$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: CfIvU/Hn6oDR7GgWemeBveiTAqiYOsEWhwzckr5erkY= Subject key identifier: E9:AA:23:C2:B1:D8:92:3A:B2:E1:73:37:C9:32:33:55:C1:44:5D:E7 Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: 91 Signing time: Sat 23 Aug 2025 06:40:33 +0000 Manifest this update: Sat 23 Aug 2025 06:40:32 +0000 Manifest next update: Sat 30 Aug 2025 06:40:32 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: Tvo8m4oNMP+CGdYALhWEmwk5xBGBBN9wpRUed8OWjl8=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: 03/IZSSaWCkjD0t5R6IQf4NgtsFNdSzPU+q4DaqUlgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Aug 23 06:40:32 2025 GMT Not After : Aug 30 06:40:32 2025 GMT Subject: CN=68a96261-4a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:df:f5:8a:2d:3a:a6:81:0f:fd:60:b0:1a: 12:e7:e4:57:75:87:b9:37:aa:7b:8f:25:70:32:3f: 2e:ab:b5:6c:af:51:20:9b:a9:8b:e2:ae:17:96:49: 9b:c4:60:1f:9d:95:36:1a:d8:ae:06:3d:9b:29:99: e5:da:c9:4d:4c:0a:f0:f4:7d:14:51:1a:75:54:b2: b2:cc:58:ce:36:59:d9:9f:12:a6:1b:fb:17:a1:c3: aa:0d:39:ce:30:16:29:de:41:2c:63:a8:d2:11:78: fd:45:06:28:b8:91:a7:37:0c:b9:11:d8:6d:f4:64: 87:b5:12:a6:bc:b8:0c:52:71:71:69:65:70:ea:93: 20:61:7c:b5:e2:c5:c9:6c:a2:29:fd:32:27:64:d3: 5d:15:52:36:d5:bc:1d:51:8c:25:a3:74:fa:26:02: bd:f4:09:f2:d1:ba:28:7c:fd:27:60:4e:22:90:61: 2d:00:6b:f2:6d:7f:30:d7:59:2b:67:27:47:b9:1c: b1:7b:28:f7:72:0d:24:16:89:28:10:d3:86:56:81: 6f:ac:5d:90:14:e8:4d:03:75:1b:bf:28:6b:b5:b3: fc:4b:4b:f3:44:d3:0f:19:91:bf:d5:a6:a5:30:89: 16:f4:d8:ab:b3:27:5b:ab:6a:87:c1:14:df:19:4e: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AA:23:C2:B1:D8:92:3A:B2:E1:73:37:C9:32:33:55:C1:44:5D:E7 X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:38:da:e7:97:e2:c4:30:9e:97:a5:3e:29:52:6b:91:f3:3a: 65:b2:d1:e7:8f:9d:27:b3:ab:1d:05:dd:27:93:cb:b6:0d:82: ed:7a:f0:d8:4c:79:58:09:92:d4:eb:d1:b8:3c:d8:12:7b:80: 09:65:b9:49:59:53:27:f5:d2:22:84:8b:b8:81:9e:d7:2d:13: 67:0c:33:d1:9d:e0:4f:85:51:b7:8d:c4:cb:b4:53:a6:f7:a0: 90:a2:a2:de:f8:c4:08:11:5e:2d:ef:ce:a4:12:8c:31:3d:84: 8e:0d:27:f0:a2:d9:8a:f6:c1:db:02:b1:63:ba:23:fc:af:55: 6d:43:c3:37:d2:f8:a3:22:f8:e3:76:8f:ac:c4:ed:78:d5:c5: f0:31:f5:ae:55:ed:a3:02:c6:2e:2e:7e:21:52:05:94:c0:86: 30:2d:2c:b9:3c:dc:24:aa:d5:9c:1f:80:8b:1d:9a:25:b9:a9: 1f:4a:27:ae:a0:14:3e:29:7f:1a:0f:d3:58:dc:15:97:83:a4: 93:ba:79:27:2d:77:48:ff:c1:37:01:e1:a9:e2:e7:35:e8:5e: df:bb:4a:b1:1e:5b:46:62:37:45:04:43:db:34:47:cd:85:bf: dd:dc:6a:75:82:3d:c0:4f:be:46:93:91:c6:e9:f5:7a:86:79: 7e:10:7b:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3RkQxMTAvBgNVBAUTKDBBQ0U2RjZBQTZBM0ZBRTI3QTA4NUM3QTEyN0Y5QkM5 OTQyNDUyMTQwHhcNMjUwODIzMDY0MDMyWhcNMjUwODMwMDY0MDMyWjAYMRYwFAYD VQQDEw02OGE5NjI2MS00YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukDf9YotOqaBD/1gsBoS5+RXdYe5N6p7jyVwMj8uq7Vsr1Egm6mL4q4Xlkmb xGAfnZU2GtiuBj2bKZnl2slNTArw9H0UURp1VLKyzFjONlnZnxKmG/sXocOqDTnO MBYp3kEsY6jSEXj9RQYouJGnNwy5Edht9GSHtRKmvLgMUnFxaWVw6pMgYXy14sXJ bKIp/TInZNNdFVI21bwdUYwlo3T6JgK99Any0boofP0nYE4ikGEtAGvybX8w11kr ZydHuRyxeyj3cg0kFokoENOGVoFvrF2QFOhNA3UbvyhrtbP8S0vzRNMPGZG/1aal MIkW9Nirsydbq2qHwRTfGU507wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmqI8Kx 2JI6suFzN8kyM1XBRF3nMB8GA1UdIwQYMBaAFArOb2qmo/rieghcehJ/m8mUJFIU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdGRC9FMjQ1QjVCMkEx NUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11SjZDRng2RW4tYnlaUWtV aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1VoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdGRC9FMjQ1QjVCMkExNUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11 SjZDRng2RW4tYnlaUWtVaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrONrnl+LEMJ6XpT4pUmuR8zplstHnj50ns6sdBd0nk8u2DYLtevDY THlYCZLU69G4PNgSe4AJZblJWVMn9dIihIu4gZ7XLRNnDDPRneBPhVG3jcTLtFOm 96CQoqLe+MQIEV4t786kEowxPYSODSfwotmK9sHbArFjuiP8r1VtQ8M30vijIvjj do+sxO141cXwMfWuVe2jAsYuLn4hUgWUwIYwLSy5PNwkqtWcH4CLHZoluakfSieu oBQ+KX8aD9NY3BWXg6STunknLXdI/8E3AeGp4uc16F7fu0qxHltGYjdFBEPbNEfN hb/d3Gp1gj3AT75Gk5HG6fV6hnl+EHtj -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:31 2025 by rpki-client