$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft File: N5uRyTDgoq-LgirZqVm6313dYJ8.mft (raw, json) Hash identifier: rd5cpRpQpdjh7nBlojjDwL+1G6UbXR5H3BPoHvwSo3s= Subject key identifier: 1D:DD:2E:DC:93:BA:8C:03:EB:E3:45:6B:0C:E5:EA:18:52:49:01:4D Authority key identifier: 37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F Certificate issuer: /CN=A91AD92A/serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft Manifest number: 016D Signing time: Fri 05 Sep 2025 04:11:17 +0000 Manifest this update: Fri 05 Sep 2025 04:11:17 +0000 Manifest next update: Fri 12 Sep 2025 04:11:17 +0000 Files and hashes: 1: N5uRyTDgoq-LgirZqVm6313dYJ8.crl (hash: zvumKVbPrwGGJMRD/JdhfROxiHJ9ML9UqKsF8e4RrgU=) 2: 796CD35A5B5511EE8E4D2A39C4F9AE02.roa (hash: 5Y7qsAaq9WIcozANz4ZXMikS+vaHk2RGINX/W4ZA3l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD92A, serialNumber=379B91C930E0A2AF8B822AD9A959BADF5DDD609F Validity Not Before: Sep 5 04:11:17 2025 GMT Not After : Sep 12 04:11:17 2025 GMT Subject: CN=68ba62e5-4c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:4a:aa:e7:bb:80:06:a7:62:05:ef:69:bd: de:fc:d2:d2:8a:38:b5:93:0b:79:98:bf:f8:bc:bd: 56:21:a9:72:89:ba:48:13:7f:bb:7c:70:fd:64:58: d3:66:21:49:a2:c8:f2:69:80:58:18:86:0a:47:17: 39:98:c8:75:7e:02:3c:e9:82:3f:cc:b2:c4:3c:fc: 26:57:88:ca:c5:e4:6a:33:ca:e9:72:fd:75:33:22: ae:d4:6e:a1:51:95:ef:ca:85:05:0a:76:36:62:36: 9b:6b:06:85:ea:ae:2b:88:92:17:e3:91:a9:fd:2a: 61:ac:0c:b0:e5:4a:c4:f9:80:d5:a5:a9:db:a8:ba: 2e:fc:09:a4:e1:3c:24:14:71:ab:ee:c5:7f:86:ad: 08:76:bb:58:8f:25:15:45:4e:bd:65:c0:19:1f:18: a5:6d:7b:e4:24:6b:88:1d:52:68:ec:80:25:d1:a9: 96:f1:b4:63:50:40:dc:b3:a9:a0:54:9c:46:f3:b9: bf:3f:3f:c7:40:9a:52:68:60:30:b6:3b:a1:0e:26: 91:9c:98:99:44:32:8c:28:7c:58:35:f4:e2:d6:5c: 8f:3d:7a:0e:1c:fe:51:29:81:70:46:fb:dd:f1:cb: 88:39:f8:98:6f:79:fe:58:06:fc:1c:4c:dd:9c:85: d3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DD:2E:DC:93:BA:8C:03:EB:E3:45:6B:0C:E5:EA:18:52:49:01:4D X509v3 Authority Key Identifier: keyid:37:9B:91:C9:30:E0:A2:AF:8B:82:2A:D9:A9:59:BA:DF:5D:DD:60:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5uRyTDgoq-LgirZqVm6313dYJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD92A/3CE577DA5B5411EE8086F432C4F9AE02/N5uRyTDgoq-LgirZqVm6313dYJ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d9:90:54:a5:3e:af:88:f1:94:99:78:2e:f1:bd:92:4f:3d: 