$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: LLITRG6XcpOr8fBYvsu6puMscNECESO5oIpoXKyYTxg= Subject key identifier: E0:64:F9:5F:52:CF:E7:D3:37:28:81:65:79:76:08:26:D6:75:74:EF Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1C8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1C80 Signing time: Sun 24 Aug 2025 16:09:19 +0000 Manifest this update: Sun 24 Aug 2025 16:09:18 +0000 Manifest next update: Sun 31 Aug 2025 16:09:18 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: iCzyDixnvgDPMA5pY017yFaG5SrIJTslO+ODTe56/W4=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7310 (0x1c8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: Aug 24 16:09:18 2025 GMT Not After : Aug 31 16:09:18 2025 GMT Subject: CN=68ab392e-e10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:ec:66:4b:c9:95:fe:bc:6a:2b:3b:e9:bc: 29:f3:d0:5c:3f:d4:e8:fa:3e:ae:a1:c9:9f:3a:19: 1b:fe:36:39:d4:48:ed:43:d5:c5:96:ac:18:4d:ec: f2:1f:e1:f0:50:b1:2f:5f:1d:0a:8d:e3:22:b2:4a: 80:8d:5d:57:7d:e7:34:d0:84:fd:50:07:b4:c5:ef: b6:e0:f4:09:e0:40:bf:4c:84:b2:1a:b4:62:4f:a1: ab:fc:9d:20:8a:4c:95:57:58:e3:33:9d:78:3e:d4: b6:89:f2:d3:b0:96:8f:45:2f:95:e6:42:e2:f3:c2: ac:b3:72:aa:5b:da:8d:51:e8:be:40:70:ed:69:65: e2:70:89:c5:0e:3c:d9:ec:f3:46:0f:ae:bd:02:e8: ad:95:89:b8:10:7c:22:2b:89:f7:f3:16:52:d8:ea: b4:0b:82:d7:6c:59:d6:6d:a2:c5:a2:8f:65:5f:0a: 36:dd:e9:2f:b7:cc:f5:6c:11:5a:29:f7:f8:63:65: 75:27:da:09:08:95:a1:7d:44:1e:2c:87:1b:f6:d6: d9:22:ad:c1:c9:bd:04:3d:53:6c:b7:33:63:50:42: d2:4d:2f:ff:58:7f:d5:ea:b4:d7:9e:5e:af:ba:c1: 30:42:3d:2e:2a:37:90:06:58:1b:23:80:17:c1:bd: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:64:F9:5F:52:CF:E7:D3:37:28:81:65:79:76:08:26:D6:75:74:EF X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:54:de:8b:eb:e7:13:27:b7:78:ad:02:6b:02:84:5e:d9:f9: 7f:f0:6e:cb:8c:a6:88:95:86:2f:ff:1e:8a:f8:c0:55:74:19: 34:b5:61:3b:29:ad:23:37:ed:a8:d0:10:c1:1d:dc:85:54:14: e5:01:20:f6:ec:e1:d5:60:bb:66:81:64:81:bc:bf:82:46:ab: 91:34:de:ad:a1:79:83:c7:0e:74:48:01:40:09:1b:d9:44:a6: 80:cf:98:23:a6:5d:69:83:91:1e:ca:cb:6b:bc:80:14:ef:f0: 90:98:17:35:bb:78:f1:88:1b:97:b5:64:c8:0e:58:5a:ae:72: 59:d5:74:97:62:48:b7:86:20:83:79:60:29:64:3e:e0:db:0e: fb:91:90:85:a7:8d:95:3a:52:da:8e:aa:1c:90:0f:b5:be:a5: 16:e3:a6:6d:50:36:cf:84:b0:e1:47:c2:c7:cf:65:51:f9:14: ea:47:c7:35:7f:2c:71:65:8a:41:43:2d:83:65:bc:e7:a9:c5: 0b:6f:10:3e:cc:57:43:2f:e9:eb:3f:02:04:dd:5f:a5:9d:6c: 8a:fd:ec:21:40:a3:03:e1:01:9d:3a:14:98:91:67:62:a8:25: d4:df:c7:2f:87:54:7a:5d:69:f4:8d:90:88:92:dc:4d:77:8e: 86:82:68:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUwODI0MTYwOTE4WhcNMjUwODMxMTYwOTE4WjAYMRYwFAYD VQQDEw02OGFiMzkyZS1lMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuDsZkvJlf68ais76bwp89BcP9To+j6uocmfOhkb/jY51EjtQ9XFlqwYTezy H+HwULEvXx0KjeMiskqAjV1Xfec00IT9UAe0xe+24PQJ4EC/TISyGrRiT6Gr/J0g ikyVV1jjM514PtS2ifLTsJaPRS+V5kLi88Kss3KqW9qNUei+QHDtaWXicInFDjzZ 7PNGD669AuitlYm4EHwiK4n38xZS2Oq0C4LXbFnWbaLFoo9lXwo23ekvt8z1bBFa Kff4Y2V1J9oJCJWhfUQeLIcb9tbZIq3Byb0EPVNstzNjUELSTS//WH/V6rTXnl6v usEwQj0uKjeQBlgbI4AXwb0JYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBk+V9S z+fTNyiBZXl2CCbWdXTvMB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4VN6L6+cTJ7d4rQJrAoRe2fl/8G7LjKaIlYYv/x6K+MBVdBk0tWE7 Ka0jN+2o0BDBHdyFVBTlASD27OHVYLtmgWSBvL+CRquRNN6toXmDxw50SAFACRvZ RKaAz5gjpl1pg5EeystrvIAU7/CQmBc1u3jxiBuXtWTIDlharnJZ1XSXYki3hiCD eWApZD7g2w77kZCFp42VOlLajqockA+1vqUW46ZtUDbPhLDhR8LHz2VR+RTqR8c1 fyxxZYpBQy2DZbznqcULbxA+zFdDL+nrPwIE3V+lnWyK/ewhQKMD4QGdOhSYkWdi qCXU38cvh1R6XWn0jZCIktxNd46GgmjU -----END CERTIFICATE-----Generated at Sun Aug 24 22:07:13 2025 by rpki-client