$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: 57OoElXVAHt6P3i+1w68UDQPplAVEpFubxUdMAM1xWs= Subject key identifier: 92:B3:98:0D:B3:15:8F:64:BF:84:38:0E:4D:B9:4B:2C:8A:15:25:9F Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 150C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 19A8 Signing time: Sat 18 Oct 2025 17:17:44 +0000 Manifest this update: Sat 18 Oct 2025 17:17:44 +0000 Manifest next update: Sat 25 Oct 2025 17:17:44 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: tublSELDlDirwljUugSgmAFIjk2DeRCZgpOopiUkSKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5388 (0x150c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Oct 18 17:17:44 2025 GMT Not After : Oct 25 17:17:44 2025 GMT Subject: CN=68f3cbb8-6fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ba:0a:f2:92:ae:e9:b4:3f:42:cf:2c:34:a2: 43:16:41:be:e8:3d:41:b2:f1:8c:6e:4d:0d:b3:91: 7e:21:99:79:6d:88:81:96:51:c1:2d:bc:3e:f1:20: 60:6b:ea:9d:ed:0f:10:01:98:c7:38:84:16:17:54: 39:c1:99:79:8f:ae:8b:a6:1d:2a:93:ed:22:7e:2a: ac:88:76:36:6c:05:85:e2:9e:ab:9a:07:87:f0:9b: 05:9c:ff:63:aa:db:ce:03:52:11:a9:e9:71:ca:de: 77:bf:8c:27:a7:ff:bf:ea:41:3e:06:6d:f5:c4:56: 5f:6d:76:9c:88:92:9a:18:51:9f:8d:d5:5b:43:2d: 31:0a:51:ff:0b:e5:0a:d9:cc:3f:e4:f0:8d:1e:4e: d6:b4:49:74:64:da:4b:a3:92:bd:78:8d:69:2c:c5: 4b:28:c9:78:cb:fa:fe:bd:5f:4a:f5:cf:e9:62:bf: b9:b0:af:f6:d7:03:c1:e5:c6:35:f5:cd:1a:e4:44: 85:23:1b:07:8a:81:28:a9:aa:6e:c9:11:5e:97:67: 48:7e:72:13:94:27:2b:10:93:1e:fe:a2:1d:7c:33: dc:36:e2:67:90:ff:cf:f7:eb:b0:7b:74:53:c3:48: db:d6:43:27:be:71:e3:c1:ed:30:31:29:b7:dd:f9: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B3:98:0D:B3:15:8F:64:BF:84:38:0E:4D:B9:4B:2C:8A:15:25:9F X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:47:99:6e:e0:08:e0:3a:0c:13:0d:56:7d:ba:05:5f:a4:24: 1d:1f:40:0f:1d:9c:e1:9c:30:76:3a:71:1f:a4:a9:d5:18:91: ea:b9:d1:e8:03:b9:c8:f1:d6:b3:75:94:ae:d6:84:75:a9:63: e5:6a:d7:37:02:e6:69:14:e1:75:76:0d:51:eb:2a:2d:ac:8a: 44:af:cd:9f:a5:29:c1:8b:78:ce:12:99:f8:2c:65:cd:0a:f4: 3e:b6:6f:a0:f2:ba:ce:57:7d:9e:38:da:85:cc:b8:4b:04:63: 0c:6b:98:fc:f8:03:6c:a1:ce:a2:ea:39:be:22:66:c7:b5:d9: 50:b9:07:db:3d:15:ed:c4:6f:52:73:73:3d:05:4a:a8:7a:5e: e7:17:42:96:36:76:c0:08:1a:b7:84:48:6b:bf:1c:60:c3:bb: c8:c5:0a:35:ad:d4:e4:bf:32:95:4e:9a:fa:5a:00:d5:9f:d1: 79:33:e1:04:da:be:a1:77:a4:bb:27:57:85:54:3e:b2:bf:50: bb:7e:3b:d5:9c:33:41:2b:58:7c:80:80:7e:99:3c:1a:17:4c: 86:10:93:37:ad:cd:dc:95:68:6f:6b:4f:02:9e:48:fe:a1:58: 47:74:b3:dd:89:9d:01:dd:3d:f6:54:11:c8:58:d3:0f:e6:9b: 31:09:64:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUxMDE4MTcxNzQ0WhcNMjUxMDI1MTcxNzQ0WjAYMRYwFAYD VQQDEw02OGYzY2JiOC02ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7oK8pKu6bQ/Qs8sNKJDFkG+6D1BsvGMbk0Ns5F+IZl5bYiBllHBLbw+8SBg a+qd7Q8QAZjHOIQWF1Q5wZl5j66Lph0qk+0ifiqsiHY2bAWF4p6rmgeH8JsFnP9j qtvOA1IRqelxyt53v4wnp/+/6kE+Bm31xFZfbXaciJKaGFGfjdVbQy0xClH/C+UK 2cw/5PCNHk7WtEl0ZNpLo5K9eI1pLMVLKMl4y/r+vV9K9c/pYr+5sK/21wPB5cY1 9c0a5ESFIxsHioEoqapuyRFel2dIfnITlCcrEJMe/qIdfDPcNuJnkP/P9+uwe3RT w0jb1kMnvnHjwe0wMSm33fkPRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKzmA2z FY9kv4Q4Dk25SyyKFSWfMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHR5lu4AjgOgwTDVZ9ugVfpCQdH0APHZzhnDB2OnEfpKnVGJHqudHo A7nI8dazdZSu1oR1qWPlatc3AuZpFOF1dg1R6yotrIpEr82fpSnBi3jOEpn4LGXN CvQ+tm+g8rrOV32eONqFzLhLBGMMa5j8+ANsoc6i6jm+ImbHtdlQuQfbPRXtxG9S c3M9BUqoel7nF0KWNnbACBq3hEhrvxxgw7vIxQo1rdTkvzKVTpr6WgDVn9F5M+EE 2r6hd6S7J1eFVD6yv1C7fjvVnDNBK1h8gIB+mTwaF0yGEJM3rc3clWhva08Cnkj+ oVhHdLPdiZ0B3T32VBHIWNMP5psxCWQB -----END CERTIFICATE-----Generated at Mon Oct 20 10:13:12 2025 by rpki-client