$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft File: wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft (raw, json) Hash identifier: KeXazSGCTbFkXpAAMfY/kL4K01E2xpumEoE74J22558= Subject key identifier: B5:F4:42:29:87:B1:CA:7D:DB:4C:7F:FA:B5:A1:80:C2:EF:45:FA:D3 Authority key identifier: C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C Certificate issuer: /CN=A91E1729/serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Certificate serial: 1C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft Manifest number: 1C78 Signing time: Fri 08 Aug 2025 16:19:30 +0000 Manifest this update: Fri 08 Aug 2025 16:19:30 +0000 Manifest next update: Fri 15 Aug 2025 16:19:30 +0000 Files and hashes: 1: wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl (hash: E3yPSbNGvcBMaXhTjlBwoAtfQxugNw//WFR9J4UJ7+Y=) 2: FFA62018DF1811E6805D922AC4F9AE02.roa (hash: rxhW+eUGuHsGzOdXNnXeavFfh2S73u8toqvlJOlu9DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7302 (0x1c86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1729, serialNumber=C1BB822B258A60FCD2F6C808A55167498A50754C Validity Not Before: Aug 8 16:19:30 2025 GMT Not After : Aug 15 16:19:30 2025 GMT Subject: CN=68962392-19ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d4:6d:73:e8:54:9f:a9:d0:ad:e5:bf:b1:a4: 5e:d6:8e:80:61:f9:82:93:1f:81:a7:87:67:c1:77: ea:28:c3:fb:13:3c:8b:c8:42:ba:f4:09:58:40:cb: 40:1b:a5:d3:1b:ec:f5:50:fc:5a:f9:57:c1:72:fe: 32:43:9a:62:b7:ef:51:23:89:36:59:17:ea:8a:f0: 7a:96:97:ba:9f:ce:4e:29:b7:e9:5c:92:11:0d:a7: 92:de:3d:68:53:6d:33:a8:35:ba:43:f4:38:84:c5: 5d:5e:d0:48:57:b0:c6:2e:e8:c2:97:23:39:72:58: 56:e6:bf:bc:c6:c2:6e:f3:2f:74:42:13:a9:a1:6c: ce:b6:1c:e2:1e:37:d4:71:c6:dd:86:bb:83:b6:35: 37:a5:ca:ad:73:3e:76:8c:e7:a4:95:55:91:ba:99: 56:00:43:ca:6a:f5:ae:e5:43:95:cd:da:48:f5:5e: 3f:53:54:a2:d6:a3:5a:c9:ff:25:d6:1f:b2:02:dd: 55:12:4a:e0:06:e3:5c:78:aa:a7:05:e8:b1:8b:b1: b8:6f:e4:06:88:4b:69:b3:78:fe:3f:06:23:76:ee: f9:40:6e:9b:a5:85:62:a8:e6:8e:c9:7b:c7:ec:eb: ad:d0:af:46:20:c1:a3:70:6b:aa:d6:9c:8b:33:60: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F4:42:29:87:B1:CA:7D:DB:4C:7F:FA:B5:A1:80:C2:EF:45:FA:D3 X509v3 Authority Key Identifier: keyid:C1:BB:82:2B:25:8A:60:FC:D2:F6:C8:08:A5:51:67:49:8A:50:75:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbuCKyWKYPzS9sgIpVFnSYpQdUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1729/A7A1A29ADF1611E6BABC0E26C4F9AE02/wbuCKyWKYPzS9sgIpVFnSYpQdUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:78:80:5b:06:47:5d:fe:52:45:f6:3c:cc:eb:46:37:df:83: