$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json) Hash identifier: HjhQoWaxQgEswi7ZThWLSb9u+5or1BssuMftDrZy8X4= Subject key identifier: 71:78:FA:A7:90:FF:22:83:8F:92:FC:52:45:AB:13:0C:B9:3B:81:C2 Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Certificate serial: 1802 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft Manifest number: 17F4 Signing time: Wed 20 Aug 2025 16:55:01 +0000 Manifest this update: Wed 20 Aug 2025 16:55:01 +0000 Manifest next update: Wed 27 Aug 2025 16:55:01 +0000 Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: x746FVlcXkT3L7AyyMWEyBgHvJu5Yvw/6KRNr6m1tcM=) 2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: b8auFL+OGTstQHyewNvl2CDT74Oau9yNM7VkRWGDuEg=) 3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: gFLbFRy/ivjEl0Dcp/t/VXs92pwAJ2tSip4UwHoVC3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6146 (0x1802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A Validity Not Before: Aug 20 16:55:01 2025 GMT Not After : Aug 27 16:55:01 2025 GMT Subject: CN=68a5fde5-5a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:c6:f2:0b:84:97:7b:ac:dd:02:2b:6c:a5: b5:c4:0f:2c:57:c0:0d:d3:b5:a3:81:2a:a3:38:ee: a0:c4:40:5d:89:d4:33:b6:fe:5e:04:ef:84:e2:5a: 5a:13:ee:e9:24:7f:23:42:3e:e3:22:0f:eb:d0:2a: ca:57:22:37:29:04:80:30:7c:1e:e5:a3:41:aa:14: b1:83:2b:14:19:dd:a5:41:5b:2a:93:11:1d:de:00: e3:48:1d:e9:c7:b3:9f:34:40:6f:3c:fe:5e:f1:30: d7:db:0f:50:d5:20:ca:0f:50:e5:5a:a2:fd:43:6f: 95:6e:67:1e:09:ea:2a:3a:52:2f:a9:1a:ca:af:41: ed:74:cf:9e:6d:7f:89:fb:db:cf:af:b2:79:a5:2c: 65:e8:bc:80:75:b2:a5:cb:da:41:8d:9a:7e:04:5d: 5a:09:72:22:3a:6c:4f:25:d3:7e:09:5c:e7:e8:77: 87:ca:6c:cc:5a:73:a1:27:d5:5e:81:f7:c1:ec:cd: 53:1e:e3:1b:e6:85:d6:ee:13:49:8b:c8:e5:83:ff: f2:d6:b2:7f:09:49:e7:f6:38:9e:a0:6f:fb:64:bd: fc:1f:b3:1a:b3:94:6c:f6:de:74:73:74:a2:4d:bc: 58:5c:bc:40:6a:c6:37:ec:f2:26:91:a5:7f:c1:13: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:78:FA:A7:90:FF:22:83:8F:92:FC:52:45:AB:13:0C:B9:3B:81:C2 X509v3 Authority Key Identifier: keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:60:fc:4c:71:12:27:50:59:7d:55:90:c5:fd:a3:c8:ec:cb: be:e5:c8:d5:c2:d3:e1:2a:c0:45:a5:71:5e:a3:a2:34:27:b5: fc:ce:d2:c5:97:2e:5c:47:4e:24:db:22:c8:88:fe:a4:bc:b7: 25:a4:07:73:eb:81:b2:34:be:4f:9d:40:60:b8:19:1c:eb:8e: be:6c:0f:f4:1e:a0:e7:59:ea:89:97:27:98:19:4c:59:86:a0: aa:a5:e4:b7:89:a5:fd:20:3f:a7:b4:f9:9f:51:99:54:c7:e3: 3f:ef:ea:d2:b0:f3:d5:b3:88:c0:4c:01:43:ea:b5:fa:78:3e: 49:93:c4:a3:92:be:87:5e:3e:d8:9f:c8:28:fe:e6:79:94:33: 8c:26:a8:81:08:86:01:90:f2:d4:d0:74:4e:a5:54:34:5e:e7: 70:c4:a1:a1:a4:c1:4f:52:c2:72:78:53:97:3d:b0:ea:83:1c: ac:bc:cc:ea:ef:1f:15:64:06:bf:ae:2e:5b:cc:1a:f4:29:2e: c7:71:6b:6a:01:56:8d:c9:52:1d:a0:95:67:a3:ea:30:36:8a: 35:9f:50:45:e7:c0:b8:1a:c2:cd:8d:e9:20:fe:a1:64:af:c7: ea:d4:f5:2d:18:6f:06:5b:c7:be:86:49:0b:21:9a:8a:1d:a4: 76:c2:a2:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYzQ0ExMTAvBgNVBAUTKEJCOTMyNTZFNjA3RDQyRUI2RTM0MjBEQ0M3MTM3RjIw Qjg0RDBDOEEwHhcNMjUwODIwMTY1NTAxWhcNMjUwODI3MTY1NTAxWjAYMRYwFAYD VQQDEw02OGE1ZmRlNS01YThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweXG8guEl3us3QIrbKW1xA8sV8AN07WjgSqjOO6gxEBdidQztv5eBO+E4lpa E+7pJH8jQj7jIg/r0CrKVyI3KQSAMHwe5aNBqhSxgysUGd2lQVsqkxEd3gDjSB3p x7OfNEBvPP5e8TDX2w9Q1SDKD1DlWqL9Q2+VbmceCeoqOlIvqRrKr0HtdM+ebX+J +9vPr7J5pSxl6LyAdbKly9pBjZp+BF1aCXIiOmxPJdN+CVzn6HeHymzMWnOhJ9Ve gffB7M1THuMb5oXW7hNJi8jlg//y1rJ/CUnn9jieoG/7ZL38H7Mas5Rs9t50c3Si TbxYXLxAasY37PImkaV/wROeqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHF4+qeQ /yKDj5L8UkWrEwy5O4HCMB8GA1UdIwQYMBaAFLuTJW5gfULrbjQg3McTfyC4TQyK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjNDQS9FRjRGOTM3Q0Mz QTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1dHVOQ0RjeHhOX0lMaE5E SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1TWxibUI5UXV0dU5DRGN4eE5fSUxoTkRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjNDQS9FRjRGOTM3Q0MzQTQxMUU3OTdCQkYxNUVDNEY5QUUwMi91NU1sYm1COVF1 dHVOQ0RjeHhOX0lMaE5ESW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVYPxMcRInUFl9VZDF/aPI7Mu+5cjVwtPhKsBFpXFeo6I0J7X8ztLF ly5cR04k2yLIiP6kvLclpAdz64GyNL5PnUBguBkc646+bA/0HqDnWeqJlyeYGUxZ hqCqpeS3iaX9ID+ntPmfUZlUx+M/7+rSsPPVs4jATAFD6rX6eD5Jk8Sjkr6HXj7Y n8go/uZ5lDOMJqiBCIYBkPLU0HROpVQ0XudwxKGhpMFPUsJyeFOXPbDqgxysvMzq 7x8VZAa/ri5bzBr0KS7HcWtqAVaNyVIdoJVno+owNoo1n1BF58C4GsLNjekg/qFk r8fq1PUtGG8GW8e+hkkLIZqKHaR2wqI8 -----END CERTIFICATE-----Generated at Fri Aug 22 16:18:19 2025 by rpki-client