$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: EMMCLLcXSZIBVUpqc+qfOpHociNgppejJ0hOELM0gUo= Subject key identifier: 2D:64:A7:55:54:BC:3A:75:8A:E5:D4:42:A6:B5:64:03:DF:7E:BA:81 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 05A7 Signing time: Mon 08 Sep 2025 23:14:52 +0000 Manifest this update: Mon 08 Sep 2025 23:14:51 +0000 Manifest next update: Mon 15 Sep 2025 23:14:51 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: OJjCD2lZKpKxXIn/3CIAdopvf/tQKLQR/7+vjulCnTI=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1461 (0x5b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Sep 8 23:14:51 2025 GMT Not After : Sep 15 23:14:51 2025 GMT Subject: CN=68bf636b-d405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:ec:9e:77:9b:a4:13:9a:2b:88:4a:00:8e: fa:6e:a9:a2:9a:2e:df:3f:f2:68:f3:ae:2d:0c:73: ee:36:ed:b1:c8:53:f2:89:3d:b2:40:ed:2c:5c:c6: ed:af:be:bd:71:7d:58:2f:fa:90:69:b4:43:a6:29: 51:0f:f0:a8:7d:3e:ca:70:f2:61:a3:8b:99:01:35: 09:95:b8:84:7b:ee:11:65:8d:c4:f5:25:12:5f:87: e3:2c:4f:c0:59:66:66:96:7b:1f:8a:02:ee:a5:34: 26:0c:a8:a1:68:4a:24:31:67:7f:55:4c:c7:bb:9e: 1b:5b:5e:cb:4a:d1:d1:e0:27:31:f2:0d:ee:f0:3c: 71:ec:13:82:fa:2e:66:35:9b:b3:cc:4f:64:b4:a7: b0:20:5d:03:a8:d6:72:4a:3d:b0:35:7f:74:87:a4: 3f:30:5f:e0:c9:66:c4:1b:f5:a2:cc:24:19:c3:30: 05:c9:60:30:db:49:12:26:a3:2b:5a:d6:56:44:1c: 30:45:af:ce:be:08:fc:d8:58:2f:4a:b2:e3:89:fc: 97:ad:d0:a9:1c:7b:b6:96:f8:b1:c3:8b:ba:e6:dd: d4:40:42:0b:b5:67:5b:7f:da:83:58:cb:6f:cd:25: 66:2e:90:52:72:7e:7f:f3:0d:d0:97:f7:2a:79:83: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:A7:55:54:BC:3A:75:8A:E5:D4:42:A6:B5:64:03:DF:7E:BA:81 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:61:59:d6:ca:e1:98:d4:27:71:57:83:10:34:17:0d:86:0c: ac:36:c0:8c:b3:27:c8:51:35:35:d1:96:44:47:c8:a2:c4:f8: 8a:a6:65:93:87:89:4e:2d:5c:06:b6:9c:21:6d:ca:c2:6c:34: 88:a2:33:73:53:30:09:61:4b:44:4e:01:79:97:b7:ad:c8:92: 8d:c6:f1:31:ca:40:22:39:ca:fe:25:26:ad:7d:92:e8:22:69: 41:6b:f8:32:e1:5b:3b:2f:b1:18:7b:c2:05:46:85:4c:ab:2a: 56:4d:63:1b:59:cf:07:3a:ed:c5:0a:ec:dc:23:33:38:55:da: a8:2e:63:5b:8f:bc:ee:b7:c2:10:ca:5f:75:f1:2d:ba:85:50: 01:e5:ac:a2:67:82:73:8d:93:aa:dc:07:8e:c9:ff:e0:17:14: 37:5c:43:4e:37:96:c8:2e:e5:78:2a:d8:fb:d0:f4:fe:39:a4: cb:be:36:f8:4a:5f:91:7f:cb:56:13:dd:4f:b2:07:5a:fd:c3: b7:f0:18:8b:bf:3b:3a:48:ca:8d:ef:94:3a:1e:cf:8d:53:d9: bd:e9:e4:93:a2:f2:f4:54:ff:2a:a4:e3:07:92:0d:16:ba:57: ed:01:6a:50:df:27:2d:b2:f3:28:56:ea:fd:17:0a:93:8d:2e: 96:47:14:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwOTA4MjMxNDUxWhcNMjUwOTE1MjMxNDUxWjAYMRYwFAYD VQQDEw02OGJmNjM2Yi1kNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwC3snnebpBOaK4hKAI76bqmimi7fP/Jo864tDHPuNu2xyFPyiT2yQO0sXMbt r769cX1YL/qQabRDpilRD/CofT7KcPJho4uZATUJlbiEe+4RZY3E9SUSX4fjLE/A WWZmlnsfigLupTQmDKihaEokMWd/VUzHu54bW17LStHR4Ccx8g3u8Dxx7BOC+i5m NZuzzE9ktKewIF0DqNZySj2wNX90h6Q/MF/gyWbEG/WizCQZwzAFyWAw20kSJqMr WtZWRBwwRa/Ovgj82FgvSrLjifyXrdCpHHu2lvixw4u65t3UQEILtWdbf9qDWMtv zSVmLpBScn5/8w3Ql/cqeYPllwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1kp1VU vDp1iuXUQqa1ZAPffrqBMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7YVnWyuGY1CdxV4MQNBcNhgysNsCMsyfIUTU10ZZER8iixPiKpmWT h4lOLVwGtpwhbcrCbDSIojNzUzAJYUtETgF5l7etyJKNxvExykAiOcr+JSatfZLo ImlBa/gy4Vs7L7EYe8IFRoVMqypWTWMbWc8HOu3FCuzcIzM4VdqoLmNbj7zut8IQ yl918S26hVAB5ayiZ4JzjZOq3AeOyf/gFxQ3XENON5bILuV4Ktj70PT+OaTLvjb4 Sl+Rf8tWE91Psgda/cO38BiLvzs6SMqN75Q6Hs+NU9m96eSTovL0VP8qpOMHkg0W ulftAWpQ3yctsvMoVur9FwqTjS6WRxQ8 -----END CERTIFICATE-----Generated at Tue Sep 9 19:37:03 2025 by rpki-client