a6:bf:49:05:9c:e7:47:f3:b6:6d:08:41:ff:cc:37:50:0a:e7: a5:ad:78:6c:db:05:48:4f:08:43:b3:28:e0:0c:72:64:48:f4: d9:37:3f:35:77:31:b3:09:db:5e:ed:b6:36:5b:67:d4:cc:8c: e9:96:c3:38:f3:d3:46:26:3a:c0:86:81:a1:d7:4a:d8:73:19: 0d:f7:ad:c8:df:e9:64:83:cc:c7:07:33:2b:8a:dd:1b:78:3a: fe:cf:0b:92:ec:b8:f3:60:32:33:8d:9c:e9:74:c9:98:20:a5: 18:f4:98:0b:b0:05:48:19:65:1a:1f:58:06:0c:f1:ed:54:58: 2d:8f:17:34:7e:93:8b:20:d9:b6:43:47:8e:db:19:e1:91:01: 68:f7:bd:28:ba:71:2b:07:fa:dd:5a:bd:99:94:7e:0b:d7:9f: 64:c8:3d:c0:b6:d7:e1:37:bd:59:f0:8f:2b:e3:24:e5:d9:d2: 95:a4:24:9b:c9:b8:66:86:a6:fe:4f:f8:40:79:7e:bb:c0:64: 53:f8:b2:3a:04:e5:12:02:8d:83:84:cf:86:69:3d:23:81:6d: 64:2d:8c:e9:ae:5d:f0:fa:5d:f9:a9:db:12:d6:8d:de:4b:f7: a1:c5:a1:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MjkxMTAvBgNVBAUTKEMxQkI4MjJCMjU4QTYwRkNEMkY2QzgwOEE1NTE2NzQ5 OEE1MDc1NEMwHhcNMjUwODA4MTYxOTMwWhcNMjUwODE1MTYxOTMwWjAYMRYwFAYD VQQDEw02ODk2MjM5Mi0xOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NRtc+hUn6nQreW/saRe1o6AYfmCkx+Bp4dnwXfqKMP7EzyLyEK69AlYQMtA G6XTG+z1UPxa+VfBcv4yQ5pit+9RI4k2WRfqivB6lpe6n85OKbfpXJIRDaeS3j1o U20zqDW6Q/Q4hMVdXtBIV7DGLujClyM5clhW5r+8xsJu8y90QhOpoWzOthziHjfU ccbdhruDtjU3pcqtcz52jOeklVWRuplWAEPKavWu5UOVzdpI9V4/U1Si1qNayf8l 1h+yAt1VEkrgBuNceKqnBeixi7G4b+QGiEtps3j+PwYjdu75QG6bpYViqOaOyXvH 7Out0K9GIMGjcGuq1pyLM2AoFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX0QimH scp920x/+rWhgMLvRfrTMB8GA1UdIwQYMBaAFMG7gislimD80vbICKVRZ0mKUHVM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcyOS9BN0ExQTI5QURG MTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQelM5c2dJcFZGblNZcFFk VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3didUNLeVdLWVB6UzlzZ0lwVkZuU1lwUWRVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTcyOS9BN0ExQTI5QURGMTYxMUU2QkFCQzBFMjZDNEY5QUUwMi93YnVDS3lXS1lQ elM5c2dJcFZGblNZcFFkVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGeIBbBkdd/lJF9jzM60Y334Omv0kFnOdH87ZtCEH/zDdQCuelrXhs 2wVITwhDsyjgDHJkSPTZNz81dzGzCdte7bY2W2fUzIzplsM489NGJjrAhoGh10rY cxkN963I3+lkg8zHBzMrit0beDr+zwuS7LjzYDIzjZzpdMmYIKUY9JgLsAVIGWUa H1gGDPHtVFgtjxc0fpOLINm2Q0eO2xnhkQFo970ounErB/rdWr2ZlH4L159kyD3A ttfhN71Z8I8r4yTl2dKVpCSbybhmhqb+T/hAeX67wGRT+LI6BOUSAo2DhM+GaT0j gW1kLYzprl3w+l35qdsS1o3eS/ehxaGo -----END CERTIFICATE-----Generated at Sat Aug 9 10:49:50 2025 by rpki-client