$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft File: wbdm2intKT3fpczrCuQpdFRE1hU.mft (raw, json) Hash identifier: a1EjItBD5rgs0QW3QOz5CGBCGg0WeQIXXftiHW6WKI0= Subject key identifier: 65:CD:43:67:83:7A:59:07:74:5D:6D:AA:D8:B5:1E:91:4D:14:B9:81 Authority key identifier: C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 Certificate issuer: /CN=A912F281/serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft Manifest number: 87 Signing time: Wed 17 Sep 2025 07:16:47 +0000 Manifest this update: Wed 17 Sep 2025 07:16:46 +0000 Manifest next update: Wed 24 Sep 2025 07:16:46 +0000 Files and hashes: 1: wbdm2intKT3fpczrCuQpdFRE1hU.crl (hash: nxFWwzNqt0NaayrooO1rbFr8u8m9OZAQuf1Abq3CDWs=) 2: 8A69BFBAC67011EFAE929D0DC4F9AE02.roa (hash: sznnb83JGGX6kxaOiYhmv1K3OAoUlfeqG+/vLr2w58w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281, serialNumber=C1B766DA29ED293DDFA5CCEB0AE429745444D615 Validity Not Before: Sep 17 07:16:46 2025 GMT Not After : Sep 24 07:16:46 2025 GMT Subject: CN=68ca605f-af0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:03:81:47:d3:c5:38:82:eb:81:e1:7a:90: 28:19:58:12:46:ef:93:52:fc:d9:42:cf:6c:24:bf: 7f:4e:cf:be:7d:0f:51:62:dc:3d:67:7e:67:63:c1: 63:07:9f:59:7a:b1:fd:10:bf:95:86:ef:a3:1f:e7: 02:d1:8c:59:21:a1:45:94:8a:f7:23:f9:f9:1f:cd: de:91:d5:3f:1e:03:3a:91:d6:17:1f:58:fd:54:62: 57:32:b7:f0:d9:52:cf:e4:f2:a6:9f:8a:82:0e:ac: 1b:c2:43:8b:5d:bf:05:35:2a:40:57:c8:c3:88:53: 84:94:a3:0e:b7:f5:15:5e:fd:e9:f1:a3:b6:2e:e4: cb:7b:da:a1:cc:87:99:e5:6a:e6:6d:af:b2:51:bb: 77:f0:9e:b7:5f:bb:ec:6a:5f:a9:f1:e5:fd:16:12: 17:6d:03:ff:e9:38:1d:83:f8:4e:63:c0:2d:31:79: e0:ad:f9:be:f8:40:88:7b:16:02:93:cc:2e:cf:3a: 18:26:43:2b:73:36:ff:bc:ad:36:18:c3:66:35:5c: d1:b2:e1:0b:68:34:65:67:85:22:03:98:b7:23:60: c9:ff:52:1f:9f:88:ab:23:30:9f:ae:54:70:49:3b: 37:0e:57:91:cd:8c:28:2e:8f:32:bb:6f:25:40:3a: da:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:43:67:83:7A:59:07:74:5D:6D:AA:D8:B5:1E:91:4D:14:B9:81 X509v3 Authority Key Identifier: keyid:C1:B7:66:DA:29:ED:29:3D:DF:A5:CC:EB:0A:E4:29:74:54:44:D6:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbdm2intKT3fpczrCuQpdFRE1hU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/1AF7DF6AC66E11EFA787F865C4F9AE02/wbdm2intKT3fpczrCuQpdFRE1hU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:4c:0a:9a:ba:ad:29:5f:bc:8f:29:6d:b4:94:7b:87:62:ae: 