$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft File: S5pjiBqFVgIQVOlL3DInTse33fI.mft (raw, json) Hash identifier: gs+ieGGpR+fpZyZitG/W0kMmq7cvF8ld86GG9LQLYnU= Subject key identifier: 9A:BE:C1:BA:CB:92:C7:23:C2:A1:ED:41:8E:67:81:99:CA:3C:15:A3 Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Certificate serial: 0632 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft Manifest number: 0623 Signing time: Mon 08 Sep 2025 22:51:46 +0000 Manifest this update: Mon 08 Sep 2025 22:51:46 +0000 Manifest next update: Mon 15 Sep 2025 22:51:46 +0000 Files and hashes: 1: S5pjiBqFVgIQVOlL3DInTse33fI.crl (hash: C0fstxlHIrGvS8gGONyYCHRMHgu1lWU4ac7C5ixaa/w=) 2: 79F19E0A5BDA11F0980FE961C4F9AE02.roa (hash: HsxGKT/AjI8jr4OZJvk0BqTrzYCNl3TOedPqlsVo7ok=) 3: 410F8C0EDBC611EEA717194DC4F9AE02.roa (hash: WalTM0heTU/pB4x2h5BFYPYTixxcx+WNC43Aop8+j9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1586 (0x632) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD90A, serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2 Validity Not Before: Sep 8 22:51:46 2025 GMT Not After : Sep 15 22:51:46 2025 GMT Subject: CN=68bf5e02-663d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:8b:b3:c1:2f:1a:7e:df:d6:d2:81:41:11: 31:2c:17:6b:2d:92:5e:a0:fc:be:d9:a0:c0:27:6c: 59:1f:56:54:24:69:75:00:8f:eb:3c:db:ab:a2:21: 56:98:de:76:e5:35:22:78:c0:b9:dd:b1:c3:c1:e6: 0a:50:65:6c:16:cf:f2:40:33:cb:b4:6c:d7:bd:34: ec:1b:49:5e:f0:6b:78:92:ed:a5:6d:71:7c:7d:ea: d4:b1:18:f6:21:17:57:da:09:19:c7:8f:9a:81:d4: d0:92:a4:79:d2:c3:64:83:fa:42:d6:3d:0e:1c:85: ff:9f:df:9f:20:ee:7a:e6:89:d4:9c:4b:2a:39:e5: 92:65:1c:5c:a3:6f:74:41:8e:67:c7:3a:bd:47:c3: 72:0d:b4:de:26:cc:16:39:d2:59:68:c9:5b:03:43: f3:fd:5d:8c:11:6e:b4:0d:88:dd:c1:cb:76:6b:1f: 08:f4:19:d9:51:2d:d7:61:94:f4:8e:33:23:f5:a7: ca:5d:21:27:3d:e6:ad:d0:b4:7c:83:35:39:c0:a7: 46:14:69:61:73:56:e2:08:82:0d:7f:76:67:fb:e3: 27:55:a0:5e:e8:1e:73:9d:14:3a:e5:d1:3f:74:c4: bf:4e:a7:d3:b6:84:31:9a:a7:af:b1:b1:16:6c:81: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BE:C1:BA:CB:92:C7:23:C2:A1:ED:41:8E:67:81:99:CA:3C:15:A3 X509v3 Authority Key Identifier: keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:14:af:fa:92:cd:c0:43:ee:a6:9f:50:73:06:62:7b:41:5a: bf:b6:b0:0c:83:9f:64:bd:48:9a:d2:f7:c7:00:5e:54:0b:16: 03:0d:83:6a:81:f9:8e:a3:1b:9f:b4:03:b9:95:fc:e3:f5:b8: f4:14:e8:de:ae:75:6a:05:03:73:b1:18:67:cd:d5:f5:0b:6d: 1c:b4:c0:0f:6d:7f:61:04:45:90:20:d3:83:05:10:a7:3c:00: 97:7a:5d:46:52:48:ab:03:f0:9b:c6:72:9b:26:ec:fe:fe:bf: d2:27:95:ce:45:b5:06:22:16:7a:3d:ee:86:d7:e3:42:0a:67: 7a:17:82:ae:a2:9b:87:d0:56:bf:60:f0:1d:77:9c:ef:bd:5e: 69:a0:f4:73:41:d7:56:af:3b:bf:bc:35:93:8b:ed:d5:43:ee: 61:47:49:cd:b0:b5:b8:0d:32:b9:6a:47:f6:de:ce:a4:41:09: 64:eb:19:2b:a6:b1:7b:ff:a3:33:9f:92:ba:54:d2:5d:45:fe: 65:9b:3b:0c:1b:be:e0:a5:b1:f0:03:a1:87:80:77:b9:99:fb: a3:b9:86:d1:54:3c:ca:26:35:f0:8a:97:47:22:aa:60:eb:0a: 7c:c3:7b:97:f2:e8:a4:f9:cd:92:af:eb:38:bb:75:6b:81:47: 25:58:fe:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ5MEExMTAvBgNVBAUTKDRCOUE2Mzg4MUE4NTU2MDIxMDU0RTk0QkRDMzIyNzRF QzdCN0RERjIwHhcNMjUwOTA4MjI1MTQ2WhcNMjUwOTE1MjI1MTQ2WjAYMRYwFAYD VQQDEw02OGJmNWUwMi02NjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQqLs8EvGn7f1tKBQRExLBdrLZJeoPy+2aDAJ2xZH1ZUJGl1AI/rPNuroiFW mN525TUieMC53bHDweYKUGVsFs/yQDPLtGzXvTTsG0le8Gt4ku2lbXF8ferUsRj2 IRdX2gkZx4+agdTQkqR50sNkg/pC1j0OHIX/n9+fIO565onUnEsqOeWSZRxco290 QY5nxzq9R8NyDbTeJswWOdJZaMlbA0Pz/V2MEW60DYjdwct2ax8I9BnZUS3XYZT0 jjMj9afKXSEnPeat0LR8gzU5wKdGFGlhc1biCIINf3Zn++MnVaBe6B5znRQ65dE/ dMS/TqfTtoQxmqevsbEWbIESLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq+wbrL kscjwqHtQY5ngZnKPBWjMB8GA1UdIwQYMBaAFEuaY4gahVYCEFTpS9wyJ07Ht93y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDkwQS8xN0UyQ0Y1MEI1 QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZnSVFWT2xMM0RJblRzZTMz ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1cGppQnFGVmdJUVZPbEwzREluVHNlMzNmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDkwQS8xN0UyQ0Y1MEI1QzUxMUVCQjU0RTAxNDZDNEY5QUUwMi9TNXBqaUJxRlZn SVFWT2xMM0RJblRzZTMzZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdFK/6ks3AQ+6mn1BzBmJ7QVq/trAMg59kvUia0vfHAF5UCxYDDYNq gfmOoxuftAO5lfzj9bj0FOjernVqBQNzsRhnzdX1C20ctMAPbX9hBEWQINODBRCn PACXel1GUkirA/CbxnKbJuz+/r/SJ5XORbUGIhZ6Pe6G1+NCCmd6F4KuopuH0Fa/ YPAdd5zvvV5poPRzQddWrzu/vDWTi+3VQ+5hR0nNsLW4DTK5akf23s6kQQlk6xkr prF7/6Mzn5K6VNJdRf5lmzsMG77gpbHwA6GHgHe5mfujuYbRVDzKJjXwipdHIqpg 6wp8w3uX8uik+c2Sr+s4u3VrgUclWP7j -----END CERTIFICATE-----Generated at Tue Sep 9 07:48:56 2025 by rpki-client