$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json) Hash identifier: EVUQc9nb/LSNTYgvUQReQnrQBn65uxbBRm4agpshYgw= Subject key identifier: 99:7A:C8:4E:10:C3:F9:64:AD:55:56:BA:CA:27:7D:7B:0B:2D:8B:44 Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft Manifest number: FD Signing time: Sat 23 Aug 2025 05:18:38 +0000 Manifest this update: Sat 23 Aug 2025 05:18:38 +0000 Manifest next update: Sat 30 Aug 2025 05:18:38 +0000 Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: Hf2BVmY3m1R47DfcsKlENr/5J1JVH1g+JcGEH9/RhE0=) 2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: N/lCfyLCfQ6pGJZnFWlWQxmi4U70D1DfmNioR3drqK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525 Validity Not Before: Aug 23 05:18:38 2025 GMT Not After : Aug 30 05:18:38 2025 GMT Subject: CN=68a94f2e-ddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b9:df:d5:d4:82:b3:7e:56:75:be:31:62:42: cc:d0:27:49:97:fc:48:90:6a:b7:30:f2:d6:d1:97: 74:55:91:b1:72:94:f1:df:34:f6:63:e0:40:22:7e: 01:99:98:5e:5d:7d:26:ef:5b:b8:97:38:1f:0f:51: ab:36:bb:0b:ce:c0:c6:6f:7a:59:77:c9:de:44:24: 4e:45:3a:1c:7d:bd:cc:69:7e:85:95:33:76:f0:e7: 8a:08:ab:ee:a4:91:cf:b3:5f:2e:c7:ae:d4:39:6e: 8e:89:41:30:88:cd:f3:f0:57:ec:1f:28:62:d0:06: 10:d4:20:57:a3:33:9a:48:c7:be:29:c7:e1:7c:24: 3e:da:e8:b2:66:19:ca:f3:9a:86:50:87:42:6b:ff: 8f:b7:89:37:7f:f1:d0:75:56:13:f5:0e:c2:f7:ce: cb:26:0e:63:6e:8d:50:19:e0:d4:a5:ac:b5:bb:65: 66:25:9e:20:12:82:fa:dd:3a:9e:44:55:d6:51:5a: e1:73:4c:5f:bd:98:45:4c:f7:bd:48:e5:f4:60:9d: 0e:ba:dd:b0:67:af:4a:b7:06:14:64:42:82:be:8b: 45:78:65:e7:b2:bb:35:3c:3a:8d:2f:3a:c7:dd:19: 99:1a:a5:80:56:58:02:7f:c7:20:89:54:55:40:8a: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7A:C8:4E:10:C3:F9:64:AD:55:56:BA:CA:27:7D:7B:0B:2D:8B:44 X509v3 Authority Key Identifier: keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c9:bc:ff:39:ea:ea:8d:51:8c:ab:04:1f:8f:6d:dc:17:57: 07:76:3c:e8:66:b7:6b:ad:f2:89:4e:af:f6:4f:09:c0:cd:28: 79:9c:f7:3b:3a:f4:f4:3e:ba:a4:50:b4:ba:0e:de:39:0e:a9: e6:c6:c5:8c:b2:2b:ec:8f:23:7e:0e:2d:0f:43:01:9e:e8:b5: 67:2f:76:a7:97:fd:d0:a4:c9:82:4f:9b:97:b2:1d:40:4e:1f: 5c:ca:9c:04:fe:ba:31:fc:df:ae:27:4c:9e:d8:2e:e8:74:18: df:3b:ca:fc:8f:0f:fd:f5:5a:5d:fd:ce:45:6e:92:cc:d0:5e: 6b:10:44:6f:29:19:ae:be:ec:50:48:15:8f:5f:17:59:78:13: 88:98:95:79:24:dd:2d:d0:a4:bc:00:90:5a:d6:7c:66:6e:ca: 2d:d7:56:14:2f:ac:a1:20:d6:f5:e9:79:e3:47:b1:32:06:21: 63:81:a0:3d:ab:2b:cf:db:2f:ba:a3:5f:e2:d6:dd:10:9e:28: 1a:c3:ac:a1:b5:2e:38:bf:9a:2d:f4:e4:72:a0:75:42:b7:14: 6e:ab:a8:a7:35:71:4c:d5:d2:7b:26:cf:d7:93:81:ff:e4:2c: df:8a:b0:bf:01:45:90:01:ce:d8:12:11:f3:8a:40:2c:a8:56: e4:cf:6f:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcyRTYxMTAvBgNVBAUTKEU0NkVBQ0RDMjE0Mzg1QzE0MjAzNDY3NEU0NkM2OEU3 QkJFMjk1MjUwHhcNMjUwODIzMDUxODM4WhcNMjUwODMwMDUxODM4WjAYMRYwFAYD VQQDEw02OGE5NGYyZS1kZGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67nf1dSCs35Wdb4xYkLM0CdJl/xIkGq3MPLW0Zd0VZGxcpTx3zT2Y+BAIn4B mZheXX0m71u4lzgfD1GrNrsLzsDGb3pZd8neRCRORTocfb3MaX6FlTN28OeKCKvu pJHPs18ux67UOW6OiUEwiM3z8FfsHyhi0AYQ1CBXozOaSMe+KcfhfCQ+2uiyZhnK 85qGUIdCa/+Pt4k3f/HQdVYT9Q7C987LJg5jbo1QGeDUpay1u2VmJZ4gEoL63Tqe RFXWUVrhc0xfvZhFTPe9SOX0YJ0Out2wZ69KtwYUZEKCvotFeGXnsrs1PDqNLzrH 3RmZGqWAVlgCf8cgiVRVQIrPbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJl6yE4Q w/lkrVVWusonfXsLLYtEMB8GA1UdIwQYMBaAFORurNwhQ4XBQgNGdORsaOe74pUl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzJFNi9GMzU5MDgyNEZE RTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhjRkNBMFowNUd4bzU3dmls U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhj RkNBMFowNUd4bzU3dmlsU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNybz/OerqjVGMqwQfj23cF1cHdjzoZrdrrfKJTq/2TwnAzSh5nPc7 OvT0PrqkULS6Dt45DqnmxsWMsivsjyN+Di0PQwGe6LVnL3anl/3QpMmCT5uXsh1A Th9cypwE/rox/N+uJ0ye2C7odBjfO8r8jw/99Vpd/c5FbpLM0F5rEERvKRmuvuxQ SBWPXxdZeBOImJV5JN0t0KS8AJBa1nxmbsot11YUL6yhINb16XnjR7EyBiFjgaA9 qyvP2y+6o1/i1t0Qnigaw6yhtS44v5ot9ORyoHVCtxRuq6inNXFM1dJ7Js/Xk4H/ 5CzfirC/AUWQAc7YEhHzikAsqFbkz2/u -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:49 2025 by rpki-client