$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft File: wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft (raw, json) Hash identifier: ft/LXULBCF44pbJBV0Ng1pZKtgDERUZTsp7EaQt1GIk= Subject key identifier: 0C:35:0C:51:F2:FE:2C:A1:95:72:7B:75:44:D2:A9:2B:4B:4C:10:5F Authority key identifier: C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 Certificate issuer: /CN=A91CE821/serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Certificate serial: 14FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft Manifest number: 198A Signing time: Thu 18 Sep 2025 16:58:33 +0000 Manifest this update: Thu 18 Sep 2025 16:58:33 +0000 Manifest next update: Thu 25 Sep 2025 16:58:33 +0000 Files and hashes: 1: wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl (hash: B8wVIv+IceeowUYxme45P7QUMG4hzrURtyh2YNCNijY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5373 (0x14fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=C222C19EBF52844D4B7CDA0EF754E6D330C4B609 Validity Not Before: Sep 18 16:58:33 2025 GMT Not After : Sep 25 16:58:33 2025 GMT Subject: CN=68cc3a39-d9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:58:12:5d:f2:1c:7e:93:42:d4:7c:cc:be: ba:a2:d9:93:de:d8:6a:90:8d:e4:2e:6e:40:4f:0f: 79:be:cc:32:02:4b:2c:bc:f3:42:24:4b:62:69:89: 04:62:18:5d:8a:d1:5d:cd:8f:7e:b4:a6:05:87:37: 9f:9b:e0:33:84:20:fa:6b:a9:a2:fe:15:32:a5:36: 7a:4a:bf:81:18:bd:f9:43:77:10:90:ac:42:73:86: 26:37:0c:87:ff:77:ed:70:95:04:7a:c1:c2:ba:c0: af:2c:62:3b:f2:06:6e:e5:b8:b2:1e:6b:53:10:d7: d4:0f:2c:b3:60:ea:12:c2:a2:bd:f0:cc:93:65:d9: b9:20:a0:97:f8:58:0b:05:3a:47:55:83:21:45:7a: 35:25:56:5a:5c:39:9b:02:cc:ec:28:f5:be:5e:31: 10:2b:82:ae:56:1e:d2:90:a2:a1:c7:6e:a3:c8:ab: 39:71:32:ce:15:d3:0d:f3:02:f5:c7:e6:c3:dd:02: 2b:90:e4:42:44:24:1e:03:7d:2a:83:65:98:db:01: d8:ed:c4:89:e2:f2:e4:87:bc:a5:0e:7a:57:0b:6e: f7:ab:2e:bf:fa:53:17:5a:6d:d8:9a:d1:f7:d3:a6: c0:7e:62:7f:fa:d7:5b:2f:a2:da:40:ce:09:e1:f3: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:35:0C:51:F2:FE:2C:A1:95:72:7B:75:44:D2:A9:2B:4B:4C:10:5F X509v3 Authority Key Identifier: keyid:C2:22:C1:9E:BF:52:84:4D:4B:7C:DA:0E:F7:54:E6:D3:30:C4:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wiLBnr9ShE1LfNoO91Tm0zDEtgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/wiLBnr9ShE1LfNoO91Tm0zDEtgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:8a:29:bb:fa:7f:4b:c5:16:6a:93:ca:ed:92:b6:2b:50:41: 0c:ab:3d:c6:e1:7b:33:f5:89:5a:a1:9e:1a:b4:75:f9:42:db: 56:51:f8:ef:c8:4a:42:67:e8:21:20:8f:21:4a:e1:45:94:30: 38:e2:75:d6:48:11:57:df:67:00:41:3e:8e:40:37:d3:c0:78: 82:16:1f:b3:f1:51:ae:ec:b2:c8:db:2c:22:21:ae:0e:35:dd: ed:2b:fd:73:55:7e:dc:06:ff:fc:81:02:b4:79:04:eb:ee:2e: 2a:66:7e:f8:b5:3b:6f:fc:45:d5:c5:3c:69:7e:77:9c:fe:6c: b9:91:b7:5c:8e:b9:59:0a:85:bf:18:1c:51:ea:e7:81:de:ff: 2f:44:4b:36:9c:54:52:2a:7c:92:8a:7d:4d:70:5f:7a:b0:2d: 71:c1:df:ac:13:8f:1b:be:a0:08:d4:2c:98:60:4b:80:c6:60: e5:fe:f0:7b:06:df:eb:6d:64:0e:53:2e:27:cd:73:39:11:05: 57:ad:6f:a6:75:0f:2c:f4:da:3c:bf:5e:1b:d9:15:e2:12:99: 71:d8:41:3e:5c:e9:7a:6a:82:3e:3a:cf:20:63:c5:94:4a:1f: e3:dc:d3:b7:19:af:3c:85:b5:27:00:cc:71:4b:b8:07:d7:f4: 00:cf:fd:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKEMyMjJDMTlFQkY1Mjg0NEQ0QjdDREEwRUY3NTRFNkQz MzBDNEI2MDkwHhcNMjUwOTE4MTY1ODMzWhcNMjUwOTI1MTY1ODMzWjAYMRYwFAYD VQQDEw02OGNjM2EzOS1kOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQNYEl3yHH6TQtR8zL66otmT3thqkI3kLm5ATw95vswyAkssvPNCJEtiaYkE YhhditFdzY9+tKYFhzefm+AzhCD6a6mi/hUypTZ6Sr+BGL35Q3cQkKxCc4YmNwyH /3ftcJUEesHCusCvLGI78gZu5biyHmtTENfUDyyzYOoSwqK98MyTZdm5IKCX+FgL BTpHVYMhRXo1JVZaXDmbAszsKPW+XjEQK4KuVh7SkKKhx26jyKs5cTLOFdMN8wL1 x+bD3QIrkORCRCQeA30qg2WY2wHY7cSJ4vLkh7ylDnpXC273qy6/+lMXWm3YmtH3 06bAfmJ/+tdbL6LaQM4J4fPQbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAw1DFHy /iyhlXJ7dUTSqStLTBBfMB8GA1UdIwQYMBaAFMIiwZ6/UoRNS3zaDvdU5tMwxLYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hFMUxmTm9POTFUbTB6REV0 Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dpTEJucjlTaEUxTGZOb085MVRtMHpERXRnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi93aUxCbnI5U2hF MUxmTm9POTFUbTB6REV0Z2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXiim7+n9LxRZqk8rtkrYrUEEMqz3G4Xsz9YlaoZ4atHX5QttWUfjv yEpCZ+ghII8hSuFFlDA44nXWSBFX32cAQT6OQDfTwHiCFh+z8VGu7LLI2ywiIa4O Nd3tK/1zVX7cBv/8gQK0eQTr7i4qZn74tTtv/EXVxTxpfnec/my5kbdcjrlZCoW/ GBxR6ueB3v8vREs2nFRSKnySin1NcF96sC1xwd+sE48bvqAI1CyYYEuAxmDl/vB7 Bt/rbWQOUy4nzXM5EQVXrW+mdQ8s9No8v14b2RXiEplx2EE+XOl6aoI+Os8gY8WU Sh/j3NO3Ga88hbUnAMxxS7gH1/QAz/1Y -----END CERTIFICATE-----Generated at Thu Sep 18 21:59:26 2025 by rpki-client