$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: vR12KpMo2yp9W9XUCpirPohE3ZDvPxOOcKqJmyNu99E= Subject key identifier: F1:64:29:DA:B2:D3:C5:C4:85:19:82:62:FE:86:FD:D4:88:0D:6D:50 Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: 8C Signing time: Mon 21 Jul 2025 06:42:42 +0000 Manifest this update: Mon 21 Jul 2025 06:42:42 +0000 Manifest next update: Mon 28 Jul 2025 06:42:42 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: YRhp2iWKlNepP3wHsBb1K9vKZCUOjtPrZcfExL5iYlc=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Jul 21 06:42:42 2025 GMT Not After : Jul 28 06:42:42 2025 GMT Subject: CN=687de162-33ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:93:a4:39:98:33:3c:b5:b3:1c:dd:05:69: 0d:6d:27:f4:a6:ca:8c:37:d1:ef:f5:18:c8:cf:50: 54:31:a8:6d:0f:b7:21:76:db:3b:f4:af:c4:ba:f7: 75:f8:1e:1a:c5:31:0c:ff:15:ce:1e:e5:0e:19:0d: 88:51:fa:cf:38:e3:8b:2c:2e:35:e9:15:f6:88:43: 21:0e:b3:cb:57:fe:b0:7c:84:7e:43:b2:17:6c:5c: 42:8e:6d:0b:ab:7b:a7:2a:cc:b6:e6:e3:63:44:2a: 51:aa:01:41:3d:69:37:09:fa:19:97:03:21:76:5e: 77:b8:53:ae:30:74:49:f2:84:90:71:7a:71:7f:00: 42:22:3e:e6:6b:e8:75:da:3d:16:50:0c:e7:8c:a1: 92:20:94:11:b4:a5:e6:29:01:ed:dc:ab:22:05:39: af:6f:06:0a:25:fe:5b:f8:b1:87:91:88:00:fe:ea: ad:a0:e9:9a:bb:5b:47:32:6a:e5:53:ec:bf:34:f9: bb:b8:85:cd:83:65:01:cc:da:74:4c:16:ff:c1:2e: 9e:cd:5d:e4:fd:9f:a0:91:3d:8e:50:e8:fb:f5:d9: 9c:fb:61:8b:55:ab:c7:ca:a7:68:0d:3d:fb:5a:c4: 2e:7d:cf:19:f1:e2:f2:67:d6:87:32:6f:4e:33:d4: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:64:29:DA:B2:D3:C5:C4:85:19:82:62:FE:86:FD:D4:88:0D:6D:50 X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d4:31:79:ae:3e:5f:29:12:fb:2e:29:a7:73:3a:ec:d6:23: 00:5b:e0:f9:16:f1:d2:dd:d9:39:dc:cd:d7:37:a4:e5:81:71: 8e:09:8c:b5:e5:4e:53:fc:70:59:5f:50:a5:4d:7d:e2:49:b3: 04:b0:b1:49:2f:43:08:14:85:45:af:6f:55:ae:b7:e5:5c:6f: 1c:62:64:59:f5:2f:d5:40:28:91:ab:7a:cf:bf:ff:f5:a6:03: 1f:a8:44:4f:d9:10:b0:c7:3c:24:d6:9c:76:ea:25:2d:59:e1: 84:41:d4:96:a6:34:91:7c:41:80:e7:8b:66:39:44:57:46:47: 60:b8:8e:e3:83:bc:30:b3:da:36:ee:17:99:75:ba:a5:70:23: df:f9:68:75:06:a1:0a:93:cc:ca:bf:6f:1e:50:00:6b:d1:44: 56:d0:48:5f:90:c1:cf:eb:a7:b7:45:02:01:9d:f6:a0:be:04: 6d:d8:33:3a:72:c5:94:5a:95:9a:2d:07:8b:81:96:e5:51:3d: b5:04:c1:4e:d3:0e:70:2b:f0:36:29:63:fc:73:92:14:fb:ac: 46:f0:fd:c3:e2:4f:24:ed:ed:85:ef:c8:1b:0d:36:31:f1:c9: 54:51:5b:3c:3d:93:36:9a:71:b1:ec:e3:aa:f1:c0:f5:27:da: 2a:ac:10:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjUwNzIxMDY0MjQyWhcNMjUwNzI4MDY0MjQyWjAYMRYwFAYD VQQDEw02ODdkZTE2Mi0zM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jiTpDmYMzy1sxzdBWkNbSf0psqMN9Hv9RjIz1BUMahtD7chdts79K/Euvd1 +B4axTEM/xXOHuUOGQ2IUfrPOOOLLC416RX2iEMhDrPLV/6wfIR+Q7IXbFxCjm0L q3unKsy25uNjRCpRqgFBPWk3CfoZlwMhdl53uFOuMHRJ8oSQcXpxfwBCIj7ma+h1 2j0WUAznjKGSIJQRtKXmKQHt3KsiBTmvbwYKJf5b+LGHkYgA/uqtoOmau1tHMmrl U+y/NPm7uIXNg2UBzNp0TBb/wS6ezV3k/Z+gkT2OUOj79dmc+2GLVavHyqdoDT37 WsQufc8Z8eLyZ9aHMm9OM9QeAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFkKdqy 08XEhRmCYv6G/dSIDW1QMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV1DF5rj5fKRL7Limnczrs1iMAW+D5FvHS3dk53M3XN6TlgXGOCYy1 5U5T/HBZX1ClTX3iSbMEsLFJL0MIFIVFr29VrrflXG8cYmRZ9S/VQCiRq3rPv//1 pgMfqERP2RCwxzwk1px26iUtWeGEQdSWpjSRfEGA54tmOURXRkdguI7jg7wws9o2 7heZdbqlcCPf+Wh1BqEKk8zKv28eUABr0URW0EhfkMHP66e3RQIBnfagvgRt2DM6 csWUWpWaLQeLgZblUT21BMFO0w5wK/A2KWP8c5IU+6xG8P3D4k8k7e2F78gbDTYx 8clUUVs8PZM2mnGx7OOq8cD1J9oqrBC3 -----END CERTIFICATE-----Generated at Tue Jul 22 16:09:49 2025 by rpki-client