$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: h4sBvfRPrErrLu/VOKj5z12YrKBn9WetSIxE11BcYcE= Subject key identifier: B3:DA:67:FA:10:0F:FF:F6:59:3D:6E:F3:30:62:CA:C3:48:CB:22:12 Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 04DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 04DA Signing time: Fri 19 Sep 2025 00:08:30 +0000 Manifest this update: Fri 19 Sep 2025 00:08:30 +0000 Manifest next update: Fri 26 Sep 2025 00:08:30 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: xJgdJCckm8QOG+l6BcneJyeLSYHXu55XyFs/CM7xydE=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1247 (0x4df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Sep 19 00:08:30 2025 GMT Not After : Sep 26 00:08:30 2025 GMT Subject: CN=68cc9efe-3061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:d2:b6:89:2a:c2:7e:90:09:2f:2e:17:dd: 2c:8d:ec:40:b3:e3:8a:8d:81:ce:62:d0:3a:a3:c8: f0:2b:7e:f8:2e:bc:1c:6c:78:ba:24:c0:c5:94:57: ba:04:90:ec:6e:16:5b:83:0c:80:9f:7c:4d:85:08: 87:fa:3b:8e:2b:84:e0:d2:0a:54:f9:23:d8:5a:6a: ca:a4:04:35:a8:d3:e7:7d:06:51:19:4d:c8:98:73: e8:fa:e8:38:8a:87:4a:db:8b:a8:31:cb:ce:a9:80: 4c:dd:99:f6:a5:b6:02:01:9c:41:56:af:4a:bc:4d: 7b:94:1c:c5:5c:28:38:75:92:cf:41:e2:00:33:40: ab:b5:54:71:f3:cc:ad:69:d4:33:d8:99:73:33:38: 32:b1:7c:c5:64:17:73:6d:5c:76:02:81:17:4e:b5: 46:e8:48:b1:6f:3d:c8:33:06:71:e1:04:e9:40:0b: 6e:8a:dd:05:33:1c:a9:9a:e1:af:c2:70:e7:b5:e0: c4:13:be:44:f5:d5:ff:10:02:69:e5:9f:93:b3:14: f6:b7:e6:e1:10:ad:07:fc:01:c9:1e:ba:ca:87:58: 19:85:06:9c:c0:94:43:e6:6d:47:55:38:f3:fa:5d: 15:a4:69:c8:4e:67:ad:de:94:be:ba:94:20:6f:f3: 01:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:67:FA:10:0F:FF:F6:59:3D:6E:F3:30:62:CA:C3:48:CB:22:12 X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:3a:f6:6f:60:2e:c9:5e:44:fe:3b:46:59:5f:8a:a9:d8:87: 2d:c8:18:b2:3c:ca:90:4b:db:d9:be:d7:2f:f1:8d:bf:5a:6f: d6:0e:55:94:ed:b7:ad:a3:56:74:72:d4:11:02:2a:40:8d:1f: e0:68:c3:09:06:7c:38:b1:b3:8b:44:17:08:02:97:9d:e1:c5: 3f:69:8a:4f:84:a5:7d:90:b9:86:82:c8:84:06:ba:0a:2f:75: fe:a0:f9:ca:f9:42:a5:8c:3f:56:98:ef:75:6d:e2:35:2e:77: c9:a5:30:84:fd:44:d4:c1:70:d1:34:17:c7:4f:8b:68:13:cd: 41:85:f4:3d:f9:61:47:f7:08:47:4f:fd:d3:a4:a8:dd:40:10: 5e:ae:d0:4d:53:45:72:37:5c:e4:f3:8d:cb:04:52:02:e5:86: f7:e3:ec:83:bc:5d:95:78:9d:6e:be:9a:93:4c:65:95:d8:c7: 2f:f4:09:8c:b6:f6:f4:12:cb:9e:5d:7b:e0:bc:3b:7e:5b:65: 34:0a:dc:f9:71:83:79:66:7b:37:58:60:31:5f:fc:ba:a8:fa: 59:96:fc:f6:6c:6d:98:3b:5c:dd:72:fc:58:8b:16:91:5f:90: b4:ad:b5:89:b8:cb:46:02:0e:57:db:61:a8:f9:5c:ce:3a:91: ae:c6:6e:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjUwOTE5MDAwODMwWhcNMjUwOTI2MDAwODMwWjAYMRYwFAYD VQQDEw02OGNjOWVmZS0zMDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXXStokqwn6QCS8uF90sjexAs+OKjYHOYtA6o8jwK374LrwcbHi6JMDFlFe6 BJDsbhZbgwyAn3xNhQiH+juOK4Tg0gpU+SPYWmrKpAQ1qNPnfQZRGU3ImHPo+ug4 iodK24uoMcvOqYBM3Zn2pbYCAZxBVq9KvE17lBzFXCg4dZLPQeIAM0CrtVRx88yt adQz2JlzMzgysXzFZBdzbVx2AoEXTrVG6Eixbz3IMwZx4QTpQAtuit0FMxypmuGv wnDnteDEE75E9dX/EAJp5Z+TsxT2t+bhEK0H/AHJHrrKh1gZhQacwJRD5m1HVTjz +l0VpGnITmet3pS+upQgb/MBRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPaZ/oQ D//2WT1u8zBiysNIyyISMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6OvZvYC7JXkT+O0ZZX4qp2IctyBiyPMqQS9vZvtcv8Y2/Wm/WDlWU 7beto1Z0ctQRAipAjR/gaMMJBnw4sbOLRBcIAped4cU/aYpPhKV9kLmGgsiEBroK L3X+oPnK+UKljD9WmO91beI1LnfJpTCE/UTUwXDRNBfHT4toE81BhfQ9+WFH9whH T/3TpKjdQBBertBNU0VyN1zk843LBFIC5Yb34+yDvF2VeJ1uvpqTTGWV2Mcv9AmM tvb0EsueXXvgvDt+W2U0Ctz5cYN5Zns3WGAxX/y6qPpZlvz2bG2YO1zdcvxYixaR X5C0rbWJuMtGAg5X22Go+VzOOpGuxm7H -----END CERTIFICATE-----Generated at Fri Sep 19 07:11:00 2025 by rpki-client