$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft File: W1n8tlNB_TN4m_uvqWN98M5ATas.mft (raw, json) Hash identifier: jFQNYBrf+O9pEKBryMPGQIpqXJiO79lMqo0ZnMtESNs= Subject key identifier: 06:01:DC:DD:F1:62:1D:16:C3:43:30:90:8A:2A:EC:96:09:CF:A0:B9 Authority key identifier: 5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB Certificate issuer: /CN=A91FA5A2/serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft Manifest number: 014E Signing time: Wed 03 Sep 2025 04:50:17 +0000 Manifest this update: Wed 03 Sep 2025 04:50:17 +0000 Manifest next update: Wed 10 Sep 2025 04:50:17 +0000 Files and hashes: 1: W1n8tlNB_TN4m_uvqWN98M5ATas.crl (hash: LIXimuDROnS2So/mg/xRLvloNTeC97qe1s24abG4mIo=) 2: D61299F2D8C011EFB41E1319C4F9AE02.roa (hash: bPMBzJr4bTR5Bhy4yYB9L04MYvX8u/mjmsw/KhMBj+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 04:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=5B59FCB65341FD33789BFBAFA9637DF0CE404DAB Validity Not Before: Sep 3 04:50:17 2025 GMT Not After : Sep 10 04:50:17 2025 GMT Subject: CN=68b7c909-87f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:05:6c:5c:90:e7:1d:f8:fa:94:11:99:34: af:5b:71:2d:21:7c:dc:42:3b:bf:ed:a6:4a:57:e5: a3:70:3a:e1:a6:c1:27:a2:d7:47:39:18:33:3a:a0: 84:99:4c:f9:18:be:8d:7e:a0:6d:fd:ba:00:d8:c5: 48:3a:5d:19:96:17:f6:51:2c:f8:bb:cf:90:7a:e7: 6a:4e:50:80:f9:df:25:ec:b7:c6:29:02:ff:21:22: d9:38:65:7e:4e:ca:e7:59:de:d3:4d:ac:5d:b4:b2: 9c:67:46:4a:0a:ac:5d:dd:87:d5:a3:6b:6f:59:0e: 61:a9:98:17:09:79:43:59:56:85:99:06:88:8c:2a: 90:b8:16:79:79:f7:03:f1:90:01:e6:7a:16:e1:94: 76:09:e1:65:a4:e5:8e:e9:0f:3b:25:1d:b9:29:94: c2:04:e8:65:11:94:52:f7:52:aa:2c:2e:a0:f0:ef: d7:22:67:36:89:a2:53:d6:a3:dd:89:71:45:0d:cd: c7:35:bc:89:1a:f7:e4:0a:b2:6e:4a:49:f5:b2:45: e7:98:13:a3:a2:4d:dd:9f:d7:38:57:59:30:c7:8c: a9:c5:c9:9c:13:9b:ff:d1:17:61:f9:d4:9c:59:66: 12:0c:26:f5:37:7f:54:a5:99:63:b3:a8:9e:fc:aa: 7f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:DC:DD:F1:62:1D:16:C3:43:30:90:8A:2A:EC:96:09:CF:A0:B9 X509v3 Authority Key Identifier: keyid:5B:59:FC:B6:53:41:FD:33:78:9B:FB:AF:A9:63:7D:F0:CE:40:4D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1n8tlNB_TN4m_uvqWN98M5ATas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/3E16416898F611EEBBF1F417C4F9AE02/W1n8tlNB_TN4m_uvqWN98M5ATas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ab:19:5e:cb:da:66:77:3b:a1:80:d0:77:d2:cc:b4:3d:ca: 60:c0:15:b6:d7:b7:49:42:d8:7e:03:43:93:0d:cb:81:15:6f: 7d:6f:eb:dd:80:0f:7f:ba:8a:af:4a:58:76:eb:b8:e3:ca:02: e5:d7:60:b8:cd:b1:28:5c:f0:b1:44:63:c0:89:59:d1:08:a2: 33:d5:e3:7b:e9:97:49:7c:80:1b:ba:7c:f3:c7:8e:72:db:e3: ea:8d:80:14:d7:f6:35:8c:db:78:d1:02:2c:30:38:9f:0b:6a: 68:68:da:15:a2:bc:5c:97:ed:a5:19:05:20:96:1f:6f:dd:69: 57:f8:03:c1:29:23:87:bb:b8:15:f3:bd:26:a1:32:43:9a:29: af:da:eb:6c:cf:57:60:0b:63:80:28:79:2f:a7:eb:35:37:73: 24:e6:ba:79:6a:9b:5d:7b:77:d9:90:93:04:1a:81:51:da:20: d2:cd:61:86:e3:e7:4f:59:eb:2f:fc:dd:a9:ef:fe:3d:18:88: b3:8c:f4:6d:4d:f7:e2:cf:fc:42:31:97:1c:b2:cf:b0:1e:6a: 8d:10:ee:c6:ff:ab:10:dc:5c:5c:63:c3:61:ce:77:d4:4a:aa: 25:30:67:07:9d:f6:6f:72:67:dd:17:7b:ef:a6:fd:6e:f9:88: 2d:01:98:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKDVCNTlGQ0I2NTM0MUZEMzM3ODlCRkJBRkE5NjM3REYw Q0U0MDREQUIwHhcNMjUwOTAzMDQ1MDE3WhcNMjUwOTEwMDQ1MDE3WjAYMRYwFAYD VQQDEw02OGI3YzkwOS04N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqoFbFyQ5x34+pQRmTSvW3EtIXzcQju/7aZKV+WjcDrhpsEnotdHORgzOqCE mUz5GL6NfqBt/boA2MVIOl0Zlhf2USz4u8+QeudqTlCA+d8l7LfGKQL/ISLZOGV+ TsrnWd7TTaxdtLKcZ0ZKCqxd3YfVo2tvWQ5hqZgXCXlDWVaFmQaIjCqQuBZ5efcD 8ZAB5noW4ZR2CeFlpOWO6Q87JR25KZTCBOhlEZRS91KqLC6g8O/XImc2iaJT1qPd iXFFDc3HNbyJGvfkCrJuSkn1skXnmBOjok3dn9c4V1kwx4ypxcmcE5v/0Rdh+dSc WWYSDCb1N39UpZljs6ie/Kp/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYB3N3x Yh0Ww0MwkIoq7JYJz6C5MB8GA1UdIwQYMBaAFFtZ/LZTQf0zeJv7r6ljffDOQE2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi8zRTE2NDE2ODk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9UTjRtX3V2cVdOOThNNUFU YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxbjh0bE5CX1RONG1fdXZxV045OE01QVRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi8zRTE2NDE2ODk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi9XMW44dGxOQl9U TjRtX3V2cVdOOThNNUFUYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAqxley9pmdzuhgNB30sy0PcpgwBW217dJQth+A0OTDcuBFW99b+vd gA9/uoqvSlh267jjygLl12C4zbEoXPCxRGPAiVnRCKIz1eN76ZdJfIAbunzzx45y 2+PqjYAU1/Y1jNt40QIsMDifC2poaNoVorxcl+2lGQUglh9v3WlX+APBKSOHu7gV 870moTJDmimv2utsz1dgC2OAKHkvp+s1N3Mk5rp5aptde3fZkJMEGoFR2iDSzWGG 4+dPWesv/N2p7/49GIizjPRtTffiz/xCMZccss+wHmqNEO7G/6sQ3FxcY8NhznfU SqolMGcHnfZvcmfdF3vvpv1u+YgtAZjm -----END CERTIFICATE-----Generated at Thu Sep 4 13:59:04 2025 by rpki-client