$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: pn5pzNysBshLsRe48rmA0M7LrQM5iU6NMtcyOksMBgA= Subject key identifier: 01:1D:88:94:73:BE:81:AF:9A:3B:D3:50:98:C0:10:E2:A2:16:6A:D1 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: F7 Signing time: Tue 09 Sep 2025 05:21:43 +0000 Manifest this update: Tue 09 Sep 2025 05:21:43 +0000 Manifest next update: Tue 16 Sep 2025 05:21:43 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: JjdJ76fgda+yKA7E9JvefqbBOC8Qa7E2vngiZ+Smnus=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 05:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Sep 9 05:21:43 2025 GMT Not After : Sep 16 05:21:43 2025 GMT Subject: CN=68bfb967-4dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9e:c3:ed:c7:2a:82:00:f8:86:c8:af:3e:8e: 6a:68:31:38:81:2f:16:1e:ee:6d:30:e1:b9:8c:e1: ad:88:3f:be:15:88:9e:66:a0:f8:09:87:66:0f:61: 4f:2b:55:9b:a1:29:36:77:3b:54:b3:ae:72:10:71: bd:20:69:f7:82:cf:04:22:64:9d:63:cf:3c:c1:2c: f5:48:d5:aa:4c:ba:a6:c7:a8:67:12:a0:92:aa:28: ae:9a:9f:0f:85:75:5e:43:dd:57:2d:0b:dd:4c:b7: 5b:34:39:9f:05:4b:de:26:cd:f6:ac:18:fd:5c:c5: 74:e6:1e:03:bc:f3:d4:51:ca:79:ef:7f:5e:bd:ee: 50:a4:94:3f:da:5e:e4:d4:f8:89:2d:97:b8:8a:5a: 0a:b2:cb:a6:00:65:33:12:26:ac:38:c6:68:b8:58: 7f:e6:36:57:6b:e6:4a:2b:e8:33:05:ba:64:33:0e: 5e:47:b3:10:2a:6c:5a:2b:42:13:98:cc:5c:88:38: 65:ec:d8:99:03:3b:cb:29:f3:67:bf:a2:c4:eb:f2: a6:7e:b8:43:14:c0:98:05:34:40:49:42:80:40:47: 36:3a:67:5b:25:f0:d5:79:44:7f:ef:35:1d:e7:90: 14:e2:9c:d6:b8:91:ac:2f:7f:5f:89:2d:5b:74:2f: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1D:88:94:73:BE:81:AF:9A:3B:D3:50:98:C0:10:E2:A2:16:6A:D1 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ea:84:ba:2e:22:12:46:06:68:76:f2:d6:eb:92:27:14:5c: bd:64:ca:10:5a:11:64:a7:f4:1d:af:3e:99:d2:44:25:48:03: 0c:9e:a2:d6:fc:4d:78:69:c6:6c:7a:8d:bc:69:57:00:61:ea: ad:d0:c3:08:06:dd:5e:4c:07:f8:09:66:97:28:25:9f:70:cc: 96:19:74:11:b2:dc:a3:5f:9e:85:c2:b0:c4:4a:1a:6c:a7:f4: 72:c2:e1:31:54:a2:bb:22:ed:88:01:f5:2a:15:d5:89:27:bb: 47:fd:18:47:61:7f:be:c7:ea:37:c1:93:56:22:21:04:7e:94: a3:d3:02:0f:9c:65:c8:99:b3:f0:35:0a:0d:c1:0f:4a:90:23: f7:e2:05:4c:14:da:c0:74:63:ee:27:49:1c:6c:33:5f:dc:17: 64:d9:e0:22:f7:78:d6:1f:a6:87:de:28:6e:bc:44:bb:2f:d7: e0:13:e6:57:aa:88:6c:81:d6:82:87:1a:ad:3d:a0:15:5b:45: 64:0a:08:36:a8:fb:09:9e:f2:c0:6e:d3:74:f2:0e:dd:ac:17: 3a:74:6c:fd:4d:bf:cf:c5:d0:96:fc:40:13:d6:6e:69:ad:59: 91:e1:e5:3f:a2:88:28:78:46:ef:fa:c9:08:7f:cd:49:bf:cd: db:78:d2:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwOTA5MDUyMTQzWhcNMjUwOTE2MDUyMTQzWjAYMRYwFAYD VQQDEw02OGJmYjk2Ny00ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw57D7ccqggD4hsivPo5qaDE4gS8WHu5tMOG5jOGtiD++FYieZqD4CYdmD2FP K1WboSk2dztUs65yEHG9IGn3gs8EImSdY888wSz1SNWqTLqmx6hnEqCSqiiump8P hXVeQ91XLQvdTLdbNDmfBUveJs32rBj9XMV05h4DvPPUUcp5739eve5QpJQ/2l7k 1PiJLZe4iloKssumAGUzEiasOMZouFh/5jZXa+ZKK+gzBbpkMw5eR7MQKmxaK0IT mMxciDhl7NiZAzvLKfNnv6LE6/KmfrhDFMCYBTRASUKAQEc2OmdbJfDVeUR/7zUd 55AU4pzWuJGsL39fiS1bdC/3FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEdiJRz voGvmjvTUJjAEOKiFmrRMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs6oS6LiISRgZodvLW65InFFy9ZMoQWhFkp/Qdrz6Z0kQlSAMMnqLW /E14acZseo28aVcAYeqt0MMIBt1eTAf4CWaXKCWfcMyWGXQRstyjX56FwrDEShps p/RywuExVKK7Iu2IAfUqFdWJJ7tH/RhHYX++x+o3wZNWIiEEfpSj0wIPnGXImbPw NQoNwQ9KkCP34gVMFNrAdGPuJ0kcbDNf3Bdk2eAi93jWH6aH3ihuvES7L9fgE+ZX qohsgdaChxqtPaAVW0VkCgg2qPsJnvLAbtN08g7drBc6dGz9Tb/PxdCW/EAT1m5p rVmR4eU/oogoeEbv+skIf81Jv83beNLa -----END CERTIFICATE-----Generated at Tue Sep 9 13:03:28 2025 by rpki-client