$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: OpbALw+w5+RlXHGxr4SypzNdtGGmgHvNl9L015Iu7bI= Subject key identifier: 48:AB:37:71:92:67:74:CB:A0:12:F9:04:B9:7F:1B:CC:FA:7D:4D:76 Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0F5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0F42 Signing time: Sun 24 Aug 2025 17:34:51 +0000 Manifest this update: Sun 24 Aug 2025 17:34:50 +0000 Manifest next update: Sun 31 Aug 2025 17:34:50 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: R9xo/n6dGL0o0cQDZqXmou6OdfJDS2kUShYWvlVboFU=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: gca4NiRXS/2ZRRaXGWLGL59Wf1jvZfKpV78dD1T70Vg=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: P21sWTdEvS+OR+eBWq38z1ZuadpIkizBtR94Vsv/HGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3932 (0xf5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Aug 24 17:34:50 2025 GMT Not After : Aug 31 17:34:50 2025 GMT Subject: CN=68ab4d3a-bdf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:65:1b:c6:3a:b7:19:b9:1a:43:1a:f1:19: 68:50:83:05:b4:ce:33:a0:43:72:00:5b:8d:8a:13: 8a:98:65:d0:9f:a1:89:f3:a8:f0:cb:4a:da:75:e2: 0b:0d:76:c5:c2:1a:7f:12:3e:fd:2b:a7:db:82:c4: ea:46:ad:a1:b0:d0:3f:3d:6d:b6:36:06:58:5f:da: ef:94:8c:9f:93:83:dd:c5:b1:14:5d:0e:ef:58:e5: 3e:33:0b:c2:fa:53:b8:79:35:b9:94:72:fd:8c:b7: dd:7f:14:11:a2:00:fa:f1:5e:a6:61:ae:c4:f0:0b: de:f1:60:8b:cb:3f:f6:55:39:4d:47:5a:f2:bb:77: 5b:e1:f1:9d:86:f1:d1:1c:69:fc:03:66:89:95:ba: e6:d7:c7:bb:26:f9:fb:4d:8d:b8:d7:1d:29:5e:f2: 64:c1:f5:bd:4e:74:64:18:0c:5a:62:e4:f7:60:f1: ed:7f:2b:a5:3d:99:6a:12:7b:67:15:bf:fc:45:99: 9e:e0:1d:35:08:ec:7d:4f:ab:17:57:44:da:a9:f3: 08:c1:d0:28:67:72:c3:ab:e3:49:ce:a3:3b:26:b4: 76:a0:62:67:d3:f9:ff:b6:a3:4d:45:78:e3:2d:b2: 07:d3:f3:70:c6:0a:02:d8:a1:bb:7e:9f:e6:12:a2: 9d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AB:37:71:92:67:74:CB:A0:12:F9:04:B9:7F:1B:CC:FA:7D:4D:76 X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:36:6d:1f:f1:dc:ff:2e:cf:1b:d7:1d:bb:59:cb:17:45:f1: e6:43:39:03:a5:5b:e5:06:31:52:4c:f2:db:37:6a:2a:6f:d0: 8d:c4:04:b8:11:c2:54:4b:2d:04:1f:bc:c6:17:cf:b3:8a:16: 9a:9e:0d:e6:05:7b:28:8c:c6:5c:11:65:8b:dc:d5:3d:cb:a1: 79:dd:2a:b8:30:30:50:bc:60:5f:98:87:a4:e2:28:2f:70:24: 91:a7:a9:35:f8:bf:36:34:03:86:07:2a:ab:0d:6f:e1:74:13: 61:fd:b8:63:9f:15:47:ed:87:8e:07:68:8e:f2:20:26:77:af: 3f:85:78:88:65:83:03:50:48:e7:b2:7a:ea:6a:31:01:32:27: 93:ab:82:34:87:4d:eb:25:64:e7:6d:d6:04:2e:bd:e3:1f:25: b0:07:da:cd:b6:c1:05:48:9d:b2:3c:43:84:7c:14:94:07:37: 9f:0a:62:a4:09:ab:20:af:08:01:9c:99:0a:6b:d2:3d:9c:fe: 07:dd:65:0b:25:88:fe:2d:b2:ea:2d:76:33:8a:33:b3:0d:9c: a8:10:3f:9a:4b:45:ba:fe:50:6e:54:a5:7c:b0:90:97:b9:04: 90:b3:94:f3:27:96:50:53:40:bf:41:1c:d3:3b:50:7f:47:76: 82:c1:98:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjUwODI0MTczNDUwWhcNMjUwODMxMTczNDUwWjAYMRYwFAYD VQQDEw02OGFiNGQzYS1iZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYtlG8Y6txm5GkMa8RloUIMFtM4zoENyAFuNihOKmGXQn6GJ86jwy0radeIL DXbFwhp/Ej79K6fbgsTqRq2hsNA/PW22NgZYX9rvlIyfk4PdxbEUXQ7vWOU+MwvC +lO4eTW5lHL9jLfdfxQRogD68V6mYa7E8Ave8WCLyz/2VTlNR1ryu3db4fGdhvHR HGn8A2aJlbrm18e7Jvn7TY241x0pXvJkwfW9TnRkGAxaYuT3YPHtfyulPZlqEntn Fb/8RZme4B01COx9T6sXV0TaqfMIwdAoZ3LDq+NJzqM7JrR2oGJn0/n/tqNNRXjj LbIH0/NwxgoC2KG7fp/mEqKdBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEirN3GS Z3TLoBL5BLl/G8z6fU12MB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcNm0f8dz/Ls8b1x27WcsXRfHmQzkDpVvlBjFSTPLbN2oqb9CNxAS4 EcJUSy0EH7zGF8+zihaang3mBXsojMZcEWWL3NU9y6F53Sq4MDBQvGBfmIek4igv cCSRp6k1+L82NAOGByqrDW/hdBNh/bhjnxVH7YeOB2iO8iAmd68/hXiIZYMDUEjn snrqajEBMieTq4I0h03rJWTnbdYELr3jHyWwB9rNtsEFSJ2yPEOEfBSUBzefCmKk CasgrwgBnJkKa9I9nP4H3WULJYj+LbLqLXYzijOzDZyoED+aS0W6/lBuVKV8sJCX uQSQs5TzJ5ZQU0C/QRzTO1B/R3aCwZjV -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:11 2025 by rpki-client