$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: UY1ye7xx6uTWVgdXOGOEQbmgBjjlrXUkUuCq4GZc1iE= Subject key identifier: A4:41:FD:8A:F1:97:CB:A6:09:5F:13:3C:34:C5:F8:E4:D6:53:30:71 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 3709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 35FC Signing time: Thu 04 Sep 2025 14:25:02 +0000 Manifest this update: Thu 04 Sep 2025 14:25:01 +0000 Manifest next update: Thu 11 Sep 2025 14:25:01 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: P523Y+YVQLFhWKj49NkaLKDv/8ou7W3DNSut2INfSt8=) 2: 7D9BF1DE7CC511F0A2A10150C4F9AE02.roa (hash: MPTZanzFk6VU/2rjP3VJ1ReyAnolRvAUE3O3TM1RBr8=) 3: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: YPxJgAFP2pm+e64iG82yJRkFHNHfja4F2rH7VSVuFpA=) 4: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 3QqIb/PpEMe7CSOMb9cfzIUcXW1tet3HABkiD8A3zkU=) 5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM=) 6: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: 8JKaEfgtThOrevd/FI1wUsWQCsjDZCsWDfH4rtPvYOM=) 7: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: Yn6iyp3sOHzht7NrUVV1K95CTLrIyR+zeCU6DhPlbi0=) 8: 9538F912A09511EE9616A86EC4F9AE02.roa (hash: UIhH1UdXX1/WldxbBw/5eFdUsW8H5rv3xowCVi4x/js=) 9: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: E9Q0DLQxOx2PNLNxJzUPOmEekE0nfR8RNH8+NziMkYc=) 10: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: UB9M+LLNN3sS8I2EFsp8N9BHGeanS2Z+lbFEvYsOTeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14089 (0x3709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Sep 4 14:25:01 2025 GMT Not After : Sep 11 14:25:01 2025 GMT Subject: CN=68b9a13d-5364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:bf:01:ac:f3:79:cf:47:93:76:0e:24:32: 94:2f:d2:30:18:cb:e6:40:78:8a:b0:97:d1:38:1c: 18:3e:27:83:d2:0d:8b:4d:0f:5c:63:60:09:67:64: c4:82:c8:de:e3:b3:18:a6:91:68:c0:39:64:61:23: bd:f7:86:51:06:02:fd:2f:35:e7:16:92:4b:f7:a0: a4:35:78:03:3b:be:35:a2:09:b0:11:64:f9:de:24: fd:1f:02:8a:6a:a5:6d:e0:10:84:91:c7:9a:ce:ba: c2:29:db:ec:30:d2:f5:46:e3:20:19:b0:7f:3f:ac: 56:5e:33:48:e5:0f:ff:09:44:09:2e:5f:e9:c1:69: 57:af:c8:60:38:ef:06:db:bb:1e:79:e6:0a:83:11: 9d:9e:7d:d0:da:17:2b:5c:0f:ee:10:e2:fa:62:e2: 69:48:08:af:4f:c8:eb:b0:8f:ae:28:ca:55:81:8f: cd:30:b1:8a:19:3e:1a:4a:d0:9f:31:11:fe:3a:65: 09:c4:cd:cb:ff:b5:ac:7b:ec:3f:e0:54:d4:b7:3b: a3:97:89:92:c5:f4:b1:15:74:5b:c6:a3:aa:07:64: f5:84:a9:db:fa:2c:c2:0c:36:04:21:09:dd:67:cf: 2c:22:08:4b:62:1f:70:30:1c:79:1f:03:d5:1f:cd: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:41:FD:8A:F1:97:CB:A6:09:5F:13:3C:34:C5:F8:E4:D6:53:30:71 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7e:8f:6b:6c:6d:b0:f5:97:1c:17:31:a3:ef:1d:bc:cd:73: 69:9b:29:1e:8c:0f:32:93:24:b0:bd:91:0d:aa:bd:28:a4:c5: f4:79:d3:09:3e:64:ef:85:22:f7:3b:55:97:60:9a:32:4c:18: 47:ea:17:54:83:82:6d:e6:e2:32:dc:16:07:fe:c3:1c:da:14: 70:c3:05:15:e2:fe:1e:f9:77:62:6c:f9:1d:e5:86:ac:44:ec: 57:39:a5:1b:56:c9:e9:e8:27:00:67:22:2c:95:3d:6d:82:56: f2:fc:c4:9b:81:e3:03:a9:17:65:b7:d1:20:a9:bc:3c:5c:fc: 8c:b7:9e:30:b0:ed:41:5b:f6:0b:fd:8b:b9:e2:df:6d:c1:58: 3c:d7:20:cd:81:a7:7b:f5:57:a7:c2:ce:8a:58:18:0a:e9:94: 31:a8:0f:2b:5a:ed:1d:79:be:aa:ce:32:a5:d1:d7:20:43:1a: 79:e5:bb:9c:0e:52:ac:4c:5a:14:5f:45:b6:5f:f7:cb:e3:7d: b1:15:bd:c3:4a:4a:2f:44:50:05:e9:47:05:79:ca:8b:50:be: ec:7e:a0:eb:de:64:19:96:f2:99:ee:f0:f5:9a:eb:4a:ab:94: 07:2a:89:b0:14:45:6f:17:1d:e2:63:60:9d:33:3a:07:f5:f2: 82:5b:8b:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjUwOTA0MTQyNTAxWhcNMjUwOTExMTQyNTAxWjAYMRYwFAYD VQQDEw02OGI5YTEzZC01MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+C/Aazzec9Hk3YOJDKUL9IwGMvmQHiKsJfROBwYPieD0g2LTQ9cY2AJZ2TE gsje47MYppFowDlkYSO994ZRBgL9LzXnFpJL96CkNXgDO741ogmwEWT53iT9HwKK aqVt4BCEkceazrrCKdvsMNL1RuMgGbB/P6xWXjNI5Q//CUQJLl/pwWlXr8hgOO8G 27seeeYKgxGdnn3Q2hcrXA/uEOL6YuJpSAivT8jrsI+uKMpVgY/NMLGKGT4aStCf MRH+OmUJxM3L/7Wse+w/4FTUtzujl4mSxfSxFXRbxqOqB2T1hKnb+izCDDYEIQnd Z88sIghLYh9wMBx5HwPVH800VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRB/Yrx l8umCV8TPDTF+OTWUzBxMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHfo9rbG2w9ZccFzGj7x28zXNpmykejA8ykySwvZENqr0opMX0edMJ PmTvhSL3O1WXYJoyTBhH6hdUg4Jt5uIy3BYH/sMc2hRwwwUV4v4e+XdibPkd5Yas ROxXOaUbVsnp6CcAZyIslT1tglby/MSbgeMDqRdlt9Egqbw8XPyMt54wsO1BW/YL /Yu54t9twVg81yDNgad79Venws6KWBgK6ZQxqA8rWu0deb6qzjKl0dcgQxp55buc DlKsTFoUX0W2X/fL432xFb3DSkovRFAF6UcFecqLUL7sfqDr3mQZlvKZ7vD1mutK q5QHKomwFEVvFx3iY2CdMzoH9fKCW4sp -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:06 2025 by rpki-client