$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: vjLFDf4wEbPss6odc+0flevJXGiA+PTiHT/zDN5L6Cw= Subject key identifier: 36:CF:00:AA:06:7B:A0:A9:59:5B:F5:81:AD:5A:2B:2A:73:21:0A:34 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 037C Signing time: Fri 19 Sep 2025 01:15:47 +0000 Manifest this update: Fri 19 Sep 2025 01:15:46 +0000 Manifest next update: Fri 26 Sep 2025 01:15:46 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: iTfHiWxT0vhgJFM4AlqKzl8AfK9niYBGqknVvlWuBVQ=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: OdJBHfeW2Re+5Y2fi/VDd9mvhSQUJ11CYcf0wDjfUuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: Sep 19 01:15:46 2025 GMT Not After : Sep 26 01:15:46 2025 GMT Subject: CN=68ccaec3-9803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:3e:e9:a4:b2:19:0e:7d:1e:aa:4a:7f:7f: 28:ba:58:ea:b4:71:2c:5c:fb:a5:fe:c2:37:56:c1: 01:6b:00:6d:4b:f5:64:71:98:b2:e0:be:c8:64:6a: a0:9e:06:da:09:79:fa:51:76:87:10:17:e9:1e:ce: a9:c6:c0:cd:15:21:8a:99:1d:01:64:d2:4e:c8:eb: bb:96:ac:86:9b:fa:12:bc:1d:4e:5a:99:bc:f3:00: 74:04:eb:d5:5d:55:68:eb:71:92:2d:d7:13:11:f5: 2c:a2:3f:e6:50:73:d4:ef:04:96:b9:f3:11:ae:6f: 40:cb:61:7a:86:ba:80:02:de:f9:0c:3d:e5:a5:33: e5:b3:c5:70:62:3a:ce:33:28:ec:bd:2b:f3:14:d4: 3b:30:ed:6e:3a:a6:72:82:5d:72:bf:44:a5:4c:c3: 94:1c:2e:ac:44:66:3f:d0:9e:74:e0:db:e1:34:d0: 24:ed:67:5d:48:76:bd:c9:e9:a8:6b:7d:12:ba:e7: 5f:ed:cc:78:fc:90:d6:31:69:d7:e5:9f:d0:de:a4: 25:9c:21:22:94:10:b0:9e:6b:76:55:16:f1:2a:a2: 0b:b3:16:46:4f:3e:30:9c:7f:34:b6:c3:dd:24:c2: 3b:c6:b6:08:d7:91:24:9e:32:1c:09:50:18:a6:8d: 6d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CF:00:AA:06:7B:A0:A9:59:5B:F5:81:AD:5A:2B:2A:73:21:0A:34 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:0d:09:27:29:44:32:f1:ab:20:8f:a0:6d:25:be:d3:b9:c9: 19:8b:e7:3d:bd:c4:f4:21:f8:49:ef:5e:f2:42:b7:2e:91:c8: 84:ba:07:62:d1:b4:0f:52:67:06:db:ac:84:a4:63:07:61:70: a8:ca:d9:89:b4:46:2f:14:b3:1e:31:cf:f0:9d:eb:86:2e:46: 0f:7b:30:26:c2:1c:d7:6b:30:fa:3a:ae:b1:4a:65:b7:a0:da: 7c:55:e7:94:ee:73:4c:95:32:31:0a:14:d1:46:9c:f5:8a:3f: 9f:96:14:a0:2c:55:c7:8e:08:68:4b:90:36:5a:2b:f6:4d:58: 13:80:3b:bd:9e:d3:20:f1:46:26:8d:6c:e4:21:74:9f:85:ba: 2e:6d:c7:99:11:40:01:41:a8:a0:11:a1:1d:e1:6f:3b:ae:78: 0a:76:33:ef:fa:b4:20:bc:b7:58:bb:0e:55:08:f9:72:54:0a: fd:99:e0:c9:7b:9e:d6:57:64:19:f2:27:b6:f8:cb:f7:a0:65: f3:3c:ae:cf:14:c7:da:38:89:e4:2d:c0:d7:aa:af:ba:57:88: cc:bb:b8:90:8a:7d:82:0d:71:2f:c9:39:5c:77:8c:28:9e:f9: 63:88:e5:a9:4c:1d:0d:c3:e2:a3:e9:34:99:1f:e9:56:5c:12: 09:f9:f5:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjUwOTE5MDExNTQ2WhcNMjUwOTI2MDExNTQ2WjAYMRYwFAYD VQQDEw02OGNjYWVjMy05ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO4+6aSyGQ59HqpKf38ouljqtHEsXPul/sI3VsEBawBtS/VkcZiy4L7IZGqg ngbaCXn6UXaHEBfpHs6pxsDNFSGKmR0BZNJOyOu7lqyGm/oSvB1OWpm88wB0BOvV XVVo63GSLdcTEfUsoj/mUHPU7wSWufMRrm9Ay2F6hrqAAt75DD3lpTPls8VwYjrO MyjsvSvzFNQ7MO1uOqZygl1yv0SlTMOUHC6sRGY/0J504NvhNNAk7WddSHa9yemo a30Suudf7cx4/JDWMWnX5Z/Q3qQlnCEilBCwnmt2VRbxKqILsxZGTz4wnH80tsPd JMI7xrYI15EknjIcCVAYpo1trwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbPAKoG e6CpWVv1ga1aKypzIQo0MB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8DQknKUQy8asgj6BtJb7TuckZi+c9vcT0IfhJ717yQrcukciEugdi 0bQPUmcG26yEpGMHYXCoytmJtEYvFLMeMc/wneuGLkYPezAmwhzXazD6Oq6xSmW3 oNp8VeeU7nNMlTIxChTRRpz1ij+flhSgLFXHjghoS5A2Wiv2TVgTgDu9ntMg8UYm jWzkIXSfhboubceZEUABQaigEaEd4W87rngKdjPv+rQgvLdYuw5VCPlyVAr9meDJ e57WV2QZ8ie2+Mv3oGXzPK7PFMfaOInkLcDXqq+6V4jMu7iQin2CDXEvyTlcd4wo nvljiOWpTB0Nw+Kj6TSZH+lWXBIJ+fXg -----END CERTIFICATE-----Generated at Fri Sep 19 12:16:55 2025 by rpki-client