$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft File: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft (raw, json) Hash identifier: q32tIKdk7QhFAlOX6DwG+98Cgf55vfS07FQpRTFsJzo= Subject key identifier: 91:D2:59:F1:05:DF:4C:1D:57:26:D3:AF:CE:A6:57:62:81:A9:FA:C9 Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 Certificate issuer: /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft Manifest number: 05 Signing time: Fri 19 Sep 2025 08:55:33 +0000 Manifest this update: Fri 19 Sep 2025 08:55:32 +0000 Manifest next update: Fri 26 Sep 2025 08:55:32 +0000 Files and hashes: 1: YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl (hash: x4pmvhfSjoCuQDPw2tmGm6G92L3ZtQJNFYTnJCnWTes=) 2: DD3F28CC93D111F0B0A32B0BC4F9AE02.roa (hash: OJep3Jj5FjQRgEx+dN34IpTpsR0/ZkQ1f2GGqPdjPgg=) 3: B2B63AAC93CF11F0AFB6CD40C4F9AE02.roa (hash: QZkJm8VBjgXrSCDM+VZ1EYZWVut/5O77RoipwMHofMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 08:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5 Validity Not Before: Sep 19 08:55:32 2025 GMT Not After : Sep 26 08:55:32 2025 GMT Subject: CN=68cd1a84-d08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:93:8d:76:7e:59:fd:c2:75:d4:c0:45:3d: 54:b6:9b:fa:2c:44:55:42:3b:ce:d2:55:42:27:26: 63:e3:59:e9:d3:09:84:92:1b:e9:20:dd:54:d1:02: cf:0d:1e:2c:e9:48:71:76:d0:44:1b:f6:24:6c:eb: 2c:e1:5a:7e:cb:86:9c:41:92:ba:7b:09:5a:a3:57: fd:91:c4:25:8d:cb:ad:f4:c7:57:7b:9f:85:7b:8c: 4e:af:d1:9a:97:e1:1d:ff:c5:dd:1d:6a:0b:77:47: 10:fb:dd:27:1e:65:d2:c3:fc:35:cf:57:46:75:cd: e3:e3:62:20:6e:9a:79:fb:70:ee:6e:48:1c:d7:db: 05:fe:a1:5e:ea:22:e1:a3:dc:a1:12:15:7f:b0:dc: 6e:d0:34:21:f2:63:1d:54:b3:5f:e8:9b:eb:22:5f: 22:53:8d:3d:4c:5e:d2:c6:8e:17:07:ed:4b:ac:ac: 4f:01:41:45:a8:69:99:80:d7:05:fb:8c:a0:30:3e: c6:47:c4:13:41:22:5f:77:57:20:20:76:38:4b:26: f0:7b:7f:b9:96:cd:fd:f0:71:82:d2:b1:50:00:fa: a5:c4:2a:95:b8:a4:70:b8:0d:56:da:d8:5a:13:f9: d3:44:04:b8:3d:03:8b:44:66:68:bf:47:a1:25:d6: 24:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D2:59:F1:05:DF:4C:1D:57:26:D3:AF:CE:A6:57:62:81:A9:FA:C9 X509v3 Authority Key Identifier: keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:83:5b:2c:d0:10:ff:ee:9b:7a:91:d3:77:ca:9d:53:b1:cd: 9a:ca:5f:61:df:6f:b9:db:69:44:a6:cc:06:ba:4a:97:c1:83: cf:d6:af:9d:3b:49:77:bd:08:f0:18:bf:ff:09:ce:a9:c9:11: 2d:f7:fe:3f:4e:1d:7e:28:be:41:43:e7:91:37:9c:db:4f:6d: 83:c5:9e:a6:c7:55:fa:db:f1:9d:1e:ee:e8:d5:a6:a1:1a:7e: 2a:f2:8e:f0:17:a6:20:0c:e7:5c:96:50:1f:b4:65:7c:0c:db: 25:a1:1f:bf:00:c8:99:e0:b2:52:3b:f3:45:c6:2c:15:10:c2: 68:99:38:f2:f0:3a:32:56:b6:fa:3b:95:e6:72:ce:85:ed:88: 09:5c:4e:ca:01:00:a4:7c:a5:b6:63:08:76:ef:bc:2e:42:37: 38:01:d2:a4:a4:55:80:36:92:d3:33:60:96:46:c3:54:8e:cb: 42:3f:fa:04:0f:09:ba:01:02:3b:f6:c0:5f:c6:6c:a3:74:dd: eb:61:3c:04:8c:64:96:f7:6a:9b:d6:f3:f6:f3:43:ac:1e:25: e3:1e:f2:88:0b:93:ff:87:2c:96:cb:09:44:5b:6c:dd:11:06: 7b:7a:b9:4c:3a:a5:1e:d5:0e:b0:4d:5f:68:ec:24:0a:42:d3: 04:03:40:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjE5NTExMC8GA1UEBRMoNjE1Nzc1QTRERTIzRTQ2QThCNTdDOEY3QjlDOUUxRTg4 NkU1RDhENTAeFw0yNTA5MTkwODU1MzJaFw0yNTA5MjYwODU1MzJaMBgxFjAUBgNV BAMTDTY4Y2QxYTg0LWQwOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFl5ONdn5Z/cJ11MBFPVS2m/osRFVCO87SVUInJmPjWenTCYSSG+kg3VTRAs8N HizpSHF20EQb9iRs6yzhWn7LhpxBkrp7CVqjV/2RxCWNy630x1d7n4V7jE6v0ZqX 4R3/xd0dagt3RxD73SceZdLD/DXPV0Z1zePjYiBumnn7cO5uSBzX2wX+oV7qIuGj 3KESFX+w3G7QNCHyYx1Us1/om+siXyJTjT1MXtLGjhcH7UusrE8BQUWoaZmA1wX7 jKAwPsZHxBNBIl93VyAgdjhLJvB7f7mWzf3wcYLSsVAA+qXEKpW4pHC4DVba2FoT +dNEBLg9A4tEZmi/R6El1iRhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkdJZ8QXf TB1XJtOvzqZXYoGp+skwHwYDVR0jBBgwFoAUYVd1pN4j5GqLV8j3ucnh6Ibl2NUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMTk1Lzc0QzE4RjcwOTM4 QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdxTFY4ajN1Y25oNklibDJO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWVZkMXBONGo1R3FMVjhqM3Vjbmg2SWJsMk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MTk1Lzc0QzE4RjcwOTM4QTExRjBCQkQ2MjM4NUM0RjlBRTAyL1lWZDFwTjRqNUdx TFY4ajN1Y25oNklibDJOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADCDWyzQEP/um3qR03fKnVOxzZrKX2Hfb7nbaUSmzAa6SpfBg8/Wr507 SXe9CPAYv/8JzqnJES33/j9OHX4ovkFD55E3nNtPbYPFnqbHVfrb8Z0e7ujVpqEa firyjvAXpiAM51yWUB+0ZXwM2yWhH78AyJngslI780XGLBUQwmiZOPLwOjJWtvo7 leZyzoXtiAlcTsoBAKR8pbZjCHbvvC5CNzgB0qSkVYA2ktMzYJZGw1SOy0I/+gQP CboBAjv2wF/GbKN03ethPASMZJb3apvW8/bzQ6weJeMe8ogLk/+HLJbLCURbbN0R Bnt6uUw6pR7VDrBNX2jsJApC0wQDQPY= -----END CERTIFICATE-----Generated at Fri Sep 19 17:32:28 2025 by rpki-client