$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft File: WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json) Hash identifier: w5JHkhdV3mtXUTWAe2yOlOKHV5ubHMXAU5i0h2aHvRs= Subject key identifier: 84:66:AE:FC:52:2A:90:3D:E8:04:D2:50:DE:33:49:C1:42:6C:6B:D9 Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 Certificate issuer: /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Certificate serial: 1968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft Manifest number: 2C79 Signing time: Wed 02 Jul 2025 16:33:58 +0000 Manifest this update: Wed 02 Jul 2025 16:33:58 +0000 Manifest next update: Wed 09 Jul 2025 16:33:58 +0000 Files and hashes: 1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: ImtK3Fpnr2pHlxixirVBEqhQJUDay63NItxGgABV6Qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6504 (0x1968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Validity Not Before: Jul 2 16:33:58 2025 GMT Not After : Jul 9 16:33:58 2025 GMT Subject: CN=68655f76-1ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:21:28:94:62:be:c1:00:8d:c3:fd:fa:5e: fa:54:c2:1b:e2:44:2f:df:56:53:28:78:1f:53:fc: 5f:db:45:d9:f1:15:63:cc:91:0c:ef:b2:f1:e4:04: ac:76:03:00:02:ca:c0:38:ac:97:e5:68:17:64:dc: de:78:4e:58:2a:2a:78:be:e3:7f:f6:5b:c0:df:54: 11:29:16:2b:7c:5e:1a:d3:16:82:48:6e:ff:d6:a3: a9:9d:f4:5a:b1:18:44:17:1e:3a:c2:95:0a:24:1f: 26:26:19:ca:ac:8c:a8:34:d1:98:53:51:7b:ba:1d: ea:6f:89:ee:db:ac:ee:2d:11:cd:aa:b9:a9:55:05: f4:5f:8c:25:d6:00:83:cb:f7:9d:2e:db:39:e1:d3: c1:de:40:b9:8b:98:aa:fa:93:e6:15:d6:46:17:51: 29:b5:17:1c:46:f0:5b:8a:ba:6a:85:26:60:22:94: 1c:2a:45:5b:fa:87:fc:2c:8f:6b:12:57:ac:6b:35: d8:96:06:3e:74:ab:87:49:d7:8c:3a:2e:3e:e4:66: 8d:ee:2e:f6:ff:34:93:72:fa:6d:1f:e2:e9:2b:c0: b7:2e:7a:2b:3a:1f:08:70:7f:16:56:bd:81:7f:e6: 03:58:52:a8:75:d2:50:0f:0b:31:45:4a:58:71:8b: 22:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:66:AE:FC:52:2A:90:3D:E8:04:D2:50:DE:33:49:C1:42:6C:6B:D9 X509v3 Authority Key Identifier: keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:88:a6:07:b0:ee:dc:bd:18:40:ca:c9:57:ef:5d:d5:a4:cf: c0:2e:7d:b1:d1:1e:8f:68:16:bf:0a:1c:0e:21:bd:75:9f:93: 40:a4:cd:12:21:62:a8:31:90:20:c6:f8:de:48:73:2e:ca:1e: 71:0d:16:55:86:1c:78:12:04:0d:42:45:71:a3:4c:eb:0c:75: ca:f5:bc:7e:5f:bc:e8:4b:83:76:5a:7b:72:ee:96:b1:79:bf: 07:ed:ff:e1:7f:21:9f:26:9a:8a:72:fd:85:3a:b4:b0:69:14: 73:93:45:ac:83:ec:7a:59:a6:f0:2b:68:f1:41:73:0a:ca:92: 37:5d:1d:ac:19:b6:35:34:7e:71:66:1d:10:3e:2a:dd:de:8f: f0:51:c3:e8:61:c7:29:65:1d:1b:e5:57:b5:27:22:8e:9e:24: 11:ca:d1:65:99:5e:6c:7e:91:7c:2d:9d:3a:04:93:a4:68:c8: a1:75:62:9a:4b:a2:bf:64:c3:97:e2:aa:59:b3:b2:6b:d9:7e: ee:02:6f:a3:cb:80:22:b7:58:44:a3:ed:a7:ef:54:9f:7b:1e: 78:5c:4b:f2:20:19:d2:14:b3:e8:8b:7f:da:8e:f8:b9:da:fe: 0d:c3:ae:9d:f7:ab:91:1e:19:e3:18:1d:b4:94:ba:4c:aa:47: d0:9e:c6:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKDU4NTA0RjIwMDQ1NjE1MzY4MThBNDREMEJFNDE2RUI1 MDU1RThGNDgwHhcNMjUwNzAyMTYzMzU4WhcNMjUwNzA5MTYzMzU4WjAYMRYwFAYD VQQDEw02ODY1NWY3Ni0xYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YYhKJRivsEAjcP9+l76VMIb4kQv31ZTKHgfU/xf20XZ8RVjzJEM77Lx5ASs dgMAAsrAOKyX5WgXZNzeeE5YKip4vuN/9lvA31QRKRYrfF4a0xaCSG7/1qOpnfRa sRhEFx46wpUKJB8mJhnKrIyoNNGYU1F7uh3qb4nu26zuLRHNqrmpVQX0X4wl1gCD y/edLts54dPB3kC5i5iq+pPmFdZGF1EptRccRvBbirpqhSZgIpQcKkVb+of8LI9r ElesazXYlgY+dKuHSdeMOi4+5GaN7i72/zSTcvptH+LpK8C3LnorOh8IcH8WVr2B f+YDWFKoddJQDwsxRUpYcYsivQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRmrvxS KpA96ATSUN4zScFCbGvZMB8GA1UdIwQYMBaAFFhQTyAEVhU2gYpE0L5BbrUFXo9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZUYUJpa1RRdmtGdXRRVmVq MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGQlBJQVJXRlRhQmlrVFF2a0Z1dFFWZWowZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZU YUJpa1RRdmtGdXRRVmVqMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyiKYHsO7cvRhAyslX713VpM/ALn2x0R6PaBa/ChwOIb11n5NApM0S IWKoMZAgxvjeSHMuyh5xDRZVhhx4EgQNQkVxo0zrDHXK9bx+X7zoS4N2Wnty7pax eb8H7f/hfyGfJpqKcv2FOrSwaRRzk0Wsg+x6WabwK2jxQXMKypI3XR2sGbY1NH5x Zh0QPird3o/wUcPoYccpZR0b5Ve1JyKOniQRytFlmV5sfpF8LZ06BJOkaMihdWKa S6K/ZMOX4qpZs7Jr2X7uAm+jy4Ait1hEo+2n71Sfex54XEvyIBnSFLPoi3/ajvi5 2v4Nw66d96uRHhnjGB20lLpMqkfQnsZa -----END CERTIFICATE-----Generated at Wed Jul 2 19:13:25 2025 by rpki-client