$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: iIGi5MJ4thAmg4EnthhJCMxouIZPHAyj3t+L4A+bM3Y= Subject key identifier: 24:E7:61:32:6C:8E:4C:11:C0:A5:78:8C:D6:BA:B2:7B:46:E3:A3:3E Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0974 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 096C Signing time: Mon 08 Sep 2025 20:09:29 +0000 Manifest this update: Mon 08 Sep 2025 20:09:29 +0000 Manifest next update: Mon 15 Sep 2025 20:09:29 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: pkjlirbaQH/4J2Um3clt4yvMchavdL9BH9hO7yhI+Ic=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Sep 8 20:09:29 2025 GMT Not After : Sep 15 20:09:29 2025 GMT Subject: CN=68bf37f9-e133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:ee:b3:cd:04:1c:71:91:ff:48:af:43:de: e3:84:66:df:00:2e:73:0b:c2:21:ff:e7:10:fb:03: 43:7d:e1:16:e4:b1:53:75:67:ef:df:77:c3:55:b1: 05:0d:9e:38:91:86:1f:6d:55:7d:56:19:2e:a1:a2: 7e:8e:ba:df:2f:a2:bd:9f:c5:59:22:79:34:c2:9a: 95:de:59:a0:14:94:2b:34:d6:e8:2d:5f:61:16:c5: ff:c4:bc:d5:e5:d7:f8:ed:cd:d0:b1:74:6c:25:c1: b3:3b:51:5c:04:a7:fb:c2:04:dd:6a:a4:8d:96:5a: 93:65:b6:48:25:8a:af:61:8d:d9:c6:89:2a:fe:ed: 32:18:0d:8c:bd:50:86:76:ac:9f:25:57:d2:f6:93: c2:0a:24:2f:da:15:7a:62:74:88:55:c5:03:07:ed: 3f:4f:7c:b6:eb:4f:d4:63:7d:dc:29:9b:69:fc:9c: 57:fb:bf:10:02:47:c6:50:4a:b1:30:43:e4:c8:8a: 68:f5:49:9a:95:7b:98:3a:3e:75:94:c4:52:95:57: 4e:f9:89:b2:32:11:42:7f:f9:43:66:a9:90:09:a8: ac:9f:2b:ea:70:ac:d3:cf:6d:f5:a9:a6:30:d5:f4: 9e:4c:1f:57:84:43:fd:61:96:70:a2:ef:2c:d5:d3: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:61:32:6C:8E:4C:11:C0:A5:78:8C:D6:BA:B2:7B:46:E3:A3:3E X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:be:06:8e:a7:21:ea:ad:b9:3e:42:38:0e:eb:29:ed:d1:33: c1:88:4e:78:0f:5f:89:4f:3c:11:05:a8:b4:ff:56:bd:d4:f2: dc:97:c7:4c:4d:fb:d1:64:34:8f:93:ce:ac:a8:c2:7e:86:79: 6a:8a:27:cf:9e:4a:4b:31:94:18:6a:08:b1:ab:f0:1b:60:51: 90:7b:49:55:e6:d6:65:c3:6e:50:4f:83:e2:4d:d6:d8:38:e3: 1e:a4:cc:24:f2:dc:d3:19:82:e3:c8:0e:da:04:54:5d:d4:b0: 12:14:9c:40:c8:c7:00:ec:4f:e8:a9:f6:c9:79:04:de:e6:81: 74:cd:22:ac:9a:c9:ae:75:f0:8a:f1:c8:25:cc:61:b8:53:9b: 6d:d9:43:52:d2:f1:90:19:5b:78:c9:c6:5f:a7:ac:7e:d3:b9: 2a:57:53:49:8f:82:9b:e4:2a:02:98:f8:58:32:7f:c1:1f:7c: af:c3:53:0b:59:23:88:c2:93:f0:3f:a8:38:bf:83:7b:fa:48: 0d:d8:c4:d0:01:bf:7d:c2:e2:0b:64:d6:98:27:ca:64:ce:bf: 10:97:7b:58:68:89:27:6a:08:7a:0f:f2:b0:04:7d:04:78:b8: c8:8a:f9:b1:06:a4:c2:96:fa:3d:2e:a0:f2:44:37:cc:7a:54: 40:24:10:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwOTA4MjAwOTI5WhcNMjUwOTE1MjAwOTI5WjAYMRYwFAYD VQQDEw02OGJmMzdmOS1lMTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Unus80EHHGR/0ivQ97jhGbfAC5zC8Ih/+cQ+wNDfeEW5LFTdWfv33fDVbEF DZ44kYYfbVV9VhkuoaJ+jrrfL6K9n8VZInk0wpqV3lmgFJQrNNboLV9hFsX/xLzV 5df47c3QsXRsJcGzO1FcBKf7wgTdaqSNllqTZbZIJYqvYY3Zxokq/u0yGA2MvVCG dqyfJVfS9pPCCiQv2hV6YnSIVcUDB+0/T3y260/UY33cKZtp/JxX+78QAkfGUEqx MEPkyIpo9UmalXuYOj51lMRSlVdO+YmyMhFCf/lDZqmQCaisnyvqcKzTz231qaYw 1fSeTB9XhEP9YZZwou8s1dO0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTnYTJs jkwRwKV4jNa6sntG46M+MB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCvgaOpyHqrbk+QjgO6ynt0TPBiE54D1+JTzwRBai0/1a91PLcl8dM TfvRZDSPk86sqMJ+hnlqiifPnkpLMZQYagixq/AbYFGQe0lV5tZlw25QT4PiTdbY OOMepMwk8tzTGYLjyA7aBFRd1LASFJxAyMcA7E/oqfbJeQTe5oF0zSKsmsmudfCK 8cglzGG4U5tt2UNS0vGQGVt4ycZfp6x+07kqV1NJj4Kb5CoCmPhYMn/BH3yvw1ML WSOIwpPwP6g4v4N7+kgN2MTQAb99wuILZNaYJ8pkzr8Ql3tYaIknagh6D/KwBH0E eLjIivmxBqTClvo9LqDyRDfMelRAJBAz -----END CERTIFICATE-----Generated at Tue Sep 9 09:52:27 2025 by rpki-client