$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: /DemVQ81D4LsE2wN3tVsjhFJXF7nruMTXGjSyZ4uVzI= Subject key identifier: CB:B1:91:62:64:16:74:A0:C3:E0:92:0F:A0:80:D4:85:93:4B:E0:25 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: 7F Signing time: Thu 03 Jul 2025 07:02:09 +0000 Manifest this update: Thu 03 Jul 2025 07:02:09 +0000 Manifest next update: Thu 10 Jul 2025 07:02:09 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: hgblX77pvhj/OsEm175gc86+6j+QP0bcqLAO3+6z1aI=) 2: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (hash: aRkI7tQEQCwESW+AVm8WUWidr8skaQZ/Cucm3ddKBWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: Jul 3 07:02:09 2025 GMT Not After : Jul 10 07:02:09 2025 GMT Subject: CN=68662af1-9618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:9a:72:b0:c1:cd:75:0f:8c:ed:08:49:a6: c1:2c:4e:39:63:b0:de:e8:c9:13:07:ea:cc:13:ec: 8e:df:ed:38:6e:f2:a5:7f:90:dc:5f:c7:87:b8:11: a9:e3:5e:5a:15:69:48:83:8c:40:fa:f3:8c:4c:2f: c2:53:82:3b:12:f7:c8:9e:c0:76:b1:4f:f7:72:8b: 7f:b2:53:2e:0c:09:9b:2f:3c:a4:94:28:4a:07:87: 4d:cc:89:78:9c:ed:8a:5a:54:e0:b3:e5:2f:e7:be: 7a:44:9e:16:c0:37:11:d2:fa:d8:2a:f2:25:ce:30: 31:e1:9a:92:d5:2b:6b:47:78:ac:2d:1e:de:61:6e: 74:53:e7:e7:92:e1:16:4d:a0:19:74:5f:2f:68:7f: ac:c3:32:f1:51:cd:4e:a4:d9:bd:a1:1e:b7:6b:f6: ce:d9:3d:e0:d2:a8:f7:3a:1d:e6:3d:f2:94:13:4a: 79:50:fd:14:02:4b:7a:b6:17:49:76:da:66:e0:6e: 56:06:c8:71:18:41:49:3e:81:9b:72:e5:a8:1d:61: 7c:2f:22:e6:0a:a8:17:27:ea:61:12:a5:b9:ca:45: 5c:ff:b6:b8:54:ed:7b:c8:c9:6d:a5:35:ad:95:4e: 7c:df:3f:a4:07:00:b3:a2:60:8a:a8:e5:57:75:87: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B1:91:62:64:16:74:A0:C3:E0:92:0F:A0:80:D4:85:93:4B:E0:25 X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:c6:6e:a7:c2:48:5d:06:cd:10:be:28:67:d9:85:d0:05:4c: 07:e4:53:5e:39:fc:9f:76:90:6e:38:4d:12:b7:b0:b6:fe:cc: 53:01:fc:fc:50:77:fa:c2:4c:77:8c:2e:bb:5e:bb:c3:91:03: db:dc:aa:b2:87:fc:9b:df:0e:73:ab:3a:3f:6e:4c:b1:af:a8: ab:8c:5e:c1:d0:2b:97:59:d7:68:cf:7d:6a:28:e0:38:d8:fe: 03:10:fa:b2:bb:17:11:40:a4:cb:60:e1:38:ef:6e:61:cb:ce: d9:0e:f7:8b:b0:54:37:1a:93:58:26:e6:49:3e:1e:d4:6e:35: 52:15:ce:de:a2:69:f6:60:5f:8b:f8:49:9b:df:96:6b:a0:4d: 50:11:6c:ff:55:e6:ff:4e:cf:ba:48:cf:87:11:3b:16:61:fc: ad:7e:4b:cd:e2:3b:c4:de:c0:e6:ca:95:cc:12:3a:86:f5:bc: 39:31:66:ec:13:53:2a:ca:ed:ba:61:79:29:9d:8c:60:a2:76: 94:d3:db:65:44:64:56:7e:fb:59:82:16:7b:41:2b:b9:d0:4f: 33:20:f8:72:2a:6b:12:32:2e:29:c8:22:4e:11:07:6a:7c:1a: 29:01:93:66:61:04:4e:56:2a:ba:c8:a6:eb:4e:bb:a1:a5:1d: 97:fa:97:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKDVBNTZDNERFOTQyM0I5RTJCODAwQUI3RTA0MERDQTNF MDlGMjM0NzUwHhcNMjUwNzAzMDcwMjA5WhcNMjUwNzEwMDcwMjA5WjAYMRYwFAYD VQQDEw02ODY2MmFmMS05NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ziacrDBzXUPjO0ISabBLE45Y7De6MkTB+rME+yO3+04bvKlf5DcX8eHuBGp 415aFWlIg4xA+vOMTC/CU4I7EvfInsB2sU/3cot/slMuDAmbLzyklChKB4dNzIl4 nO2KWlTgs+Uv5756RJ4WwDcR0vrYKvIlzjAx4ZqS1StrR3isLR7eYW50U+fnkuEW TaAZdF8vaH+swzLxUc1OpNm9oR63a/bO2T3g0qj3Oh3mPfKUE0p5UP0UAkt6thdJ dtpm4G5WBshxGEFJPoGbcuWoHWF8LyLmCqgXJ+phEqW5ykVc/7a4VO17yMltpTWt lU583z+kBwCzomCKqOVXdYeYpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuxkWJk FnSgw+CSD6CA1IWTS+AlMB8GA1UdIwQYMBaAFFpWxN6UI7niuACrfgQNyj4J8jR1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84M0ZENkIyRUE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVlSzRBS3QtQkEzS1BnbnlO SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84M0ZENkIyRUE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVl SzRBS3QtQkEzS1BnbnlOSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9xm6nwkhdBs0Qvihn2YXQBUwH5FNeOfyfdpBuOE0St7C2/sxTAfz8 UHf6wkx3jC67XrvDkQPb3Kqyh/yb3w5zqzo/bkyxr6irjF7B0CuXWddoz31qKOA4 2P4DEPqyuxcRQKTLYOE4725hy87ZDveLsFQ3GpNYJuZJPh7UbjVSFc7eomn2YF+L +Emb35ZroE1QEWz/Veb/Ts+6SM+HETsWYfytfkvN4jvE3sDmypXMEjqG9bw5MWbs E1Mqyu26YXkpnYxgonaU09tlRGRWfvtZghZ7QSu50E8zIPhyKmsSMi4pyCJOEQdq fBopAZNmYQROViq6yKbrTruhpR2X+pfO -----END CERTIFICATE-----Generated at Thu Jul 3 20:05:27 2025 by rpki-client