$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: myXn9WsyOAjJefYvPhXdHC+o7uU97htbqACyeF8nzDY= Subject key identifier: 72:0F:5B:45:F5:07:CB:3E:DC:8C:04:FC:72:D7:57:D9:68:79:1C:38 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: 55 Signing time: Fri 05 Sep 2025 07:45:52 +0000 Manifest this update: Fri 05 Sep 2025 07:45:51 +0000 Manifest next update: Fri 12 Sep 2025 07:45:51 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: pRurnpSfHYzQrIeHNNOu83gihAnM9hy9nIF+2lbUYQ4=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 44vHU0H/9/bs4kOPReZOgC2D0Y7H1F8Nu3vr76cFkxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Sep 5 07:45:51 2025 GMT Not After : Sep 12 07:45:51 2025 GMT Subject: CN=68ba9530-c0a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bc:31:da:3a:95:7a:31:27:b6:48:e6:9d:dc: 37:87:ea:9e:77:78:21:be:0b:67:81:e7:3e:11:e5: 93:df:cb:3a:3e:56:95:54:55:8c:81:49:d1:f1:42: 0d:1f:ea:17:f6:74:c2:c3:75:d0:74:74:70:40:ae: 94:4d:3a:ce:b0:ec:cc:7d:a2:4e:17:a7:dd:28:c4: 58:49:65:11:b8:20:f3:0b:65:90:52:ff:fc:97:e0: c6:21:91:ff:54:73:ba:0b:11:ea:89:d0:85:0c:9d: 4c:64:77:7a:48:30:5e:24:11:7f:3d:77:ae:07:92: 56:7f:52:fb:72:d9:11:e5:6d:15:23:43:7a:6d:98: 73:37:86:b1:d4:f3:57:64:8b:ae:09:69:b7:4d:c1: 3a:4e:e7:8b:37:05:5c:82:0c:3c:40:cb:9e:17:8c: f3:b2:cc:2a:db:81:28:4c:d1:82:fa:b3:64:fe:d6: d6:c6:5d:b8:de:74:50:ce:50:12:47:91:64:29:1f: 52:4e:90:5f:e3:67:c5:d8:70:4c:e2:c9:38:1c:f4: e1:d8:aa:86:9b:42:46:75:d4:94:9b:ba:3b:8e:02: 7b:13:0a:42:4f:22:73:f6:64:c9:6f:94:d2:3a:29: cd:c7:83:1b:bd:48:0a:c5:a5:18:57:16:6e:02:39: ca:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:5B:45:F5:07:CB:3E:DC:8C:04:FC:72:D7:57:D9:68:79:1C:38 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:6c:6c:54:8a:e0:0f:5f:4e:25:2f:0a:96:9c:a2:cb:cc:01: 9a:83:a1:26:dc:fd:eb:79:3b:5c:ff:cd:a1:7d:96:78:d3:f1: cc:bd:b4:9a:fd:4c:e2:ea:88:32:5c:bb:e7:90:cb:89:64:b0: 10:e3:a2:d5:ba:6c:14:92:b0:92:a5:72:38:9a:46:61:e9:a5: a7:df:40:8f:9d:6f:fb:c0:39:76:36:0b:09:29:f8:d7:3d:ae: f4:ac:c6:5a:d8:49:4b:91:2e:88:2c:13:7f:b0:51:fe:b8:7f: 70:8f:f1:50:c4:97:20:bb:4b:1a:e3:96:69:32:aa:a6:c5:b6: 62:8a:59:01:57:53:cd:2d:66:4f:98:14:7a:ad:0a:f2:55:e4: 25:60:fe:53:b5:69:4e:48:5e:e5:ce:52:bb:80:10:c0:d9:47: 67:7d:c6:93:12:37:9a:47:74:b0:dd:ab:05:4f:39:25:85:03: 53:56:de:27:65:64:1a:d6:c4:08:ed:5c:f8:4f:1a:5d:4c:62: 02:26:87:8c:fc:82:78:90:b0:4b:5c:60:a7:4a:c9:b3:c4:e8: 2f:a0:d3:d6:e3:09:65:95:33:d6:2d:61:07:6e:92:01:d0:f5: af:2b:54:1f:0b:12:9c:1f:2a:b7:c8:10:c3:b4:b7:18:e1:08: 40:76:9c:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODVGMTExMC8GA1UEBRMoRTRFNEMyNDI0Nzc4NUMzNDJGRjM1OTA3RjdFMTFDNEFC QjM5OEI4MzAeFw0yNTA5MDUwNzQ1NTFaFw0yNTA5MTIwNzQ1NTFaMBgxFjAUBgNV BAMTDTY4YmE5NTMwLWMwYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWvDHaOpV6MSe2SOad3DeH6p53eCG+C2eB5z4R5ZPfyzo+VpVUVYyBSdHxQg0f 6hf2dMLDddB0dHBArpRNOs6w7Mx9ok4Xp90oxFhJZRG4IPMLZZBS//yX4MYhkf9U c7oLEeqJ0IUMnUxkd3pIMF4kEX89d64HklZ/Uvty2RHlbRUjQ3ptmHM3hrHU81dk i64JabdNwTpO54s3BVyCDDxAy54XjPOyzCrbgShM0YL6s2T+1tbGXbjedFDOUBJH kWQpH1JOkF/jZ8XYcEziyTgc9OHYqoabQkZ11JSbujuOAnsTCkJPInP2ZMlvlNI6 Kc3Hgxu9SArFpRhXFm4COcrdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcg9bRfUH yz7cjAT8ctdX2Wh5HDgwHwYDVR0jBBgwFoAU5OTCQkd4XDQv81kH9+EcSrs5i4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NUYxLzYyMjA2MzNDMERG QzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU9UQ1FrZDRYRFF2ODFrSDktRWNTcnM1aTRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NUYxLzYyMjA2MzNDMERGQzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERR djgxa0g5LUVjU3JzNWk0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK1sbFSK4A9fTiUvCpacosvMAZqDoSbc/et5O1z/zaF9lnjT8cy9tJr9 TOLqiDJcu+eQy4lksBDjotW6bBSSsJKlcjiaRmHppaffQI+db/vAOXY2Cwkp+Nc9 rvSsxlrYSUuRLogsE3+wUf64f3CP8VDElyC7SxrjlmkyqqbFtmKKWQFXU80tZk+Y FHqtCvJV5CVg/lO1aU5IXuXOUruAEMDZR2d9xpMSN5pHdLDdqwVPOSWFA1NW3idl ZBrWxAjtXPhPGl1MYgImh4z8gniQsEtcYKdKybPE6C+g09bjCWWVM9YtYQdukgHQ 9a8rVB8LEpwfKrfIEMO0txjhCEB2nAk= -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:33 2025 by rpki-client