$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: lLYNHkfG89u4e3QgzzeoL6cPfWZSo3kd9N85UDvg1uw= Subject key identifier: 21:92:48:85:E4:0C:B4:7C:E7:A8:CD:3A:37:22:3B:EA:23:2C:4B:9A Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 04DF Signing time: Sun 07 Sep 2025 00:07:40 +0000 Manifest this update: Sun 07 Sep 2025 00:07:40 +0000 Manifest next update: Sun 14 Sep 2025 00:07:40 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: jyD5oEjSN//excnCCiMnSywj1xGJj2i9N4zH3x88Eag=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: DlfXyvIdL0s+0tBp2hXjHGEv5V90Epcx4LrbGdX7dDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:07:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Sep 7 00:07:40 2025 GMT Not After : Sep 14 00:07:40 2025 GMT Subject: CN=68bccccc-fd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:71:2d:d0:21:8b:49:45:80:a2:fe:18:2f: db:50:62:0d:3f:ad:6f:c6:36:cf:6c:07:6a:4b:3c: ab:8a:6c:6e:c3:ec:8a:0e:b8:77:19:7b:5a:6a:8c: ba:5e:9b:5d:83:f2:25:1d:12:0e:50:d5:ec:97:f9: ed:4e:bd:63:20:92:8c:9c:0d:81:8f:66:f2:7b:14: da:ac:ef:21:34:4b:82:92:82:29:b8:99:a7:1a:51: 4b:86:02:f0:4d:a6:4a:c4:4d:eb:70:26:9f:2c:72: b4:9b:6c:2f:9d:26:41:eb:85:46:8e:74:40:68:67: 60:fe:21:f0:db:e1:ba:90:b8:da:cc:7c:66:a3:11: 7e:ed:70:44:59:4b:e5:87:d7:90:3d:53:d8:d7:68: cd:53:be:60:19:41:7b:df:1d:bb:e7:c8:b6:a9:03: 22:dd:6b:d7:00:46:55:07:e6:52:b3:06:3f:76:bc: 27:cd:2e:83:84:2d:03:1b:d5:b5:a7:43:fe:aa:5b: 1e:88:e1:3c:01:0f:b0:24:6c:a3:18:55:e9:54:df: 9f:91:3a:b5:94:4d:6a:2e:13:5f:a6:96:17:01:aa: 72:13:1c:5e:bd:1d:4f:f0:8a:62:5c:20:c8:74:1e: 18:5d:f4:8e:88:5c:ed:3c:cd:13:9a:67:59:57:9b: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:92:48:85:E4:0C:B4:7C:E7:A8:CD:3A:37:22:3B:EA:23:2C:4B:9A X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:79:2a:09:5c:26:dd:d4:de:a9:94:a8:6d:94:f3:f0:0a:be: f6:8f:cc:e0:e4:c9:37:ad:ac:a5:89:cc:78:07:d0:f2:06:b6: e2:39:5a:29:5e:3b:1b:57:82:59:65:fc:27:14:12:b3:b6:ae: 5c:bf:eb:f2:fb:ff:02:d3:ba:79:a6:5f:f1:62:86:b5:e1:65: e7:47:bb:81:b2:8c:03:b3:ca:2a:11:1b:ed:dd:26:06:f5:5e: 6a:0e:d9:a3:68:4a:1b:08:10:ff:cb:49:df:56:94:18:d9:b6: 81:64:57:0e:2a:f2:ca:62:c7:d0:54:8b:b8:59:14:e7:47:ed: 7a:9e:3a:03:84:a5:cc:5f:cd:fb:2f:09:5f:bc:05:28:62:d3: 43:df:01:2c:f6:5d:d0:cb:83:c7:ce:c6:4f:92:a8:47:32:e1: a9:c2:f6:c0:f5:6e:bb:3e:7d:44:b9:81:95:74:6f:9c:dc:d7: 87:0c:9e:fc:c7:6b:f3:a6:54:c2:90:58:fa:bc:2e:e5:64:33: f7:9b:61:02:38:88:64:6c:1f:f1:e5:ce:b7:e3:a2:2c:6a:65: 7f:0f:29:74:18:76:7c:f9:5a:f1:ff:98:8d:98:b2:6c:2b:18: df:fb:90:e7:e5:09:cc:2e:2d:83:86:77:ac:4f:81:d9:67:c6: 36:70:af:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjUwOTA3MDAwNzQwWhcNMjUwOTE0MDAwNzQwWjAYMRYwFAYD VQQDEw02OGJjY2NjYy1mZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzudxLdAhi0lFgKL+GC/bUGINP61vxjbPbAdqSzyrimxuw+yKDrh3GXtaaoy6 Xptdg/IlHRIOUNXsl/ntTr1jIJKMnA2Bj2byexTarO8hNEuCkoIpuJmnGlFLhgLw TaZKxE3rcCafLHK0m2wvnSZB64VGjnRAaGdg/iHw2+G6kLjazHxmoxF+7XBEWUvl h9eQPVPY12jNU75gGUF73x2758i2qQMi3WvXAEZVB+ZSswY/drwnzS6DhC0DG9W1 p0P+qlseiOE8AQ+wJGyjGFXpVN+fkTq1lE1qLhNfppYXAapyExxevR1P8IpiXCDI dB4YXfSOiFztPM0TmmdZV5sJpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGSSIXk DLR856jNOjciO+ojLEuaMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABeSoJXCbd1N6plKhtlPPwCr72j8zg5Mk3raylicx4B9DyBrbiOVop XjsbV4JZZfwnFBKztq5cv+vy+/8C07p5pl/xYoa14WXnR7uBsowDs8oqERvt3SYG 9V5qDtmjaEobCBD/y0nfVpQY2baBZFcOKvLKYsfQVIu4WRTnR+16njoDhKXMX837 LwlfvAUoYtND3wEs9l3Qy4PHzsZPkqhHMuGpwvbA9W67Pn1EuYGVdG+c3NeHDJ78 x2vzplTCkFj6vC7lZDP3m2ECOIhkbB/x5c6346IsamV/Dyl0GHZ8+Vrx/5iNmLJs Kxjf+5Dn5QnMLi2DhnesT4HZZ8Y2cK/c -----END CERTIFICATE-----Generated at Mon Sep 8 08:49:37 2025 by rpki-client