38:90:8b:9c:79:de:80:b5:e7:db:8f:fa:e5:66:aa:0c:44:f0: b2:d6:bc:80:37:02:af:0a:c8:d0:bc:49:7c:29:d1:dd:c2:55: b4:f4:c9:79:4a:f8:02:b4:d6:dd:b1:59:3a:cd:1f:cb:18:5e: 10:c1:61:34:0e:95:5d:a0:ad:3e:25:2c:1f:d0:49:86:2c:c0: 2c:9b:29:bb:75:c1:0e:59:d6:de:3c:42:59:ad:5c:c2:16:2f: bd:bd:1d:de:e8:33:b6:8a:d9:eb:ff:fd:56:56:25:e2:24:5d: 1d:7f:37:33:2b:ff:ee:01:da:9f:cf:62:de:cc:0b:76:82:53: 89:35:89:1b:2b:c0:32:9e:04:98:01:eb:3b:2a:50:0e:cc:6a: 13:f6:cf:28:ab:35:52:95:f4:06:cf:36:65:15:3a:b3:ef:22: 12:aa:8d:95:21:93:7c:fb:df:7f:66:f0:32:20:f6:0a:a1:4e: 38:2b:67:2a:4c:3b:71:ea:c5:30:a7:0c:5a:ab:77:59:41:bd: 48:e7:09:ed:6d:ef:09:6f:ab:c2:3a:ad:53:6d:75:8f:6f:af: 93:d3:1b:26:3e:89:04:b1:ad:35:a6:31:10:2c:cd:1a:7c:04: 6e:0d:a9:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5MkExMTAvBgNVBAUTKDM3OUI5MUM5MzBFMEEyQUY4QjgyMkFEOUE5NTlCQURG NURERDYwOUYwHhcNMjUwOTA1MDQxMTE3WhcNMjUwOTEyMDQxMTE3WjAYMRYwFAYD VQQDEw02OGJhNjJlNS00Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyutKque7gAanYgXvab3e/NLSiji1kwt5mL/4vL1WIalyibpIE3+7fHD9ZFjT ZiFJosjyaYBYGIYKRxc5mMh1fgI86YI/zLLEPPwmV4jKxeRqM8rpcv11MyKu1G6h UZXvyoUFCnY2YjabawaF6q4riJIX45Gp/SphrAyw5UrE+YDVpanbqLou/Amk4Twk FHGr7sV/hq0IdrtYjyUVRU69ZcAZHxilbXvkJGuIHVJo7IAl0amW8bRjUEDcs6mg VJxG87m/Pz/HQJpSaGAwtjuhDiaRnJiZRDKMKHxYNfTi1lyPPXoOHP5RKYFwRvvd 8cuIOfiYb3n+WAb8HEzdnIXTHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3dLtyT uowD6+NFawzl6hhSSQFNMB8GA1UdIwQYMBaAFDebkckw4KKvi4Iq2alZut9d3WCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDkyQS8zQ0U1NzdEQTVC NTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29xLUxnaXJacVZtNjMxM2RZ SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041dVJ5VERnb3EtTGdpclpxVm02MzEzZFlKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDkyQS8zQ0U1NzdEQTVCNTQxMUVFODA4NkY0MzJDNEY5QUUwMi9ONXVSeVREZ29x LUxnaXJacVZtNjMxM2RZSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk2ZBUpT6viPGUmXgu8b2STz04kIuced6Atefbj/rlZqoMRPCy1ryA NwKvCsjQvEl8KdHdwlW09Ml5SvgCtNbdsVk6zR/LGF4QwWE0DpVdoK0+JSwf0EmG LMAsmym7dcEOWdbePEJZrVzCFi+9vR3e6DO2itnr//1WViXiJF0dfzczK//uAdqf z2LezAt2glOJNYkbK8AyngSYAes7KlAOzGoT9s8oqzVSlfQGzzZlFTqz7yISqo2V IZN8+99/ZvAyIPYKoU44K2cqTDtx6sUwpwxaq3dZQb1I5wntbe8Jb6vCOq1TbXWP b6+T0xsmPokEsa01pjEQLM0afARuDakR -----END CERTIFICATE-----Generated at Fri Sep 5 11:30:19 2025 by rpki-client