$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: lglpJ5EdXYj7YDIxqES9UWQXdmZaurv0A+yYAoxRPCw= Subject key identifier: DB:94:57:49:D2:B1:EC:9C:83:3F:D6:3F:37:20:27:62:58:6F:E9:F3 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 09F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 09EB Signing time: Fri 22 Aug 2025 20:01:34 +0000 Manifest this update: Fri 22 Aug 2025 20:01:33 +0000 Manifest next update: Fri 29 Aug 2025 20:01:33 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: N0BTzkUcHH/WrISSi389OAtg2QNRX/JT4dnMNHzZ4t8=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2547 (0x9f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Aug 22 20:01:33 2025 GMT Not After : Aug 29 20:01:33 2025 GMT Subject: CN=68a8cc9d-8b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:7c:2a:21:53:6c:30:e5:52:f0:ec:93:1e: 58:3b:13:f8:29:e0:c0:a9:d2:5a:35:f9:a0:96:f0: c2:83:e3:86:80:49:c1:35:46:0b:d1:15:23:3f:89: 7e:6e:99:d3:b7:bd:cf:50:81:6f:f8:dc:8d:dc:0d: 90:0c:cc:f2:25:b7:d0:2f:aa:fa:82:b3:cc:47:5a: 8d:da:c3:98:29:1c:21:a6:32:a0:c7:ac:62:6c:7d: 95:0e:70:e0:0f:06:25:04:12:82:b7:db:95:21:37: e3:f4:b8:f3:fd:c1:d2:be:f0:14:97:a8:34:72:31: f3:9d:19:8f:bc:9c:2d:61:97:8a:88:a3:49:ec:a7: 9b:0c:d2:6f:a9:f3:42:cd:83:5f:b5:50:01:d4:5b: bb:5f:0b:29:5a:2c:be:28:45:f5:7a:1b:87:1c:72: 28:50:35:bc:53:f6:c8:40:15:2e:b8:81:4f:82:4c: b0:a2:fa:01:4a:00:6f:85:c2:3f:2d:c6:4d:8a:a6: b1:34:8a:be:07:94:df:93:8c:d8:57:db:c5:c6:0a: fa:f7:3f:bf:c8:20:e2:2e:6e:3f:10:ad:f9:4b:8f: cb:57:3b:fb:82:7d:8d:81:62:db:70:93:0c:59:4e: fa:d5:5b:ee:d5:ab:34:9b:3f:11:27:00:1f:1f:c9: fe:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:94:57:49:D2:B1:EC:9C:83:3F:D6:3F:37:20:27:62:58:6F:E9:F3 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:89:ed:11:2b:b9:08:87:2b:ed:89:ac:e8:cb:5d:c0:f2:0c: 1f:32:bc:b8:c7:66:c5:f9:f2:84:67:73:84:9d:84:25:d6:1a: 50:14:93:6c:57:f1:37:e9:cb:3a:16:77:27:8a:3e:fd:34:af: 1d:1a:c9:cb:a0:b3:dc:c9:eb:3a:c1:09:3d:44:80:41:1a:9b: db:03:d2:2a:8e:ed:d3:72:6f:b2:16:56:78:a1:61:c0:86:f4: 3a:0e:8f:58:31:08:43:e3:6f:14:b5:0c:ec:1a:c1:65:2c:94: b1:f5:8a:c0:e0:6e:e7:49:9f:ad:be:05:61:62:40:22:8d:70: 4b:ea:8c:9b:5f:14:17:1b:b7:b0:93:fb:6e:71:01:d2:6e:f9: f0:2c:36:63:e9:7f:08:8e:df:06:bc:ec:90:db:9d:d8:ef:25: 6d:c1:3b:18:c1:e2:0a:93:03:fa:43:95:70:41:1c:82:37:e6: 71:9b:3a:2e:d5:d8:cb:da:56:d4:4c:11:9d:8e:71:25:17:b4: c4:ab:b2:7f:3a:03:9f:6f:76:00:82:8c:fc:b5:1d:b9:2e:c5: 33:44:4e:c8:52:a2:a0:d0:4c:c0:a8:03:d0:b2:ad:74:c5:b8: 16:2f:10:3e:f6:c8:00:ba:31:cd:a4:50:75:f5:c9:c5:0a:4c: 8b:0e:45:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUwODIyMjAwMTMzWhcNMjUwODI5MjAwMTMzWjAYMRYwFAYD VQQDEw02OGE4Y2M5ZC04YjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEh8KiFTbDDlUvDskx5YOxP4KeDAqdJaNfmglvDCg+OGgEnBNUYL0RUjP4l+ bpnTt73PUIFv+NyN3A2QDMzyJbfQL6r6grPMR1qN2sOYKRwhpjKgx6xibH2VDnDg DwYlBBKCt9uVITfj9Ljz/cHSvvAUl6g0cjHznRmPvJwtYZeKiKNJ7KebDNJvqfNC zYNftVAB1Fu7XwspWiy+KEX1ehuHHHIoUDW8U/bIQBUuuIFPgkywovoBSgBvhcI/ LcZNiqaxNIq+B5Tfk4zYV9vFxgr69z+/yCDiLm4/EK35S4/LVzv7gn2NgWLbcJMM WU761Vvu1as0mz8RJwAfH8n+KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuUV0nS seycgz/WPzcgJ2JYb+nzMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBie0RK7kIhyvtiazoy13A8gwfMry4x2bF+fKEZ3OEnYQl1hpQFJNs V/E36cs6Fncnij79NK8dGsnLoLPcyes6wQk9RIBBGpvbA9Iqju3Tcm+yFlZ4oWHA hvQ6Do9YMQhD428UtQzsGsFlLJSx9YrA4G7nSZ+tvgVhYkAijXBL6oybXxQXG7ew k/tucQHSbvnwLDZj6X8Ijt8GvOyQ253Y7yVtwTsYweIKkwP6Q5VwQRyCN+Zxmzou 1djL2lbUTBGdjnElF7TEq7J/OgOfb3YAgoz8tR25LsUzRE7IUqKg0EzAqAPQsq10 xbgWLxA+9sgAujHNpFB19cnFCkyLDkWA -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:15 2025 by rpki-client