$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: mi/o5iW1XgESCQK6CKTnUOsyDn24WyquSPHj1sjunGk= Subject key identifier: 32:EF:C0:15:AC:64:31:15:11:1C:51:77:6D:8E:23:6D:0F:2E:82:49 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 0872 Signing time: Fri 22 Aug 2025 20:46:49 +0000 Manifest this update: Fri 22 Aug 2025 20:46:49 +0000 Manifest next update: Fri 29 Aug 2025 20:46:49 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: YvAUfibZ2pVC5SyfxFqKtEcGlcSL/632vN2UzA6Evew=) 2: 0EBC5C0E7F3611F090B1EA74C4F9AE02.roa (hash: TbV9ax/aopcJVKrc3y0ZYBSXPQbH45FsXlcn6ri4slM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Aug 22 20:46:49 2025 GMT Not After : Aug 29 20:46:49 2025 GMT Subject: CN=68a8d739-036e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8b:0e:d9:dc:63:42:b0:65:d6:51:de:a9:34: 33:4b:3f:24:bc:c6:f0:6f:b9:af:46:fd:b2:1d:44: 3c:6d:78:7f:10:f7:8c:ed:ea:5c:19:4f:94:c9:ea: 69:ad:1c:24:06:42:f5:aa:be:5c:d3:57:e7:50:33: e9:fd:26:c6:23:7e:44:d6:6e:53:2b:85:df:13:9c: f2:6d:f3:8c:df:4c:27:c0:fe:dc:81:15:42:15:61: c1:8a:68:e4:80:e0:e8:02:a5:bc:76:98:9b:b6:69: ba:96:38:61:f1:b5:89:6f:83:c6:55:8b:49:e0:dd: d4:15:a9:23:0b:d5:79:62:de:f9:e7:7a:db:b5:49: ca:18:34:42:20:08:3d:ed:fd:4f:fc:d4:b2:4a:6d: d0:b2:33:cb:3f:4e:06:e7:48:6c:62:57:58:40:75: 06:be:c2:fa:93:01:74:38:e5:9e:83:94:14:5d:4d: d9:16:8d:ea:33:78:75:6f:ca:95:d3:9e:59:2f:f6: 6c:ea:c2:fd:9f:ce:4d:20:31:fc:a8:11:b0:5a:83: c1:ea:a7:72:cd:97:4b:57:01:d4:f3:23:cd:be:b5: 6a:71:28:5a:93:8c:42:8e:d1:83:94:a7:b2:6a:52: 2a:1a:42:35:0d:1c:d1:d2:cd:19:d0:e3:cd:31:d6: 49:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EF:C0:15:AC:64:31:15:11:1C:51:77:6D:8E:23:6D:0F:2E:82:49 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c7:41:83:0d:c0:18:06:6b:b5:0e:c5:e4:05:a3:76:8b:d4: 83:6b:6c:af:55:7b:e9:91:49:76:6b:6f:ba:77:45:ed:68:19: 5d:de:55:c3:7b:01:42:19:6c:08:28:2f:27:d6:bd:21:ed:5e: 1a:14:fb:3e:0f:41:d8:ac:94:97:0e:80:f9:30:41:61:ea:ba: 37:ff:ca:3d:37:18:bc:de:c3:10:76:91:5c:c4:fb:77:82:cf: d9:86:5d:5a:9f:3c:9f:00:69:47:f8:11:77:ec:ad:6b:e4:68: 46:73:2c:c2:f8:c2:5d:ef:ef:c8:ac:7c:13:65:80:ff:16:40: 3d:89:51:43:61:5d:2b:bd:aa:83:38:bf:d5:2f:9e:a0:a3:61: b3:16:74:5f:b1:78:fd:29:46:12:de:ae:d8:3a:d3:bc:bb:0a: 17:8f:44:93:8f:34:86:5c:8b:1a:ed:a2:16:26:87:60:0d:45: d7:68:93:1e:fc:1c:be:14:72:44:1a:e1:b9:35:bf:43:60:4c: db:7a:6e:20:75:c8:6e:ed:f5:5b:2a:ce:0b:e1:52:31:b9:07: 9a:39:45:b2:cb:04:6b:6a:b6:70:dc:5e:21:e9:dc:19:75:00: 32:7e:18:47:69:db:c3:b4:a8:f5:34:9c:88:34:f6:68:f1:54: de:c6:fc:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwODIyMjA0NjQ5WhcNMjUwODI5MjA0NjQ5WjAYMRYwFAYD VQQDEw02OGE4ZDczOS0wMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7IsO2dxjQrBl1lHeqTQzSz8kvMbwb7mvRv2yHUQ8bXh/EPeM7epcGU+Uyepp rRwkBkL1qr5c01fnUDPp/SbGI35E1m5TK4XfE5zybfOM30wnwP7cgRVCFWHBimjk gODoAqW8dpibtmm6ljhh8bWJb4PGVYtJ4N3UFakjC9V5Yt7553rbtUnKGDRCIAg9 7f1P/NSySm3QsjPLP04G50hsYldYQHUGvsL6kwF0OOWeg5QUXU3ZFo3qM3h1b8qV 055ZL/Zs6sL9n85NIDH8qBGwWoPB6qdyzZdLVwHU8yPNvrVqcShak4xCjtGDlKey alIqGkI1DRzR0s0Z0OPNMdZJCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLvwBWs ZDEVERxRd22OI20PLoJJMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAx0GDDcAYBmu1DsXkBaN2i9SDa2yvVXvpkUl2a2+6d0XtaBld3lXD ewFCGWwIKC8n1r0h7V4aFPs+D0HYrJSXDoD5MEFh6ro3/8o9Nxi83sMQdpFcxPt3 gs/Zhl1anzyfAGlH+BF37K1r5GhGcyzC+MJd7+/IrHwTZYD/FkA9iVFDYV0rvaqD OL/VL56go2GzFnRfsXj9KUYS3q7YOtO8uwoXj0STjzSGXIsa7aIWJodgDUXXaJMe /By+FHJEGuG5Nb9DYEzbem4gdchu7fVbKs4L4VIxuQeaOUWyywRrarZw3F4h6dwZ dQAyfhhHadvDtKj1NJyINPZo8VTexvy9 -----END CERTIFICATE-----Generated at Sat Aug 23 14:34:43 2025 by rpki-client