$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json) Hash identifier: JY+Bf4cffN4/rqNu0copxwXdeURONehj6zGISAHy4eo= Subject key identifier: 8D:73:91:F9:B4:6E:5D:1F:4A:6E:C6:44:DD:5D:B4:2B:6C:75:C1:67 Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft Manifest number: 0202 Signing time: Thu 21 Aug 2025 02:23:08 +0000 Manifest this update: Thu 21 Aug 2025 02:23:07 +0000 Manifest next update: Thu 28 Aug 2025 02:23:07 +0000 Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: 7eqpNvqLBj2mpfFHRJAqgJRnnkDgdtHeSBr6ygTUY6o=) 2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Validity Not Before: Aug 21 02:23:07 2025 GMT Not After : Aug 28 02:23:07 2025 GMT Subject: CN=68a6830b-8661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:d7:3e:96:65:b5:75:5d:cf:69:08:c9:ab: fd:37:7b:23:c6:f8:f0:a9:c8:ba:70:f6:f9:06:27: 87:d5:bc:23:84:48:0c:c6:09:3e:d6:fd:2e:5b:0b: 98:b9:7d:bb:ca:a4:51:8a:98:fe:b3:22:19:1f:48: 21:62:7c:aa:76:db:2a:5a:bd:fc:df:7e:97:f7:e6: 95:b4:f5:ed:48:6f:34:09:08:62:5c:52:e1:62:14: 6a:f6:47:49:5f:71:22:bb:b2:93:62:66:9a:57:67: 9c:09:a4:64:d2:6c:06:0b:49:a3:f4:b8:db:7e:4a: 78:8f:ce:6b:75:0a:18:b4:e6:2b:31:80:74:42:05: 5f:2a:b8:f1:d3:77:ef:be:07:5c:96:25:c1:f4:2c: 85:ac:96:31:aa:09:41:87:71:de:bd:c9:23:bc:80: c8:11:84:cc:23:a5:30:05:da:55:da:23:a7:dc:0f: 62:77:4c:1a:ec:cc:52:66:fc:3d:bf:d6:79:b3:b2: 56:3a:ea:92:7e:76:f9:db:17:cb:83:f1:d1:a6:98: b7:d4:65:67:ea:9c:46:5c:32:92:94:d6:90:9f:c3: f7:7a:e9:23:71:e0:29:9a:9a:ca:d5:45:c4:2f:18: 5e:c6:6d:e2:3c:2a:38:bd:9b:ab:fe:ac:aa:5d:ac: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:73:91:F9:B4:6E:5D:1F:4A:6E:C6:44:DD:5D:B4:2B:6C:75:C1:67 X509v3 Authority Key Identifier: keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:18:5d:95:96:a8:7f:da:6f:52:64:a2:d3:a4:66:08:5d:bb: 6a:52:b1:83:f7:7b:c9:99:f7:72:c6:ed:31:30:b1:97:2f:d0: 28:b6:ca:0b:f6:26:15:83:19:02:47:2b:b5:c0:ef:69:39:16: bf:72:7d:b8:d0:9b:87:ae:e8:fc:6f:0d:bc:eb:fa:35:55:70: 10:3c:bb:8d:0e:20:f3:0c:ce:89:8e:21:99:d8:54:77:88:29: cb:de:90:3e:44:56:a2:ec:9f:62:e1:06:74:0f:ea:9a:d9:98: ff:d0:0f:d4:c6:94:91:b9:09:61:c2:e1:d3:53:3f:25:bb:d6: aa:1a:a3:f1:9a:9e:39:d3:30:4c:cd:19:73:41:e6:e6:ed:b5: 03:9e:98:18:e5:51:84:13:6a:bb:5e:fc:74:27:eb:61:bd:b0: 68:26:92:08:f6:3f:5a:2b:32:c7:e0:b9:87:b9:28:be:cc:4c: cc:51:00:cb:81:c5:42:6b:53:cb:61:c8:95:f7:fa:d6:d7:d5: ae:f7:18:0d:78:5b:e7:a6:ea:e3:68:50:29:78:5b:16:8d:5e: 0f:ca:3c:4b:17:a4:1f:01:28:17:79:5f:84:d5:7c:d3:cf:ac: 4e:e9:eb:eb:9d:d2:2b:7e:4f:7d:4d:bd:a5:1c:fd:44:4d:40: c4:dd:b3:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD N0Y0RTU5MDAwHhcNMjUwODIxMDIyMzA3WhcNMjUwODI4MDIyMzA3WjAYMRYwFAYD VQQDEw02OGE2ODMwYi04NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XPXPpZltXVdz2kIyav9N3sjxvjwqci6cPb5BieH1bwjhEgMxgk+1v0uWwuY uX27yqRRipj+syIZH0ghYnyqdtsqWr38336X9+aVtPXtSG80CQhiXFLhYhRq9kdJ X3Eiu7KTYmaaV2ecCaRk0mwGC0mj9Ljbfkp4j85rdQoYtOYrMYB0QgVfKrjx03fv vgdcliXB9CyFrJYxqglBh3HevckjvIDIEYTMI6UwBdpV2iOn3A9id0wa7MxSZvw9 v9Z5s7JWOuqSfnb52xfLg/HRppi31GVn6pxGXDKSlNaQn8P3eukjceApmprK1UXE Lxhexm3iPCo4vZur/qyqXayCvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1zkfm0 bl0fSm7GRN1dtCtsdcFnMB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4 OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1 Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASGF2Vlqh/2m9SZKLTpGYIXbtqUrGD93vJmfdyxu0xMLGXL9AotsoL 9iYVgxkCRyu1wO9pORa/cn240JuHruj8bw286/o1VXAQPLuNDiDzDM6JjiGZ2FR3 iCnL3pA+RFai7J9i4QZ0D+qa2Zj/0A/UxpSRuQlhwuHTUz8lu9aqGqPxmp450zBM zRlzQebm7bUDnpgY5VGEE2q7Xvx0J+thvbBoJpII9j9aKzLH4LmHuSi+zEzMUQDL gcVCa1PLYciV9/rW19Wu9xgNeFvnpurjaFApeFsWjV4PyjxLF6QfASgXeV+E1XzT z6xO6evrndIrfk99Tb2lHP1ETUDE3bNd -----END CERTIFICATE-----Generated at Fri Aug 22 16:35:14 2025 by rpki-client