$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft File: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft (raw, json) Hash identifier: ntbpMengxof6itGzDua1mApbscEtQ/IN9KlxZiIMdno= Subject key identifier: FC:2B:D4:C4:75:03:12:CE:D1:0C:7E:4E:5F:6E:F1:B2:A7:DC:0B:D0 Authority key identifier: C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 Certificate issuer: /CN=A91D44BE/serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft Manifest number: B7 Signing time: Sat 23 Aug 2025 06:12:19 +0000 Manifest this update: Sat 23 Aug 2025 06:12:19 +0000 Manifest next update: Sat 30 Aug 2025 06:12:19 +0000 Files and hashes: 1: wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl (hash: zjBYPxPIqhZP2h3EXGuUzOHoUTTRx5U+ogFP0GQwKVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=C2963F3A854FD6D4E610199E674083D8AAA12E50 Validity Not Before: Aug 23 06:12:19 2025 GMT Not After : Aug 30 06:12:19 2025 GMT Subject: CN=68a95bc3-6bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:1d:ad:4f:6d:32:1e:34:32:c2:81:6a:09: c1:37:99:bc:66:61:d8:b3:97:b9:7f:1f:c8:87:0e: b7:d9:41:f5:35:56:d6:85:04:1d:b3:23:9b:7e:44: 11:47:31:4d:2a:c7:75:d4:8e:aa:8c:4e:dd:cf:cb: 75:85:08:62:48:bc:ed:e6:ba:cf:fd:65:72:80:14: 62:f8:54:69:c9:d3:e2:e8:58:50:22:53:b1:f7:ae: 98:d6:15:aa:6a:c7:96:14:3a:ef:da:f7:7c:7d:74: 6e:ca:da:02:06:d6:5a:eb:66:4d:cf:21:a1:b9:6e: 10:b6:de:f5:aa:7f:d6:3a:af:46:c4:82:3e:7c:64: 94:46:85:a0:cc:e8:ee:a6:54:f2:e4:47:87:9b:9c: 0c:d8:19:d8:34:2b:4c:31:0f:2a:0f:37:9c:aa:0c: 1d:46:21:8b:0e:06:e1:99:25:be:a6:cd:f7:a4:9e: a7:df:45:86:79:dc:52:c7:91:22:f9:a2:10:bc:74: 8c:8e:ce:cb:99:43:67:21:d1:d5:82:83:d2:a0:30: 06:a5:93:6e:f8:e1:40:8a:0e:9f:fa:e6:eb:fc:10: 17:ec:25:88:3a:14:25:8f:7f:60:ab:88:d5:6b:8f: 58:3c:d1:6a:d5:05:d2:f4:dc:ee:07:25:b6:61:f2: da:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2B:D4:C4:75:03:12:CE:D1:0C:7E:4E:5F:6E:F1:B2:A7:DC:0B:D0 X509v3 Authority Key Identifier: keyid:C2:96:3F:3A:85:4F:D6:D4:E6:10:19:9E:67:40:83:D8:AA:A1:2E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/0B2E8B50692211EFBF87BB0EC4F9AE02/wpY_OoVP1tTmEBmeZ0CD2KqhLlA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:52:de:71:49:74:69:b5:ce:c9:c7:86:bf:6f:7a:0c:a5:e0: 6f:bb:6f:c1:0c:aa:4b:aa:d1:0f:9c:d2:e7:64:25:14:09:4d: 99:db:42:80:9d:3f:16:9b:70:35:86:19:e6:e3:d2:7c:d1:da: a8:5f:3f:92:6d:b6:3b:fd:1b:64:7f:60:c0:69:1a:bb:3c:65: 38:53:27:51:87:a8:fe:d5:f6:06:fd:a5:b3:76:4e:b3:78:15: f0:c8:dd:41:54:38:a3:08:a6:b2:98:d5:8f:f6:a6:63:58:c4: 47:61:44:c6:71:dc:8a:7e:f6:5d:73:64:53:3d:4f:b8:c6:35: cf:ad:74:38:64:d7:2a:4e:f5:89:67:e7:5f:2b:d2:d0:12:a4: 82:01:a9:18:43:a0:dc:23:35:c0:7c:d6:6c:25:43:c0:d8:04: 13:9e:c7:e5:f4:d6:0b:7a:53:d6:f6:50:ec:a2:cf:24:39:d3: 68:92:60:ca:ba:a8:7e:ff:16:1e:18:eb:81:98:0a:5a:25:f9: f9:45:db:b4:83:87:4e:e5:8c:7d:79:88:bd:6a:a9:4e:8c:27: 98:09:de:6d:c2:cb:98:50:f5:cf:d9:11:62:c7:9a:71:7d:d3: 2f:89:67:9a:0a:be:e4:ad:0b:8b:7a:32:37:1f:2e:86:c8:2f: 0d:c9:00:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKEMyOTYzRjNBODU0RkQ2RDRFNjEwMTk5RTY3NDA4M0Q4 QUFBMTJFNTAwHhcNMjUwODIzMDYxMjE5WhcNMjUwODMwMDYxMjE5WjAYMRYwFAYD VQQDEw02OGE5NWJjMy02YmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0swdrU9tMh40MsKBagnBN5m8ZmHYs5e5fx/Ihw632UH1NVbWhQQdsyObfkQR RzFNKsd11I6qjE7dz8t1hQhiSLzt5rrP/WVygBRi+FRpydPi6FhQIlOx966Y1hWq aseWFDrv2vd8fXRuytoCBtZa62ZNzyGhuW4Qtt71qn/WOq9GxII+fGSURoWgzOju plTy5EeHm5wM2BnYNCtMMQ8qDzecqgwdRiGLDgbhmSW+ps33pJ6n30WGedxSx5Ei +aIQvHSMjs7LmUNnIdHVgoPSoDAGpZNu+OFAig6f+ubr/BAX7CWIOhQlj39gq4jV a49YPNFq1QXS9NzuByW2YfLaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwr1MR1 AxLO0Qx+Tl9u8bKn3AvQMB8GA1UdIwQYMBaAFMKWPzqFT9bU5hAZnmdAg9iqoS5Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wQjJFOEI1MDY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0VG1FQm1lWjBDRDJLcWhM bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dwWV9Pb1ZQMXRUbUVCbWVaMENEMktxaExsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wQjJFOEI1MDY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi93cFlfT29WUDF0 VG1FQm1lWjBDRDJLcWhMbEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCUt5xSXRptc7Jx4a/b3oMpeBvu2/BDKpLqtEPnNLnZCUUCU2Z20KA nT8Wm3A1hhnm49J80dqoXz+SbbY7/Rtkf2DAaRq7PGU4UydRh6j+1fYG/aWzdk6z eBXwyN1BVDijCKaymNWP9qZjWMRHYUTGcdyKfvZdc2RTPU+4xjXPrXQ4ZNcqTvWJ Z+dfK9LQEqSCAakYQ6DcIzXAfNZsJUPA2AQTnsfl9NYLelPW9lDsos8kOdNokmDK uqh+/xYeGOuBmApaJfn5Rdu0g4dO5Yx9eYi9aqlOjCeYCd5twsuYUPXP2RFix5px fdMviWeaCr7krQuLejI3Hy6GyC8NyQA9 -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:51 2025 by rpki-client