$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: JuNXRjkqyJ2wE0GfjEEhx45+ioAHna8s0thY2wJwNSQ= Subject key identifier: 57:69:C0:80:D8:8A:CB:5C:57:D7:AF:7F:68:BC:00:6E:06:FA:1C:BC Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1C74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1C66 Signing time: Fri 04 Jul 2025 16:25:23 +0000 Manifest this update: Fri 04 Jul 2025 16:25:22 +0000 Manifest next update: Fri 11 Jul 2025 16:25:22 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: DKGcgGCqPvYclwqXgao33ld3PrtQ4k7MIXGh9cbFQyI=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7284 (0x1c74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: Jul 4 16:25:22 2025 GMT Not After : Jul 11 16:25:22 2025 GMT Subject: CN=68680072-0b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ea:7f:73:2a:ae:39:ca:a9:bd:36:cc:1d:3b: f4:65:06:b1:b5:7e:71:4a:ae:99:e3:7a:44:ae:33: 56:d0:ee:22:a6:93:6e:63:40:2d:9f:6c:08:3d:84: 35:cb:6a:08:b0:67:7d:a8:10:67:b1:18:b2:68:fd: d1:00:55:96:58:25:79:d2:47:f6:72:dd:ac:a9:ed: 2e:b6:dd:12:ef:b9:26:8f:82:c7:45:ca:4d:ff:64: 04:35:07:b2:f1:ba:ea:8c:33:bb:8b:99:59:d1:dd: 22:0e:fe:fe:f9:77:16:a7:fe:f8:6b:50:8e:56:78: e8:4d:ec:24:66:cd:4f:e6:89:f6:56:fb:6d:a2:4c: 48:31:f0:f8:7b:9b:1c:9d:f9:2e:22:2d:c6:76:42: a1:12:82:3c:97:a6:51:ed:74:e3:2a:df:1d:78:64: 9f:00:8d:1e:a2:46:6b:82:55:b5:62:6e:52:c8:0f: 6c:9b:9b:ce:c4:0d:2a:62:97:dd:f5:cc:bb:53:d3: 76:43:91:68:bf:8c:2a:fd:67:2b:c1:44:62:d5:31: 28:f0:cd:31:c3:f1:35:52:6d:97:43:a4:95:a6:94: 9f:b7:ff:9a:4b:8e:cd:d2:ef:a8:13:6b:04:63:08: 85:c9:f8:9a:11:a1:37:82:89:ca:86:5b:34:8e:c3: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:C0:80:D8:8A:CB:5C:57:D7:AF:7F:68:BC:00:6E:06:FA:1C:BC X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:dd:bd:e8:6e:01:f1:28:03:bc:96:42:31:9b:be:71:91:06: 20:78:06:04:c6:3b:24:c4:f0:7b:17:f3:d0:65:c4:6e:3e:03: 54:9d:11:7e:07:08:25:7b:a5:76:85:2a:66:d3:f3:47:25:48: fd:e4:ad:1b:a6:4f:9d:84:2d:96:41:6c:b2:9b:aa:54:ea:1b: 91:4b:14:c7:90:46:31:6d:a6:0e:8e:be:11:7e:7a:06:f4:6c: 20:ea:07:a8:8c:eb:ac:e6:10:a9:72:71:3e:c4:d3:1f:f9:f2: f6:6a:2b:c6:08:38:94:ff:0c:64:1b:ee:d3:dc:e5:e3:65:5a: c9:f5:fc:27:2f:c1:1e:25:05:05:1d:19:5d:29:05:7c:6f:9f: 52:a8:f9:91:bc:d0:be:13:a3:22:b4:48:3b:87:48:48:6d:f2: e2:1b:4f:4a:30:d4:c8:16:85:d8:92:54:8e:00:ec:e3:55:12: 18:2f:2f:f3:be:46:c6:42:39:77:f3:e9:62:96:c1:21:10:4e: 19:fc:b3:e1:c1:ef:81:9b:a4:48:e7:9b:19:f9:34:6b:bf:07: 8f:d0:16:15:72:ee:cc:6b:8d:e7:72:b1:7b:dd:10:27:7c:9e: 08:0a:5f:e0:94:2c:5e:08:92:74:88:79:6f:d6:a6:e9:9e:8a: df:c4:2f:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUwNzA0MTYyNTIyWhcNMjUwNzExMTYyNTIyWjAYMRYwFAYD VQQDEw02ODY4MDA3Mi0wYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8+p/cyquOcqpvTbMHTv0ZQaxtX5xSq6Z43pErjNW0O4ippNuY0Atn2wIPYQ1 y2oIsGd9qBBnsRiyaP3RAFWWWCV50kf2ct2sqe0utt0S77kmj4LHRcpN/2QENQey 8brqjDO7i5lZ0d0iDv7++XcWp/74a1COVnjoTewkZs1P5on2VvttokxIMfD4e5sc nfkuIi3GdkKhEoI8l6ZR7XTjKt8deGSfAI0eokZrglW1Ym5SyA9sm5vOxA0qYpfd 9cy7U9N2Q5Fov4wq/WcrwURi1TEo8M0xw/E1Um2XQ6SVppSft/+aS47N0u+oE2sE YwiFyfiaEaE3gonKhls0jsMr6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdpwIDY istcV9evf2i8AG4G+hy8MB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/3b3obgHxKAO8lkIxm75xkQYgeAYExjskxPB7F/PQZcRuPgNUnRF+ Bwgle6V2hSpm0/NHJUj95K0bpk+dhC2WQWyym6pU6huRSxTHkEYxbaYOjr4RfnoG 9Gwg6geojOus5hCpcnE+xNMf+fL2aivGCDiU/wxkG+7T3OXjZVrJ9fwnL8EeJQUF HRldKQV8b59SqPmRvNC+E6MitEg7h0hIbfLiG09KMNTIFoXYklSOAOzjVRIYLy/z vkbGQjl38+lilsEhEE4Z/LPhwe+Bm6RI55sZ+TRrvweP0BYVcu7Ma43ncrF73RAn fJ4ICl/glCxeCJJ0iHlv1qbpnorfxC97 -----END CERTIFICATE-----Generated at Fri Jul 4 21:50:44 2025 by rpki-client