$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json) Hash identifier: f8qLWRyHN8k5CniqGxejj9dkKPgisC/qpb+68aVMZFE= Subject key identifier: 2E:6D:4C:07:36:1B:BE:77:39:9F:B5:27:55:21:03:6A:E4:94:AF:CE Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft Manifest number: 010B Signing time: Fri 19 Sep 2025 05:35:43 +0000 Manifest this update: Fri 19 Sep 2025 05:35:42 +0000 Manifest next update: Fri 26 Sep 2025 05:35:42 +0000 Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: InU3OUR9c3YhD892CTBngoqxMtlLpKPdk173u4YTCaw=) 2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: N/lCfyLCfQ6pGJZnFWlWQxmi4U70D1DfmNioR3drqK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Validity Not Before: Sep 19 05:35:42 2025 GMT Not After : Sep 26 05:35:42 2025 GMT Subject: CN=68ccebae-3001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:ef:7d:8f:74:0b:b8:c0:c9:7b:36:8f:78: bf:f0:ad:38:6e:05:7a:a0:ba:90:24:56:ba:9c:d6: ea:3a:90:94:14:a0:f5:fb:e6:c1:d9:e9:6a:1b:24: 62:4a:53:0c:08:e3:cd:95:f3:46:56:6a:7c:3d:8f: 51:6c:7b:d0:c5:19:54:d5:54:bc:49:90:cc:62:2e: 2b:28:e8:bd:cc:a8:43:13:f4:32:98:9c:1a:12:5e: 63:f1:08:05:7a:36:9a:a9:50:97:9f:bb:ea:ec:65: f8:03:46:e2:64:9d:30:e3:07:61:0e:4d:02:d7:cc: f0:3f:7e:86:32:c1:03:22:8c:a1:2d:40:df:c2:05: da:1b:47:84:5a:2d:16:ae:6a:60:2b:86:13:06:f6: da:fe:5d:90:f9:91:47:59:a2:83:4b:68:ff:0b:6c: 3b:f8:4b:b2:5a:c7:89:4e:d7:72:7e:2e:79:50:7a: c8:e2:6b:d6:22:6d:67:4f:9b:b3:c4:7b:b8:f6:34: 9d:5a:3e:1f:b5:c4:d0:cc:40:75:d2:5a:37:c4:2c: ff:a8:7c:45:6b:40:a9:6d:93:30:d2:6d:0d:ff:ae: c1:03:e7:0d:de:5c:16:83:46:c8:dd:67:2e:44:22: fa:f4:de:c3:b5:d9:f3:b3:f2:87:91:ae:df:73:1f: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6D:4C:07:36:1B:BE:77:39:9F:B5:27:55:21:03:6A:E4:94:AF:CE X509v3 Authority Key Identifier: keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:b8:67:99:8e:cb:38:05:f9:79:59:c9:21:a8:7e:8a:21:fd: d2:5e:83:30:d9:a7:d2:b8:45:27:c7:a8:f9:7a:bf:1d:98:51: cf:f0:d8:e6:fd:31:fd:9f:42:a4:00:86:ec:78:d4:e2:7f:03: 8f:2e:70:99:58:6b:6a:61:d9:dd:8b:e9:97:e9:0b:dd:f9:99: a3:17:d2:bd:95:6f:93:f6:c0:f8:3f:17:0b:0d:c2:64:d3:c7: 96:f2:69:d4:0b:28:f1:06:a8:58:ed:99:86:5b:23:df:29:cc: c4:0b:15:83:fe:4d:18:f3:7e:d3:05:68:7e:9d:29:b7:a4:28: 81:e6:bd:87:ae:43:28:0c:62:9d:cc:9d:fc:44:42:7f:31:1b: 9d:2f:f7:1d:00:e5:66:48:d6:1e:d1:c1:69:85:fa:2a:04:a0: 21:ae:85:df:00:11:20:4c:71:eb:4f:b9:3d:15:81:5c:52:5a: 6a:f0:84:24:89:c2:2f:f6:5f:41:86:d5:4a:df:f4:3e:b4:b3: 43:cb:7b:b9:d9:51:a4:63:1a:5d:5d:7a:fc:c5:1e:c7:63:e8: ad:a1:01:5c:7c:cc:b2:c7:16:bc:14:67:88:f9:51:67:8f:72: 4d:71:45:a6:c1:ed:59:29:c4:03:ec:90:6d:fe:3e:ad:f6:c4: d9:b0:34:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyRTYxMTAvBgNVBAUTKEU0NkVBQ0RDMjE0Mzg1QzE0MjAzNDY3NEU0NkM2OEU3 QkJFMjk1MjUwHhcNMjUwOTE5MDUzNTQyWhcNMjUwOTI2MDUzNTQyWjAYMRYwFAYD VQQDEw02OGNjZWJhZS0zMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvILvfY90C7jAyXs2j3i/8K04bgV6oLqQJFa6nNbqOpCUFKD1++bB2elqGyRi SlMMCOPNlfNGVmp8PY9RbHvQxRlU1VS8SZDMYi4rKOi9zKhDE/QymJwaEl5j8QgF ejaaqVCXn7vq7GX4A0biZJ0w4wdhDk0C18zwP36GMsEDIoyhLUDfwgXaG0eEWi0W rmpgK4YTBvba/l2Q+ZFHWaKDS2j/C2w7+EuyWseJTtdyfi55UHrI4mvWIm1nT5uz xHu49jSdWj4ftcTQzEB10lo3xCz/qHxFa0CpbZMw0m0N/67BA+cN3lwWg0bI3Wcu RCL69N7Dtdnzs/KHka7fcx9h7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5tTAc2 G753OZ+1J1UhA2rklK/OMB8GA1UdIwQYMBaAFORurNwhQ4XBQgNGdORsaOe74pUl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzJFNi9GMzU5MDgyNEZE RTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhjRkNBMFowNUd4bzU3dmls U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhj RkNBMFowNUd4bzU3dmlsU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQuGeZjss4Bfl5WckhqH6KIf3SXoMw2afSuEUnx6j5er8dmFHP8Njm /TH9n0KkAIbseNTifwOPLnCZWGtqYdndi+mX6Qvd+ZmjF9K9lW+T9sD4PxcLDcJk 08eW8mnUCyjxBqhY7ZmGWyPfKczECxWD/k0Y837TBWh+nSm3pCiB5r2HrkMoDGKd zJ38REJ/MRudL/cdAOVmSNYe0cFphfoqBKAhroXfABEgTHHrT7k9FYFcUlpq8IQk icIv9l9BhtVK3/Q+tLNDy3u52VGkYxpdXXr8xR7HY+itoQFcfMyyxxa8FGeI+VFn j3JNcUWmwe1ZKcQD7JBt/j6t9sTZsDSG -----END CERTIFICATE-----Generated at Fri Sep 19 09:09:39 2025 by rpki-client