$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft (raw, json) Hash identifier: GbqQYQVdKt8HoQUcO6WmzSq5wvROeMRIWdKaUsRIZKY= Subject key identifier: 97:AB:B9:57:0A:1B:F8:B0:A0:A4:2F:80:44:D0:E5:4C:F1:FD:36:9E Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Certificate serial: 079E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft Manifest number: 0794 Signing time: Thu 24 Jul 2025 21:35:56 +0000 Manifest this update: Thu 24 Jul 2025 21:35:56 +0000 Manifest next update: Thu 31 Jul 2025 21:35:56 +0000 Files and hashes: 1: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl (hash: 7dJKyzcik+LcxUG1JN0wczb5yFp0itBuv8vabgjk4FU=) 2: 09664BCE144D11EBA0AF3555C4F9AE02.roa (hash: rdUSXytbXM84CWenGOGoRob5nCuOJZnNVIkvDgmUqS4=) 3: 08CE75A6144D11EBA0AF3555C4F9AE02.roa (hash: Ey+1oSHacaQI23omTKC4i8oGovoWsEThpx7tq0kzMuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 21:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6395, serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Validity Not Before: Jul 24 21:35:56 2025 GMT Not After : Jul 31 21:35:56 2025 GMT Subject: CN=6882a73c-193f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:7d:da:c7:e7:dc:52:8e:9f:9f:f7:b5:8b: cd:dc:c5:f0:ab:c3:a0:55:81:cb:98:1e:88:3b:32: d1:41:9b:52:5c:10:66:1e:06:d0:16:2f:71:c0:71: 59:e7:e6:48:8f:25:bd:31:79:45:52:47:53:89:50: 78:b1:85:ce:fc:c5:12:35:a4:b4:5b:08:b1:57:77: 49:30:fb:db:86:a6:34:a2:16:2e:e7:fe:cf:36:1e: c8:88:61:d8:aa:c8:dd:81:21:a5:cf:8a:28:92:74: 46:ba:c4:25:b0:ac:98:ca:ad:05:75:e5:5c:92:d2: 86:f2:9c:a5:90:d1:21:9a:4d:76:1b:0b:a9:71:85: 25:9d:4c:8d:f3:25:a9:b8:2d:24:37:8d:ae:6d:eb: 08:2c:07:48:ec:92:0e:24:cd:40:dd:37:45:43:6d: 1e:a1:35:30:d6:30:d5:2d:f8:1e:0c:6c:56:dc:76: 32:7f:c1:35:ae:d4:e4:d7:da:93:ba:46:77:01:6d: 2a:3a:36:66:f7:20:b3:74:35:6f:5a:82:df:13:c6: 62:02:08:c1:91:3f:8a:be:61:ee:15:44:26:8b:e2: e1:d1:6f:b3:95:98:44:8b:db:f0:00:74:87:06:c4: a8:2c:cb:4a:ac:4b:50:ab:a0:cc:b0:c5:67:96:7e: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:B9:57:0A:1B:F8:B0:A0:A4:2F:80:44:D0:E5:4C:F1:FD:36:9E X509v3 Authority Key Identifier: keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:13:bb:89:4d:80:8d:f5:24:d8:55:6c:af:d5:ae:3c:3d:bf: 85:23:d9:10:3e:50:67:fd:e7:f0:8e:35:54:27:61:06:ff:2b: 75:ed:27:41:c2:d4:e2:89:6c:16:0c:56:3b:4d:cb:b2:47:4d: 3a:ee:76:92:01:36:cc:7b:a6:5b:4f:7d:9e:c0:b1:68:07:ea: 2d:d7:fc:e7:94:11:ae:9f:c2:df:cd:28:54:8f:89:6c:98:af: 6b:5f:a9:5e:e8:1e:0e:2c:b5:35:30:36:cf:c3:06:fc:c6:a8: 74:14:a1:25:ca:9c:5b:b6:cb:6b:48:09:41:db:d8:0d:4a:a2: 93:92:05:52:ab:ca:31:5f:f2:ae:1e:6d:f6:b2:3f:3a:bc:a7: b9:bc:ce:7e:65:ce:22:b0:7f:1b:e7:84:32:68:6d:f7:5a:56: 34:2d:e7:12:42:71:b2:c1:14:5f:c3:f2:5f:d6:02:ab:81:d9: fb:1f:b1:58:62:eb:44:82:34:a8:a0:55:2e:b7:9f:d1:68:a9: 50:ac:4b:3d:a7:77:6f:3c:32:cd:7d:4d:f0:04:60:8e:67:41: c1:09:c7:83:70:ef:7c:a2:d7:d4:88:77:dd:ff:8d:eb:b6:57: c2:50:07:7d:bd:d2:20:ef:c1:50:47:f5:c7:6f:ac:fe:a5:a7: a7:29:48:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD ODY1Q0NFMjIwHhcNMjUwNzI0MjEzNTU2WhcNMjUwNzMxMjEzNTU2WjAYMRYwFAYD VQQDEw02ODgyYTczYy0xOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8h92sfn3FKOn5/3tYvN3MXwq8OgVYHLmB6IOzLRQZtSXBBmHgbQFi9xwHFZ 5+ZIjyW9MXlFUkdTiVB4sYXO/MUSNaS0WwixV3dJMPvbhqY0ohYu5/7PNh7IiGHY qsjdgSGlz4ooknRGusQlsKyYyq0FdeVcktKG8pylkNEhmk12GwupcYUlnUyN8yWp uC0kN42ubesILAdI7JIOJM1A3TdFQ20eoTUw1jDVLfgeDGxW3HYyf8E1rtTk19qT ukZ3AW0qOjZm9yCzdDVvWoLfE8ZiAgjBkT+KvmHuFUQmi+Lh0W+zlZhEi9vwAHSH BsSoLMtKrEtQq6DMsMVnln731QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeruVcK G/iwoKQvgETQ5Uzx/TaeMB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0 NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjM5NS9EQzQ1NjU3ODE0NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0 LUpldTJxdEtQVGpJWmN6aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwE7uJTYCN9STYVWyv1a48Pb+FI9kQPlBn/efwjjVUJ2EG/yt17SdB wtTiiWwWDFY7TcuyR0067naSATbMe6ZbT32ewLFoB+ot1/znlBGun8LfzShUj4ls mK9rX6le6B4OLLU1MDbPwwb8xqh0FKElypxbtstrSAlB29gNSqKTkgVSq8oxX/Ku Hm32sj86vKe5vM5+Zc4isH8b54QyaG33WlY0LecSQnGywRRfw/Jf1gKrgdn7H7FY YutEgjSooFUut5/RaKlQrEs9p3dvPDLNfU3wBGCOZ0HBCceDcO98otfUiHfd/43r tlfCUAd9vdIg78FQR/XHb6z+paenKUjF -----END CERTIFICATE-----Generated at Fri Jul 25 05:27:19 2025 by rpki-client