$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft File: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json) Hash identifier: a9a15f0wTE2m0JM17Eih+GaeTOJVuhQDmR2YJqatOTg= Subject key identifier: 31:7B:61:27:69:F3:32:C4:94:47:F5:04:26:E4:6F:69:C5:1E:4A:0E Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE Certificate issuer: /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft Manifest number: 0162 Signing time: Wed 17 Sep 2025 04:33:55 +0000 Manifest this update: Wed 17 Sep 2025 04:33:54 +0000 Manifest next update: Wed 24 Sep 2025 04:33:54 +0000 Files and hashes: 1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: oQfVzqtGG6Cdz1m3woYeVts1hbr5y/Bh5l0+aNGQOBI=) 2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: VIpTaiDF//T8jK4C9n6iwAX2TMSKtXEtM34C7KtsS6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE Validity Not Before: Sep 17 04:33:54 2025 GMT Not After : Sep 24 04:33:54 2025 GMT Subject: CN=68ca3a32-3a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:55:c7:aa:82:e4:72:5f:0d:1d:72:5f:4c: e1:ea:c3:1b:3d:f1:e1:3c:a0:62:5e:db:83:8b:94: ef:82:66:d2:68:87:16:49:36:ca:a1:7c:f0:92:c1: 50:41:7c:40:b4:ef:bc:8e:76:73:48:22:e6:5a:0b: 89:43:89:74:b9:44:8c:ae:ae:87:e3:a3:ee:35:3c: 49:c7:74:50:d3:f8:58:cb:47:88:35:d8:a0:2f:d0: 05:b3:ff:b7:aa:bc:b2:76:10:2f:44:1b:b4:9c:f5: 3d:85:b4:9e:a3:9d:b8:45:21:32:1e:44:45:72:d8: df:57:5f:e6:6d:e2:dc:6c:c3:67:5d:8e:f1:2e:8d: f8:6f:33:18:84:21:2e:60:dc:cf:50:7b:b6:35:0f: 07:3f:0c:d2:a0:57:90:39:a4:7b:e1:c1:50:86:46: c1:f6:28:16:ef:f1:68:fa:b6:05:60:e6:87:0a:fd: 16:8c:05:16:4a:53:09:a8:3b:5b:ea:f8:76:17:02: 09:69:53:a6:71:69:9e:b7:58:07:01:87:d2:ec:4b: c0:67:ec:67:ab:3c:54:a0:31:4b:6d:6d:ca:58:cd: c8:90:fc:a0:8f:ac:3b:6f:19:d5:e1:2f:48:eb:ba: 12:a8:7e:b2:c2:67:4b:46:35:1c:88:98:0a:10:bf: c3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7B:61:27:69:F3:32:C4:94:47:F5:04:26:E4:6F:69:C5:1E:4A:0E X509v3 Authority Key Identifier: keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:ec:ef:ae:7b:b7:15:6c:ac:a3:ac:69:31:cf:6c:8b:b5:d9: 6a:b3:83:72:fd:9f:ca:65:39:35:10:ee:67:97:ff:a6:6f:1e: 44:41:b0:83:a4:03:b5:d6:5f:64:20:f0:d9:b9:55:0c:9d:8c: 26:be:3a:6b:61:c8:6c:fe:c1:79:7e:87:14:54:af:88:2c:19: 2d:6d:48:bf:f6:f4:88:14:bd:11:9e:17:5c:a3:d3:eb:42:39: 63:b4:e1:a6:18:83:af:32:18:6c:56:d1:af:aa:c7:42:63:31: 3a:0e:0f:01:22:4e:f4:91:f2:d6:0c:93:be:6f:77:4c:2a:40: 14:e4:5f:a8:34:68:9d:59:11:f7:eb:3c:e5:94:70:ec:66:68: 84:a9:d3:d6:49:cb:06:d0:c8:7c:4f:85:e1:55:6d:3e:fa:2d: e3:37:bd:ca:37:77:7f:54:53:9b:79:e0:e8:de:da:2d:dd:7e: f8:8e:cf:c8:4e:45:ee:6f:58:03:eb:e6:12:25:a4:69:00:4b: 01:08:f9:2a:c5:5d:49:8b:ab:5a:cf:d0:44:42:ea:1a:25:29: f9:19:15:1f:a9:0d:10:06:03:49:a5:8c:e1:e2:35:02:cc:79: 83:c6:05:e5:ee:de:36:5b:cf:ff:a9:0a:54:5c:7c:00:5d:3b: 4b:13:e2:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0RkUxMTAvBgNVBAUTKEU2RjA4NkMwNUM1RTA0REQ5NkFFMEU1RkM5MDM5Nzkx QTM3NTYwRkUwHhcNMjUwOTE3MDQzMzU0WhcNMjUwOTI0MDQzMzU0WjAYMRYwFAYD VQQDEw02OGNhM2EzMi0zYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutBVx6qC5HJfDR1yX0zh6sMbPfHhPKBiXtuDi5TvgmbSaIcWSTbKoXzwksFQ QXxAtO+8jnZzSCLmWguJQ4l0uUSMrq6H46PuNTxJx3RQ0/hYy0eINdigL9AFs/+3 qryydhAvRBu0nPU9hbSeo524RSEyHkRFctjfV1/mbeLcbMNnXY7xLo34bzMYhCEu YNzPUHu2NQ8HPwzSoFeQOaR74cFQhkbB9igW7/Fo+rYFYOaHCv0WjAUWSlMJqDtb 6vh2FwIJaVOmcWmet1gHAYfS7EvAZ+xnqzxUoDFLbW3KWM3IkPygj6w7bxnV4S9I 67oSqH6ywmdLRjUciJgKEL/D5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDF7YSdp 8zLElEf1BCbkb2nFHkoOMB8GA1UdIwQYMBaAFObwhsBcXgTdlq4OX8kDl5GjdWD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjRGRS9CODI2Q0E4MDc2 QkYxMUVFQjE0RjJENzJDNEY5QUUwMi81dkNHd0Z4ZUJOMldyZzVmeVFPWGthTjFZ UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2Q0d3RnhlQk4yV3JnNWZ5UU9Ya2FOMVlQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjRGRS9CODI2Q0E4MDc2QkYxMUVFQjE0RjJENzJDNEY5QUUwMi81dkNHd0Z4ZUJO MldyZzVmeVFPWGthTjFZUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+7O+ue7cVbKyjrGkxz2yLtdlqs4Ny/Z/KZTk1EO5nl/+mbx5EQbCD pAO11l9kIPDZuVUMnYwmvjprYchs/sF5focUVK+ILBktbUi/9vSIFL0Rnhdco9Pr QjljtOGmGIOvMhhsVtGvqsdCYzE6Dg8BIk70kfLWDJO+b3dMKkAU5F+oNGidWRH3 6zzllHDsZmiEqdPWScsG0Mh8T4XhVW0++i3jN73KN3d/VFObeeDo3tot3X74js/I TkXub1gD6+YSJaRpAEsBCPkqxV1Ji6taz9BEQuoaJSn5GRUfqQ0QBgNJpYzh4jUC zHmDxgXl7t42W8//qQpUXHwAXTtLE+L8 -----END CERTIFICATE-----Generated at Fri Sep 19 03:00:02 2025 by rpki-client