$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: WAjzGe6xrfzGoo/U8LSek7cGAoQu1nJF5Qjn5HKSnzY= Subject key identifier: 5D:02:47:01:ED:3D:52:98:29:83:A9:35:71:57:F1:E9:B1:E9:E4:E9 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 085D Signing time: Fri 18 Jul 2025 20:56:07 +0000 Manifest this update: Fri 18 Jul 2025 20:56:07 +0000 Manifest next update: Fri 25 Jul 2025 20:56:07 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: 8QAn37sBtKt3wc9JqRix+OGfUMI0hv2eNmGvN2Q2gag=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: cLcDxJaeMDwKIqi4j9iCoiD5WtzTHERGSbREs6JVCus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Jul 18 20:56:07 2025 GMT Not After : Jul 25 20:56:07 2025 GMT Subject: CN=687ab4e7-a2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ec:9f:91:68:c6:70:d2:0c:66:d4:11:67:fa: 2d:71:ae:df:71:82:6a:80:63:98:5b:61:76:05:c7: fa:61:09:30:b0:00:4b:d2:7a:d1:a0:40:fc:0e:1e: 82:b2:fe:8d:a2:a5:07:be:fe:38:c8:18:66:11:a2: 38:c3:14:94:ef:1d:8e:f2:2c:5d:36:85:f0:3b:66: 53:01:07:b1:28:f8:b4:c5:b4:0b:bd:0c:cf:0c:c4: b4:32:f5:28:d7:36:e1:88:b9:ea:7a:a8:09:58:20: a4:f9:ae:f3:8f:e2:8f:d2:0f:ab:b6:cf:58:2c:cb: 67:e0:c8:9c:ca:8e:86:41:dc:cc:05:4e:c3:45:a4: 45:19:cf:91:fd:a6:6c:0c:66:a8:4b:5d:2c:e6:3d: b1:e8:8b:a1:2e:e3:4f:dd:6a:d3:dd:ec:dc:6b:eb: c1:83:f1:ea:00:a6:48:c0:64:b8:2e:f7:52:02:09: 76:49:a9:27:0a:cd:ca:ee:a8:b2:90:30:17:ab:e9: 5c:c3:7a:57:82:47:65:fa:97:c2:56:49:19:fa:26: 3a:26:69:4a:87:90:a4:e2:e6:70:0d:64:f6:a8:b9: e9:da:18:cb:0e:20:37:df:d5:9d:50:1e:4f:67:5b: 70:91:8f:45:31:02:78:19:23:bf:68:9c:ad:ae:f8: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:02:47:01:ED:3D:52:98:29:83:A9:35:71:57:F1:E9:B1:E9:E4:E9 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:de:6d:a9:00:c4:2b:de:df:fe:99:0b:34:ba:52:11:a6:e0: 40:d4:3a:a2:64:6e:fc:5c:d0:c3:1e:d8:c6:0c:e3:86:cb:e7: da:c8:8a:a4:f0:07:b1:de:a7:fa:f6:2c:47:4a:53:0d:15:d6: 56:b4:93:cd:43:e7:7b:c3:4d:02:1e:b8:8e:34:12:61:92:3f: 31:61:29:f6:3d:f2:2e:27:23:27:4e:05:84:a8:da:72:30:e8: 8d:4a:f6:8f:2a:ef:93:14:29:80:b5:8a:73:45:1a:52:22:71: fb:ad:f1:1e:99:18:09:6f:46:8e:fd:f4:0b:98:92:96:37:2a: d6:3b:29:5d:1c:c4:38:af:03:9a:33:44:00:8b:31:82:16:3f: 29:94:03:54:b7:1b:92:6b:21:7a:51:db:9b:9e:04:b1:95:da: 82:9e:f4:41:49:8c:6b:b4:20:27:d6:93:fe:68:e1:03:af:6a: ab:1c:5b:c4:fe:ca:d4:a2:92:56:a7:02:27:a6:dc:a1:d5:c4: 19:86:ea:c0:a4:22:f6:c3:7f:4f:51:e6:38:2d:ad:3d:8c:f1: f1:ae:33:8b:6b:51:a6:9e:5e:91:ac:62:8d:73:ee:b7:04:8b: 96:9c:1b:58:87:31:51:da:44:78:c8:8d:45:bc:38:17:8f:cc: b5:5a:16:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwNzE4MjA1NjA3WhcNMjUwNzI1MjA1NjA3WjAYMRYwFAYD VQQDEw02ODdhYjRlNy1hMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuyfkWjGcNIMZtQRZ/otca7fcYJqgGOYW2F2Bcf6YQkwsABL0nrRoED8Dh6C sv6NoqUHvv44yBhmEaI4wxSU7x2O8ixdNoXwO2ZTAQexKPi0xbQLvQzPDMS0MvUo 1zbhiLnqeqgJWCCk+a7zj+KP0g+rts9YLMtn4Micyo6GQdzMBU7DRaRFGc+R/aZs DGaoS10s5j2x6IuhLuNP3WrT3ezca+vBg/HqAKZIwGS4LvdSAgl2SaknCs3K7qiy kDAXq+lcw3pXgkdl+pfCVkkZ+iY6JmlKh5Ck4uZwDWT2qLnp2hjLDiA339WdUB5P Z1twkY9FMQJ4GSO/aJytrvjiPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF0CRwHt PVKYKYOpNXFX8emx6eTpMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw3m2pAMQr3t/+mQs0ulIRpuBA1DqiZG78XNDDHtjGDOOGy+fayIqk 8Aex3qf69ixHSlMNFdZWtJPNQ+d7w00CHriONBJhkj8xYSn2PfIuJyMnTgWEqNpy MOiNSvaPKu+TFCmAtYpzRRpSInH7rfEemRgJb0aO/fQLmJKWNyrWOyldHMQ4rwOa M0QAizGCFj8plANUtxuSayF6UdubngSxldqCnvRBSYxrtCAn1pP+aOEDr2qrHFvE /srUopJWpwInptyh1cQZhurApCL2w39PUeY4La09jPHxrjOLa1Gmnl6RrGKNc+63 BIuWnBtYhzFR2kR4yI1FvDgXj8y1WhYX -----END CERTIFICATE-----Generated at Sun Jul 20 18:41:41 2025 by rpki-client