$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft File: s5MbVo8uudLtLKTWS-vAhvuduJo.mft (raw, json) Hash identifier: 7fohtQSzrou3UUCHJpJWYph3ygwmVnfLgn69vR3i72w= Subject key identifier: D9:FC:84:AC:3D:2D:A3:89:70:7F:E1:07:45:C0:D9:E2:F0:82:C1:5B Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Certificate serial: 0AC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft Manifest number: 0ABA Signing time: Wed 20 Aug 2025 19:34:59 +0000 Manifest this update: Wed 20 Aug 2025 19:34:58 +0000 Manifest next update: Wed 27 Aug 2025 19:34:58 +0000 Files and hashes: 1: s5MbVo8uudLtLKTWS-vAhvuduJo.crl (hash: B9wOwnmy0QCatFZAcG3vePUftQ+hNEjkq3uXbITTx44=) 2: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (hash: OjmKjbirK1HOaPuAuxNpB1VjEustiEgzLqIxeeZ+0sM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2753 (0xac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91867F1, serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Validity Not Before: Aug 20 19:34:58 2025 GMT Not After : Aug 27 19:34:58 2025 GMT Subject: CN=68a62363-2b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:a5:e9:42:0f:e0:24:61:0d:f3:76:7d:5a: a0:e8:41:37:cf:78:18:84:43:ae:d7:60:92:79:b9: b9:ec:f7:38:71:f9:be:2d:bc:1a:24:39:b0:40:ca: ab:1d:ae:35:61:52:7a:cc:62:aa:a5:6f:6e:55:05: c8:f1:bc:65:76:f7:16:01:c9:44:8b:8d:f3:49:56: bd:aa:48:6b:16:95:dd:a8:ee:2d:38:0c:0f:f0:26: fb:ab:f0:bd:d5:ec:d7:78:81:7a:a8:10:c4:bb:50: 68:6f:e4:2a:13:45:de:d8:c9:b2:de:f2:dd:a4:c1: 4e:08:da:04:e3:3b:7f:2c:91:80:23:98:20:80:11: 3e:27:34:2c:8c:18:1a:4a:ad:ac:c2:df:36:65:33: 00:32:46:79:b8:64:28:4e:29:2f:d0:be:8d:be:4a: d8:e9:ef:d7:c4:98:51:84:6f:3a:bc:01:12:ef:8d: 2d:57:aa:68:b9:ab:6b:0d:6a:e0:2b:09:1a:d7:f3: 1c:d6:b9:9a:d6:7b:8e:5c:8c:62:4c:7a:5a:1d:05: ed:96:b3:e4:8d:e3:ba:ed:d8:79:f1:c7:2e:08:35: 7b:5c:8d:c3:4d:b7:d6:02:2d:f7:59:2f:75:c9:b5: c3:2d:b3:a7:1a:67:37:a9:35:f3:a2:a5:62:36:5f: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:84:AC:3D:2D:A3:89:70:7F:E1:07:45:C0:D9:E2:F0:82:C1:5B X509v3 Authority Key Identifier: keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:91:ed:1d:31:96:54:f9:a9:88:41:dd:49:dd:c4:77:2c:a5: 0b:1d:a7:ae:e0:70:30:bc:8b:02:06:a4:ac:27:45:ef:6d:31: 6b:ab:1a:62:14:ba:ea:bf:a5:b9:e4:39:c9:a0:1e:a9:3d:94: 6c:59:69:6b:85:da:ae:77:91:8c:cc:29:4c:64:08:38:ff:6f: d9:c1:26:69:94:bf:29:c7:2e:a2:77:00:d0:e4:52:e6:84:ea: 2f:39:49:98:2f:0f:cf:0b:89:62:58:58:c9:81:a0:9f:3d:07: a8:8a:76:96:25:ce:20:41:6a:a8:1f:e6:73:78:0e:d1:47:4c: ac:98:f5:51:46:3c:7e:ab:cf:37:88:49:69:a2:c2:30:c6:0d: b7:1f:3d:0f:02:b7:70:22:46:49:cd:f2:ab:8d:b3:15:80:c6: f6:cb:65:03:e0:9d:2f:49:b6:47:03:2a:11:75:e0:f9:eb:8c: b1:f9:a1:0b:61:9e:e7:5f:51:c7:c6:ba:26:18:31:1d:4b:a0: b5:08:4a:bb:8d:ec:72:a1:bb:af:f3:20:50:5e:ce:a5:d4:84: 20:47:bf:8a:a7:74:25:26:5b:fe:08:50:77:bd:42:d3:8c:8f: d8:75:b5:1c:67:e8:22:18:05:90:f7:d9:b6:98:3d:af:7e:0a: 1a:3b:0d:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRENjRCRUJDMDg2 RkI5REI4OUEwHhcNMjUwODIwMTkzNDU4WhcNMjUwODI3MTkzNDU4WjAYMRYwFAYD VQQDEw02OGE2MjM2My0yYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNOl6UIP4CRhDfN2fVqg6EE3z3gYhEOu12CSebm57Pc4cfm+LbwaJDmwQMqr Ha41YVJ6zGKqpW9uVQXI8bxldvcWAclEi43zSVa9qkhrFpXdqO4tOAwP8Cb7q/C9 1ezXeIF6qBDEu1Bob+QqE0Xe2Mmy3vLdpMFOCNoE4zt/LJGAI5gggBE+JzQsjBga Sq2swt82ZTMAMkZ5uGQoTikv0L6NvkrY6e/XxJhRhG86vAES740tV6pouatrDWrg Kwka1/Mc1rma1nuOXIxiTHpaHQXtlrPkjeO67dh58ccuCDV7XI3DTbfWAi33WS91 ybXDLbOnGmc3qTXzoqViNl8/IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNn8hKw9 LaOJcH/hB0XA2eLwgsFbMB8GA1UdIwQYMBaAFLOTG1aPLrnS7Syk1kvrwIb7nbia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjdGMS84MDlENzE1QzU5 MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVkTHRMS1RXUy12QWh2dWR1 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1TWJWbzh1dWRMdExLVFdTLXZBaHZ1ZHVKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjdGMS84MDlENzE1QzU5MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVk THRMS1RXUy12QWh2dWR1Sm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfke0dMZZU+amIQd1J3cR3LKULHaeu4HAwvIsCBqSsJ0XvbTFrqxpi FLrqv6W55DnJoB6pPZRsWWlrhdqud5GMzClMZAg4/2/ZwSZplL8pxy6idwDQ5FLm hOovOUmYLw/PC4liWFjJgaCfPQeoinaWJc4gQWqoH+ZzeA7RR0ysmPVRRjx+q883 iElposIwxg23Hz0PArdwIkZJzfKrjbMVgMb2y2UD4J0vSbZHAyoRdeD564yx+aEL YZ7nX1HHxromGDEdS6C1CEq7jexyobuv8yBQXs6l1IQgR7+Kp3QlJlv+CFB3vULT jI/YdbUcZ+giGAWQ99m2mD2vfgoaOw1m -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:29 2025 by rpki-client