$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: VHDS6wBAKXBLjskPHRgP+wohCMqEx5ojNXjPm6AAWKA= Subject key identifier: 37:F8:DC:26:67:AF:D9:68:DA:F8:20:65:BB:56:89:73:01:55:48:A1 Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: AA Signing time: Fri 05 Sep 2025 06:38:08 +0000 Manifest this update: Fri 05 Sep 2025 06:38:08 +0000 Manifest next update: Fri 12 Sep 2025 06:38:08 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: +mrkiIwnpsReAWLFux8RR6HtYELYwjElLsVxACD+6cE=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Sep 5 06:38:08 2025 GMT Not After : Sep 12 06:38:08 2025 GMT Subject: CN=68ba8550-3adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:72:34:0b:2e:1a:03:8b:5e:61:4b:11:d9: 5e:d5:b7:ce:4a:7c:34:89:9d:11:b0:b7:7a:27:bd: d0:91:2e:04:19:19:b8:89:2b:4d:33:72:6b:5d:ec: e3:dc:67:49:9e:d2:af:e2:3a:80:f2:82:17:88:ad: 27:2a:44:d1:76:37:c6:50:e9:ba:f2:57:67:01:d7: 44:5a:25:99:7b:fa:89:cd:33:74:10:c8:19:0d:c5: 8e:1c:ff:df:bb:c0:2d:99:e2:87:c5:ba:ff:ae:8f: 98:02:6b:01:d1:44:18:21:9c:c2:48:9f:18:36:a8: 13:ec:50:a7:b0:08:e6:a4:3c:aa:40:1f:58:b3:12: 23:a7:f6:84:99:05:fd:20:86:b1:ab:bb:94:17:ea: 3b:17:44:d9:52:e6:7f:82:fc:cd:3f:a4:05:85:b4: 65:cb:34:79:60:ff:45:c5:0a:c4:e0:ec:c3:17:6a: 64:e1:5c:e0:15:3c:37:41:fd:09:99:bc:5e:d0:54: 77:42:56:b0:8a:bb:3c:17:06:a5:69:d6:1b:04:29: cc:40:0e:6c:80:98:a8:14:35:2d:59:a8:29:63:15: 15:9b:24:d8:5a:a0:d7:f4:e6:ef:25:ee:ec:1c:0b: cc:86:c7:fe:03:ec:4f:f6:e7:77:4c:9e:18:af:5b: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F8:DC:26:67:AF:D9:68:DA:F8:20:65:BB:56:89:73:01:55:48:A1 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:0b:71:9b:c6:79:75:6d:b0:70:e9:39:fb:c7:08:a0:16:69: 73:97:3a:5a:24:f2:12:54:8f:08:e5:35:04:80:79:fe:cd:08: 50:6f:04:c6:78:39:b8:42:00:e0:13:d1:5c:51:e9:a6:be:cb: 98:83:55:06:e3:69:e7:4d:3c:be:fb:75:ae:2d:0d:2c:4c:99: eb:01:af:a9:ec:ef:d1:7c:59:e2:a6:6d:32:76:6c:c7:e4:aa: 17:89:cd:3a:9d:05:6e:63:ae:09:36:1b:0c:0e:a0:24:e5:5d: f2:68:c6:7f:bc:bb:c5:ea:7e:c8:5e:20:86:cd:a7:52:b3:01: 43:3a:a2:9b:e2:57:94:d5:33:d8:3b:f6:c5:f8:29:ee:e3:44: 2d:48:16:8e:98:5e:3a:54:80:d1:fc:e7:ab:b2:5e:f7:bd:63: 03:75:dd:13:0e:3a:a2:b0:d0:1c:df:0d:a9:91:6e:06:ea:95: de:10:68:22:e6:e1:1a:ce:68:08:c9:0f:b2:04:c2:da:94:d3: 1a:e7:2c:be:15:70:18:74:b5:e8:1b:f0:b0:60:82:73:36:e3: fa:d5:83:67:46:0c:86:5d:15:01:75:b6:d0:0b:50:a0:2e:8d: ac:3c:da:32:67:2e:70:78:fc:6d:ce:b3:61:e0:26:6a:e3:f4: eb:2c:b5:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUwOTA1MDYzODA4WhcNMjUwOTEyMDYzODA4WjAYMRYwFAYD VQQDEw02OGJhODU1MC0zYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04RyNAsuGgOLXmFLEdle1bfOSnw0iZ0RsLd6J73QkS4EGRm4iStNM3JrXezj 3GdJntKv4jqA8oIXiK0nKkTRdjfGUOm68ldnAddEWiWZe/qJzTN0EMgZDcWOHP/f u8AtmeKHxbr/ro+YAmsB0UQYIZzCSJ8YNqgT7FCnsAjmpDyqQB9YsxIjp/aEmQX9 IIaxq7uUF+o7F0TZUuZ/gvzNP6QFhbRlyzR5YP9FxQrE4OzDF2pk4VzgFTw3Qf0J mbxe0FR3Qlawirs8FwaladYbBCnMQA5sgJioFDUtWagpYxUVmyTYWqDX9ObvJe7s HAvMhsf+A+xP9ud3TJ4Yr1tt8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDf43CZn r9lo2vggZbtWiXMBVUihMB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQC3Gbxnl1bbBw6Tn7xwigFmlzlzpaJPISVI8I5TUEgHn+zQhQbwTG eDm4QgDgE9FcUemmvsuYg1UG42nnTTy++3WuLQ0sTJnrAa+p7O/RfFnipm0ydmzH 5KoXic06nQVuY64JNhsMDqAk5V3yaMZ/vLvF6n7IXiCGzadSswFDOqKb4leU1TPY O/bF+Cnu40QtSBaOmF46VIDR/Oersl73vWMDdd0TDjqisNAc3w2pkW4G6pXeEGgi 5uEazmgIyQ+yBMLalNMa5yy+FXAYdLXoG/CwYIJzNuP61YNnRgyGXRUBdbbQC1Cg Lo2sPNoyZy5wePxtzrNh4CZq4/TrLLVH -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:12 2025 by rpki-client