$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft File: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json) Hash identifier: QifmXrkRJHecoVpuX2uQWLmIxurqmiNcPFbFxfPhgIU= Subject key identifier: 8E:6C:E6:2C:FE:86:EA:20:45:21:74:1A:C8:2F:B3:3B:52:D9:18:94 Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7 Certificate issuer: /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7 Certificate serial: 0810 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft Manifest number: 0809 Signing time: Mon 08 Sep 2025 20:55:50 +0000 Manifest this update: Mon 08 Sep 2025 20:55:50 +0000 Manifest next update: Mon 15 Sep 2025 20:55:50 +0000 Files and hashes: 1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: jZn4iTIkLpYl8NsTidgCEGr3rfAP5chQA2T6OJEEL6o=) 2: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: T4mDZ210SpDVRfUxvUs173RpQ0D7OXBy/5JPPZDEJ78=) 3: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: 6wXXxuIxd9enMsyVcB9pxqsVVca0vy4SEk/LuQef8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2064 (0x810) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7 Validity Not Before: Sep 8 20:55:50 2025 GMT Not After : Sep 15 20:55:50 2025 GMT Subject: CN=68bf42d6-1e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:85:a9:75:6f:6c:6c:11:5f:c8:37:d4:6b: 9f:03:c8:b2:7a:a4:2a:f4:cc:59:0d:99:1c:1c:30: 08:e8:5e:c4:e3:0c:6d:ae:20:93:cc:21:21:a0:19: 34:4b:27:d9:c0:94:c3:9e:af:1f:72:d8:d3:61:94: 54:55:04:6a:17:79:20:aa:5a:dc:73:d1:88:8b:10: 2d:3d:8f:48:b4:09:15:f8:a3:38:48:fb:23:67:bb: 13:5f:c9:8f:20:04:65:fb:a2:a5:69:32:7b:86:64: 8c:10:75:38:74:88:3c:6c:c6:3b:2b:1e:d4:05:79: 31:44:bc:c5:62:a3:b8:b8:fc:86:94:57:f7:ca:79: 2b:f5:24:82:30:95:8e:de:ba:54:7c:ef:58:bb:59: 0b:00:bd:6c:1c:0c:64:79:48:be:65:69:e2:ce:55: c0:ec:b4:c0:30:9a:d2:8f:1f:9a:d3:e7:e4:40:85: 27:a1:87:cc:22:97:b3:c8:fd:aa:15:1b:09:bb:8c: 73:1a:e3:50:0c:05:ac:19:d7:da:b9:fe:5e:1b:8d: c7:e6:0c:95:e8:c3:4a:08:0d:21:94:20:a2:be:ea: 9d:59:94:c7:ad:53:ea:dd:4d:7a:45:4e:26:25:2b: 72:c3:27:0a:6e:36:34:18:f9:04:c0:61:ea:d5:96: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:E6:2C:FE:86:EA:20:45:21:74:1A:C8:2F:B3:3B:52:D9:18:94 X509v3 Authority Key Identifier: keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ff:ad:92:27:9c:e6:af:d7:1b:c0:fc:c0:c8:48:dc:8d:7c: 5e:08:41:7d:3c:aa:54:71:35:92:cc:52:24:2b:0a:15:d0:02: 62:55:fd:67:a7:5c:76:9e:c9:1c:3c:c6:a9:70:6a:7c:d4:e9: 57:ba:18:bc:6b:47:63:13:93:3a:58:af:60:07:69:77:30:25: 24:f0:79:c3:60:9b:e3:5b:8f:be:be:d2:a5:29:46:ce:47:46: fd:11:e1:34:1a:9a:cb:e4:bb:c0:fe:ec:94:3f:20:2f:b4:87: a5:77:f3:67:43:45:8e:7e:c1:9b:07:07:0b:2b:db:95:ba:2c: 77:95:1e:10:06:df:2b:d4:05:09:a3:1d:34:9d:19:95:68:12: 46:a4:44:69:ba:26:55:95:c2:7d:bf:2d:fa:d4:7e:e2:8a:83: 65:d4:33:05:7a:a6:4b:a7:3d:8f:a7:3d:c2:4d:4f:df:4a:65: f5:e8:63:7d:a7:b8:9c:24:c0:77:d2:b5:28:c2:c2:ec:f5:05: 85:3a:7e:37:30:34:81:48:97:98:00:71:ee:54:b6:38:7b:ac: 29:8e:fd:43:55:c2:be:10:a7:28:2a:55:9d:7d:d7:06:74:8b: ef:88:57:41:12:68:a1:84:57:09:cd:49:f8:48:f5:87:6d:75: 25:73:89:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY4RDYxMTAvBgNVBAUTKDRCOTc4NDE1RTE2N0RCMjYzRUYyNjQ5QTFDM0I4QkIy RDQzRjYxQjcwHhcNMjUwOTA4MjA1NTUwWhcNMjUwOTE1MjA1NTUwWjAYMRYwFAYD VQQDEw02OGJmNDJkNi0xZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTmFqXVvbGwRX8g31GufA8iyeqQq9MxZDZkcHDAI6F7E4wxtriCTzCEhoBk0 SyfZwJTDnq8fctjTYZRUVQRqF3kgqlrcc9GIixAtPY9ItAkV+KM4SPsjZ7sTX8mP IARl+6KlaTJ7hmSMEHU4dIg8bMY7Kx7UBXkxRLzFYqO4uPyGlFf3ynkr9SSCMJWO 3rpUfO9Yu1kLAL1sHAxkeUi+ZWnizlXA7LTAMJrSjx+a0+fkQIUnoYfMIpezyP2q FRsJu4xzGuNQDAWsGdfauf5eG43H5gyV6MNKCA0hlCCivuqdWZTHrVPq3U16RU4m JStywycKbjY0GPkEwGHq1ZaEEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5s5iz+ huogRSF0GsgvsztS2RiUMB8GA1UdIwQYMBaAFEuXhBXhZ9smPvJkmhw7i7LUP2G3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhENi80RDQyRjU2Q0Yx QTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5WS04bVNhSER1THN0UV9Z YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1ZUVGZUZuMnlZLThtU2FIRHVMc3RRX1liYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjhENi80RDQyRjU2Q0YxQTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5 WS04bVNhSER1THN0UV9ZYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6/62SJ5zmr9cbwPzAyEjcjXxeCEF9PKpUcTWSzFIkKwoV0AJiVf1n p1x2nskcPMapcGp81OlXuhi8a0djE5M6WK9gB2l3MCUk8HnDYJvjW4++vtKlKUbO R0b9EeE0GprL5LvA/uyUPyAvtIeld/NnQ0WOfsGbBwcLK9uVuix3lR4QBt8r1AUJ ox00nRmVaBJGpERpuiZVlcJ9vy361H7iioNl1DMFeqZLpz2Ppz3CTU/fSmX16GN9 p7icJMB30rUowsLs9QWFOn43MDSBSJeYAHHuVLY4e6wpjv1DVcK+EKcoKlWdfdcG dIvviFdBEmihhFcJzUn4SPWHbXUlc4kf -----END CERTIFICATE-----Generated at Tue Sep 9 15:46:30 2025 by rpki-client