$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft File: 5Ux-FlPQE0JCIsO5NoohO6URXOM.mft (raw, json) Hash identifier: XgGSysqZVy8GXufvGPu0VHtGuY3DAAlZGBfN5Krq5Qg= Subject key identifier: BB:EF:4C:91:06:95:74:3E:F9:6D:C1:78:30:99:0A:01:12:00:E9:90 Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3 Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft Manifest number: 22 Signing time: Tue 09 Sep 2025 07:57:55 +0000 Manifest this update: Tue 09 Sep 2025 07:57:55 +0000 Manifest next update: Tue 16 Sep 2025 07:57:55 +0000 Files and hashes: 1: 5Ux-FlPQE0JCIsO5NoohO6URXOM.crl (hash: Y7CadEJU4r+r9bEfvxSd/7elbI1TmSLnCYckqWWZDF4=) 2: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (hash: DMOnnBq0pchJxrIKNQnVPVkuYus9e6uopvVvEwbY84Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3 Validity Not Before: Sep 9 07:57:55 2025 GMT Not After : Sep 16 07:57:55 2025 GMT Subject: CN=68bfde03-56b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:1f:75:95:30:07:fd:74:5d:e5:d0:26:f2: 36:4e:d4:cd:f4:27:2f:a3:b4:5a:aa:33:d2:60:7a: 2a:f9:78:54:32:2a:2b:cd:61:6f:f7:6c:81:2a:84: a2:c1:76:84:64:1b:4b:49:8f:3d:a4:59:11:96:c1: d7:08:6f:55:8b:96:98:05:87:33:30:61:80:06:ac: 1e:1d:99:9d:7e:de:07:44:44:e5:3d:ce:71:ac:05: 2b:76:bf:69:0d:b6:12:50:ec:32:6c:4a:4e:70:78: f3:40:5b:fb:68:f5:7b:10:be:ea:8a:37:47:67:ac: b3:88:ea:a9:43:08:74:05:2f:7b:e1:cc:47:29:48: c4:c1:7b:f1:c9:c7:08:fb:5f:ea:79:1d:a7:86:7c: 40:c6:1b:f2:ac:37:f0:f6:78:8f:3c:b7:70:e4:84: d0:32:1a:c4:0e:37:6b:eb:96:80:45:07:35:55:b0: 41:f6:3e:9a:b5:e1:f0:2c:8f:24:fe:1c:e0:53:af: d0:2c:0c:65:e7:3e:46:ad:5d:ea:13:9d:1f:e5:96: 29:fe:1a:69:90:25:7f:8f:26:5d:3b:ee:63:49:b8: f5:01:d6:94:ce:e1:9a:8a:71:10:6e:15:58:da:e2: 0b:53:53:9d:30:b3:33:9a:54:be:8a:b7:84:be:05: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EF:4C:91:06:95:74:3E:F9:6D:C1:78:30:99:0A:01:12:00:E9:90 X509v3 Authority Key Identifier: keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:74:cc:20:29:2e:47:c2:09:8b:1e:e4:07:08:0f:07:81:d4: 87:77:11:fe:30:59:75:fb:c1:71:51:d1:f5:90:61:f2:76:a3: 9d:68:90:37:a0:8f:22:f3:ed:a3:68:e4:d2:b3:d2:91:e5:90: 5e:04:33:1a:b6:2a:d1:8b:22:97:24:87:03:30:c1:69:a8:62: 52:87:af:13:ed:ae:61:f8:be:9c:ec:e1:2e:39:2d:e7:a1:b7: b6:db:77:cd:72:4e:7c:7a:44:ad:3f:0f:2e:9c:f5:65:71:7d: 21:af:81:02:1b:62:09:75:58:22:0f:72:cd:87:2f:bd:98:6e: d0:b7:d7:f5:6b:54:81:2a:91:0c:d7:7b:18:32:90:cc:40:d6: d9:41:c6:e5:35:ca:c3:bc:97:c1:9a:99:61:1c:e8:73:e2:df: 24:6b:91:c6:6e:67:74:5c:ba:32:15:11:5f:bf:12:da:0a:b4: aa:61:12:d8:2d:99:ee:37:be:2c:29:b8:3d:c0:9b:fc:e1:e1: 89:8e:40:7f:99:76:4a:24:dd:b1:4e:f9:9f:4e:ad:9b:99:11: d5:d4:c3:3b:51:61:30:15:73:dc:f5:cc:50:c3:5b:af:a6:99: 54:7e:fc:30:5c:1f:77:fb:53:89:ab:95:04:51:87:33:be:d5: 51:ac:52:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzdBNjExMC8GA1UEBRMoRTU0QzdFMTY1M0QwMTM0MjQyMjJDM0I5MzY4QTIxM0JB NTExNUNFMzAeFw0yNTA5MDkwNzU3NTVaFw0yNTA5MTYwNzU3NTVaMBgxFjAUBgNV BAMTDTY4YmZkZTAzLTU2YjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeah91lTAH/XRd5dAm8jZO1M30Jy+jtFqqM9Jgeir5eFQyKivNYW/3bIEqhKLB doRkG0tJjz2kWRGWwdcIb1WLlpgFhzMwYYAGrB4dmZ1+3gdEROU9znGsBSt2v2kN thJQ7DJsSk5wePNAW/to9XsQvuqKN0dnrLOI6qlDCHQFL3vhzEcpSMTBe/HJxwj7 X+p5HaeGfEDGG/KsN/D2eI88t3DkhNAyGsQON2vrloBFBzVVsEH2Ppq14fAsjyT+ HOBTr9AsDGXnPkatXeoTnR/llin+GmmQJX+PJl077mNJuPUB1pTO4ZqKcRBuFVja 4gtTU50wszOaVL6Kt4S+Bbf/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu+9MkQaV dD75bcF4MJkKARIA6ZAwHwYDVR0jBBgwFoAU5Ux+FlPQE0JCIsO5NoohO6URXOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0M5MkMzOUFFNUM3 RTExRjBBNUMzNjAzNkM0RjlBRTAyLzVVeC1GbFBRRTBKQ0lzTzVOb29oTzZVUlhP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVV4LUZsUFFFMEpDSXNPNU5vb2hPNlVSWE9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 N0E2L0M5MkMzOUFFNUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyLzVVeC1GbFBRRTBK Q0lzTzVOb29oTzZVUlhPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGV0zCApLkfCCYse5AcIDweB1Id3Ef4wWXX7wXFR0fWQYfJ2o51okDeg jyLz7aNo5NKz0pHlkF4EMxq2KtGLIpckhwMwwWmoYlKHrxPtrmH4vpzs4S45Leeh t7bbd81yTnx6RK0/Dy6c9WVxfSGvgQIbYgl1WCIPcs2HL72YbtC31/VrVIEqkQzX exgykMxA1tlBxuU1ysO8l8GamWEc6HPi3yRrkcZuZ3RcujIVEV+/EtoKtKphEtgt me43viwpuD3Am/zh4YmOQH+Zdkok3bFO+Z9OrZuZEdXUwztRYTAVc9z1zFDDW6+m mVR+/DBcH3f7U4mrlQRRhzO+1VGsUi0= -----END CERTIFICATE-----Generated at Tue Sep 9 13:36:52 2025 by rpki-client