$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: spgoeyIpm1vQ+GOx3KdltFIcxfrtzv24zjScpqxGzx0= Subject key identifier: EF:A5:5F:99:30:0E:0B:5D:63:D9:F2:CB:C1:9A:A8:43:CC:BD:0A:C9 Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: A5 Signing time: Sun 07 Sep 2025 06:42:56 +0000 Manifest this update: Sun 07 Sep 2025 06:42:55 +0000 Manifest next update: Sun 14 Sep 2025 06:42:55 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: xb8PWpT0IqSfhuUtQd2IHaD4HXdPLkGDxlr8iBuU/hs=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 06:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Sep 7 06:42:55 2025 GMT Not After : Sep 14 06:42:55 2025 GMT Subject: CN=68bd2970-9a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:41:4e:a4:17:9f:08:71:2e:ca:c9:5c:0a: 28:a6:a1:f6:60:e3:ee:a7:f0:99:09:c1:a6:78:7a: de:95:41:8e:ab:7c:9c:be:b2:3c:0e:6f:a8:6c:3c: b0:4d:74:fc:6f:33:73:41:a8:03:f0:5f:37:3e:f7: 5f:b8:24:5a:0e:c6:30:be:54:99:5b:83:3b:96:bd: a0:e0:85:21:a4:9a:f0:bd:93:18:00:32:4a:e6:c1: bc:1e:db:c0:ec:68:59:59:ee:cb:f6:0f:5a:74:d1: b1:de:5c:0b:0b:99:b9:f0:14:c5:97:e8:4b:57:18: a5:42:b7:a3:d6:68:e5:7e:69:80:1e:cf:17:fc:0a: 1d:19:ac:d1:62:a3:bc:b6:94:50:d0:d8:39:71:aa: 78:da:75:50:e1:50:2d:6a:94:32:bf:44:36:4d:c5: ec:d7:99:33:a2:81:d5:6b:0c:e3:5b:c2:53:46:e3: 73:67:c2:2e:51:a0:3a:a7:27:a2:a2:c6:38:f3:ed: 16:ca:b4:1f:70:8c:72:af:19:78:2f:ff:27:08:4d: d2:1e:c3:d4:87:59:31:a6:cb:49:0e:c2:22:9f:5c: df:60:62:4e:c2:8c:38:92:fb:33:91:61:06:f8:81: e3:6a:d7:e0:ab:d1:db:49:33:aa:23:d3:8e:bc:ee: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A5:5F:99:30:0E:0B:5D:63:D9:F2:CB:C1:9A:A8:43:CC:BD:0A:C9 X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:92:fc:43:86:17:fe:a8:a9:bc:7f:62:40:3a:36:c6:22:51: 9b:03:b3:7d:da:67:d8:a6:fd:1b:4e:ce:c6:d1:86:c0:33:d6: 3f:c1:07:a8:b5:be:5b:55:29:21:c6:69:9a:95:09:4e:51:12: f0:4c:e8:aa:c2:87:91:dd:92:c8:98:96:e7:37:78:63:c8:ed: 10:81:bc:3c:05:ad:07:69:1e:1c:44:e8:54:28:7c:83:a2:13: b5:39:dd:71:b1:4c:df:72:ef:78:62:72:c5:c7:30:18:7c:c2: bb:c8:cb:12:e4:65:40:d8:98:84:4f:69:14:bb:bd:c3:17:db: b9:3b:3a:07:cd:75:d8:85:dc:1c:a4:9c:eb:d7:f2:38:ad:ac: 93:e1:68:d2:c6:65:67:31:11:dc:81:f9:16:88:15:8e:76:32: 9f:bf:d5:d3:e7:50:c7:2b:6b:58:c7:70:d8:64:e1:4a:74:c1: cd:60:b4:0a:29:d3:12:dd:dd:d4:84:61:6a:5c:91:40:c9:b2: 4c:e2:01:3d:a3:98:95:de:ba:43:08:d4:5f:f3:90:a5:bd:94: 88:b8:6f:ba:b8:c4:88:80:12:97:14:9d:f0:38:9e:7c:09:eb: 6b:c7:a1:f6:58:12:33:57:38:c8:b6:b0:ab:68:1d:24:f9:3a: 4e:92:04:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjUwOTA3MDY0MjU1WhcNMjUwOTE0MDY0MjU1WjAYMRYwFAYD VQQDEw02OGJkMjk3MC05YTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gBBTqQXnwhxLsrJXAoopqH2YOPup/CZCcGmeHrelUGOq3ycvrI8Dm+obDyw TXT8bzNzQagD8F83PvdfuCRaDsYwvlSZW4M7lr2g4IUhpJrwvZMYADJK5sG8HtvA 7GhZWe7L9g9adNGx3lwLC5m58BTFl+hLVxilQrej1mjlfmmAHs8X/AodGazRYqO8 tpRQ0Ng5cap42nVQ4VAtapQyv0Q2TcXs15kzooHVawzjW8JTRuNzZ8IuUaA6pyei osY48+0WyrQfcIxyrxl4L/8nCE3SHsPUh1kxpstJDsIin1zfYGJOwow4kvszkWEG +IHjatfgq9HbSTOqI9OOvO7j7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+lX5kw DgtdY9nyy8GaqEPMvQrJMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVkvxDhhf+qKm8f2JAOjbGIlGbA7N92mfYpv0bTs7G0YbAM9Y/wQeo tb5bVSkhxmmalQlOURLwTOiqwoeR3ZLImJbnN3hjyO0Qgbw8Ba0HaR4cROhUKHyD ohO1Od1xsUzfcu94YnLFxzAYfMK7yMsS5GVA2JiET2kUu73DF9u5OzoHzXXYhdwc pJzr1/I4rayT4WjSxmVnMRHcgfkWiBWOdjKfv9XT51DHK2tYx3DYZOFKdMHNYLQK KdMS3d3UhGFqXJFAybJM4gE9o5iV3rpDCNRf85ClvZSIuG+6uMSIgBKXFJ3wOJ58 Cetrx6H2WBIzVzjItrCraB0k+TpOkgQ1 -----END CERTIFICATE-----Generated at Mon Sep 8 13:16:14 2025 by rpki-client