$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json) Hash identifier: NagKxqAQ5e8oZiQX4gjZ2pz6FgNrqS8pZAsHNKhOQ9E= Subject key identifier: D5:0D:21:AB:7C:90:68:AF:A6:3C:8E:A1:98:95:94:F0:6E:65:93:90 Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft Manifest number: 5E Signing time: Fri 05 Sep 2025 07:37:57 +0000 Manifest this update: Fri 05 Sep 2025 07:37:56 +0000 Manifest next update: Fri 12 Sep 2025 07:37:56 +0000 Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: 0c6bHMxY22ykGeLzJ6fgXCIew3DIp3V9g0k2/LcUJZE=) 2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D Validity Not Before: Sep 5 07:37:56 2025 GMT Not After : Sep 12 07:37:56 2025 GMT Subject: CN=68ba9355-d66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:9a:f7:da:19:c5:85:05:d1:c7:7f:c1:44: 4a:91:cb:7b:88:24:74:c9:2d:76:46:a7:b9:4d:fc: d0:38:32:d5:da:b8:71:10:df:31:7c:18:b4:d9:ce: b7:f6:e5:b0:e6:82:7f:cd:1c:e1:49:f6:68:8e:b2: 84:53:f6:a0:82:31:8d:ce:87:05:f1:67:c4:9a:f6: a2:c8:e8:79:54:0f:84:d3:2a:cc:37:4a:69:c9:04: 1d:4a:8d:84:b6:35:26:0c:53:e8:f5:20:bb:b5:54: 15:b4:47:ec:aa:77:a8:9b:1e:12:94:8f:7e:ab:a9: 88:ee:4f:cb:f8:0c:d9:18:c8:3c:23:e0:ad:c6:c7: b7:00:16:96:40:64:a5:a6:e6:bf:f4:9e:aa:9b:c0: 1c:44:b0:f2:47:53:ab:3d:6d:ed:32:8e:c3:0d:14: 24:ae:e1:fe:2d:31:61:57:06:a9:b1:23:4f:08:b6: bf:97:1b:ae:2b:8c:18:99:00:2e:67:54:97:fb:27: 82:06:1f:e5:73:cb:44:99:24:bb:33:f7:16:7a:9a: de:ef:12:26:43:37:c6:a8:1a:95:12:d3:24:33:39: e0:14:90:61:a5:53:5c:43:ac:61:29:9e:a5:e3:33: 0c:4e:10:77:d5:d0:3e:88:8f:68:c2:55:5d:60:13: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0D:21:AB:7C:90:68:AF:A6:3C:8E:A1:98:95:94:F0:6E:65:93:90 X509v3 Authority Key Identifier: keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:8d:12:41:25:80:2d:75:59:89:f7:6f:aa:94:0a:e1:07:ca: d8:d8:ac:55:8e:03:29:0d:a3:06:12:54:49:67:e1:21:71:9a: 31:0c:37:32:40:ad:d9:4e:61:b4:7b:69:53:a5:2b:4b:82:3a: fc:24:3d:a9:eb:dc:fe:85:fd:43:37:d0:8a:b0:46:c6:43:2b: f9:92:0b:7e:4b:49:af:76:ae:78:57:e3:a6:b1:93:76:41:b4: 11:cd:5f:38:72:dc:c4:84:10:44:a2:af:af:16:07:fd:8b:5f: 68:74:c6:84:f1:3e:ad:63:19:62:cc:35:b4:38:c8:83:6b:30: ae:1a:91:9f:f5:89:3f:8b:45:b3:56:a3:fd:0c:0c:81:13:10: 21:65:cd:8a:64:26:27:2e:c8:f2:3c:c5:7c:3b:ac:4a:ae:ba: de:d2:d2:86:c1:af:f0:43:ae:7c:31:1f:5a:7e:ff:89:13:3c: c6:5f:06:f0:5a:6f:29:17:1b:b0:3b:4b:bc:b2:f8:73:57:d9: 17:6a:51:f1:19:dc:32:7c:f1:75:4b:ef:9e:ac:a7:4e:62:ff: c0:e0:1e:ed:86:a6:9d:0c:0c:ec:11:92:e0:9c:b3:73:8f:34: b0:e9:27:3d:fb:97:3a:54:b8:61:44:b0:d3:72:3c:14:76:4b: 07:63:d1:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoQzFFRTY5QUE2QUExQUNCQTMyRTE2NzY0REE4MUJGN0E0 MTY4QTYwRDAeFw0yNTA5MDUwNzM3NTZaFw0yNTA5MTIwNzM3NTZaMBgxFjAUBgNV BAMTDTY4YmE5MzU1LWQ2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy5Zr32hnFhQXRx3/BREqRy3uIJHTJLXZGp7lN/NA4MtXauHEQ3zF8GLTZzrf2 5bDmgn/NHOFJ9miOsoRT9qCCMY3OhwXxZ8Sa9qLI6HlUD4TTKsw3SmnJBB1KjYS2 NSYMU+j1ILu1VBW0R+yqd6ibHhKUj36rqYjuT8v4DNkYyDwj4K3Gx7cAFpZAZKWm 5r/0nqqbwBxEsPJHU6s9be0yjsMNFCSu4f4tMWFXBqmxI08Itr+XG64rjBiZAC5n VJf7J4IGH+Vzy0SZJLsz9xZ6mt7vEiZDN8aoGpUS0yQzOeAUkGGlU1xDrGEpnqXj MwxOEHfV0D6Ij2jCVV1gE+wBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1Q0hq3yQ aK+mPI6hmJWU8G5lk5AwHwYDVR0jBBgwFoAUwe5pqmqhrLoy4Wdk2oG/ekFopg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzc1QTkyMjMwRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxveTRXZGsyb0dfZWtGb3Bn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd2U1cHFtcWhyTG95NFdkazJvR19la0ZvcGcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzc1QTkyMjMwRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL3dlNXBxbXFockxv eTRXZGsyb0dfZWtGb3BnMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABmNEkElgC11WYn3b6qUCuEHytjYrFWOAykNowYSVEln4SFxmjEMNzJA rdlOYbR7aVOlK0uCOvwkPanr3P6F/UM30IqwRsZDK/mSC35LSa92rnhX46axk3ZB tBHNXzhy3MSEEESir68WB/2LX2h0xoTxPq1jGWLMNbQ4yINrMK4akZ/1iT+LRbNW o/0MDIETECFlzYpkJicuyPI8xXw7rEquut7S0obBr/BDrnwxH1p+/4kTPMZfBvBa bykXG7A7S7yy+HNX2RdqUfEZ3DJ88XVL756sp05i/8DgHu2Gpp0MDOwRkuCcs3OP NLDpJz37lzpUuGFEsNNyPBR2Swdj0b0= -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:51 2025 by rpki-client