$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: MZPyQtZBw6i1PEgY3NOlgpU9DR5gzZ5nk9Rq6jTcFU4= Subject key identifier: 4B:4E:8F:2A:D3:7B:32:84:DF:5A:8A:0A:55:CA:84:D7:6E:88:BB:35 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 93 Signing time: Fri 05 Sep 2025 06:59:55 +0000 Manifest this update: Fri 05 Sep 2025 06:59:54 +0000 Manifest next update: Fri 12 Sep 2025 06:59:54 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: oQwc6cfDtK0dmrdut8fN+cMCen5NJ3Zuhnnwz89owKY=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Sep 5 06:59:54 2025 GMT Not After : Sep 12 06:59:54 2025 GMT Subject: CN=68ba8a6b-5ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:21:29:e3:fb:76:08:a2:19:95:4e:50:f6: 37:a8:21:0f:df:60:77:67:d4:95:43:e8:1f:93:76: 59:14:32:77:36:ef:f9:b5:86:4c:e9:e0:72:5a:e5: 5a:d0:da:86:35:7a:d8:42:2c:9e:4d:f2:b7:0c:71: b1:2b:59:2c:d5:fa:88:00:00:e8:49:94:5c:2a:6a: 74:3f:7d:67:b3:c4:d3:12:18:21:91:eb:b6:cc:e9: 22:36:69:a4:70:92:88:7f:10:ec:aa:74:15:22:bf: 5d:47:c5:0c:6b:b9:d7:93:76:6f:be:41:e5:7e:e6: 21:63:a2:2c:bb:d5:23:33:e8:e6:23:6d:e0:ad:43: 8f:5e:b3:bd:e1:89:8b:91:b0:ea:9e:5e:a6:e3:cc: 43:41:4b:68:a6:86:2d:a4:74:0c:59:84:9d:05:36: 6e:c0:90:95:fe:ce:f5:f3:37:3c:e1:d7:a5:19:20: 26:8c:ec:2d:ed:4a:07:ee:77:09:e3:10:75:52:7e: da:fb:e9:e8:dc:f8:3f:af:e0:36:11:6e:b9:2e:4c: ea:21:ab:8b:dc:16:4e:45:1e:0b:55:a5:b4:86:bd: 28:53:2b:c3:e5:73:96:34:03:99:24:35:0a:03:ec: ae:25:d8:8a:50:35:0b:ac:7c:31:e3:92:c7:0e:77: 29:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:8F:2A:D3:7B:32:84:DF:5A:8A:0A:55:CA:84:D7:6E:88:BB:35 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bd:9f:ec:31:49:85:91:88:eb:c2:b3:8b:8c:a4:12:98:6f: 0a:32:ef:f2:f9:55:d3:24:e4:3a:31:23:05:2a:46:14:1b:55: 97:f7:2a:fd:b2:c5:94:d4:b9:46:81:98:f1:ad:8e:eb:49:67: 5e:d8:c0:9a:91:18:9b:83:21:ec:5a:7d:6e:12:93:0a:60:c9: be:d3:a4:b1:b1:6d:a9:2d:e1:13:c1:a2:23:fd:24:3d:23:ee: 32:ea:87:f7:42:2b:b8:10:85:33:25:9a:97:ea:24:80:08:a9: e9:c8:82:ca:48:fa:34:5c:03:51:07:d4:fa:99:d0:05:ac:5e: 7a:96:31:32:64:71:dc:82:74:3a:c3:62:06:89:e6:71:fe:d3: b7:d5:66:7f:b5:36:12:2e:5f:b5:0f:f0:45:3a:c7:e9:cb:4f: 22:aa:eb:87:fe:61:57:5c:b0:1d:4c:84:d4:9c:8b:e0:73:ad: d2:59:2c:b7:7f:ba:f3:7a:9d:b1:e5:1c:29:90:1c:e7:69:8b: eb:6e:74:f3:e9:6d:64:da:db:5b:3a:0a:6a:19:1f:87:d6:56: 75:ef:03:ca:29:15:4a:fc:45:5f:02:c8:6c:03:9d:4e:77:2d: b1:a2:83:e8:22:5d:17:26:66:8b:da:c6:99:45:7b:f6:c2:3c: d7:32:db:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEU0QzU4OUI4OTNEMjcyODlDRjg0NkRGMDVBREZCNTk2 MDM2NDI4RkQwHhcNMjUwOTA1MDY1OTU0WhcNMjUwOTEyMDY1OTU0WjAYMRYwFAYD VQQDEw02OGJhOGE2Yi01YWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvighKeP7dgiiGZVOUPY3qCEP32B3Z9SVQ+gfk3ZZFDJ3Nu/5tYZM6eByWuVa 0NqGNXrYQiyeTfK3DHGxK1ks1fqIAADoSZRcKmp0P31ns8TTEhghkeu2zOkiNmmk cJKIfxDsqnQVIr9dR8UMa7nXk3ZvvkHlfuYhY6Isu9UjM+jmI23grUOPXrO94YmL kbDqnl6m48xDQUtopoYtpHQMWYSdBTZuwJCV/s718zc84delGSAmjOwt7UoH7ncJ 4xB1Un7a++no3Pg/r+A2EW65LkzqIauL3BZORR4LVaW0hr0oUyvD5XOWNAOZJDUK A+yuJdiKUDULrHwx45LHDncptwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtOjyrT ezKE31qKClXKhNduiLs1MB8GA1UdIwQYMBaAFOTFibiT0nKJz4Rt8FrftZYDZCj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FMTJEMTA1MkIx M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2NvblBoRzN3V3QtMWxnTmtL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2Nv blBoRzN3V3QtMWxnTmtLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYvZ/sMUmFkYjrwrOLjKQSmG8KMu/y+VXTJOQ6MSMFKkYUG1WX9yr9 ssWU1LlGgZjxrY7rSWde2MCakRibgyHsWn1uEpMKYMm+06SxsW2pLeETwaIj/SQ9 I+4y6of3Qiu4EIUzJZqX6iSACKnpyILKSPo0XANRB9T6mdAFrF56ljEyZHHcgnQ6 w2IGieZx/tO31WZ/tTYSLl+1D/BFOsfpy08iquuH/mFXXLAdTITUnIvgc63SWSy3 f7rzep2x5RwpkBznaYvrbnTz6W1k2ttbOgpqGR+H1lZ17wPKKRVK/EVfAshsA51O dy2xooPoIl0XJmaL2saZRXv2wjzXMtse -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:05 2025 by rpki-client