$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: 2hwAZI6q2k38SU6Qzo6NH+QRPb1QphHFcGAz9f3wa/c= Subject key identifier: A2:78:98:1C:1D:E9:DD:97:1E:7D:38:57:F8:9C:BA:4B:E4:52:C2:39 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 16D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 16C0 Signing time: Fri 18 Jul 2025 16:46:15 +0000 Manifest this update: Fri 18 Jul 2025 16:46:15 +0000 Manifest next update: Fri 25 Jul 2025 16:46:15 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: c8tU0giatvQCYNrjMfkIbTVmlqD1RVFEjM8OIQgZqaY=) 2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=) 3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5849 (0x16d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Jul 18 16:46:15 2025 GMT Not After : Jul 25 16:46:15 2025 GMT Subject: CN=687a7a57-110a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:45:de:65:fd:78:2e:e6:24:7e:f4:54:f5: ec:b2:01:ac:96:fd:b1:e8:69:d3:c5:5d:96:ba:0a: 2f:5f:5d:78:5a:87:81:bd:e6:90:3e:54:6f:9d:3e: 12:ea:97:c9:51:e6:25:a8:6e:0c:55:52:3a:96:25: 01:87:db:cf:2b:a5:98:5b:a1:c3:4a:9c:6d:a2:f6: 6f:7e:f4:f7:27:8e:7e:34:3d:96:24:87:5e:22:cb: 71:c0:0a:c6:c2:7a:44:35:96:d9:25:e3:59:04:80: bb:95:1c:c2:32:42:85:6b:74:cd:de:1f:40:88:fc: c1:26:de:b3:4e:89:80:2f:bc:74:98:c8:5e:92:76: f4:e4:e4:20:ea:35:76:8b:f6:76:26:26:6a:bb:64: fc:85:62:6c:26:92:4a:c9:64:46:be:46:7d:04:37: b4:63:dd:72:a8:6c:dd:16:ef:de:99:8e:1f:10:d8: d2:09:f2:d1:60:b1:ec:c0:d4:8a:67:da:20:03:93: 6e:76:a9:bd:b6:2a:f3:97:54:d5:ee:c7:a8:5a:fe: 92:46:ee:b0:3f:46:a4:31:ac:9b:dc:b3:a0:28:f1: d7:b9:0f:39:27:2b:82:4a:1a:fd:fe:b1:d2:89:bb: db:9f:ae:af:81:43:69:7e:64:11:6a:c3:66:b2:72: 9f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:78:98:1C:1D:E9:DD:97:1E:7D:38:57:F8:9C:BA:4B:E4:52:C2:39 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1d:a0:cb:56:a0:b6:2f:2e:9b:ac:1c:cc:6f:65:90:b8:42: 8f:de:64:fc:01:d3:ae:ca:bd:7d:74:70:60:d3:76:4a:69:38: 86:f5:c6:ff:be:4c:80:1a:01:eb:a8:d2:9a:5c:00:40:a2:a1: 98:20:4b:71:35:c9:90:65:26:9a:97:16:cd:8a:55:40:b6:8d: 22:47:1b:42:72:42:50:2a:33:6f:22:c6:4e:bb:58:62:fb:40: 4d:7e:ac:15:4c:bd:2a:8a:15:3e:eb:f1:e6:fd:e0:98:c5:ad: 27:d8:b9:d0:64:2a:62:c5:07:3a:85:3f:c8:a7:92:a3:2e:90: 0f:b6:50:de:53:dd:19:d2:0b:fc:ce:9c:73:6d:19:a5:18:67: fb:4e:64:df:e5:d8:78:87:f0:59:83:f4:0f:34:38:b2:80:b1: ab:9c:11:ab:37:8f:a0:0f:60:48:b4:2f:50:41:05:f4:67:6f: 47:b4:93:fa:37:9a:0b:3c:f8:17:be:e8:4e:5f:d3:85:af:da: f9:f6:9f:e5:27:4b:93:cc:a6:4d:02:1d:42:e8:d9:ba:da:35: 92:94:0b:18:b8:4b:43:12:50:0d:d8:d2:32:03:75:ba:fe:fa: 84:90:57:99:a3:6a:ca:2b:dc:84:4d:e4:d5:c8:1e:90:90:3b: 5f:3d:88:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjUwNzE4MTY0NjE1WhcNMjUwNzI1MTY0NjE1WjAYMRYwFAYD VQQDEw02ODdhN2E1Ny0xMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9pF3mX9eC7mJH70VPXssgGslv2x6GnTxV2WugovX114WoeBveaQPlRvnT4S 6pfJUeYlqG4MVVI6liUBh9vPK6WYW6HDSpxtovZvfvT3J45+ND2WJIdeIstxwArG wnpENZbZJeNZBIC7lRzCMkKFa3TN3h9AiPzBJt6zTomAL7x0mMheknb05OQg6jV2 i/Z2JiZqu2T8hWJsJpJKyWRGvkZ9BDe0Y91yqGzdFu/emY4fENjSCfLRYLHswNSK Z9ogA5Nudqm9tirzl1TV7seoWv6SRu6wP0akMayb3LOgKPHXuQ85JyuCShr9/rHS ibvbn66vgUNpfmQRasNmsnKfxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJ4mBwd 6d2XHn04V/icukvkUsI5MB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOHaDLVqC2Ly6brBzMb2WQuEKP3mT8AdOuyr19dHBg03ZKaTiG9cb/ vkyAGgHrqNKaXABAoqGYIEtxNcmQZSaalxbNilVAto0iRxtCckJQKjNvIsZOu1hi +0BNfqwVTL0qihU+6/Hm/eCYxa0n2LnQZCpixQc6hT/Ip5KjLpAPtlDeU90Z0gv8 zpxzbRmlGGf7TmTf5dh4h/BZg/QPNDiygLGrnBGrN4+gD2BItC9QQQX0Z29HtJP6 N5oLPPgXvuhOX9OFr9r59p/lJ0uTzKZNAh1C6Nm62jWSlAsYuEtDElAN2NIyA3W6 /vqEkFeZo2rKK9yETeTVyB6QkDtfPYjY -----END CERTIFICATE-----Generated at Sun Jul 20 14:32:10 2025 by rpki-client