$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: 9w1rpmdhMlJTXX57aAFrTA02hgFbkYT/K35nca1OttU= Subject key identifier: 7C:16:03:FA:E2:DC:36:64:E2:4A:0A:BF:7E:A8:C7:28:E0:B9:22:41 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 0867 Signing time: Wed 06 Aug 2025 20:58:36 +0000 Manifest this update: Wed 06 Aug 2025 20:58:36 +0000 Manifest next update: Wed 13 Aug 2025 20:58:36 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: K6TTTPYoH36By2yJ9fCGay0kpYFTXgKHGzx7XYbF1d0=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: cLcDxJaeMDwKIqi4j9iCoiD5WtzTHERGSbREs6JVCus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 20:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Aug 6 20:58:36 2025 GMT Not After : Aug 13 20:58:36 2025 GMT Subject: CN=6893c1fc-586c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:87:25:47:5d:70:2c:cb:ca:d7:98:17:82:31: 83:0f:fd:18:cc:9f:19:50:aa:2e:45:93:d6:5c:28: 9a:c6:64:70:4b:3f:61:bd:ce:e9:d1:47:ab:0a:1d: 79:47:d2:9d:49:d2:4d:25:b3:cd:a4:8a:24:05:31: 88:7e:09:cb:46:cb:40:82:9a:e3:5a:c2:14:fc:94: 35:75:a7:de:dc:70:0c:03:32:82:0d:3c:d7:6f:3e: 9a:dd:82:20:28:39:75:d0:19:f1:cb:c0:a6:bd:8b: 44:85:43:f0:b2:e3:9c:b7:41:b3:c2:44:81:74:c4: ac:d2:08:b4:85:ed:cb:b6:d2:4c:88:59:b1:74:5b: 72:ee:b3:36:0b:d0:6b:1e:ea:33:2c:aa:19:a7:1c: 0b:1d:55:65:8c:57:29:c8:94:b3:55:67:f2:43:49: 36:fa:4b:68:d3:d9:24:e9:43:3c:b5:b9:09:26:2c: cf:c7:4d:e8:3d:90:e6:f2:c9:9d:84:a1:41:12:7b: 11:d9:77:cd:86:19:2b:8b:74:af:47:2e:22:40:1a: ab:92:25:40:51:aa:d7:d5:d1:16:5e:ed:83:2e:2c: f5:55:58:fe:0c:ff:15:76:21:5e:c1:0f:ba:48:67: f5:90:9e:9d:43:6c:e7:62:cf:b8:66:21:5b:16:35: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:16:03:FA:E2:DC:36:64:E2:4A:0A:BF:7E:A8:C7:28:E0:B9:22:41 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:40:91:e6:8c:6f:8d:94:89:89:2a:71:8b:18:34:4f:b0:e6: a2:8a:91:24:1a:83:d9:8d:28:ee:89:ab:b3:24:58:77:0a:9e: 28:7e:d0:0d:6b:d2:63:df:fb:6f:41:5b:75:2c:9f:48:2c:15: 73:27:14:3f:ac:87:f7:d5:5b:9a:5a:7f:56:f9:3e:45:cb:f2: 2d:a2:61:99:dc:72:e4:a8:a8:a9:f6:ae:e8:de:61:42:f9:8a: 5c:bb:a5:80:51:78:af:93:cc:18:6f:06:c5:92:34:3d:3c:bb: 40:cb:8a:b0:07:65:fc:f9:c8:a4:d6:4a:f7:eb:46:da:90:d7: 2a:23:06:ae:a7:e8:60:a4:e0:7f:6d:a5:4f:c7:51:87:e1:43: 12:55:b1:69:91:62:00:ac:84:9d:a3:80:6c:db:d1:4e:33:d9: 14:e9:4f:22:1f:96:59:10:d5:1a:ae:6e:38:44:70:fd:0a:94: ca:b3:11:41:18:e2:4e:73:35:49:bf:40:e6:0a:04:b7:c8:a0: 7f:2c:a9:ac:0b:1e:d5:e7:bc:62:7c:55:b5:85:6b:fc:e6:8c: 25:03:f8:9b:b1:a1:e8:00:64:06:f3:98:48:f7:1a:ad:a8:80: 66:1a:fa:54:2b:8c:92:c7:2e:c7:a9:ba:20:3a:21:5c:a5:86: 18:fa:f8:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwODA2MjA1ODM2WhcNMjUwODEzMjA1ODM2WjAYMRYwFAYD VQQDEw02ODkzYzFmYy01ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroclR11wLMvK15gXgjGDD/0YzJ8ZUKouRZPWXCiaxmRwSz9hvc7p0UerCh15 R9KdSdJNJbPNpIokBTGIfgnLRstAgprjWsIU/JQ1dafe3HAMAzKCDTzXbz6a3YIg KDl10Bnxy8CmvYtEhUPwsuOct0GzwkSBdMSs0gi0he3LttJMiFmxdFty7rM2C9Br HuozLKoZpxwLHVVljFcpyJSzVWfyQ0k2+kto09kk6UM8tbkJJizPx03oPZDm8smd hKFBEnsR2XfNhhkri3SvRy4iQBqrkiVAUarX1dEWXu2DLiz1VVj+DP8VdiFewQ+6 SGf1kJ6dQ2znYs+4ZiFbFjU/3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwWA/ri 3DZk4koKv36oxyjguSJBMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALQJHmjG+NlImJKnGLGDRPsOaiipEkGoPZjSjuiauzJFh3Cp4oftAN a9Jj3/tvQVt1LJ9ILBVzJxQ/rIf31VuaWn9W+T5Fy/ItomGZ3HLkqKip9q7o3mFC +Ypcu6WAUXivk8wYbwbFkjQ9PLtAy4qwB2X8+cik1kr360bakNcqIwaup+hgpOB/ baVPx1GH4UMSVbFpkWIArISdo4Bs29FOM9kU6U8iH5ZZENUarm44RHD9CpTKsxFB GOJOczVJv0DmCgS3yKB/LKmsCx7V57xifFW1hWv85owlA/ibsaHoAGQG85hI9xqt qIBmGvpUK4ySxy7HqbogOiFcpYYY+vgy -----END CERTIFICATE-----Generated at Fri Aug 8 12:59:11 2025 by rpki-client