$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: peMDQ1xy0E9MLL5rp7jY5Zzc/WZLRqSbjN8Gg/mWyLo= Subject key identifier: 69:4A:1C:9C:79:66:DE:64:D3:27:52:28:C1:82:8D:E2:F5:6A:66:2E Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 0898 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 088F Signing time: Sat 18 Oct 2025 21:43:20 +0000 Manifest this update: Sat 18 Oct 2025 21:43:20 +0000 Manifest next update: Sat 25 Oct 2025 21:43:20 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: 0w3HRWiNpYeoRhCex24vuJbP9afLsBZbnx9Ls5AG1P4=) 2: 0EBC5C0E7F3611F090B1EA74C4F9AE02.roa (hash: TbV9ax/aopcJVKrc3y0ZYBSXPQbH45FsXlcn6ri4slM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2200 (0x898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Oct 18 21:43:20 2025 GMT Not After : Oct 25 21:43:20 2025 GMT Subject: CN=68f409f8-bff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:66:61:fa:8c:30:1d:3d:7e:14:76:15:e0:8c: e1:e6:dd:45:60:be:80:18:ce:8f:c8:9d:a5:0f:37: 70:9f:34:8f:35:38:24:dd:1b:cb:e4:bd:e2:c1:95: 1b:90:97:fa:df:bf:af:ee:41:09:5b:87:c9:93:03: 26:91:41:25:56:ed:19:1d:3d:53:f6:23:c1:62:2c: a6:ac:76:2c:3f:73:37:ae:63:fe:d4:71:aa:4d:ea: d7:f3:7b:7f:b8:28:80:08:ba:90:96:23:2d:85:d4: 22:e9:85:a4:c4:82:4c:fb:54:1b:c2:66:2a:84:d0: 66:fa:5d:ca:aa:03:93:77:0e:31:dc:3f:52:70:98: a7:a6:24:48:eb:c3:96:b7:74:ad:75:34:44:4d:29: 8d:1b:66:58:39:98:49:dc:cc:65:34:57:0b:41:d5: 67:c9:d9:17:68:33:90:4c:82:2f:49:46:e6:33:31: f8:57:90:02:a3:60:cc:cd:22:43:90:b4:66:a4:c3: 77:f5:e5:05:1f:46:7b:70:43:5c:cb:fb:a4:88:88: 6b:0c:70:82:d9:66:2f:8a:c2:0d:41:7a:70:65:45: 8b:6a:a4:fc:51:cb:a3:9f:0b:6b:7d:60:0b:3e:17: cb:50:57:59:b5:9e:26:19:3a:78:48:8c:44:7f:9d: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4A:1C:9C:79:66:DE:64:D3:27:52:28:C1:82:8D:E2:F5:6A:66:2E X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:88:22:34:3f:8b:0b:83:18:69:a1:f3:21:04:fb:a4:5e:86: 5b:af:08:da:b3:5c:00:dd:4f:64:ba:37:2f:3a:4b:ee:b1:df: 7d:10:fd:a4:8e:4f:2b:48:4f:62:0f:6a:78:0d:c5:92:25:82: 8d:55:a3:c3:c2:34:81:2b:02:38:d4:8b:33:5f:7b:2a:1d:aa: 0e:20:98:91:6f:a1:4d:92:d8:47:31:da:2f:2f:57:2a:3e:a2: e4:a7:73:aa:25:4a:f5:12:3f:5c:66:ef:67:7e:a1:57:ca:e4: a0:ee:27:4b:3c:fc:13:6b:74:84:b1:cc:a7:66:89:43:af:12: 4c:a6:bd:b4:7d:cb:cf:7c:16:65:e7:9f:b8:44:a3:94:e9:22: 20:c4:24:53:5b:22:01:2f:5a:ac:9e:17:bb:32:dd:9a:8e:0b: f9:54:32:4a:10:62:ed:b2:7a:ea:a5:b0:53:d5:d6:62:15:2d: d4:bb:3a:1f:55:99:06:e9:8c:33:43:54:49:08:59:d3:76:45: 39:54:f9:27:5c:b0:8a:6d:97:08:7e:cc:db:49:1b:be:e3:64: 56:81:7e:41:c3:41:6b:bc:e7:2e:69:10:f5:88:bf:89:d6:d5: e0:0f:5c:da:60:cb:60:f7:1e:6f:a6:8e:d2:57:06:02:b3:cd: 57:42:b2:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUxMDE4MjE0MzIwWhcNMjUxMDI1MjE0MzIwWjAYMRYwFAYD VQQDEw02OGY0MDlmOC1iZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mZh+owwHT1+FHYV4Izh5t1FYL6AGM6PyJ2lDzdwnzSPNTgk3RvL5L3iwZUb kJf637+v7kEJW4fJkwMmkUElVu0ZHT1T9iPBYiymrHYsP3M3rmP+1HGqTerX83t/ uCiACLqQliMthdQi6YWkxIJM+1QbwmYqhNBm+l3KqgOTdw4x3D9ScJinpiRI68OW t3StdTRETSmNG2ZYOZhJ3MxlNFcLQdVnydkXaDOQTIIvSUbmMzH4V5ACo2DMzSJD kLRmpMN39eUFH0Z7cENcy/ukiIhrDHCC2WYvisINQXpwZUWLaqT8UcujnwtrfWAL PhfLUFdZtZ4mGTp4SIxEf52fAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlKHJx5 Zt5k0ydSKMGCjeL1amYuMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1iCI0P4sLgxhpofMhBPukXoZbrwjas1wA3U9kujcvOkvusd99EP2k jk8rSE9iD2p4DcWSJYKNVaPDwjSBKwI41IszX3sqHaoOIJiRb6FNkthHMdovL1cq PqLkp3OqJUr1Ej9cZu9nfqFXyuSg7idLPPwTa3SEscynZolDrxJMpr20fcvPfBZl 55+4RKOU6SIgxCRTWyIBL1qsnhe7Mt2ajgv5VDJKEGLtsnrqpbBT1dZiFS3Uuzof VZkG6YwzQ1RJCFnTdkU5VPknXLCKbZcIfszbSRu+42RWgX5Bw0FrvOcuaRD1iL+J 1tXgD1zaYMtg9x5vpo7SVwYCs81XQrK3 -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:48 2025 by rpki-client