$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: wjRSZMn4AlyERruA09142VGShLINbnZ4oSeGJwt1VSY= Subject key identifier: 4F:92:25:0C:92:98:1E:F7:32:05:78:80:A4:27:69:1D:1E:29:15:1B Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 094E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 0946 Signing time: Thu 18 Sep 2025 20:26:10 +0000 Manifest this update: Thu 18 Sep 2025 20:26:09 +0000 Manifest next update: Thu 25 Sep 2025 20:26:09 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: CTUJgO9DuFgg510EzSJQYFnIO39n0wndFko43udv2D4=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2382 (0x94e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: Sep 18 20:26:09 2025 GMT Not After : Sep 25 20:26:09 2025 GMT Subject: CN=68cc6ae2-45ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:19:5c:41:ea:36:7b:df:58:4a:aa:f6:d3:8f: 23:4e:eb:e8:72:2c:55:3b:72:48:f0:51:12:1a:b6: 10:0a:54:4a:8a:26:3a:c7:32:63:6b:f3:32:01:49: 2f:9d:6d:3d:66:bb:d5:f8:ea:69:8c:8b:4b:0d:12: 72:ca:4a:7d:30:23:3d:02:8c:56:d8:33:af:c7:2c: 1e:f1:af:7f:cd:87:7d:01:5e:4c:d4:ff:ca:5d:8c: e1:1c:29:a1:76:f5:77:8f:e9:3e:0b:10:07:db:d0: aa:92:cb:fc:ee:40:3c:08:c4:e9:fa:0b:f7:9f:3d: c0:b8:9f:42:da:26:67:63:bb:ce:1c:35:5d:a7:73: 24:14:e9:e8:b9:46:46:1c:f5:24:37:4a:be:db:47: 62:d5:5b:05:f5:97:69:a4:f9:b6:a3:e0:35:90:7a: c6:d9:9e:78:21:12:f2:1b:52:a2:a6:d2:5e:74:b2: 70:d2:3c:59:23:73:fc:9c:78:2d:22:82:0c:71:d9: b9:04:b9:92:ae:7f:39:10:47:10:35:39:97:10:a2: ba:80:d9:58:3d:04:01:aa:0c:fd:b2:3c:bc:56:6b: c9:d6:7e:a1:02:1c:b5:d7:bd:eb:1c:f3:81:d4:d4: a4:90:ce:b2:e5:cc:06:51:ea:cd:ff:80:d0:19:f0: 0c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:92:25:0C:92:98:1E:F7:32:05:78:80:A4:27:69:1D:1E:29:15:1B X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8e:7b:87:c6:07:fd:83:9b:32:d2:d7:7f:32:c7:4b:a0:b0: 41:28:ed:e2:d4:49:9a:c2:68:98:f0:f7:b2:e3:fb:c5:00:d0: 23:64:17:ea:5d:6b:08:08:d9:6b:c7:d9:1b:4f:5f:98:f9:7a: 26:a7:c7:04:14:4b:cd:4c:9a:9e:45:eb:31:61:d1:9b:36:e8: 3c:09:81:66:91:5b:bb:1a:da:cc:06:97:47:a9:b4:7a:2a:40: 84:91:99:6b:43:86:72:be:2f:a6:9a:28:30:ab:48:2d:cf:6e: 7c:d3:67:e7:4f:ba:d8:bb:e0:19:af:42:4a:68:fd:a1:83:99: da:27:5b:07:b7:26:0b:3a:55:30:20:cf:f2:d1:2f:6b:98:73: 5a:f0:d1:f2:30:ec:1d:73:b9:02:c2:4a:5a:7e:08:2a:97:c5: 13:da:a8:11:fa:34:a3:69:d0:b2:3b:c4:52:5b:4f:1b:09:0a: 85:cb:f1:46:bb:3b:c5:43:c3:2a:d6:02:ad:b7:ed:60:88:7a: 78:cb:c7:11:16:ca:06:cc:60:86:fb:6e:4c:fa:74:f7:e7:df: f3:be:27:62:af:a4:b8:81:2b:3e:0c:79:7c:ba:87:3f:7d:0a: a5:df:c7:45:5d:af:69:88:81:38:4a:2a:98:ab:08:a2:cd:b4: d6:e0:ce:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjUwOTE4MjAyNjA5WhcNMjUwOTI1MjAyNjA5WjAYMRYwFAYD VQQDEw02OGNjNmFlMi00NWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7hlcQeo2e99YSqr2048jTuvocixVO3JI8FESGrYQClRKiiY6xzJja/MyAUkv nW09ZrvV+OppjItLDRJyykp9MCM9AoxW2DOvxywe8a9/zYd9AV5M1P/KXYzhHCmh dvV3j+k+CxAH29Cqksv87kA8CMTp+gv3nz3AuJ9C2iZnY7vOHDVdp3MkFOnouUZG HPUkN0q+20di1VsF9ZdppPm2o+A1kHrG2Z54IRLyG1KiptJedLJw0jxZI3P8nHgt IoIMcdm5BLmSrn85EEcQNTmXEKK6gNlYPQQBqgz9sjy8VmvJ1n6hAhy1173rHPOB 1NSkkM6y5cwGUerN/4DQGfAMWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+SJQyS mB73MgV4gKQnaR0eKRUbMB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPjnuHxgf9g5sy0td/MsdLoLBBKO3i1EmawmiY8Pey4/vFANAjZBfq XWsICNlrx9kbT1+Y+Xomp8cEFEvNTJqeResxYdGbNug8CYFmkVu7GtrMBpdHqbR6 KkCEkZlrQ4Zyvi+mmigwq0gtz25802fnT7rYu+AZr0JKaP2hg5naJ1sHtyYLOlUw IM/y0S9rmHNa8NHyMOwdc7kCwkpafggql8UT2qgR+jSjadCyO8RSW08bCQqFy/FG uzvFQ8Mq1gKtt+1giHp4y8cRFsoGzGCG+25M+nT359/zvidir6S4gSs+DHl8uoc/ fQql38dFXa9piIE4SiqYqwiizbTW4M73 -----END CERTIFICATE-----Generated at Fri Sep 19 00:58:08 2025 by rpki-client