10:bd:21:ff:be:f8:fc:90:49:43:73:b6:2f:ff:45:de:b0:23: 52:31:14:92:f9:fc:dc:8f:ed:42:ca:05:0b:c0:12:40:19:17: 24:4e:bf:28:71:9f:74:06:57:d3:1f:dd:b1:39:e7:6f:94:6a: a9:ca:74:74:2a:1f:25:98:ac:f6:f4:38:63:39:8b:c9:f8:73: 6f:c4:c9:97:29:45:9f:ce:fa:fe:48:ed:17:64:6d:7b:4a:fc: dd:bc:43:da:b5:13:ec:21:9e:2d:ce:41:9b:56:68:a5:10:08: b7:63:d5:89:55:78:92:34:5e:11:b6:70:20:98:f5:88:97:dd: 8f:fc:10:d6:3e:1e:b2:cb:68:9d:dd:93:99:2f:af:ca:4d:b1: 29:63:fa:9c:22:ee:59:ac:60:4f:22:d1:10:c3:d4:ec:9a:ce: 77:9f:4b:16:dc:9d:17:16:7b:ab:f2:b8:50:ce:7c:19:45:b2: c8:b7:63:1e:a2:f8:cb:1b:d5:4c:1c:ba:50:6b:e3:5b:ef:93: a6:7e:9f:69:8e:eb:03:04:53:19:ac:7e:29:6f:45:f8:6e:71: f8:c5:1c:41:b6:b7:bc:ff:63:1f:34:98:95:47:32:ed:81:22: dd:1e:35:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyODExMTAvBgNVBAUTKEMxQjc2NkRBMjlFRDI5M0RERkE1Q0NFQjBBRTQyOTc0 NTQ0NEQ2MTUwHhcNMjUwOTE3MDcxNjQ2WhcNMjUwOTI0MDcxNjQ2WjAYMRYwFAYD VQQDEw02OGNhNjA1Zi1hZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0kDgUfTxTiC64HhepAoGVgSRu+TUvzZQs9sJL9/Ts++fQ9RYtw9Z35nY8Fj B59ZerH9EL+Vhu+jH+cC0YxZIaFFlIr3I/n5H83ekdU/HgM6kdYXH1j9VGJXMrfw 2VLP5PKmn4qCDqwbwkOLXb8FNSpAV8jDiFOElKMOt/UVXv3p8aO2LuTLe9qhzIeZ 5Wrmba+yUbt38J63X7vsal+p8eX9FhIXbQP/6Tgdg/hOY8AtMXngrfm++ECIexYC k8wuzzoYJkMrczb/vK02GMNmNVzRsuELaDRlZ4UiA5i3I2DJ/1Ifn4irIzCfrlRw STs3DleRzYwoLo8yu28lQDraVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXNQ2eD elkHdF1tqti1HpFNFLmBMB8GA1UdIwQYMBaAFMG3Ztop7Sk936XM6wrkKXRURNYV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xQUY3REY2QUM2 NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtUM2ZwY3pyQ3VRcGRGUkUx aFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diZG0yaW50S1QzZnBjenJDdVFwZEZSRTFoVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjI4MS8xQUY3REY2QUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi93YmRtMmludEtU M2ZwY3pyQ3VRcGRGUkUxaFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACTAqauq0pX7yPKW20lHuHYq4QvSH/vvj8kElDc7Yv/0XesCNSMRSS +fzcj+1CygULwBJAGRckTr8ocZ90BlfTH92xOedvlGqpynR0Kh8lmKz29DhjOYvJ +HNvxMmXKUWfzvr+SO0XZG17SvzdvEPatRPsIZ4tzkGbVmilEAi3Y9WJVXiSNF4R tnAgmPWIl92P/BDWPh6yy2id3ZOZL6/KTbEpY/qcIu5ZrGBPItEQw9Tsms53n0sW 3J0XFnur8rhQznwZRbLIt2MeovjLG9VMHLpQa+Nb75Omfp9pjusDBFMZrH4pb0X4 bnH4xRxBtre8/2MfNJiVRzLtgSLdHjX9 -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:57 2025 by rpki-client