$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: z8NcCEWSfHWcv5A1WLVNcRQcVf2MXcxMYLL38TPD8Q8= Subject key identifier: 84:BF:DF:A3:67:73:25:FB:D1:07:97:EC:3F:EB:0C:81:19:6B:7C:46 Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 04C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 04BB Signing time: Mon 21 Jul 2025 00:05:47 +0000 Manifest this update: Mon 21 Jul 2025 00:05:46 +0000 Manifest next update: Mon 28 Jul 2025 00:05:46 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: yH8fdtJ2b9GxGoBoIt9MAq1ctWf9U6kPxDwaawRKINY=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1216 (0x4c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Jul 21 00:05:46 2025 GMT Not After : Jul 28 00:05:46 2025 GMT Subject: CN=687d845a-d379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:80:f9:a8:d7:41:08:97:8f:f9:2f:19:74: 1e:35:7e:11:c6:1d:aa:a9:80:5c:7d:93:4c:de:9a: 51:25:92:56:0c:f4:1f:d6:af:ac:42:40:60:07:9b: 58:3d:b8:f7:d7:57:bb:10:fd:e4:88:5d:90:c8:f4: bb:63:df:a6:9c:1a:71:d3:80:0f:a8:7a:d7:7c:d7: 5f:73:8f:15:fc:e9:ab:05:41:fd:f8:7b:42:6a:a3: e0:0e:51:0c:3f:b3:9b:11:52:58:d6:07:ea:c8:2d: 08:17:de:50:dd:da:52:7c:1e:ed:dc:0f:af:40:73: a0:8e:2c:14:ea:da:4d:61:42:79:d8:67:ab:c4:05: 90:ed:dd:b3:7c:8d:80:c6:6a:e9:85:0d:66:cf:b1: 2e:d2:1d:94:ff:9d:29:1a:c5:18:aa:40:42:d2:71: de:10:11:3e:32:66:63:67:10:14:64:92:47:f7:a4: 75:5d:e2:e9:b8:5a:bc:bb:98:8f:e2:76:47:22:d1: 4c:6a:94:31:48:60:a1:ff:28:c0:1a:27:e1:a4:35: 43:da:f0:c5:bf:88:65:c1:dc:a2:0a:b9:ae:14:ba: d8:82:cd:39:1b:71:b5:50:ee:e3:0a:64:64:33:14: d6:d7:93:03:2b:1a:71:ed:73:32:f7:7f:62:7a:de: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:DF:A3:67:73:25:FB:D1:07:97:EC:3F:EB:0C:81:19:6B:7C:46 X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9b:7c:62:f2:08:dc:cc:06:25:c5:76:82:a3:81:fa:65:7f: 01:0f:e6:79:c5:88:54:ef:0a:4e:da:45:07:97:a9:2e:53:67: b9:cd:f2:a6:a0:1a:21:86:23:cf:a9:ba:d3:fa:d1:80:d7:e2: d6:16:a8:60:8d:47:6d:77:62:fa:f5:aa:6d:47:3a:0a:a6:fe: e4:bf:61:24:66:e8:87:c6:d5:c5:7e:1b:a2:1c:33:d5:78:7a: 1f:a2:4c:b5:32:7f:27:b4:77:cd:3d:9c:c8:0f:50:0c:79:9c: 17:e7:34:1a:9f:af:0d:d6:08:42:6c:c6:b1:79:83:92:bf:2c: 78:03:8a:78:d0:01:95:02:ca:f9:c7:2a:a2:99:d0:3c:be:3b: 30:72:a6:39:46:e6:14:75:78:26:36:3f:6d:78:2d:38:c0:ab: 3d:7e:18:a3:ac:41:bb:0a:cd:dd:2c:76:8d:14:b5:ca:62:4e: 25:46:03:52:17:1b:58:0f:b6:83:f0:42:4e:9d:ad:81:4f:e0: 91:c5:8f:7a:4c:65:75:a8:6a:f8:5e:f1:b0:5f:3c:c4:f4:11: 4b:f7:86:f7:15:e3:d3:94:0e:fe:85:c3:c0:19:e3:5c:78:af: 4f:f1:46:f3:30:11:e7:51:eb:54:4c:56:4a:f7:e9:42:f8:2a: cf:40:9c:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjUwNzIxMDAwNTQ2WhcNMjUwNzI4MDAwNTQ2WjAYMRYwFAYD VQQDEw02ODdkODQ1YS1kMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA256A+ajXQQiXj/kvGXQeNX4Rxh2qqYBcfZNM3ppRJZJWDPQf1q+sQkBgB5tY Pbj311e7EP3kiF2QyPS7Y9+mnBpx04APqHrXfNdfc48V/OmrBUH9+HtCaqPgDlEM P7ObEVJY1gfqyC0IF95Q3dpSfB7t3A+vQHOgjiwU6tpNYUJ52GerxAWQ7d2zfI2A xmrphQ1mz7Eu0h2U/50pGsUYqkBC0nHeEBE+MmZjZxAUZJJH96R1XeLpuFq8u5iP 4nZHItFMapQxSGCh/yjAGifhpDVD2vDFv4hlwdyiCrmuFLrYgs05G3G1UO7jCmRk MxTW15MDKxpx7XMy939iet6BBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS/36Nn cyX70QeX7D/rDIEZa3xGMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHm3xi8gjczAYlxXaCo4H6ZX8BD+Z5xYhU7wpO2kUHl6kuU2e5zfKm oBohhiPPqbrT+tGA1+LWFqhgjUdtd2L69aptRzoKpv7kv2EkZuiHxtXFfhuiHDPV eHofoky1Mn8ntHfNPZzID1AMeZwX5zQan68N1ghCbMaxeYOSvyx4A4p40AGVAsr5 xyqimdA8vjswcqY5RuYUdXgmNj9teC04wKs9fhijrEG7Cs3dLHaNFLXKYk4lRgNS FxtYD7aD8EJOna2BT+CRxY96TGV1qGr4XvGwXzzE9BFL94b3FePTlA7+hcPAGeNc eK9P8UbzMBHnUetUTFZK9+lC+CrPQJzR -----END CERTIFICATE-----Generated at Mon Jul 21 06:01:48 2025 by rpki-client