$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft File: s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json) Hash identifier: acZMsBAcxxg893E/ZaSNJVJ87Wcu+c4t8478wFzz8GM= Subject key identifier: 28:35:24:B6:78:13:53:7F:DD:9F:8C:0A:61:FF:6B:97:85:7B:6E:6E Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft Manifest number: 0CD9 Signing time: Thu 18 Sep 2025 18:19:02 +0000 Manifest this update: Thu 18 Sep 2025 18:19:02 +0000 Manifest next update: Thu 25 Sep 2025 18:19:02 +0000 Files and hashes: 1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: BgtZ0nLSJY5yx6EcC0P3PgKc/MxD+0fGnpPrxfi4AY0=) 2: 238AAE04B3CD11EF82D5B34FC4F9AE02.roa (hash: Vh7yMYlqWkmmCVoJUzEKALaYDnLO+UKuaoILrbL+tGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC, serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: Sep 18 18:19:02 2025 GMT Not After : Sep 25 18:19:02 2025 GMT Subject: CN=68cc4d16-6f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:0d:29:ef:e7:86:d3:12:6b:fa:85:18:49: a3:1e:91:7c:8b:23:84:0e:c6:0f:65:73:84:69:a6: 2e:41:81:ee:44:bd:3e:b3:31:cf:3d:ce:25:62:13: 7d:cf:a2:70:c8:7a:cf:9e:0e:ff:a9:61:94:c4:c9: 84:f8:47:40:f7:a0:55:f5:3e:65:a9:35:fe:b6:04: a3:5a:23:c4:61:20:88:a2:4b:1c:4d:1c:97:a1:76: 9e:4c:ab:b8:43:d9:89:76:b7:bd:0d:ed:f0:87:40: db:9e:85:0b:ff:a4:f7:a4:af:73:fc:0d:38:e6:20: 94:83:07:8c:24:81:04:42:9b:cd:7d:5c:16:b1:2c: e5:29:d0:95:bd:ab:07:d6:bc:89:0e:1a:6b:f1:bb: 80:11:d2:7a:c7:bb:18:86:f8:69:00:86:14:78:21: ab:6e:d3:35:27:f2:53:96:5e:87:6d:9e:43:8e:3f: 2c:a1:56:14:90:32:02:2c:71:26:6e:47:3c:62:92: 8d:72:46:81:e4:2e:c3:3c:bd:08:61:cb:1f:b0:dc: 62:d1:15:13:b4:a1:dd:41:c7:17:0b:b8:18:c2:e7: e4:b7:60:5a:f8:53:93:59:65:5d:a7:fe:38:33:8f: 40:5e:55:83:4e:17:c8:69:9c:4f:13:3c:c3:7f:04: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:35:24:B6:78:13:53:7F:DD:9F:8C:0A:61:FF:6B:97:85:7B:6E:6E X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:97:75:a2:34:3d:3e:88:45:f8:ba:73:bf:0c:3f:ec:c9:bd: 2c:bc:5e:18:ef:2f:aa:8c:a5:47:4a:0d:8d:73:60:a7:97:6c: 1a:3f:75:c3:38:3e:ad:b6:e9:6c:10:e2:15:6e:3e:d5:16:73: 04:28:a4:8f:b5:fe:8b:53:30:57:d7:8a:3b:d3:75:ee:bf:76: 87:c5:1c:cf:58:42:ae:97:5b:4e:24:5e:da:cb:95:67:45:87: 9b:0c:04:4d:40:1c:c1:87:3d:68:3c:57:3d:ac:6c:b4:20:11: fb:c3:bc:e1:4b:94:ec:ce:88:e5:ef:63:07:56:41:05:99:b8: f2:b4:a3:45:ad:76:b5:26:ee:4f:ca:77:56:98:26:fe:c8:eb: d9:99:bd:ae:55:3e:cf:4b:a0:e8:2c:8e:37:91:f5:3e:97:c1: 03:12:3a:9d:22:17:38:fc:ab:04:4a:0b:90:32:b6:89:e2:a8: 24:1e:5c:cb:3a:d1:30:ed:d8:7a:39:ef:24:a4:6c:f0:7f:32: 25:5a:f2:43:19:d1:43:21:54:19:71:af:a4:88:52:92:2c:d0: f9:69:28:fd:e0:b6:f3:36:7d:3d:52:64:18:6a:07:e3:ec:bb: c5:4e:83:05:f5:04:c4:c2:38:ec:15:3e:bf:02:73:0d:da:68: eb:f6:ca:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjUwOTE4MTgxOTAyWhcNMjUwOTI1MTgxOTAyWjAYMRYwFAYD VQQDEw02OGNjNGQxNi02ZjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3i8NKe/nhtMSa/qFGEmjHpF8iyOEDsYPZXOEaaYuQYHuRL0+szHPPc4lYhN9 z6JwyHrPng7/qWGUxMmE+EdA96BV9T5lqTX+tgSjWiPEYSCIokscTRyXoXaeTKu4 Q9mJdre9De3wh0DbnoUL/6T3pK9z/A045iCUgweMJIEEQpvNfVwWsSzlKdCVvasH 1ryJDhpr8buAEdJ6x7sYhvhpAIYUeCGrbtM1J/JTll6HbZ5Djj8soVYUkDICLHEm bkc8YpKNckaB5C7DPL0IYcsfsNxi0RUTtKHdQccXC7gYwufkt2Ba+FOTWWVdp/44 M49AXlWDThfIaZxPEzzDfwR/bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg1JLZ4 E1N/3Z+MCmH/a5eFe25uMB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OThGQy8xQzg5OUUyNkY0RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFh Z3AxVzhoMm82MTNESURTbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPl3WiND0+iEX4unO/DD/syb0svF4Y7y+qjKVHSg2Nc2Cnl2waP3XD OD6ttulsEOIVbj7VFnMEKKSPtf6LUzBX14o703Xuv3aHxRzPWEKul1tOJF7ay5Vn RYebDARNQBzBhz1oPFc9rGy0IBH7w7zhS5Tszojl72MHVkEFmbjytKNFrXa1Ju5P yndWmCb+yOvZmb2uVT7PS6DoLI43kfU+l8EDEjqdIhc4/KsESguQMraJ4qgkHlzL OtEw7dh6Oe8kpGzwfzIlWvJDGdFDIVQZca+kiFKSLND5aSj94LbzNn09UmQYagfj 7LvFToMF9QTEwjjsFT6/AnMN2mjr9soL -----END CERTIFICATE-----Generated at Fri Sep 19 05:10:23 2025 by rpki-client