$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft File: WlbE3pQjueK4AKt-BA3KPgnyNHU.mft (raw, json) Hash identifier: pqXYGqHbRxjMrTffU6+mWbeYdWrm7L7TMqwOcvoQIgw= Subject key identifier: 3D:50:30:38:66:DB:0A:8C:A9:F8:1A:B8:62:A5:7C:B8:84:55:64:76 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft Manifest number: A0 Signing time: Fri 05 Sep 2025 06:52:33 +0000 Manifest this update: Fri 05 Sep 2025 06:52:33 +0000 Manifest next update: Fri 12 Sep 2025 06:52:33 +0000 Files and hashes: 1: WlbE3pQjueK4AKt-BA3KPgnyNHU.crl (hash: YQ0em27itSUWt3+AsYLKkGBDfJ/FwfYUhuq/+nrrYuE=) 2: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (hash: aRkI7tQEQCwESW+AVm8WUWidr8skaQZ/Cucm3ddKBWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: Sep 5 06:52:33 2025 GMT Not After : Sep 12 06:52:33 2025 GMT Subject: CN=68ba88b1-2f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:22:8f:83:05:53:78:a3:d2:97:c6:5d:86: 82:b1:88:f8:52:89:b3:b3:20:fe:bb:9f:79:d9:83: 82:b1:88:ce:43:e0:fa:25:92:0d:49:0c:d6:1d:95: 84:e6:3e:1d:90:cd:f0:e8:a9:24:32:d7:b8:2e:d2: 21:47:84:c8:9c:a6:53:fc:ef:aa:1b:ed:62:10:45: 1b:72:45:67:87:fb:35:59:33:73:13:b8:72:93:c1: 3e:d9:c0:ab:87:a2:8f:ed:bf:61:02:a9:71:62:fc: eb:07:d9:9e:0a:7d:f2:9c:ee:b6:8a:0b:e4:09:62: 06:3f:75:a7:ad:84:0d:5d:fd:90:d4:c2:4a:86:77: 2c:0f:2d:c2:b7:63:11:a8:f2:c6:c1:70:07:3c:36: a9:dd:5b:8a:31:79:5d:ff:07:4e:80:97:4b:e9:51: 71:fd:40:fd:2d:fe:7c:10:d1:6d:40:0f:cd:39:1b: 8f:23:00:f2:57:e8:9f:07:6f:11:57:5d:d2:ec:f1: 60:61:f2:d5:16:9e:43:e8:59:bc:ac:b1:db:ad:0b: 5f:21:76:36:9b:7c:ff:9b:8f:0f:63:cd:8c:8a:e1: b8:f2:ab:90:ee:e0:3f:5f:37:58:83:b7:96:a3:08: 8a:8e:41:06:4d:f8:e1:e4:82:ce:62:94:d3:da:4e: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:30:38:66:DB:0A:8C:A9:F8:1A:B8:62:A5:7C:B8:84:55:64:76 X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e1:78:90:57:ef:65:2f:4d:09:c6:fa:36:54:bc:be:21:49: 91:82:c7:f0:78:75:87:ed:d6:3a:05:17:27:41:81:b6:9f:6f: 6a:85:a7:7d:2f:6d:c2:5f:7f:45:08:48:f1:ca:41:98:31:e3: 78:8b:16:38:cb:77:0b:76:12:de:c7:d7:02:0d:bc:64:14:5c: e4:32:8e:39:a1:69:af:3d:48:7f:1e:67:d3:79:d3:34:e8:26: 93:8e:07:da:31:c4:9c:90:14:f2:bd:75:ee:c4:77:8b:54:41: cc:64:6e:eb:de:d9:c7:04:3b:46:dd:44:09:ae:aa:14:5d:f7: 26:da:e2:1d:39:6d:a4:a1:b3:71:79:e9:32:6f:a2:71:aa:a0: dc:bb:45:a0:47:20:c4:f1:3a:a0:2d:bc:69:9d:ff:8d:50:b8: 7b:e8:ab:a4:7b:23:8f:d4:1a:2b:3c:93:30:45:18:82:e7:75: cd:4c:06:0a:f5:5e:ad:84:0b:95:65:46:b3:c1:8c:78:ac:aa: cf:6f:a3:cd:48:50:e9:34:10:8e:25:c2:a8:f7:d3:0e:40:0e: 1c:aa:53:3d:12:65:f5:fa:8d:07:c4:52:5f:32:e8:9f:72:87: 47:40:d9:57:ef:15:a3:e3:c9:76:5f:08:27:19:a1:a1:bd:17: f1:6b:b2:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKDVBNTZDNERFOTQyM0I5RTJCODAwQUI3RTA0MERDQTNF MDlGMjM0NzUwHhcNMjUwOTA1MDY1MjMzWhcNMjUwOTEyMDY1MjMzWjAYMRYwFAYD VQQDEw02OGJhODhiMS0yZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2U8ij4MFU3ij0pfGXYaCsYj4UomzsyD+u5952YOCsYjOQ+D6JZINSQzWHZWE 5j4dkM3w6KkkMte4LtIhR4TInKZT/O+qG+1iEEUbckVnh/s1WTNzE7hyk8E+2cCr h6KP7b9hAqlxYvzrB9meCn3ynO62igvkCWIGP3WnrYQNXf2Q1MJKhncsDy3Ct2MR qPLGwXAHPDap3VuKMXld/wdOgJdL6VFx/UD9Lf58ENFtQA/NORuPIwDyV+ifB28R V13S7PFgYfLVFp5D6Fm8rLHbrQtfIXY2m3z/m48PY82MiuG48quQ7uA/XzdYg7eW owiKjkEGTfjh5ILOYpTT2k60BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1QMDhm 2wqMqfgauGKlfLiEVWR2MB8GA1UdIwQYMBaAFFpWxN6UI7niuACrfgQNyj4J8jR1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84M0ZENkIyRUE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVlSzRBS3QtQkEzS1BnbnlO SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5IVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84M0ZENkIyRUE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi9XbGJFM3BRanVl SzRBS3QtQkEzS1BnbnlOSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB24XiQV+9lL00Jxvo2VLy+IUmRgsfweHWH7dY6BRcnQYG2n29qhad9 L23CX39FCEjxykGYMeN4ixY4y3cLdhLex9cCDbxkFFzkMo45oWmvPUh/HmfTedM0 6CaTjgfaMcSckBTyvXXuxHeLVEHMZG7r3tnHBDtG3UQJrqoUXfcm2uIdOW2kobNx eekyb6JxqqDcu0WgRyDE8TqgLbxpnf+NULh76KukeyOP1BorPJMwRRiC53XNTAYK 9V6thAuVZUazwYx4rKrPb6PNSFDpNBCOJcKo99MOQA4cqlM9EmX1+o0HxFJfMuif codHQNlX7xWj48l2XwgnGaGhvRfxa7LZ -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:07 2025 by rpki-client