$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: v5gZuyPr4NB3x5H3M+IWk7ZNXGWK1Afjsj3HJZNmH0g= Subject key identifier: DD:45:9F:68:33:ED:D7:46:6D:CE:9B:B3:D0:E2:34:C5:62:88:5B:B0 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0CE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0CD2 Signing time: Sun 24 Aug 2025 18:27:32 +0000 Manifest this update: Sun 24 Aug 2025 18:27:31 +0000 Manifest next update: Sun 31 Aug 2025 18:27:31 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: NI9bougA2BggB15obcd/IFhsz+rkocAwYUROu9VFUA4=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: ovp+DvhtxAcfaLvm4B/msgxFKoL594Nnc6PIvhnqZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Aug 24 18:27:31 2025 GMT Not After : Aug 31 18:27:31 2025 GMT Subject: CN=68ab5993-6e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:48:db:5c:79:0c:45:3a:8f:87:b2:3c:d9:09: 81:e2:bc:b4:bf:b5:99:88:4a:e4:11:2d:39:6c:fd: cb:be:41:2a:b6:bd:79:f5:cb:82:ff:06:06:87:85: 0e:94:f8:4f:9d:04:5a:f7:39:b5:b9:31:2a:c7:ef: 80:06:18:11:17:7d:a4:cb:42:07:9b:86:af:57:af: f4:d0:40:96:da:93:08:da:6d:d1:ee:f3:0f:47:8b: de:16:b3:e7:70:e7:19:a6:c0:ee:a1:08:ea:d9:d8: b5:a0:56:54:5b:51:5a:78:a7:eb:08:80:36:d0:93: 0e:8f:6a:52:e6:bf:5d:d5:52:4d:5f:d3:fa:ad:39: 71:bc:b8:b5:43:01:3c:0d:f0:5f:53:e0:d5:70:a3: fd:a0:51:97:30:1d:4a:ec:2b:a1:d6:25:86:48:e9: 67:58:35:e7:a3:63:e0:e1:07:39:fd:93:a8:1e:6d: 8e:6f:b9:a3:1e:55:cd:b8:a1:bc:81:63:bb:0c:db: 11:44:e0:28:06:af:65:d8:82:7d:4e:a2:81:24:2e: 77:d1:8b:f6:33:db:b9:ec:14:70:37:c0:79:c6:4a: 90:36:d4:da:a1:f3:9b:47:87:29:7d:94:d7:11:d4: 0b:7d:bd:e6:16:fb:11:b5:b7:6b:c5:bc:96:39:da: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:45:9F:68:33:ED:D7:46:6D:CE:9B:B3:D0:E2:34:C5:62:88:5B:B0 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8d:1e:a0:fd:54:40:03:b1:4e:5f:03:40:59:86:e5:c1:cc: 01:d0:56:c6:f0:cc:4e:6b:80:a9:eb:56:c1:95:c4:5f:16:3f: 7e:85:52:d3:b7:8b:f7:61:2b:cf:c5:d1:75:d7:83:39:a9:16: 61:d5:5c:71:56:6b:bf:67:10:89:c4:b3:07:79:41:e5:5c:74: 74:80:f2:fe:f6:3e:4c:74:4f:70:83:04:01:2e:0e:58:b3:70: 7e:1f:52:60:5d:09:48:3d:6b:8f:39:49:8e:a9:a9:25:9e:fa: 82:af:e5:46:65:70:15:ca:73:6d:94:32:96:bf:13:ca:c1:af: 41:d9:b2:98:54:b4:7f:8e:95:15:34:10:4c:e5:a1:02:8b:d2: 2e:8e:83:d9:f7:0d:24:13:06:d7:d2:62:3a:1f:b1:f7:a2:04: 91:2c:2f:43:50:da:83:2f:76:60:05:c4:c0:e8:13:f0:53:38: ba:b7:76:5f:dd:7c:97:81:b9:1b:fb:4f:1c:e3:3d:51:c1:40: 22:ba:19:8d:03:28:95:ae:f7:3b:9e:09:ba:86:f8:f1:df:d7: 99:f1:c4:c3:12:34:b0:79:b0:de:a8:7e:1a:58:a3:f5:17:b7: 6b:f4:7e:92:55:b2:c4:80:47:1a:33:c8:5a:3f:35:07:30:dc: 76:be:48:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUwODI0MTgyNzMxWhcNMjUwODMxMTgyNzMxWjAYMRYwFAYD VQQDEw02OGFiNTk5My02ZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUjbXHkMRTqPh7I82QmB4ry0v7WZiErkES05bP3LvkEqtr159cuC/wYGh4UO lPhPnQRa9zm1uTEqx++ABhgRF32ky0IHm4avV6/00ECW2pMI2m3R7vMPR4veFrPn cOcZpsDuoQjq2di1oFZUW1FaeKfrCIA20JMOj2pS5r9d1VJNX9P6rTlxvLi1QwE8 DfBfU+DVcKP9oFGXMB1K7Cuh1iWGSOlnWDXno2Pg4Qc5/ZOoHm2Ob7mjHlXNuKG8 gWO7DNsRROAoBq9l2IJ9TqKBJC530Yv2M9u57BRwN8B5xkqQNtTaofObR4cpfZTX EdQLfb3mFvsRtbdrxbyWOdpn+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1Fn2gz 7ddGbc6bs9DiNMViiFuwMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBujR6g/VRAA7FOXwNAWYblwcwB0FbG8MxOa4Cp61bBlcRfFj9+hVLT t4v3YSvPxdF114M5qRZh1VxxVmu/ZxCJxLMHeUHlXHR0gPL+9j5MdE9wgwQBLg5Y s3B+H1JgXQlIPWuPOUmOqaklnvqCr+VGZXAVynNtlDKWvxPKwa9B2bKYVLR/jpUV NBBM5aECi9IujoPZ9w0kEwbX0mI6H7H3ogSRLC9DUNqDL3ZgBcTA6BPwUzi6t3Zf 3XyXgbkb+08c4z1RwUAiuhmNAyiVrvc7ngm6hvjx39eZ8cTDEjSwebDeqH4aWKP1 F7dr9H6SVbLEgEcaM8haPzUHMNx2vkh4 -----END CERTIFICATE-----Generated at Sun Aug 24 21:42:38 2025 by rpki-client