$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json) Hash identifier: WK5JbyRxhiPHJ80M3LoLekKeIjlvsxE5B5Eri+ehSVc= Subject key identifier: 0E:77:B9:5E:FE:64:C1:A7:7D:B0:E7:9A:12:AD:74:3C:E2:CA:4B:BB Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft Manifest number: 0625 Signing time: Wed 20 Aug 2025 22:51:37 +0000 Manifest this update: Wed 20 Aug 2025 22:51:37 +0000 Manifest next update: Wed 27 Aug 2025 22:51:37 +0000 Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: JMaRSbbFBxyJuKVfqroQaL8DLTxBhlkQuNpmjAceE+Y=) 2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: Njg0pVJ4I7URnxza7bv42AK9X5Mt3J26B9EOz9eASoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: Aug 20 22:51:37 2025 GMT Not After : Aug 27 22:51:37 2025 GMT Subject: CN=68a65179-ac12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b4:20:5e:cf:4c:02:f8:f7:29:8c:f9:43:e0: 8f:36:9d:5b:76:ba:41:6b:fb:1f:d1:ae:98:f3:55: 94:c9:73:ce:e7:e7:8d:69:b1:df:20:2d:68:fa:49: 99:33:f8:f9:46:ad:d6:ff:52:26:bf:e9:a8:5f:03: fc:bf:d8:e6:53:bc:a6:c3:64:7a:87:ec:e1:c9:52: 57:e6:33:e7:8f:81:e9:36:18:0e:3c:8a:9c:c3:99: 06:d0:4d:a9:19:1c:2f:44:47:20:87:d3:e7:d6:44: be:38:88:75:ce:51:6c:6d:60:62:0a:e8:60:9b:85: c7:5d:65:fa:ff:81:9c:36:fd:1c:dc:4c:73:0d:49: 6f:b4:e5:1e:32:1c:16:e2:80:3f:f4:9a:95:10:88: f8:a0:30:32:5c:91:6a:6c:6e:1d:6a:29:2c:d2:95: 12:8f:98:c0:f9:59:8a:ed:ec:35:b3:bf:4b:79:1d: 51:13:ca:ff:48:b3:8d:ce:c6:08:d4:ec:e7:5b:9b: 44:ca:ed:78:50:4c:57:4d:8d:b6:51:b3:b7:ae:aa: 04:bd:19:23:b3:aa:4b:15:ca:bb:74:0b:7a:2d:9d: e5:a0:c9:f1:8b:2c:f6:9a:97:bc:9e:07:16:fb:65: 4b:c1:2d:9e:e8:60:84:32:68:fc:6e:0e:44:09:31: 03:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:77:B9:5E:FE:64:C1:A7:7D:B0:E7:9A:12:AD:74:3C:E2:CA:4B:BB X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:56:aa:19:72:28:f1:41:b8:35:8d:d2:2d:b5:52:59:93:70: e0:b6:a8:f8:b1:b0:32:2c:5f:76:7a:9b:3d:06:3d:40:1e:0f: d6:7a:7c:40:3c:73:fb:82:55:bf:70:c7:63:4d:d7:59:05:bb: c9:df:92:70:b8:4d:02:a0:37:e7:18:d8:a4:b6:c3:57:ff:9d: c3:47:56:53:35:56:df:e0:db:23:12:95:9b:b1:e8:2d:7f:5c: 60:60:b8:28:98:62:92:45:79:03:51:54:f9:91:91:4e:fa:10: a2:b9:94:04:92:e4:12:92:76:04:ec:55:d6:1c:0a:76:a6:bf: f2:f3:ea:8c:8d:fa:ea:ed:fe:94:c1:0c:6c:a8:56:eb:75:24: 79:35:c6:2a:88:4d:7b:54:c5:66:c6:94:49:06:8b:b7:8c:18: 42:ce:df:8c:78:1c:3d:d0:b2:79:1a:b4:6d:53:c0:de:e3:b3: 74:4c:b2:c9:47:9a:2f:11:8e:7a:b8:db:75:66:34:f8:f5:87: 0d:22:e9:43:5b:d2:18:b8:4d:6a:16:6e:47:fb:63:e4:9d:f4: 10:d5:08:0a:8d:3a:35:b4:ee:ee:d8:bb:24:89:84:9e:86:4c: f6:8b:26:ab:bd:96:83:5b:dd:ce:b3:ec:3e:a8:e0:65:38:9d: af:b3:e1:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjUwODIwMjI1MTM3WhcNMjUwODI3MjI1MTM3WjAYMRYwFAYD VQQDEw02OGE2NTE3OS1hYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLQgXs9MAvj3KYz5Q+CPNp1bdrpBa/sf0a6Y81WUyXPO5+eNabHfIC1o+kmZ M/j5Rq3W/1Imv+moXwP8v9jmU7ymw2R6h+zhyVJX5jPnj4HpNhgOPIqcw5kG0E2p GRwvREcgh9Pn1kS+OIh1zlFsbWBiCuhgm4XHXWX6/4GcNv0c3ExzDUlvtOUeMhwW 4oA/9JqVEIj4oDAyXJFqbG4daiks0pUSj5jA+VmK7ew1s79LeR1RE8r/SLONzsYI 1OznW5tEyu14UExXTY22UbO3rqoEvRkjs6pLFcq7dAt6LZ3loMnxiyz2mpe8ngcW +2VLwS2e6GCEMmj8bg5ECTEDzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA53uV7+ ZMGnfbDnmhKtdDziyku7MB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeVqoZcijxQbg1jdIttVJZk3Dgtqj4sbAyLF92eps9Bj1AHg/WenxA PHP7glW/cMdjTddZBbvJ35JwuE0CoDfnGNiktsNX/53DR1ZTNVbf4NsjEpWbsegt f1xgYLgomGKSRXkDUVT5kZFO+hCiuZQEkuQSknYE7FXWHAp2pr/y8+qMjfrq7f6U wQxsqFbrdSR5NcYqiE17VMVmxpRJBou3jBhCzt+MeBw90LJ5GrRtU8De47N0TLLJ R5ovEY56uNt1ZjT49YcNIulDW9IYuE1qFm5H+2PknfQQ1QgKjTo1tO7u2LskiYSe hkz2iyarvZaDW93Os+w+qOBlOJ2vs+HQ -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:39 2025 by rpki-client