$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft File: T_VN6rrUlFWSUQEqpawiKVDLJh4.mft (raw, json) Hash identifier: czWgzVel9A0AYIWHbjQ5kGf1UKintA9/eXvKHGf9cD4= Subject key identifier: 56:A9:EC:64:30:E2:B5:AB:D9:F1:07:AA:56:69:0A:C1:20:CE:9F:F4 Authority key identifier: 4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E Certificate issuer: /CN=A91B38F5/serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft Manifest number: 5B Signing time: Sun 07 Sep 2025 07:40:21 +0000 Manifest this update: Sun 07 Sep 2025 07:40:21 +0000 Manifest next update: Sun 14 Sep 2025 07:40:21 +0000 Files and hashes: 1: T_VN6rrUlFWSUQEqpawiKVDLJh4.crl (hash: TazIbm5DAOUD6zWX6Pqzx4rwbq/mTwLQ5N0t+jl/KCg=) 2: B66603C6025C11F0BDF41912C4F9AE02.roa (hash: H2+Ddkh87XoYI/8vzCTZnxyRNxL5o9son0tiMIrsX2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=4FF54DEABAD494559251012AA5AC222950CB261E Validity Not Before: Sep 7 07:40:21 2025 GMT Not After : Sep 14 07:40:21 2025 GMT Subject: CN=68bd36e5-1cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:26:ae:fc:e3:f3:a0:a7:89:07:20:64:50: ac:da:98:25:af:08:2e:a5:a5:24:11:5f:cd:ba:5e: 55:7c:50:98:a1:65:4f:86:07:1a:3c:a0:6c:98:31: 6a:1c:3b:6a:89:2b:09:8f:93:3b:14:f2:15:35:39: fc:95:e7:cd:b1:20:a1:e4:82:42:55:6e:4a:ee:4c: 4b:2c:9a:c6:a4:8c:75:86:f9:8e:54:bb:96:39:b9: f7:cf:cb:45:4f:ec:f8:e6:70:0e:a1:7b:40:b8:25: d6:69:06:af:13:87:8e:d6:a8:69:08:ec:8a:ee:4f: 59:33:7d:7d:0c:09:b8:af:83:3b:58:bd:7e:7d:e7: bc:da:22:96:b5:bf:66:a5:c0:91:07:30:e1:45:98: a6:71:aa:bd:0d:90:28:21:39:d8:6d:a2:79:eb:15: e6:43:98:4c:0d:8c:f2:a4:5c:a2:3b:da:19:4d:58: b1:e5:52:fb:2f:6b:4f:1c:55:f6:f4:80:c5:93:07: 69:9e:69:d5:5a:a7:59:68:1b:a2:40:eb:b4:49:0a: 71:98:36:84:4a:24:be:24:62:49:c3:af:4f:79:47: df:9e:aa:13:93:b9:9c:63:dd:86:43:aa:cc:8c:58: 29:66:57:f6:cc:07:a1:62:53:41:2f:94:f4:34:b8: 86:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A9:EC:64:30:E2:B5:AB:D9:F1:07:AA:56:69:0A:C1:20:CE:9F:F4 X509v3 Authority Key Identifier: keyid:4F:F5:4D:EA:BA:D4:94:55:92:51:01:2A:A5:AC:22:29:50:CB:26:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_VN6rrUlFWSUQEqpawiKVDLJh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/F0263FF0025B11F09ACFD910C4F9AE02/T_VN6rrUlFWSUQEqpawiKVDLJh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:f7:61:37:fd:1d:0f:ad:96:da:6c:98:bd:97:82:33:1f: 81:0f:c9:3a:eb:42:71:91:90:1e:6b:c4:7f:b9:83:02:58:18: 5c:9c:60:3d:08:82:ea:c4:d1:ee:0f:31:61:8a:3a:1f:51:41: e9:85:ad:ee:c1:c5:9a:4f:9e:88:00:63:77:e0:1c:93:ca:db: 67:b7:e7:d7:6d:b5:87:67:44:96:2c:ce:63:68:e8:92:79:dc: c2:37:c8:a7:02:eb:5d:88:ad:b6:c3:92:eb:76:b9:f7:70:b8: 04:da:6d:10:c8:39:ce:0c:77:6e:c0:5e:cb:b2:c3:ca:88:27: 10:2b:28:16:25:97:dd:a4:e3:a8:94:56:9a:35:9c:4c:f8:0b: 18:92:a4:c8:1b:bc:94:f7:30:1d:aa:f8:5e:a7:66:8c:6a:c1: 38:f4:6e:9e:49:97:9e:66:1d:49:5c:d0:db:10:aa:6f:a4:09: 94:78:78:b0:81:e2:5c:17:e3:58:45:a1:1d:e7:40:21:c4:c6: e5:2d:5b:94:0f:5c:f5:3e:40:b6:66:04:1c:41:76:9a:3a:b5: 64:de:8c:44:a5:d9:18:fe:2d:6c:a6:00:0f:95:0a:b0:39:bf: 97:db:0e:d2:9e:80:94:30:85:86:06:6c:76:c9:88:a8:2f:e4: 09:1e:0b:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNEZGNTRERUFCQUQ0OTQ1NTkyNTEwMTJBQTVBQzIyMjk1 MENCMjYxRTAeFw0yNTA5MDcwNzQwMjFaFw0yNTA5MTQwNzQwMjFaMBgxFjAUBgNV BAMTDTY4YmQzNmU1LTFjYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC2Cau/OPzoKeJByBkUKzamCWvCC6lpSQRX826XlV8UJihZU+GBxo8oGyYMWoc O2qJKwmPkzsU8hU1OfyV582xIKHkgkJVbkruTEssmsakjHWG+Y5Uu5Y5uffPy0VP 7PjmcA6he0C4JdZpBq8Th47WqGkI7IruT1kzfX0MCbivgztYvX5957zaIpa1v2al wJEHMOFFmKZxqr0NkCghOdhtonnrFeZDmEwNjPKkXKI72hlNWLHlUvsva08cVfb0 gMWTB2meadVap1loG6JA67RJCnGYNoRKJL4kYknDr095R9+eqhOTuZxj3YZDqsyM WClmV/bMB6FiU0EvlPQ0uIbjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVqnsZDDi tavZ8QeqVmkKwSDOn/QwHwYDVR0jBBgwFoAUT/VN6rrUlFWSUQEqpawiKVDLJh4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0YwMjYzRkYwMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZXU1VRRXFwYXdpS1ZETEpo NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVF9WTjZyclVsRldTVVFFcXBhd2lLVkRMSmg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0YwMjYzRkYwMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL1RfVk42cnJVbEZX U1VRRXFwYXdpS1ZETEpoNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJi892E3/R0PrZbabJi9l4IzH4EPyTrrQnGRkB5rxH+5gwJYGFycYD0I gurE0e4PMWGKOh9RQemFre7BxZpPnogAY3fgHJPK22e359dttYdnRJYszmNo6JJ5 3MI3yKcC612IrbbDkut2ufdwuATabRDIOc4Md27AXsuyw8qIJxArKBYll92k46iU Vpo1nEz4CxiSpMgbvJT3MB2q+F6nZoxqwTj0bp5Jl55mHUlc0NsQqm+kCZR4eLCB 4lwX41hFoR3nQCHExuUtW5QPXPU+QLZmBBxBdpo6tWTejESl2Rj+LWymAA+VCrA5 v5fbDtKegJQwhYYGbHbJiKgv5AkeC1E= -----END CERTIFICATE-----Generated at Mon Sep 8 14:34:54 2025 by rpki-client