$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft File: v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json) Hash identifier: AXIECqH4Hm6A6exgYh4PemtAVJwoAbFYQZFPUy0HBIU= Subject key identifier: F2:A0:3A:26:24:19:83:97:63:3F:04:E9:9C:88:8E:9E:90:2D:F3:FF Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77 Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft Manifest number: 5E Signing time: Mon 21 Jul 2025 07:25:31 +0000 Manifest this update: Mon 21 Jul 2025 07:25:30 +0000 Manifest next update: Mon 28 Jul 2025 07:25:30 +0000 Files and hashes: 1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: OU3DEdGFxEkAyy34dNM5S2zRYGZiZLtQ8uxB+Yf4mz8=) 2: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU=) 3: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4=) 4: 685B8598EE5711EFB6D57660C4F9AE02.roa (hash: 2ByPgzEPC85mGN14iqcQMrmFSzyBoiAoV4LILjdSwYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377 Validity Not Before: Jul 21 07:25:30 2025 GMT Not After : Jul 28 07:25:30 2025 GMT Subject: CN=687deb6b-5353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:dc:95:b0:d0:ad:53:d1:a7:49:6a:85:31: a9:a7:6a:1e:2b:87:35:ad:89:f7:6b:47:b0:37:c3: ab:83:e2:9e:0f:51:6f:d5:7f:e7:29:ad:0f:3a:bc: 0f:b2:a5:2c:56:35:e7:3a:23:d8:da:33:9d:ff:51: de:87:20:66:f6:3c:f9:66:f4:e0:a1:ba:42:7a:75: 77:eb:ab:ec:27:3c:32:76:1d:c6:ee:c7:35:78:67: ca:4f:83:72:f7:81:b1:fe:b3:42:7e:13:d1:f8:66: aa:d6:0c:d5:45:78:74:c1:0d:ab:7e:aa:29:9f:0b: 1e:5d:a1:6c:d3:0d:99:50:e7:a6:a9:d2:ea:a3:31: 80:65:da:0d:6c:54:25:e4:31:c4:b0:c5:52:02:ae: 17:8d:c2:aa:51:dc:21:6c:6a:95:ac:2e:cb:61:5d: 6e:b9:08:77:c4:30:28:f1:3c:69:c3:b4:59:fb:7c: d6:d1:fc:9e:ae:62:e3:7e:55:0f:32:58:ba:85:0e: 18:d6:08:4e:83:4c:44:99:67:c9:25:f0:ad:ba:54: 1f:78:68:54:97:d7:1e:67:d0:33:94:9d:de:6d:a3: 1b:2c:54:61:93:1c:cf:ba:0c:82:a2:ff:c5:9c:ba: e4:b8:72:a9:84:5f:4a:4a:a1:ca:66:54:a7:88:63: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A0:3A:26:24:19:83:97:63:3F:04:E9:9C:88:8E:9E:90:2D:F3:FF X509v3 Authority Key Identifier: keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:1d:17:cf:5e:a5:1a:4f:55:64:51:eb:bd:53:b8:b5:35:f8: b8:98:92:2a:e1:b7:eb:86:9a:a3:47:da:77:83:48:4a:9d:d8: 5c:0c:90:08:a0:e9:e2:61:60:60:fa:38:6b:fa:2c:db:41:4b: 57:bd:5f:12:f4:63:48:d2:18:e6:2d:66:fd:6f:48:81:71:b6: a6:4b:08:88:ee:56:a3:0e:16:1c:c1:92:d7:3d:e9:cd:c1:83: 2b:d8:6f:0d:71:84:62:f4:45:fc:20:c0:70:44:36:3b:5d:01: d1:19:9b:48:52:ef:50:49:3f:2c:a4:a2:9a:ed:63:cc:98:a7: 37:f1:8a:0d:87:10:47:d4:81:a2:73:8d:4b:d8:d3:1e:b7:b4: 8e:17:a9:bb:b7:53:05:8f:7e:aa:96:20:0c:65:ad:10:fb:9a: 83:4a:1d:ec:81:2a:a4:2f:d5:bb:e3:ee:da:30:46:08:91:b7: 29:5a:eb:a5:4f:2a:95:3d:d6:d9:dc:83:b0:cb:c9:7e:0b:88: 27:9f:24:44:44:cb:21:c6:b8:11:ec:72:4e:0c:99:34:66:89: a8:58:82:49:43:e1:2d:59:d4:ea:04:e8:5f:6a:a8:46:51:7f: eb:e9:11:33:10:ec:26:b3:22:61:a3:26:70:b8:da:48:36:4b: e9:fd:01:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoQkY5ODY4OEU5OEIwMUU4NEQ3MzY2RjY3ODY0Q0U4RjNF QkJENDM3NzAeFw0yNTA3MjEwNzI1MzBaFw0yNTA3MjgwNzI1MzBaMBgxFjAUBgNV BAMTDTY4N2RlYjZiLTUzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+DdyVsNCtU9GnSWqFMamnah4rhzWtifdrR7A3w6uD4p4PUW/Vf+cprQ86vA+y pSxWNec6I9jaM53/Ud6HIGb2PPlm9OChukJ6dXfrq+wnPDJ2HcbuxzV4Z8pPg3L3 gbH+s0J+E9H4ZqrWDNVFeHTBDat+qimfCx5doWzTDZlQ56ap0uqjMYBl2g1sVCXk McSwxVICrheNwqpR3CFsapWsLsthXW65CHfEMCjxPGnDtFn7fNbR/J6uYuN+VQ8y WLqFDhjWCE6DTESZZ8kl8K26VB94aFSX1x5n0DOUnd5toxssVGGTHM+6DIKi/8Wc uuS4cqmEX0pKocpmVKeIY3PjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8qA6JiQZ g5djPwTpnIiOnpAt8/8wHwYDVR0jBBgwFoAUv5hojpiwHoTXNm9nhkzo8+u9Q3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDLzI0NDVCQ0UyRTkz RjExRUY4REYxRTAzNUM0RjlBRTAyL3Y1aG9qcGl3SG9UWE5tOW5oa3pvOC11OVEz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjVob2pwaXdIb1RYTm05bmhrem84LXU5UTNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 MUFDLzI0NDVCQ0UyRTkzRjExRUY4REYxRTAzNUM0RjlBRTAyL3Y1aG9qcGl3SG9U WE5tOW5oa3pvOC11OVEzYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYdF89epRpPVWRR671TuLU1+LiYkirht+uGmqNH2neDSEqd2FwMkAig 6eJhYGD6OGv6LNtBS1e9XxL0Y0jSGOYtZv1vSIFxtqZLCIjuVqMOFhzBktc96c3B gyvYbw1xhGL0RfwgwHBENjtdAdEZm0hS71BJPyykoprtY8yYpzfxig2HEEfUgaJz jUvY0x63tI4Xqbu3UwWPfqqWIAxlrRD7moNKHeyBKqQv1bvj7towRgiRtyla66VP KpU91tncg7DLyX4LiCefJEREyyHGuBHsck4MmTRmiahYgklD4S1Z1OoE6F9qqEZR f+vpETMQ7CazImGjJnC42kg2S+n9AQM= -----END CERTIFICATE-----Generated at Mon Jul 21 09:08:36 2025 by rpki-client