$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: 3J43pwxRXekK3/turRkxwVHxVwkiyfG6YEdGiKFJ9ec= Subject key identifier: 08:EC:BA:57:97:72:08:5A:19:26:8D:E9:07:0E:8D:65:48:CB:E7:81 Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1C7F Signing time: Fri 22 Aug 2025 16:15:15 +0000 Manifest this update: Fri 22 Aug 2025 16:15:15 +0000 Manifest next update: Fri 29 Aug 2025 16:15:15 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: F+Feqq0DH2fBzkB4K/gZ5jLKaQqxrv/qVOQxCY5qUAE=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:15:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7309 (0x1c8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: Aug 22 16:15:15 2025 GMT Not After : Aug 29 16:15:15 2025 GMT Subject: CN=68a89793-022a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:db:2c:60:09:45:37:2d:42:3d:12:e9:3a: 2b:34:0b:48:65:d4:79:e7:b0:3d:d0:1a:6c:7a:f0: d9:c5:79:87:bf:1c:8f:17:38:3b:f6:22:02:34:31: df:48:0d:73:78:6a:d7:3f:db:e1:16:f7:8d:c2:ca: 41:5c:51:e2:f8:a7:18:e3:95:ff:67:2d:29:72:cd: 92:ec:9f:22:73:6d:db:60:a6:f7:8d:84:ca:dd:57: 4c:f3:df:49:9a:26:93:d4:19:6b:94:b6:eb:a7:e0: 88:2f:68:a8:9a:72:17:44:03:d1:1d:11:ea:64:1a: 9e:4d:ff:d4:5c:03:bc:eb:24:4b:5b:d5:dd:4b:54: a3:e6:7b:25:f6:2f:70:9c:83:cd:ea:8e:0e:f9:99: 3d:f8:e5:4b:42:1b:a3:23:64:fb:cb:b3:84:1d:03: 22:73:32:7f:0a:cb:0d:4a:b4:f0:0f:dd:e9:88:ce: fe:ba:1b:44:aa:95:0d:c9:b3:11:ce:ad:f6:42:11: 03:57:1f:4b:86:ae:71:10:e4:8c:fa:b5:3d:46:ed: 4f:b8:bf:64:d8:c1:7b:27:80:82:68:6b:aa:31:d5: 87:43:e4:48:c8:9b:76:d1:8a:82:fe:27:8a:16:fe: 2a:20:b5:14:67:52:02:c7:5d:8b:0c:01:b3:a1:6a: 68:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EC:BA:57:97:72:08:5A:19:26:8D:E9:07:0E:8D:65:48:CB:E7:81 X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a1:57:24:b4:23:22:b2:bd:dd:22:54:30:59:10:66:dc:ac: 0f:37:08:3d:35:ec:e7:54:79:38:3e:4a:a9:6d:14:3f:84:3c: 0d:7b:4e:4c:e5:9e:43:2a:b6:22:30:1f:79:dc:0a:ac:62:91: a3:fd:08:bf:a2:01:cd:63:ba:b3:9e:ba:8a:37:c7:64:2b:99: fe:87:e4:c6:b5:76:ce:6c:5c:54:e1:75:9b:26:8d:a5:41:b5: 7c:8b:fa:9e:fc:2d:29:7c:80:fb:fe:35:5b:7c:c9:7f:60:44: b2:77:f5:32:c2:f5:2d:1b:5a:f0:69:7d:b2:7c:c4:b9:70:09: 92:4f:fc:b6:e4:eb:55:f7:52:ec:25:17:24:56:eb:8f:b9:e0: 2e:24:a7:17:64:3d:a6:08:04:63:76:34:b1:5b:19:ae:12:23: 0d:d0:60:4f:5a:90:ba:b5:b7:cf:02:a6:c9:ca:fd:37:90:a8: f6:0a:0b:c1:8f:69:c2:04:0a:80:07:bf:ba:0a:d3:e4:d2:8b: 73:c1:01:09:0a:5c:55:01:7f:29:49:7c:7b:5f:fd:e5:90:a6: b3:9d:0d:f5:64:02:ce:88:b2:f7:5c:4e:99:95:1a:22:e4:3b: 9a:98:62:dc:75:2d:8f:64:ef:6e:9c:df:73:e1:cb:07:10:12: 2e:75:ef:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUwODIyMTYxNTE1WhcNMjUwODI5MTYxNTE1WjAYMRYwFAYD VQQDEw02OGE4OTc5My0wMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRPbLGAJRTctQj0S6TorNAtIZdR557A90BpsevDZxXmHvxyPFzg79iICNDHf SA1zeGrXP9vhFveNwspBXFHi+KcY45X/Zy0pcs2S7J8ic23bYKb3jYTK3VdM899J miaT1BlrlLbrp+CIL2iomnIXRAPRHRHqZBqeTf/UXAO86yRLW9XdS1Sj5nsl9i9w nIPN6o4O+Zk9+OVLQhujI2T7y7OEHQMiczJ/CssNSrTwD93piM7+uhtEqpUNybMR zq32QhEDVx9Lhq5xEOSM+rU9Ru1PuL9k2MF7J4CCaGuqMdWHQ+RIyJt20YqC/ieK Fv4qILUUZ1ICx12LDAGzoWpoEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjsuleX cghaGSaN6QcOjWVIy+eBMB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjoVcktCMisr3dIlQwWRBm3KwPNwg9NeznVHk4PkqpbRQ/hDwNe05M 5Z5DKrYiMB953AqsYpGj/Qi/ogHNY7qznrqKN8dkK5n+h+TGtXbObFxU4XWbJo2l QbV8i/qe/C0pfID7/jVbfMl/YESyd/UywvUtG1rwaX2yfMS5cAmST/y25OtV91Ls JRckVuuPueAuJKcXZD2mCARjdjSxWxmuEiMN0GBPWpC6tbfPAqbJyv03kKj2CgvB j2nCBAqAB7+6CtPk0otzwQEJClxVAX8pSXx7X/3lkKaznQ31ZALOiLL3XE6ZlRoi 5DuamGLcdS2PZO9unN9z4csHEBIude9b -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:23 2025 by rpki-client