$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft File: wipR7M5tlu_1Mou8JblTGLTB2i4.mft (raw, json) Hash identifier: TO+TBufbTfVcch8Dnc3dPaVzthgFiiXauZmzIamfcRQ= Subject key identifier: C3:2D:86:1A:C2:E8:F0:EE:99:3D:37:E9:25:53:BE:55:3E:FD:51:EC Authority key identifier: C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E Certificate issuer: /CN=A91D74A6/serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft Manifest number: 7A Signing time: Sat 23 Aug 2025 07:05:19 +0000 Manifest this update: Sat 23 Aug 2025 07:05:19 +0000 Manifest next update: Sat 30 Aug 2025 07:05:19 +0000 Files and hashes: 1: wipR7M5tlu_1Mou8JblTGLTB2i4.crl (hash: j/LZWHbAvIT7UdL/jhSI/ogsnN4GL7Dl/8OHBoe9nRY=) 2: 048B6F32D19D11EFB536C03DC4F9AE02.roa (hash: KB4EUqrfcsOAzIiEQ7XWVFbrnOWdV6fKnfW3hotUhtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=C22A51ECCE6D96EFF5328BBC25B95318B4C1DA2E Validity Not Before: Aug 23 07:05:19 2025 GMT Not After : Aug 30 07:05:19 2025 GMT Subject: CN=68a9682f-8cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:d1:57:56:2f:7c:1e:30:37:73:2b:11:39: f4:2f:82:6c:0c:78:bf:8f:44:57:d0:5c:e9:ee:b8: 03:01:4f:75:ad:9b:9d:1f:ee:0e:9c:cc:02:2c:95: 49:a2:f3:18:0d:2c:d9:75:63:7f:01:20:d3:d2:01: 3a:57:d5:79:01:39:e8:1f:eb:a0:a8:17:c5:e7:c9: d6:ec:7d:64:7d:6c:d2:b2:35:e8:19:b5:10:e9:f5: f2:48:ba:3d:94:8c:47:26:ea:bc:39:d8:7a:89:1d: d8:08:76:5b:d0:36:57:d3:0c:f8:89:71:9c:b5:2e: 77:39:51:fb:60:a3:10:9a:21:09:d2:d8:7b:98:64: b0:b4:8e:63:eb:56:88:c6:1c:db:a2:64:1d:66:b8: cc:10:10:f1:16:cc:27:9b:60:53:e5:59:bc:98:15: 4d:3b:9c:c8:e9:60:24:f5:d6:cb:4e:f8:ef:c1:24: 60:c1:b2:bc:58:81:e7:63:34:3e:5b:bb:7c:41:1c: dc:d4:2c:4b:b7:16:5e:7f:b7:a4:3e:1f:53:cf:65: f1:08:95:49:85:c3:bc:c6:5c:b2:d3:19:5b:c5:b4: 32:86:ea:af:d3:09:b7:90:cc:75:72:6b:23:1e:db: 58:b0:f4:8e:c2:7a:0b:d6:93:4c:95:46:fe:2b:39: 4b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2D:86:1A:C2:E8:F0:EE:99:3D:37:E9:25:53:BE:55:3E:FD:51:EC X509v3 Authority Key Identifier: keyid:C2:2A:51:EC:CE:6D:96:EF:F5:32:8B:BC:25:B9:53:18:B4:C1:DA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wipR7M5tlu_1Mou8JblTGLTB2i4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/797E9A86D19C11EF83CEAD3CC4F9AE02/wipR7M5tlu_1Mou8JblTGLTB2i4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:9e:35:7e:cc:d5:b2:74:39:90:85:53:65:35:67:e2:eb:1b: 