$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft File: 5xqfIU6Aybw7LSOf-LmqtxP27bc.mft (raw, json) Hash identifier: YGZengOS7L8OR94rSuDlIvxWpAZM5/xslEXoiYmOqVs= Subject key identifier: 07:5F:D5:D2:CD:57:1D:D5:A6:F7:EC:20:16:1E:87:C2:8F:05:F6:F6 Authority key identifier: E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 Certificate issuer: /CN=A91E8525/serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Certificate serial: 19FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft Manifest number: 19EC Signing time: Wed 20 Aug 2025 16:27:14 +0000 Manifest this update: Wed 20 Aug 2025 16:27:14 +0000 Manifest next update: Wed 27 Aug 2025 16:27:14 +0000 Files and hashes: 1: 5xqfIU6Aybw7LSOf-LmqtxP27bc.crl (hash: 8TsaIwX1JxRt5lURjoKTiZNoygyG5GJhz4CwROj3sZI=) 2: 3A21C144E51211EBB1225278C4F9AE02.roa (hash: nW5GBU8+whiRwJPpyl+4Uvg+meP7sM49SIVv5JyITRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6655 (0x19ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8525, serialNumber=E71A9F214E80C9BC3B2D239FF8B9AAB713F6EDB7 Validity Not Before: Aug 20 16:27:14 2025 GMT Not After : Aug 27 16:27:14 2025 GMT Subject: CN=68a5f762-93bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:08:a5:a1:c0:59:db:c6:7d:1b:0d:d1:d9:9f: 5c:bb:49:aa:b5:60:55:fa:8c:8b:78:1b:01:d3:aa: e1:f5:f8:f2:17:59:5f:bb:03:5f:cb:e8:3d:f5:25: 5d:a9:00:0a:19:9b:31:f4:be:86:c8:4c:0d:62:ff: 36:aa:5b:6d:2a:fd:d6:39:74:f3:52:f8:af:19:75: d7:75:c9:63:51:e0:68:b6:a9:2b:bd:40:6b:57:98: d7:80:7a:47:4c:ec:c4:bc:09:93:22:d3:70:d0:a2: 8d:df:2a:39:12:c7:9f:6d:47:b0:9f:69:84:aa:66: 75:3d:5c:43:97:1d:3b:98:a2:54:49:85:f6:d7:e6: fe:83:4b:ab:56:ac:dc:a0:c0:29:b2:cc:c4:35:8d: 5a:27:13:e2:91:69:e6:07:f4:9e:b4:11:f1:84:cc: d7:8d:d8:f1:11:6e:bf:d5:68:f8:d5:bf:71:20:8a: cb:79:e3:e5:e6:71:80:ba:aa:f2:1d:a5:7a:f0:69: ce:ed:84:0b:1b:31:b2:3d:c6:af:ac:a2:50:b6:93: af:69:1b:0c:5b:0e:e6:a6:b5:4e:25:2b:d9:a4:7f: 63:c3:94:1d:88:bf:a2:6b:d8:39:08:20:39:fd:ee: a6:95:46:42:16:a8:be:38:f7:5f:f7:a8:04:79:4c: 7e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5F:D5:D2:CD:57:1D:D5:A6:F7:EC:20:16:1E:87:C2:8F:05:F6:F6 X509v3 Authority Key Identifier: keyid:E7:1A:9F:21:4E:80:C9:BC:3B:2D:23:9F:F8:B9:AA:B7:13:F6:ED:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xqfIU6Aybw7LSOf-LmqtxP27bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8525/52212610612F11E7BD2EDA0BC4F9AE02/5xqfIU6Aybw7LSOf-LmqtxP27bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:96:0f:5b:16:eb:06:3a:ca:ec:6c:2d:d9:98:e5:e6:db:c8: