$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: LZQlExvShW3DfaAJfPEN4cIEwDE1ztKClxeloNDJ2+c= Subject key identifier: 9B:BF:54:F4:E0:3C:38:13:26:9E:A7:76:C3:D8:80:DF:E1:CD:2B:1B Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 0855 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 084D Signing time: Mon 16 Jun 2025 20:31:41 +0000 Manifest this update: Mon 16 Jun 2025 20:31:40 +0000 Manifest next update: Mon 23 Jun 2025 20:31:40 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: 7/HFY/kveY4QGnhHuTL98XpDkB6mXPJA8UXI6t7XgHM=) 2: 3443D714D46111ECB708EA24C4F9AE02.roa (hash: cLcDxJaeMDwKIqi4j9iCoiD5WtzTHERGSbREs6JVCus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 20:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2133 (0x855) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Jun 16 20:31:40 2025 GMT Not After : Jun 23 20:31:40 2025 GMT Subject: CN=68507f2c-28b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:75:91:09:ea:ea:be:3a:4d:d1:1c:72:d9:55: f3:fc:b2:0f:35:e8:03:93:b0:e5:1b:02:1b:60:1b: 9d:ab:14:64:50:b5:c4:de:ce:38:e2:9c:ac:87:7c: 5d:a6:50:a1:d4:ed:2b:63:ec:64:75:44:2a:f9:7b: b2:be:e8:7b:25:5f:7a:33:6c:60:68:2f:af:85:7c: 60:03:a4:d5:6e:fc:cd:5e:8e:6d:f0:2a:11:8c:ef: 50:c6:f2:b1:f5:6f:bd:2a:bb:06:0f:ac:40:21:49: 4d:e5:40:c8:ad:83:33:7d:e8:df:d7:be:7a:1a:3a: b8:ed:f1:ef:87:4c:f2:84:e3:f0:d3:1e:15:31:b0: ad:05:4e:32:19:07:64:d5:17:d0:e2:e5:b4:89:00: 28:81:6f:f1:1e:00:23:c9:0e:1c:8f:ce:b6:d5:2a: 3f:74:36:c4:05:a3:ce:5d:7d:3a:e4:6b:9d:56:1d: 70:09:de:63:5c:a5:55:73:02:47:0b:65:90:09:20: 8c:ce:5d:f2:36:38:1c:43:95:db:79:42:89:2c:29: 55:a6:db:06:9f:46:3e:df:e1:e4:79:32:9e:6f:aa: 2f:92:b1:09:74:ce:74:78:4b:fb:e0:26:6e:e8:55: 87:ef:d0:1d:10:c3:5b:32:8f:97:22:94:76:f2:f8: f0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BF:54:F4:E0:3C:38:13:26:9E:A7:76:C3:D8:80:DF:E1:CD:2B:1B X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:e4:d5:4f:81:a0:a4:b3:67:c1:08:d7:4c:aa:d6:dd:c9:59: 22:5b:10:46:52:61:c0:09:7e:71:61:1b:73:58:22:42:3c:8d: 2d:24:f4:53:29:f9:62:6f:a2:88:31:19:46:cd:40:71:d3:89: 6a:12:0a:22:9e:35:98:8b:f3:52:7a:1c:2c:7a:82:b4:de:a2: 85:ab:0f:a4:fa:ef:f1:24:f6:bc:a2:a6:51:49:22:ea:6c:2d: d9:59:62:f9:70:da:05:17:ae:e6:2f:7f:f8:9c:e6:00:bb:89: 47:a1:b1:57:78:8f:af:35:9f:da:83:a5:52:1a:14:a4:05:17: 53:65:24:b0:4d:b7:69:25:60:4a:e5:1f:86:13:07:97:6b:8c: a9:42:24:27:2e:8c:41:47:66:d7:12:5c:5c:fa:63:93:b1:38: 84:9a:78:b2:9b:98:c6:e2:7b:70:28:26:57:b2:e3:b3:bd:1f: 58:84:27:7d:c3:91:7b:9c:5c:e1:22:80:2c:d6:3b:d3:16:b1: 39:3d:41:69:fb:8e:d2:50:4c:79:08:98:d7:d9:38:55:1d:9c: 0b:41:b0:91:57:4c:23:87:ea:59:a6:b0:6d:52:91:42:fb:7d: f1:be:4e:e3:32:4b:7c:6c:6b:cc:fe:e9:99:24:39:17:89:85: 2b:6a:5c:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjUwNjE2MjAzMTQwWhcNMjUwNjIzMjAzMTQwWjAYMRYwFAYD VQQDEw02ODUwN2YyYy0yOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HWRCerqvjpN0Rxy2VXz/LIPNegDk7DlGwIbYBudqxRkULXE3s444pysh3xd plCh1O0rY+xkdUQq+Xuyvuh7JV96M2xgaC+vhXxgA6TVbvzNXo5t8CoRjO9QxvKx 9W+9KrsGD6xAIUlN5UDIrYMzfejf1756Gjq47fHvh0zyhOPw0x4VMbCtBU4yGQdk 1RfQ4uW0iQAogW/xHgAjyQ4cj8621So/dDbEBaPOXX065GudVh1wCd5jXKVVcwJH C2WQCSCMzl3yNjgcQ5XbeUKJLClVptsGn0Y+3+HkeTKeb6ovkrEJdM50eEv74CZu 6FWH79AdEMNbMo+XIpR28vjwLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJu/VPTg PDgTJp6ndsPYgN/hzSsbMB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN5NVPgaCks2fBCNdMqtbdyVkiWxBGUmHACX5xYRtzWCJCPI0tJPRT Kflib6KIMRlGzUBx04lqEgoinjWYi/NSehwseoK03qKFqw+k+u/xJPa8oqZRSSLq bC3ZWWL5cNoFF67mL3/4nOYAu4lHobFXeI+vNZ/ag6VSGhSkBRdTZSSwTbdpJWBK 5R+GEweXa4ypQiQnLoxBR2bXElxc+mOTsTiEmniym5jG4ntwKCZXsuOzvR9YhCd9 w5F7nFzhIoAs1jvTFrE5PUFp+47SUEx5CJjX2ThVHZwLQbCRV0wjh+pZprBtUpFC +33xvk7jMkt8bGvM/umZJDkXiYUralyl -----END CERTIFICATE-----Generated at Tue Jun 17 01:32:57 2025 by rpki-client