05:bf:a5:aa:7b:df:96:4d:7f:4f:48:9c:f5:5c:88:da:68:71: 54:ad:e3:47:52:1a:40:f6:ed:de:53:bd:d3:cf:76:56:32:22: 13:39:90:8c:bc:a3:d5:f9:21:12:a4:bb:48:39:07:e8:f5:b7: a3:75:d4:75:a2:fb:e0:9a:36:3f:2f:c7:2c:14:cc:de:e1:e8: 2e:cf:02:d7:69:e6:95:a1:fd:37:63:49:e7:ad:92:25:0e:a2: c4:28:76:de:1d:7f:e9:d1:55:d8:20:5c:45:cd:ec:36:a6:30: 22:7a:8c:d1:b2:4b:b8:5e:de:09:e3:3f:0e:b5:0b:ce:fb:a2: f1:75:82:40:47:71:8a:84:5c:51:0c:4b:8b:87:bf:58:36:30: d6:00:26:f0:92:fe:1d:ae:47:7d:15:b2:d1:fa:0c:78:5c:54: 48:a6:c6:d2:d6:e4:df:6f:99:5c:f5:60:04:13:c8:3f:2e:97: 1f:00:09:49:5a:65:a6:e0:81:72:b6:d8:b7:28:fa:ed:ce:d0: e9:af:ee:ce:be:b5:4b:d4:d7:5a:2f:21:04:15:dd:9b:67:cd: c4:57:58:9b:50:d9:ac:51:26:64:86:5d:06:58:ea:84:6b:65: eb:c1:0e:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzRBNjExMC8GA1UEBRMoQzIyQTUxRUNDRTZEOTZFRkY1MzI4QkJDMjVCOTUzMThC NEMxREEyRTAeFw0yNTA4MjMwNzA1MTlaFw0yNTA4MzAwNzA1MTlaMBgxFjAUBgNV BAMTDTY4YTk2ODJmLThjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1DNFXVi98HjA3cysROfQvgmwMeL+PRFfQXOnuuAMBT3Wtm50f7g6czAIslUmi 8xgNLNl1Y38BINPSATpX1XkBOegf66CoF8XnydbsfWR9bNKyNegZtRDp9fJIuj2U jEcm6rw52HqJHdgIdlvQNlfTDPiJcZy1Lnc5UftgoxCaIQnS2HuYZLC0jmPrVojG HNuiZB1muMwQEPEWzCebYFPlWbyYFU07nMjpYCT11stO+O/BJGDBsrxYgedjND5b u3xBHNzULEu3Fl5/t6Q+H1PPZfEIlUmFw7zGXLLTGVvFtDKG6q/TCbeQzHVyayMe 21iw9I7CegvWk0yVRv4rOUtnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwy2GGsLo 8O6ZPTfpJVO+VT79UewwHwYDVR0jBBgwFoAUwipR7M5tlu/1Mou8JblTGLTB2i4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3NEE2Lzc5N0U5QTg2RDE5 QzExRUY4M0NFQUQzQ0M0RjlBRTAyL3dpcFI3TTV0bHVfMU1vdThKYmxUR0xUQjJp NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2lwUjdNNXRsdV8xTW91OEpibFRHTFRCMmk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3 NEE2Lzc5N0U5QTg2RDE5QzExRUY4M0NFQUQzQ0M0RjlBRTAyL3dpcFI3TTV0bHVf MU1vdThKYmxUR0xUQjJpNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL6eNX7M1bJ0OZCFU2U1Z+LrGwW/pap735ZNf09InPVciNpocVSt40dS GkD27d5TvdPPdlYyIhM5kIy8o9X5IRKku0g5B+j1t6N11HWi++CaNj8vxywUzN7h 6C7PAtdp5pWh/TdjSeetkiUOosQodt4df+nRVdggXEXN7DamMCJ6jNGyS7he3gnj Pw61C877ovF1gkBHcYqEXFEMS4uHv1g2MNYAJvCS/h2uR30VstH6DHhcVEimxtLW 5N9vmVz1YAQTyD8ulx8ACUlaZabggXK22Lco+u3O0Omv7s6+tUvU11ovIQQV3Ztn zcRXWJtQ2axRJmSGXQZY6oRrZevBDok= -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:49 2025 by rpki-client