$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: imy6KWeher0TLhkE4tU2zcDNI0KJHtvPCmAbmJ6cq4Y= Subject key identifier: 87:25:7A:98:04:3E:70:FC:27:DA:FA:57:FA:3F:3B:AD:FB:0B:AE:E2 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 087A Signing time: Sat 06 Sep 2025 20:50:47 +0000 Manifest this update: Sat 06 Sep 2025 20:50:46 +0000 Manifest next update: Sat 13 Sep 2025 20:50:46 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: KOZZ4jnCULbcvMmFwOaQIyMHJp7kZFtf2mNOchqwGUs=) 2: 0EBC5C0E7F3611F090B1EA74C4F9AE02.roa (hash: TbV9ax/aopcJVKrc3y0ZYBSXPQbH45FsXlcn6ri4slM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Sep 6 20:50:46 2025 GMT Not After : Sep 13 20:50:46 2025 GMT Subject: CN=68bc9ea7-398c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:32:fc:1f:ba:c3:bb:e8:94:d7:5f:d4:3d: 7b:a6:e2:1f:e4:59:9e:e4:79:16:db:7a:00:b3:9b: 26:b7:f0:05:91:c1:67:41:74:55:7d:b2:9c:7a:34: d9:f7:95:7b:73:96:db:8c:e3:48:48:5b:ee:1a:96: 9b:b3:f8:ff:a0:06:cb:42:52:c4:7f:17:e9:4d:bc: 9a:34:77:e9:0b:0d:a9:c7:b7:2d:ad:26:11:36:42: 69:be:80:14:e8:49:71:62:80:c1:73:b4:2f:f7:32: 1b:d7:90:82:8c:6e:23:ae:00:96:99:e5:f1:7b:ba: bb:df:31:4e:7a:72:07:11:43:44:48:aa:9b:91:8f: 65:55:0f:5b:f7:34:7b:b2:cc:e2:1e:c1:c1:77:d8: b6:ad:29:97:33:33:0a:89:47:a9:a7:77:51:fc:78: 6c:75:e5:cc:5b:33:bf:21:ea:59:c5:c0:81:54:f2: c9:c5:6e:0e:cf:01:4c:fe:f4:33:ea:ff:3d:54:78: 15:62:fc:dd:52:e4:48:38:fb:ac:f3:12:88:63:aa: ee:96:1b:8c:b9:68:bb:69:c7:e2:42:15:ce:f7:a0: b1:d9:52:ae:11:6e:49:38:71:7b:e2:47:dc:29:79: f7:8e:47:5b:dc:9d:6d:70:96:38:71:82:b4:de:28: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:25:7A:98:04:3E:70:FC:27:DA:FA:57:FA:3F:3B:AD:FB:0B:AE:E2 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:f3:37:63:be:74:52:30:97:46:fa:b4:69:70:a7:2d:eb:2c: ff:29:ed:c6:53:90:f3:85:ee:d8:3d:6b:4e:b1:c3:04:aa:77: 2b:e6:c6:0e:e6:ed:70:fc:77:1b:bd:f3:7d:47:46:16:18:5e: 52:15:e3:0e:43:4a:ef:14:b5:74:78:c4:11:14:f4:79:c4:08: b6:24:dc:80:dc:1a:6d:fd:33:3c:18:b4:f2:f7:19:ed:fb:32: c2:c3:eb:d5:49:30:95:0b:09:6a:ee:70:39:f1:ff:8b:36:d1: 2f:f5:3f:90:fc:35:1a:3d:6d:9c:46:08:34:eb:5d:74:20:ab: bc:2e:64:ff:fc:53:db:1e:67:73:00:3c:1c:d8:d3:81:1b:5b: 70:b6:69:25:0d:f5:4b:b5:9d:b5:ff:01:01:d6:63:10:b4:61: 41:7d:83:41:53:30:85:bc:e0:a4:36:fa:77:49:e6:84:bf:94: 07:c0:4e:aa:24:98:7f:74:a5:70:4a:7a:cd:8e:2f:22:a8:d2: d3:19:9f:2b:b1:14:9d:3a:32:ff:8a:5e:9b:28:45:73:7d:89: 52:c2:14:64:78:9e:56:0a:da:94:87:3e:bd:6a:43:e5:2a:7a: 64:a8:f5:10:1b:93:6a:f3:6c:2d:96:cb:4c:17:b0:e7:4b:56: 82:82:2f:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwOTA2MjA1MDQ2WhcNMjUwOTEzMjA1MDQ2WjAYMRYwFAYD VQQDEw02OGJjOWVhNy0zOThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0Uy/B+6w7volNdf1D17puIf5Fme5HkW23oAs5smt/AFkcFnQXRVfbKcejTZ 95V7c5bbjONISFvuGpabs/j/oAbLQlLEfxfpTbyaNHfpCw2px7ctrSYRNkJpvoAU 6ElxYoDBc7Qv9zIb15CCjG4jrgCWmeXxe7q73zFOenIHEUNESKqbkY9lVQ9b9zR7 ssziHsHBd9i2rSmXMzMKiUepp3dR/HhsdeXMWzO/IepZxcCBVPLJxW4OzwFM/vQz 6v89VHgVYvzdUuRIOPus8xKIY6rulhuMuWi7acfiQhXO96Cx2VKuEW5JOHF74kfc KXn3jkdb3J1tcJY4cYK03ijunwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIclepgE PnD8J9r6V/o/O637C67iMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW8zdjvnRSMJdG+rRpcKct6yz/Ke3GU5Dzhe7YPWtOscMEqncr5sYO 5u1w/HcbvfN9R0YWGF5SFeMOQ0rvFLV0eMQRFPR5xAi2JNyA3Bpt/TM8GLTy9xnt +zLCw+vVSTCVCwlq7nA58f+LNtEv9T+Q/DUaPW2cRgg06110IKu8LmT//FPbHmdz ADwc2NOBG1twtmklDfVLtZ21/wEB1mMQtGFBfYNBUzCFvOCkNvp3SeaEv5QHwE6q JJh/dKVwSnrNji8iqNLTGZ8rsRSdOjL/il6bKEVzfYlSwhRkeJ5WCtqUhz69akPl KnpkqPUQG5Nq82wtlstMF7DnS1aCgi+1 -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:22 2025 by rpki-client