$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft File: -H8wma149Ynd_kql85E3_7Mq_54.mft (raw, json) Hash identifier: nNxlNVnHiRtG5J8TQ3/2G27zmOh7e+MnxfCSrg21Btk= Subject key identifier: 4F:61:B5:6F:74:1C:21:6F:D7:9C:86:F2:3F:B3:B4:B0:A8:78:27:BF Authority key identifier: F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E Certificate issuer: /CN=A91F17B3/serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft Manifest number: 05 Signing time: Thu 21 Aug 2025 08:23:36 +0000 Manifest this update: Thu 21 Aug 2025 08:23:36 +0000 Manifest next update: Thu 28 Aug 2025 08:23:36 +0000 Files and hashes: 1: -H8wma149Ynd_kql85E3_7Mq_54.crl (hash: hvkyL70jTurb4eyFWjboQerfiTA8GUCi8L1iJ5VXPBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E Validity Not Before: Aug 21 08:23:36 2025 GMT Not After : Aug 28 08:23:36 2025 GMT Subject: CN=68a6d788-08e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:29:91:cd:13:61:42:15:6b:d5:90:78:b1: e1:ef:c0:a8:8f:ed:4f:fc:8d:a7:13:7b:f8:2d:e0: d7:94:e5:8a:7b:91:e9:e4:80:8d:98:e3:09:c5:78: 31:7b:f3:69:e2:91:73:c5:2f:63:28:ce:00:3c:06: 91:aa:f5:25:f7:1c:6a:10:36:10:6c:17:04:df:16: 05:53:37:80:49:cf:2c:25:65:df:14:60:8e:c0:d7: b4:1c:e8:f4:de:4f:be:53:0e:63:6f:f7:04:42:78: fc:01:19:46:f4:eb:e5:b6:b4:71:f2:a2:67:8a:f6: f3:9b:19:6f:7f:fd:de:32:b3:ed:da:07:e4:30:2f: 46:8a:97:e0:82:a3:14:1a:aa:71:30:95:b8:28:d5: ba:0a:a7:63:92:de:f6:41:76:2e:b2:e4:a9:9f:96: 7a:ab:2b:2e:06:ef:31:29:66:a9:a1:a9:71:4e:ee: 39:3f:9f:bc:1b:84:f0:32:0e:94:39:0c:87:27:9c: 11:8c:4a:25:11:8b:32:fc:b1:38:08:b9:f0:51:ab: b6:0d:0d:77:d8:3a:bd:00:b2:63:0b:39:65:2d:f5: 61:ce:a1:f5:ad:f6:e0:bb:5f:26:31:4b:22:26:07: 4e:7a:36:05:88:19:28:7e:ee:5c:b6:07:f3:d7:a7: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:61:B5:6F:74:1C:21:6F:D7:9C:86:F2:3F:B3:B4:B0:A8:78:27:BF X509v3 Authority Key Identifier: keyid:F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b9:e3:d5:9f:4e:68:19:2d:d6:4b:1f:de:aa:c3:db:51:22: a7:bb:42:0f:d0:e5:32:cd:0a:5b:06:e3:be:f9:98:73:12:e6: 99:ac:53:c4:b7:a9:2e:8e:59:26:42:cc:96:d0:1c:09:e6:eb: 3d:d1:78:5e:05:62:86:11:eb:0e:ed:af:b4:61:06:a9:bd:20: c9:c4:e4:07:fb:2e:11:bf:37:eb:ad:6e:74:d1:d7:3a:04:4e: 55:6d:31:d5:16:9e:a3:f8:22:d5:5d:1a:8e:e5:1f:23:ec:d2: dc:38:e3:1e:62:17:7b:33:ff:75:81:48:32:26:f7:e2:0b:2c: 49:c5:d7:ad:8d:16:69:21:ee:fe:42:44:76:7d:66:51:f3:67: d2:cc:ba:07:0d:56:09:cc:ef:c7:10:c9:84:21:40:0e:0f:f5: df:2a:15:e4:0e:77:6f:ed:94:ae:e0:40:86:6c:b1:08:ea:fc: 0b:11:00:f0:d1:cc:26:bd:b9:ab:be:0b:fd:8f:6a:f3:34:0a: 4a:88:05:d2:11:76:9e:d3:0b:88:a1:92:73:d3:81:58:bf:10: 8f:10:01:03:33:19:84:84:0e:51:05:8a:41:d7:be:45:d6:7b: ec:2c:d7:04:b9:19:a6:3c:fc:97:46:b5:2f:98:84:7c:09:84: f7:0e:af:30 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoRjg3RjMwOTlBRDc4RjU4OURERkU0QUE1RjM5MTM3RkZC MzJBRkY5RTAeFw0yNTA4MjEwODIzMzZaFw0yNTA4MjgwODIzMzZaMBgxFjAUBgNV BAMTDTY4YTZkNzg4LTA4ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK+imRzRNhQhVr1ZB4seHvwKiP7U/8jacTe/gt4NeU5Yp7kenkgI2Y4wnFeDF7 82nikXPFL2MozgA8BpGq9SX3HGoQNhBsFwTfFgVTN4BJzywlZd8UYI7A17Qc6PTe T75TDmNv9wRCePwBGUb06+W2tHHyomeK9vObGW9//d4ys+3aB+QwL0aKl+CCoxQa qnEwlbgo1boKp2OS3vZBdi6y5KmflnqrKy4G7zEpZqmhqXFO7jk/n7wbhPAyDpQ5 DIcnnBGMSiURizL8sTgIufBRq7YNDXfYOr0AsmMLOWUt9WHOofWt9uC7XyYxSyIm B056NgWIGSh+7ly2B/PXp29PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT2G1b3Qc IW/XnIbyP7O0sKh4J78wHwYDVR0jBBgwFoAU+H8wma149Ynd/kql85E3/7Mq/54w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzVFNTA5NUM4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyLy1IOHdtYTE0OVluZF9rcWw4NUUzXzdNcV81 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUg4d21hMTQ5WW5kX2txbDg1RTNfN01xXzU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzVFNTA5NUM4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyLy1IOHdtYTE0OVlu ZF9rcWw4NUUzXzdNcV81NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKa549WfTmgZLdZLH96qw9tRIqe7Qg/Q5TLNClsG4775mHMS5pmsU8S3 qS6OWSZCzJbQHAnm6z3ReF4FYoYR6w7tr7RhBqm9IMnE5Af7LhG/N+utbnTR1zoE TlVtMdUWnqP4ItVdGo7lHyPs0tw44x5iF3sz/3WBSDIm9+ILLEnF162NFmkh7v5C RHZ9ZlHzZ9LMugcNVgnM78cQyYQhQA4P9d8qFeQOd2/tlK7gQIZssQjq/AsRAPDR zCa9uau+C/2PavM0CkqIBdIRdp7TC4ihknPTgVi/EI8QAQMzGYSEDlEFikHXvkXW e+ws1wS5GaY8/JdGtS+YhHwJhPcOrzA= -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:10 2025 by rpki-client