$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: A2JXsrDA9q8vRG6tZCUecVmdKg0gIFILRKs2E0oIrFQ= Subject key identifier: FF:42:39:7C:DD:94:D3:BB:E6:18:0F:53:C8:8E:E2:CB:B1:99:EA:CC Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 08C9 Signing time: Fri 22 Aug 2025 20:34:27 +0000 Manifest this update: Fri 22 Aug 2025 20:34:26 +0000 Manifest next update: Fri 29 Aug 2025 20:34:26 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: x9KnFjiNNLfiNfMpnlMBSi9EHl2iGKQ6J+YuIEVPsWI=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Aug 22 20:34:26 2025 GMT Not After : Aug 29 20:34:26 2025 GMT Subject: CN=68a8d452-653f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:ed:8d:63:dc:0c:68:49:ce:32:b8:49:f4: c2:c6:db:be:f8:b5:44:7b:04:22:e0:fe:4f:d0:bf: 1b:24:50:bf:17:4b:07:bd:d6:d3:bd:a3:b5:54:e9: 2d:e8:b9:d9:5a:ee:0e:eb:60:a8:77:c4:bf:72:09: 3f:85:9a:86:7a:c8:43:d6:6f:5d:b2:45:08:be:3d: 59:4c:7b:e3:d6:c1:ff:ec:dd:b7:ec:9a:d9:77:29: 7c:7a:06:c5:b5:a2:01:e1:33:4e:5f:a9:79:a0:3a: cb:33:f6:93:98:8e:62:aa:53:6f:9b:14:b6:7a:4a: 14:96:d6:76:6a:32:8e:07:fd:79:0d:fa:69:72:e6: f6:14:09:7d:62:22:ce:f6:5b:e8:79:63:76:f4:fc: e9:89:36:d8:43:79:96:e3:76:77:5f:a3:e1:f2:c8: d9:ab:5f:9a:0f:ca:5d:61:fe:da:52:da:09:31:15: 08:72:bd:3e:67:c8:f8:c9:9a:49:f5:06:47:53:f2: ac:03:94:8f:41:12:e8:f6:3b:ac:2c:10:84:93:b9: 9e:c1:ef:5c:17:4d:04:2f:32:1a:bd:e1:66:ea:11: 1a:98:6b:eb:68:70:f0:59:05:f5:38:42:e3:19:c0: 2d:92:6f:b7:77:b1:ef:1a:32:30:da:7c:9b:f3:66: c4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:42:39:7C:DD:94:D3:BB:E6:18:0F:53:C8:8E:E2:CB:B1:99:EA:CC X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:7a:30:81:ae:81:11:31:0d:e2:44:46:4a:98:68:19:04:29: 6f:1e:24:28:b8:06:c4:25:2c:9e:1c:4d:40:06:d3:13:73:4f: 0f:ca:50:9c:80:3c:37:a8:a5:fd:b5:c8:a3:7b:f3:99:7e:e0: 4b:fc:c6:35:79:e6:45:4b:6e:96:20:2a:bb:14:b6:88:63:4c: 1e:4b:f8:2b:58:42:46:42:7f:82:4f:e0:1f:72:da:56:b4:64: b8:ab:bd:63:7a:67:af:54:36:a6:c3:83:b3:31:0b:77:31:3a: 43:92:95:86:62:48:4d:d5:27:4b:53:7b:e4:17:08:f5:20:f1: f7:1c:37:f8:0e:bf:e1:56:ce:d2:87:6e:26:20:56:2a:b2:24: 6a:9c:17:61:48:60:b1:b2:31:cd:75:5a:b3:c2:12:4f:76:ad: c7:4c:f7:9c:76:22:32:06:2f:06:49:10:9e:d1:42:21:42:b2: 13:d0:af:a8:86:0e:82:d3:21:00:8b:ff:ed:d1:ea:c8:8b:aa: c6:69:0d:14:fc:9a:97:5c:54:06:17:ef:3a:c7:fc:fb:5d:04: 3f:25:2d:62:68:f8:7c:1e:ea:b7:e6:29:52:98:e9:dd:57:db: 71:76:61:2e:26:7d:f9:00:bd:3c:7d:ca:f3:56:f6:be:10:65: cf:42:b8:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUwODIyMjAzNDI2WhcNMjUwODI5MjAzNDI2WjAYMRYwFAYD VQQDEw02OGE4ZDQ1Mi02NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdXtjWPcDGhJzjK4SfTCxtu++LVEewQi4P5P0L8bJFC/F0sHvdbTvaO1VOkt 6LnZWu4O62Cod8S/cgk/hZqGeshD1m9dskUIvj1ZTHvj1sH/7N237JrZdyl8egbF taIB4TNOX6l5oDrLM/aTmI5iqlNvmxS2ekoUltZ2ajKOB/15Dfppcub2FAl9YiLO 9lvoeWN29PzpiTbYQ3mW43Z3X6Ph8sjZq1+aD8pdYf7aUtoJMRUIcr0+Z8j4yZpJ 9QZHU/KsA5SPQRLo9jusLBCEk7mewe9cF00ELzIaveFm6hEamGvraHDwWQX1OELj GcAtkm+3d7HvGjIw2nyb82bE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9COXzd lNO75hgPU8iO4suxmerMMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3ejCBroERMQ3iREZKmGgZBClvHiQouAbEJSyeHE1ABtMTc08PylCc gDw3qKX9tcije/OZfuBL/MY1eeZFS26WICq7FLaIY0weS/grWEJGQn+CT+AfctpW tGS4q71jemevVDamw4OzMQt3MTpDkpWGYkhN1SdLU3vkFwj1IPH3HDf4Dr/hVs7S h24mIFYqsiRqnBdhSGCxsjHNdVqzwhJPdq3HTPecdiIyBi8GSRCe0UIhQrIT0K+o hg6C0yEAi//t0erIi6rGaQ0U/JqXXFQGF+86x/z7XQQ/JS1iaPh8Huq35ilSmOnd V9txdmEuJn35AL08fcrzVva+EGXPQrhW -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:18 2025 by rpki-client