Manifest next update: Sat 26 Jul 2025 04:50:02 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: F6RDbYUC/eqm3XGbwj4FJQcHtVA6/dJFkXQmrEGVrnw=) 2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: bPMBzJr4bTR5Bhy4yYB9L04MYvX8u/mjmsw/KhMBj+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: Jul 19 04:50:02 2025 GMT Not After : Jul 26 04:50:02 2025 GMT Subject: CN=687b23fa-ab24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:e5:21:07:86:8b:eb:d7:fb:cd:dc:e5:93: b6:5b:31:09:90:c1:a4:7e:4b:11:40:96:82:e9:68: fa:0a:59:c1:e4:3e:50:37:e8:fe:64:81:e1:49:30: d3:c7:69:65:27:be:2a:c4:d3:aa:3d:4e:70:16:59: 95:76:c1:e9:65:2d:de:85:62:11:f9:2c:01:ee:1b: a8:e6:c1:d2:9f:4a:45:59:66:a0:b4:cf:a6:89:69: ac:84:8f:5c:06:5d:10:d4:f9:ac:c0:b6:9e:84:74: 21:54:b3:e1:bc:43:29:75:e8:43:c5:7c:56:eb:ea: 78:bf:99:f3:71:18:b9:7f:b1:f8:59:44:28:90:a2: 9a:f2:65:99:bb:ab:03:c3:80:1f:f9:d7:aa:b7:af: fb:9e:76:85:70:e6:5c:0c:d0:e8:9b:4f:54:a8:ca: 3b:fd:c6:0a:02:d4:79:a9:ae:56:cd:ca:8f:e8:fe: e8:25:8f:eb:ac:ff:c6:a7:bb:8d:4c:8f:0b:56:f8: 86:69:49:c2:10:2c:4c:98:f1:aa:c6:db:f2:fc:66: 92:a8:99:16:48:f8:a0:5e:a2:d9:6a:dc:e9:a2:36: e7:21:60:6e:90:29:fc:4a:e7:05:b4:e3:37:1f:52: 3a:09:34:89:d4:32:29:19:7a:f9:d5:a8:5e:6c:69: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:11:8A:B5:A6:16:93:F1:3C:92:07:DC:EC:59:3C:39:2E:7B:A1 X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:26:a3:b6:ba:b7:69:ec:0a:47:20:c4:8d:f3:ae:d1:45:83: 94:0c:23:d5:86:62:e0:f7:90:96:12:ce:68:4f:66:05:c7:bb: 87:0c:91:ab:89:f5:79:c0:cb:8e:37:97:63:82:34:dc:20:39: b6:bf:d6:27:3c:3f:1c:a1:51:ab:50:59:29:42:6d:0d:4f:3f: 27:1e:5d:bd:20:83:2c:f2:6a:1c:3a:87:79:3e:f6:9d:0b:bc: 02:05:91:9f:6c:d3:15:22:af:e4:7f:70:16:c3:05:be:05:57: 8c:35:6c:66:65:e6:b8:ba:b9:32:19:dd:71:76:42:68:2e:5d: 82:fd:2e:2f:e8:a2:4c:9e:fc:fd:88:ae:cd:f5:ae:b8:8d:c2: c9:6e:23:51:91:54:e6:53:a7:9d:e7:38:05:9c:07:ed:eb:cb: 17:8c:dc:f8:77:06:04:aa:b5:80:9a:30:d6:b0:67:b4:62:09: 67:30:27:34:e5:c5:fb:3a:c2:76:a6:72:10:f9:fd:ad:a0:16: fd:7c:67:6c:8e:46:68:62:f1:1b:d9:22:a9:17:33:a1:05:6b: d5:9a:11:33:86:46:d9:dc:05:98:dd:58:00:cd:13:4a:1b:83: 9b:6b:0d:cd:cb:78:1d:46:a9:03:9a:7b:9e:ef:c4:d8:92:6c: ec:8c:7c:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjUwNzE5MDQ1MDAyWhcNMjUwNzI2MDQ1MDAyWjAYMRYwFAYD VQQDEw02ODdiMjNmYS1hYjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4j7lIQeGi+vX+83c5ZO2WzEJkMGkfksRQJaC6Wj6ClnB5D5QN+j+ZIHhSTDT x2llJ74qxNOqPU5wFlmVdsHpZS3ehWIR+SwB7huo5sHSn0pFWWagtM+miWmshI9c Bl0Q1PmswLaehHQhVLPhvEMpdehDxXxW6+p4v5nzcRi5f7H4WUQokKKa8mWZu6sD w4Af+deqt6/7nnaFcOZcDNDom09UqMo7/cYKAtR5qa5WzcqP6P7oJY/rrP/Gp7uN TI8LVviGaUnCECxMmPGqxtvy/GaSqJkWSPigXqLZatzpojbnIWBukCn8SucFtOM3 H1I6CTSJ1DIpGXr51ahebGm4jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBrEYq1 phaT8TySB9zsWTw5LnuhMB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSJqO2urdp7ApHIMSN867RRYOUDCPVhmLg95CWEs5oT2YFx7uHDJGr ifV5wMuON5djgjTcIDm2v9YnPD8coVGrUFkpQm0NTz8nHl29IIMs8mocOod5Pvad C7wCBZGfbNMVIq/kf3AWwwW+BVeMNWxmZea4urkyGd1xdkJoLl2C/S4v6KJMnvz9 iK7N9a64jcLJbiNRkVTmU6ed5zgFnAft68sXjNz4dwYEqrWAmjDWsGe0YglnMCc0 5cX7OsJ2pnIQ+f2toBb9fGdsjkZoYvEb2SKpFzOhBWvVmhEzhkbZ3AWY3VgAzRNK G4Obaw3Ny3gdRqkDmnue78TYkmzsjHwD -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:07 2025 by rpki-client