$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: rNIX63lSmacYQ7twLpbDe9+bO5lRNGqa9JYeSNLwDm4= Subject key identifier: 52:A9:03:83:7B:A0:10:E8:2C:FC:C4:17:E5:F8:7B:82:8B:46:5B:45 Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 90 Signing time: Thu 21 Aug 2025 06:39:50 +0000 Manifest this update: Thu 21 Aug 2025 06:39:49 +0000 Manifest next update: Thu 28 Aug 2025 06:39:49 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: Z4fg0KY720HNX5Uf0F2oTn9iFAeN5j5HXUllRrvHCd0=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Aug 21 06:39:49 2025 GMT Not After : Aug 28 06:39:49 2025 GMT Subject: CN=68a6bf36-bca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:9b:82:90:8a:b8:7a:91:92:37:bc:f7:b2: 2b:f6:16:27:72:62:86:96:e2:17:31:8f:7e:0d:ae: 73:fc:43:8e:a6:9a:3d:bf:cf:2e:22:0e:1a:0e:82: 47:2a:ab:ec:2c:4f:8f:86:87:a6:d3:f2:90:5c:26: 2c:71:08:c9:55:fa:e6:1c:58:e0:70:21:fe:6b:7b: 2b:01:ec:6f:18:e8:32:55:9c:37:59:96:c7:78:0d: db:ba:6f:7b:ca:6f:b2:c4:92:38:e4:65:28:8f:13: 38:bc:92:eb:b8:e8:d1:1c:38:ea:c7:e1:75:a0:4b: 30:49:92:ba:ea:21:09:e1:fc:2c:88:16:77:0a:d3: 6e:fc:00:2c:7f:31:0d:09:e9:53:9a:ef:de:8f:29: 2f:61:41:c8:76:92:12:c9:71:a6:26:54:c9:78:83: ce:61:bd:df:88:45:98:39:d7:a5:5c:76:50:2a:99: 76:3a:bb:85:fd:40:ea:3e:28:66:66:cc:87:f5:50: 06:f7:97:cc:be:ad:1e:c1:f1:05:91:f3:24:c9:ba: 6d:0c:98:e4:c7:ec:bc:51:c1:54:2b:7e:f0:56:8b: cf:34:62:de:7e:07:34:24:45:d9:14:bf:ba:77:35: 7a:6f:8a:5e:4b:1b:aa:c7:b0:c2:75:22:21:88:5c: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A9:03:83:7B:A0:10:E8:2C:FC:C4:17:E5:F8:7B:82:8B:46:5B:45 X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a7:8e:0b:c7:ef:9c:a5:23:cb:a7:5f:e3:fd:d1:ce:2e:d8: 17:b5:5a:f6:dc:62:95:ba:ed:e4:03:e0:7e:32:d5:0b:a4:fe: 8c:de:65:40:c7:32:dc:1b:a2:c6:27:af:d5:27:94:52:0b:b1: a6:ea:0f:61:46:74:d2:1a:56:cf:55:47:6c:74:b7:d1:38:c7: 5e:39:58:5e:ce:35:52:26:6d:b6:ff:04:7c:e9:a1:69:30:06: 06:c2:85:39:51:62:4d:85:66:fc:29:51:2a:9b:a8:3c:f8:71: cf:7c:1e:3d:3f:15:6d:70:40:24:bb:30:2b:d6:86:ff:97:7f: 05:88:0d:46:4f:fc:7e:af:1d:65:05:0f:13:55:e8:39:91:d9: cf:3f:99:20:51:43:8a:00:d5:e2:eb:50:a4:38:2a:79:29:18: 64:6f:de:89:aa:45:07:38:ab:e5:c1:c8:76:c8:5b:52:0b:94: 33:89:7d:ea:3a:99:bc:74:a1:94:cb:2d:c6:1d:42:32:05:d0: 06:2e:88:16:29:65:f5:d2:92:1d:af:5d:4a:a7:b7:0b:37:91: 87:c0:a8:0a:1c:eb:84:84:d5:ce:4c:c5:aa:e0:71:7c:78:61: ea:75:1a:58:24:09:61:2b:46:72:06:d5:d7:35:45:86:79:70: a8:5d:2a:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3RkQxMTAvBgNVBAUTKDBBQ0U2RjZBQTZBM0ZBRTI3QTA4NUM3QTEyN0Y5QkM5 OTQyNDUyMTQwHhcNMjUwODIxMDYzOTQ5WhcNMjUwODI4MDYzOTQ5WjAYMRYwFAYD VQQDEw02OGE2YmYzNi1iY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVObgpCKuHqRkje897Ir9hYncmKGluIXMY9+Da5z/EOOppo9v88uIg4aDoJH KqvsLE+Phoem0/KQXCYscQjJVfrmHFjgcCH+a3srAexvGOgyVZw3WZbHeA3bum97 ym+yxJI45GUojxM4vJLruOjRHDjqx+F1oEswSZK66iEJ4fwsiBZ3CtNu/AAsfzEN CelTmu/ejykvYUHIdpISyXGmJlTJeIPOYb3fiEWYOdelXHZQKpl2OruF/UDqPihm ZsyH9VAG95fMvq0ewfEFkfMkybptDJjkx+y8UcFUK37wVovPNGLefgc0JEXZFL+6 dzV6b4peSxuqx7DCdSIhiFzcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKpA4N7 oBDoLPzEF+X4e4KLRltFMB8GA1UdIwQYMBaAFArOb2qmo/rieghcehJ/m8mUJFIU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdGRC9FMjQ1QjVCMkEx NUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11SjZDRng2RW4tYnlaUWtV aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1VoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdGRC9FMjQ1QjVCMkExNUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11 SjZDRng2RW4tYnlaUWtVaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZp44Lx++cpSPLp1/j/dHOLtgXtVr23GKVuu3kA+B+MtULpP6M3mVA xzLcG6LGJ6/VJ5RSC7Gm6g9hRnTSGlbPVUdsdLfROMdeOVhezjVSJm22/wR86aFp MAYGwoU5UWJNhWb8KVEqm6g8+HHPfB49PxVtcEAkuzAr1ob/l38FiA1GT/x+rx1l BQ8TVeg5kdnPP5kgUUOKANXi61CkOCp5KRhkb96JqkUHOKvlwch2yFtSC5QziX3q Opm8dKGUyy3GHUIyBdAGLogWKWX10pIdr11Kp7cLN5GHwKgKHOuEhNXOTMWq4HF8 eGHqdRpYJAlhK0ZyBtXXNUWGeXCoXSpT -----END CERTIFICATE-----Generated at Fri Aug 22 16:28:48 2025 by rpki-client