$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json) Hash identifier: BuUIJMDdoMJxg3nhqtJx1ZKXbK9vHhP0zHMZaoQ6eeE= Subject key identifier: 5A:6A:AB:F5:BE:F3:32:42:DE:BD:F0:1D:B6:23:D5:B8:B0:D3:14:DB Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 357B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft Manifest number: 3516 Signing time: Mon 08 Sep 2025 14:51:10 +0000 Manifest this update: Mon 08 Sep 2025 14:51:10 +0000 Manifest next update: Mon 15 Sep 2025 14:51:10 +0000 Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: 6kMCXrAobj1kABnj7WXQ2R5C2Y/Ok59odYQekCUyroI=) 2: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: oj9MA2Xl79Ulu/1U7XExVD59vw2GZhJkFrHTogIDTCg=) 3: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 1mDu3Q1bdiSa3axtc15ZDTGlc4zW4OxSySLPwHbTbvE=) 4: DDF4B0D2F08C11EEB70A1F76C4F9AE02.roa (hash: 3IhKk2ns73ug1cPcItokkvNYGQWI9rs7b4nF6YtsTSc=) 5: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: vltJ7Buw53igWVIfCgs9blss6VeKEkgF9l7xhGZDnwo=) 6: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: ZqgeyChgSkuAuEy8E4XBqCcFOmGTEjV9SXx7odN3pv4=) 7: D1EE6884F06C11EEA5BAA656C4F9AE02.roa (hash: 8K4hb6GJHcWswysfKKK+VFXlsdhKy8EjS5fIz+8731Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13691 (0x357b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: Sep 8 14:51:10 2025 GMT Not After : Sep 15 14:51:10 2025 GMT Subject: CN=68beed5e-b438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:9c:e9:4a:f6:e0:d1:3a:13:07:72:66:7d: 63:73:f5:e3:f9:fe:a5:c4:3c:99:71:43:4d:15:fd: 4d:82:68:c0:53:d2:35:80:69:7d:b2:d0:ce:9d:d4: 14:99:ed:75:ed:2f:a1:60:08:2d:b6:3d:84:c9:15: 92:03:6d:29:33:98:4f:88:ce:c9:59:53:c7:7b:4d: 0c:ef:d4:8d:7a:f1:f1:b1:39:55:9c:b3:3c:bd:a2: 31:b1:57:3f:42:54:d4:b3:ee:be:9d:c1:a3:c4:b4: 3a:99:10:70:11:90:0c:5d:c2:02:da:be:b7:78:21: fe:75:4f:ba:21:7c:0b:67:5e:32:af:86:16:97:77: 7c:c2:0b:27:db:9e:e8:8d:c3:c1:43:9e:e9:a4:87: 75:1e:8b:54:0c:43:70:b6:30:8b:25:1e:50:b4:69: ed:fa:79:3b:09:23:7c:bd:e4:e9:d3:c9:4d:5e:60: 7a:2c:7d:2a:18:3d:1a:00:61:9d:c5:d9:a8:3c:94: b2:c8:a0:52:d1:02:1b:04:5f:37:88:4e:7f:3f:13: f3:c5:70:07:ab:1c:c0:ff:06:6b:e5:ed:d5:cd:f5: 98:95:54:0b:4a:75:66:a5:9e:62:39:e4:61:47:7f: 4d:44:15:ba:05:df:05:80:32:ce:c4:ff:7d:ae:69: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6A:AB:F5:BE:F3:32:42:DE:BD:F0:1D:B6:23:D5:B8:B0:D3:14:DB X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:59:41:2f:ef:48:50:65:2d:ee:19:36:1b:b1:eb:73:7a:78: 82:fb:c3:fb:89:81:78:a3:c0:a5:4a:dd:8c:5d:b2:f3:9f:81: e2:b4:87:fd:90:ef:4e:4f:03:4d:e4:82:85:d8:9b:fe:1f:44: 1a:01:79:d3:a4:f7:d6:f1:f4:87:6f:21:52:59:0d:67:88:c8: eb:c6:72:7b:79:ba:62:0b:2b:87:d1:46:08:c8:a3:39:1e:b3: d4:83:45:7e:ae:a5:be:b9:67:6f:26:f6:8c:28:71:d9:2e:78: 13:b4:40:2b:ca:4d:8d:b2:c5:a1:2a:dd:34:ab:84:b3:ff:64: e0:3d:f8:ec:43:57:1f:ad:7e:db:78:0c:1a:63:05:54:49:d6: 44:c5:f0:56:cf:43:5e:8e:24:cf:f0:a7:0c:5e:6b:10:84:a4: fc:52:14:8e:93:07:4f:f9:92:a7:5d:01:15:84:3c:2a:f9:68: e9:20:2a:52:8a:b9:3f:78:f2:a5:b1:e0:a7:f4:52:a9:99:a6: 9a:e0:eb:5e:5a:00:30:c9:ef:2c:37:99:eb:50:e0:b4:ce:10: 35:1a:6d:c4:54:ae:6a:c9:a7:02:c4:7a:41:de:db:cc:89:6c: 38:30:aa:6d:a9:59:9c:76:24:3a:3d:94:9c:75:c7:c5:02:ca: 60:7f:7f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjUwOTA4MTQ1MTEwWhcNMjUwOTE1MTQ1MTEwWjAYMRYwFAYD VQQDEw02OGJlZWQ1ZS1iNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuI2c6Ur24NE6EwdyZn1jc/Xj+f6lxDyZcUNNFf1NgmjAU9I1gGl9stDOndQU me117S+hYAgttj2EyRWSA20pM5hPiM7JWVPHe00M79SNevHxsTlVnLM8vaIxsVc/ QlTUs+6+ncGjxLQ6mRBwEZAMXcIC2r63eCH+dU+6IXwLZ14yr4YWl3d8wgsn257o jcPBQ57ppId1HotUDENwtjCLJR5QtGnt+nk7CSN8veTp08lNXmB6LH0qGD0aAGGd xdmoPJSyyKBS0QIbBF83iE5/PxPzxXAHqxzA/wZr5e3VzfWYlVQLSnVmpZ5iOeRh R39NRBW6Bd8FgDLOxP99rmlusQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpqq/W+ 8zJC3r3wHbYj1biw0xTbMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy bVZJc2s5Sm5jX0RmZzVicjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtWUEv70hQZS3uGTYbsetzeniC+8P7iYF4o8ClSt2MXbLzn4HitIf9 kO9OTwNN5IKF2Jv+H0QaAXnTpPfW8fSHbyFSWQ1niMjrxnJ7ebpiCyuH0UYIyKM5 HrPUg0V+rqW+uWdvJvaMKHHZLngTtEAryk2NssWhKt00q4Sz/2TgPfjsQ1cfrX7b eAwaYwVUSdZExfBWz0NejiTP8KcMXmsQhKT8UhSOkwdP+ZKnXQEVhDwq+WjpICpS irk/ePKlseCn9FKpmaaa4OteWgAwye8sN5nrUOC0zhA1Gm3EVK5qyacCxHpB3tvM iWw4MKptqVmcdiQ6PZScdcfFAspgf3/+ -----END CERTIFICATE-----Generated at Tue Sep 9 07:55:12 2025 by rpki-client