$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: K5LsPJwaU0ecvX+OS7isMK7kyGaGrsW2hasWd+9hB38= Subject key identifier: 4D:0E:9F:26:3A:AA:46:83:75:B3:C4:A5:76:DE:AB:2A:B6:67:1F:0A Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: C2 Signing time: Fri 05 Sep 2025 06:18:16 +0000 Manifest this update: Fri 05 Sep 2025 06:18:15 +0000 Manifest next update: Fri 12 Sep 2025 06:18:15 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: +xuH1JVg5I3yFm65942GUWX/khOZNdUigx4UpwWPpdE=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Sep 5 06:18:15 2025 GMT Not After : Sep 12 06:18:15 2025 GMT Subject: CN=68ba80a8-e7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:e1:5b:ad:1b:18:88:43:3a:ae:85:68:07: 8f:ae:ef:a9:3f:de:49:77:71:97:e5:e6:62:27:38: 15:55:a1:fe:4c:ea:1c:f4:8d:e7:e7:6c:e4:c5:db: f0:42:2a:83:54:12:d3:11:94:38:c8:7d:5a:af:63: 2c:9b:71:3a:d4:7a:ad:09:af:b8:7e:ce:bc:89:37: 02:8b:20:41:75:77:dd:7d:17:f1:11:6c:7c:3b:92: 6d:9e:3a:21:e0:ca:5b:3d:49:2f:55:e9:7d:23:e7: ab:34:b1:0d:2f:e6:79:cc:41:2b:5e:73:7b:25:bf: 39:fa:ea:8d:58:a0:90:15:e7:ea:bb:5e:6d:80:ea: 33:c2:92:e5:f5:5d:85:96:08:df:f9:82:7d:45:82: 37:fa:ee:d2:b6:7a:bf:65:7a:4c:ee:d1:ec:d1:c1: 14:af:a1:8d:dd:64:8f:5f:42:c3:bb:0e:87:7a:bf: aa:ad:db:1b:dd:00:a1:54:57:34:1c:b0:8c:0e:57: f3:19:71:f1:c6:59:0b:5d:58:f3:75:0f:e2:ce:fc: ee:44:96:c6:70:d1:09:99:bb:1f:fd:33:ce:69:c0: 3e:fc:83:d7:68:aa:39:27:6d:b2:6e:9b:1e:32:94: 32:3b:51:36:1d:d2:6a:70:0b:c9:fb:3a:35:91:c6: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0E:9F:26:3A:AA:46:83:75:B3:C4:A5:76:DE:AB:2A:B6:67:1F:0A X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:4d:3b:4a:9f:64:1e:61:20:81:8a:e7:18:3e:33:23:ec:85: aa:d4:53:2a:20:2c:74:e8:9b:c3:cb:f9:3e:46:60:08:fb:24: 5b:f4:8b:f6:93:41:ac:ff:06:75:f7:93:3a:20:eb:f2:b9:8d: 13:25:60:4a:47:c4:7d:37:a6:c5:b6:d1:a7:58:5f:c4:11:f1: 09:e4:de:25:07:85:98:11:4b:3d:24:95:29:d7:61:cd:6f:ba: 95:9e:a7:32:97:f3:2e:f0:6a:92:41:5c:b9:d4:df:98:c3:d9: 3b:c4:a3:5b:00:08:2e:16:da:83:27:ba:ba:18:cb:87:dd:98: 51:bb:15:55:8f:7e:30:c1:d6:93:c3:9c:2a:15:17:84:8b:2c: fc:4e:0c:2d:3b:e6:a8:d5:a7:05:b6:ea:d7:c6:dd:20:3d:bc: e0:35:88:5b:e2:30:06:51:3c:9f:34:21:15:f7:45:6b:ed:e8: 22:82:1d:63:ef:11:5e:2c:09:55:c8:97:00:89:6b:93:9e:cd: 76:81:40:28:28:10:02:23:fe:3c:11:41:92:5a:fe:60:f4:92: 52:b6:64:b8:9b:e9:3a:c0:77:61:e0:2e:5c:67:3c:84:fa:0c: 6e:73:1e:80:3b:6e:c2:e1:c6:f8:9c:6d:7b:53:dc:ce:7d:0d: aa:c5:53:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUwOTA1MDYxODE1WhcNMjUwOTEyMDYxODE1WjAYMRYwFAYD VQQDEw02OGJhODBhOC1lN2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiThW60bGIhDOq6FaAePru+pP95Jd3GX5eZiJzgVVaH+TOoc9I3n52zkxdvw QiqDVBLTEZQ4yH1ar2Msm3E61HqtCa+4fs68iTcCiyBBdXfdfRfxEWx8O5Jtnjoh 4MpbPUkvVel9I+erNLENL+Z5zEErXnN7Jb85+uqNWKCQFefqu15tgOozwpLl9V2F lgjf+YJ9RYI3+u7Stnq/ZXpM7tHs0cEUr6GN3WSPX0LDuw6Her+qrdsb3QChVFc0 HLCMDlfzGXHxxlkLXVjzdQ/izvzuRJbGcNEJmbsf/TPOacA+/IPXaKo5J22ybpse MpQyO1E2HdJqcAvJ+zo1kcZl8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE0OnyY6 qkaDdbPEpXbeqyq2Zx8KMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDITTtKn2QeYSCBiucYPjMj7IWq1FMqICx06JvDy/k+RmAI+yRb9Iv2 k0Gs/wZ195M6IOvyuY0TJWBKR8R9N6bFttGnWF/EEfEJ5N4lB4WYEUs9JJUp12HN b7qVnqcyl/Mu8GqSQVy51N+Yw9k7xKNbAAguFtqDJ7q6GMuH3ZhRuxVVj34wwdaT w5wqFReEiyz8TgwtO+ao1acFturXxt0gPbzgNYhb4jAGUTyfNCEV90Vr7egigh1j 7xFeLAlVyJcAiWuTns12gUAoKBACI/48EUGSWv5g9JJStmS4m+k6wHdh4C5cZzyE +gxucx6AO27C4cb4nG17U9zOfQ2qxVNM -----END CERTIFICATE-----Generated at Sat Sep 6 15:17:33 2025 by rpki-client