a8:42:a9:e9:17:35:02:52:1f:39:c8:d7:58:90:06:3c:1a:d3: 4c:ff:92:95:cd:0f:48:eb:7d:0b:87:94:08:03:8a:db:ee:80: 67:10:86:3d:32:3d:fb:3b:a4:30:94:66:17:97:5d:77:2a:f1: b5:e1:d8:48:07:c0:95:12:7d:36:98:e4:bb:28:e2:fa:cd:07: 7c:bb:c4:c7:51:06:e9:00:07:63:8c:fa:91:87:07:fc:4e:9b: b1:55:38:19:f4:52:7a:ee:ce:43:73:74:3e:33:97:86:34:04: ff:7f:17:62:98:72:e4:1f:02:dd:6d:e0:e4:90:fa:b7:d2:27: 6b:f3:fc:ff:2b:f4:14:44:53:6c:2d:8b:6f:00:f0:a1:97:3a: 56:0a:d6:f6:a0:50:d4:5c:c2:4c:73:80:0c:39:f4:bd:0d:83: 57:ea:0d:37:b3:f3:23:92:74:4d:59:9a:66:9b:17:31:5c:42: 9f:e8:55:24:dd:f0:2a:87:71:c2:a1:f7:95:13:e6:3c:b4:4e: f2:99:e0:91:31:be:51:8a:fc:7e:a4:a0:2f:6d:34:ad:6c:d8: 24:9a:bf:54:0b:e7:2c:6f:e6:a5:69:70:e4:8b:b1:48:67:db: 3e:1a:0a:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1MjUxMTAvBgNVBAUTKEU3MUE5RjIxNEU4MEM5QkMzQjJEMjM5RkY4QjlBQUI3 MTNGNkVEQjcwHhcNMjUwODIwMTYyNzE0WhcNMjUwODI3MTYyNzE0WjAYMRYwFAYD VQQDEw02OGE1Zjc2Mi05M2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wilocBZ28Z9Gw3R2Z9cu0mqtWBV+oyLeBsB06rh9fjyF1lfuwNfy+g99SVd qQAKGZsx9L6GyEwNYv82qlttKv3WOXTzUvivGXXXdcljUeBotqkrvUBrV5jXgHpH TOzEvAmTItNw0KKN3yo5EsefbUewn2mEqmZ1PVxDlx07mKJUSYX21+b+g0urVqzc oMApsszENY1aJxPikWnmB/SetBHxhMzXjdjxEW6/1Wj41b9xIIrLeePl5nGAuqry HaV68GnO7YQLGzGyPcavrKJQtpOvaRsMWw7mprVOJSvZpH9jw5QdiL+ia9g5CCA5 /e6mlUZCFqi+OPdf96gEeUx+oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdf1dLN Vx3VpvfsIBYeh8KPBfb2MB8GA1UdIwQYMBaAFOcanyFOgMm8Oy0jn/i5qrcT9u23 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODUyNS81MjIxMjYxMDYx MkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXlidzdMU09mLUxtcXR4UDI3 YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4cWZJVTZBeWJ3N0xTT2YtTG1xdHhQMjdiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODUyNS81MjIxMjYxMDYxMkYxMUU3QkQyRURBMEJDNEY5QUUwMi81eHFmSVU2QXli dzdMU09mLUxtcXR4UDI3YmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblg9bFusGOsrsbC3ZmOXm28ioQqnpFzUCUh85yNdYkAY8GtNM/5KV zQ9I630Lh5QIA4rb7oBnEIY9Mj37O6QwlGYXl113KvG14dhIB8CVEn02mOS7KOL6 zQd8u8THUQbpAAdjjPqRhwf8TpuxVTgZ9FJ67s5Dc3Q+M5eGNAT/fxdimHLkHwLd beDkkPq30idr8/z/K/QURFNsLYtvAPChlzpWCtb2oFDUXMJMc4AMOfS9DYNX6g03 s/MjknRNWZpmmxcxXEKf6FUk3fAqh3HCofeVE+Y8tE7ymeCRMb5Rivx+pKAvbTSt bNgkmr9UC+csb+alaXDki7FIZ9s+GgoC -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:00 2025 by rpki-client