$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: i9BD/eIuy5QhH8jq55o0lI2SgGg+L8cXYwWoKaGyhhY= Subject key identifier: 6A:02:F1:23:78:87:7F:9D:3D:DA:92:FD:BA:C8:B5:92:69:38:AE:CA Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:36:12 +0000 Manifest this update: Sat 23 Aug 2025 06:36:11 +0000 Manifest next update: Sat 30 Aug 2025 06:36:11 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: 5dHx8c8z1dA2T3ZNXOAKgwdmKkDrADPaNeLMdrviWw8=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Aug 23 06:36:11 2025 GMT Not After : Aug 30 06:36:11 2025 GMT Subject: CN=68a9615b-229b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:db:ea:81:93:c3:41:99:90:2a:98:84:b8: 81:54:77:94:b3:95:eb:79:2d:35:87:27:33:bd:94: 29:9b:1a:d9:5c:39:f5:c4:16:2d:47:5d:04:7d:e7: 56:84:fb:6c:c7:ec:5a:ee:99:b4:91:03:4f:0d:17: 15:bb:31:e9:d0:ea:b0:d7:64:ba:73:95:43:a2:39: 81:99:e1:9c:fd:4b:9c:d9:5e:56:bd:54:fb:b0:68: 15:02:56:df:e0:4d:66:ed:30:b7:09:7f:ae:2f:24: 8a:4e:ae:fe:43:c2:83:59:c0:63:39:79:66:0f:ed: 00:d8:bd:57:89:c1:df:bf:79:61:5f:6f:92:6c:d0: 5c:19:52:af:39:9d:19:43:58:0f:b6:f6:eb:94:1c: c0:f5:39:4d:4a:3f:12:92:83:4a:2c:fc:ad:43:30: fe:bd:98:81:bc:8e:ce:7e:39:d2:5a:e1:4d:85:02: 86:99:1f:05:c8:d8:90:7d:20:d5:e0:3d:0f:57:a8: e8:15:3d:64:b6:3b:53:e8:1b:23:7f:79:54:35:13: 36:45:e5:ea:89:d7:71:5e:61:05:b3:20:0f:1c:63: bb:b7:33:5b:06:ab:3f:55:a6:1e:25:51:75:82:c2: 62:09:95:27:75:70:09:7e:23:9e:c8:1a:5a:3d:ef: c2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:02:F1:23:78:87:7F:9D:3D:DA:92:FD:BA:C8:B5:92:69:38:AE:CA X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ae:e1:27:50:71:3c:72:81:e4:64:44:ab:50:34:ca:29:9d: 38:a6:7e:e8:4a:87:37:b8:64:b8:a2:fd:71:66:00:f7:16:34: ab:11:a6:28:43:bb:9e:68:f7:6e:d3:2f:32:67:b1:03:e2:ad: a3:76:fc:41:d6:78:16:38:7a:da:8a:ff:be:b9:03:f2:6f:3a: 1c:e6:37:d4:e8:42:4a:6b:08:b9:89:a3:4d:6d:08:be:7b:11: 6c:20:59:49:39:27:45:12:7f:c3:91:db:09:ac:ae:73:03:51: a1:80:96:24:4c:c6:9c:0c:bf:02:ca:77:b0:86:4c:2d:e9:f5: ef:4d:1e:a0:96:fc:b3:d8:ce:87:61:7f:8b:0d:e5:a7:31:6e: ad:dc:c3:5a:82:44:57:c5:ba:79:39:bd:ad:90:e5:58:aa:a3: 33:c9:e5:17:9f:03:55:ce:22:d5:a4:1f:a8:fc:f6:8c:2f:1d: 5e:28:8b:3f:1a:b4:90:c8:99:b3:61:22:05:51:24:ea:f9:b6: 5f:36:91:f5:b3:84:24:8f:51:8f:c1:02:9b:69:04:82:c3:d6: 31:c9:bf:24:b6:f0:5a:4a:6c:de:46:1f:4f:75:07:5c:f1:ca: 23:33:df:80:6a:a0:a1:c3:6e:f7:57:dc:02:69:4f:dc:0f:bd: b5:5d:8a:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUwODIzMDYzNjExWhcNMjUwODMwMDYzNjExWjAYMRYwFAYD VQQDEw02OGE5NjE1Yi0yMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ7b6oGTw0GZkCqYhLiBVHeUs5XreS01hyczvZQpmxrZXDn1xBYtR10EfedW hPtsx+xa7pm0kQNPDRcVuzHp0Oqw12S6c5VDojmBmeGc/Uuc2V5WvVT7sGgVAlbf 4E1m7TC3CX+uLySKTq7+Q8KDWcBjOXlmD+0A2L1XicHfv3lhX2+SbNBcGVKvOZ0Z Q1gPtvbrlBzA9TlNSj8SkoNKLPytQzD+vZiBvI7OfjnSWuFNhQKGmR8FyNiQfSDV 4D0PV6joFT1ktjtT6Bsjf3lUNRM2ReXqiddxXmEFsyAPHGO7tzNbBqs/VaYeJVF1 gsJiCZUndXAJfiOeyBpaPe/CCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoC8SN4 h3+dPdqS/brItZJpOK7KMB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDYwQy8xODhGMTE3Mjk3M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhU QXFXY3o2ZDZ3SnpSY2psVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAruEnUHE8coHkZESrUDTKKZ04pn7oSoc3uGS4ov1xZgD3FjSrEaYo Q7ueaPdu0y8yZ7ED4q2jdvxB1ngWOHraiv++uQPybzoc5jfU6EJKawi5iaNNbQi+ exFsIFlJOSdFEn/DkdsJrK5zA1GhgJYkTMacDL8Cynewhkwt6fXvTR6glvyz2M6H YX+LDeWnMW6t3MNagkRXxbp5Ob2tkOVYqqMzyeUXnwNVziLVpB+o/PaMLx1eKIs/ GrSQyJmzYSIFUSTq+bZfNpH1s4Qkj1GPwQKbaQSCw9Yxyb8ktvBaSmzeRh9PdQdc 8cojM9+AaqChw273V9wCaU/cD721XYpL -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:09 2025 by rpki-client