$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft File: WFBPIARWFTaBikTQvkFutQVej0g.mft (raw, json) Hash identifier: wUmuaXcrTmeS8ycSIbzDWLhQcnjtK3zFIOQO9JX6E00= Subject key identifier: B9:2C:B1:AC:0D:02:3A:0A:04:A2:9E:A2:EC:22:E6:98:E1:58:4E:1F Authority key identifier: 58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 Certificate issuer: /CN=A91EEC3B/serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Certificate serial: 1960 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft Manifest number: 2C61 Signing time: Mon 16 Jun 2025 16:30:50 +0000 Manifest this update: Mon 16 Jun 2025 16:30:50 +0000 Manifest next update: Mon 23 Jun 2025 16:30:50 +0000 Files and hashes: 1: WFBPIARWFTaBikTQvkFutQVej0g.crl (hash: vuaVgpNbuMfk6OkFd90iXm3mrh5MH8hqFN8Yw1EGFB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 16:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6496 (0x1960) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=58504F2004561536818A44D0BE416EB5055E8F48 Validity Not Before: Jun 16 16:30:50 2025 GMT Not After : Jun 23 16:30:50 2025 GMT Subject: CN=685046ba-0351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f1:af:a1:03:ac:01:a4:9c:0b:c8:22:6f:cb: 95:f2:28:65:bd:0d:75:49:a0:09:47:9b:cc:ca:ac: 91:a5:76:4e:c6:13:c7:1f:0a:81:68:42:04:b7:41: 33:ed:a0:dc:a3:57:b6:86:e0:4e:bf:45:b3:17:10: 04:09:1d:8b:0b:10:59:f1:73:27:84:7e:08:b0:df: 0f:b6:90:da:41:f7:99:55:df:36:97:36:74:f3:89: b0:41:34:9a:cb:ac:c1:d1:30:c5:ab:9e:8f:11:b1: 0c:08:c9:84:b5:66:1a:8b:9a:4f:22:8b:6c:4c:2d: 67:55:27:c4:28:92:44:94:f2:6d:4a:ab:94:a9:28: d6:28:f4:11:16:62:18:c9:8c:6a:12:fa:33:54:ab: 44:30:ed:bf:09:9b:61:51:ed:26:c4:e7:d1:a2:7e: 42:82:d1:d4:35:17:14:7b:bd:bf:9b:8e:32:f7:73: 10:f8:cf:ce:05:63:e6:96:54:47:cb:a1:f2:f1:d9: 86:2b:e5:f4:87:f3:6d:cb:e2:e7:71:01:35:a4:e6: e8:8b:c2:03:3d:a9:e2:73:d6:5f:f9:3f:72:06:8e: 61:2b:52:cd:5b:53:bd:6d:34:02:f9:bb:c3:0a:d8: 98:54:a4:e9:8f:b3:fa:6d:6a:5c:36:dd:2a:a6:ba: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2C:B1:AC:0D:02:3A:0A:04:A2:9E:A2:EC:22:E6:98:E1:58:4E:1F X509v3 Authority Key Identifier: keyid:58:50:4F:20:04:56:15:36:81:8A:44:D0:BE:41:6E:B5:05:5E:8F:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WFBPIARWFTaBikTQvkFutQVej0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/WFBPIARWFTaBikTQvkFutQVej0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ca:f0:99:45:cd:db:ec:fa:a8:9f:b0:42:bb:b0:a7:7b:88: a1:9c:9c:27:23:04:37:15:23:40:60:d5:fb:b6:e9:fb:a0:06: 09:ec:52:0a:99:64:5c:bd:73:c8:96:bb:72:01:59:57:73:2f: 7c:41:66:6e:0f:5c:b1:22:ec:75:9a:55:80:c6:b7:48:ec:6b: 56:b5:94:4f:6f:64:16:c5:35:97:cc:d7:e2:ff:c3:df:bb:b1: 72:67:23:99:2f:97:70:7c:2d:74:fe:ae:d8:43:e8:58:e3:f2: f0:61:90:e6:50:93:0d:e0:23:e1:be:7f:12:b8:83:fe:71:b4: b9:30:39:f6:0d:4a:4c:6b:06:b7:bd:76:2d:83:a3:97:08:ee: 06:e6:9e:b4:2b:c9:8c:98:f9:02:a4:1a:1e:ae:1d:92:f6:4f: 5c:57:14:36:0c:3a:32:62:07:20:0d:94:53:bb:84:db:d7:89: 49:d8:8b:bf:1c:01:8c:e0:89:48:56:fc:bd:5a:df:52:78:08: 46:c0:74:3b:d4:d0:ff:45:45:a4:0d:97:9a:7d:13:f7:ad:ae: de:55:17:cf:af:4b:7c:77:2c:91:74:a7:b6:c5:58:63:f4:1e: 16:9a:bc:7b:4e:6f:51:59:2f:e0:e4:3c:99:f5:c2:4c:56:7f: d0:19:1b:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKDU4NTA0RjIwMDQ1NjE1MzY4MThBNDREMEJFNDE2RUI1 MDU1RThGNDgwHhcNMjUwNjE2MTYzMDUwWhcNMjUwNjIzMTYzMDUwWjAYMRYwFAYD VQQDEw02ODUwNDZiYS0wMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/GvoQOsAaScC8gib8uV8ihlvQ11SaAJR5vMyqyRpXZOxhPHHwqBaEIEt0Ez 7aDco1e2huBOv0WzFxAECR2LCxBZ8XMnhH4IsN8PtpDaQfeZVd82lzZ084mwQTSa y6zB0TDFq56PEbEMCMmEtWYai5pPIotsTC1nVSfEKJJElPJtSquUqSjWKPQRFmIY yYxqEvozVKtEMO2/CZthUe0mxOfRon5CgtHUNRcUe72/m44y93MQ+M/OBWPmllRH y6Hy8dmGK+X0h/Nty+LncQE1pOboi8IDPanic9Zf+T9yBo5hK1LNW1O9bTQC+bvD CtiYVKTpj7P6bWpcNt0qprqRtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkssawN AjoKBKKeouwi5pjhWE4fMB8GA1UdIwQYMBaAFFhQTyAEVhU2gYpE0L5BbrUFXo9I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZUYUJpa1RRdmtGdXRRVmVq MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dGQlBJQVJXRlRhQmlrVFF2a0Z1dFFWZWowZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9XRkJQSUFSV0ZU YUJpa1RRdmtGdXRRVmVqMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsyvCZRc3b7Pqon7BCu7Cne4ihnJwnIwQ3FSNAYNX7tun7oAYJ7FIK mWRcvXPIlrtyAVlXcy98QWZuD1yxIux1mlWAxrdI7GtWtZRPb2QWxTWXzNfi/8Pf u7FyZyOZL5dwfC10/q7YQ+hY4/LwYZDmUJMN4CPhvn8SuIP+cbS5MDn2DUpMawa3 vXYtg6OXCO4G5p60K8mMmPkCpBoerh2S9k9cVxQ2DDoyYgcgDZRTu4Tb14lJ2Iu/ HAGM4IlIVvy9Wt9SeAhGwHQ71ND/RUWkDZeafRP3ra7eVRfPr0t8dyyRdKe2xVhj 9B4Wmrx7Tm9RWS/g5DyZ9cJMVn/QGRv8 -----END CERTIFICATE-----Generated at Wed Jun 18 08:21:18 2025 by rpki-client