$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: /0gQ66BPq/wcEOvZWH0uvjnsGy4gny961xniNiSy6lc= Subject key identifier: AE:EB:C3:99:46:7C:37:BF:95:62:09:ED:5B:9A:8B:66:46:98:D5:C8 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: EE Signing time: Sat 23 Aug 2025 05:32:00 +0000 Manifest this update: Sat 23 Aug 2025 05:31:59 +0000 Manifest next update: Sat 30 Aug 2025 05:31:59 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: ZGzaCecy1o18p0kvkEaSZeY8S8vib3WMGtXiuricLAo=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Aug 23 05:31:59 2025 GMT Not After : Aug 30 05:31:59 2025 GMT Subject: CN=68a95250-7c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:4f:29:6b:f3:21:ae:81:c1:b0:e9:5f:3b: be:d1:b4:52:0f:d5:a6:8d:94:1e:b8:d2:68:8b:d5: 51:25:f5:45:d5:8d:8e:fa:17:7a:8d:8f:da:ea:88: ba:82:9b:eb:20:b5:d7:9e:80:ea:e0:00:d6:cc:58: 8b:bc:bb:c2:db:6e:52:e8:16:37:90:80:69:32:75: 5a:fd:37:17:2f:93:e7:f9:b1:a5:c2:60:90:e2:6f: 67:94:f4:0f:60:cb:20:46:6b:32:f0:7e:05:72:91: 17:2c:61:83:07:14:73:a7:dc:0b:62:c6:36:f8:a4: fd:c9:92:99:95:8e:3d:d7:f1:07:87:da:61:e5:de: 1d:2f:42:f2:b5:b1:39:94:49:78:33:cb:8d:28:20: 03:15:eb:86:9e:f1:0e:7c:44:92:05:eb:5f:7b:df: 17:2e:ad:42:82:8b:b3:9d:5e:28:b1:3f:ad:8b:55: 42:fb:73:06:cd:8b:86:36:08:82:9f:9f:fa:66:14: 5d:eb:33:73:22:28:2c:64:15:fb:06:5d:82:d6:c5: 0f:b6:00:1d:05:ab:eb:c3:8e:02:66:1f:3a:65:00: 07:26:01:ad:89:cd:c8:27:ef:26:1c:e6:5b:31:b0: 4f:b6:a7:b1:36:5e:3f:5a:d6:7e:b2:4d:20:26:de: 0c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:C3:99:46:7C:37:BF:95:62:09:ED:5B:9A:8B:66:46:98:D5:C8 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:44:d0:c5:c5:9d:e1:8d:9d:3f:57:53:4d:88:9b:39:1f:f7: 9d:17:6a:04:02:76:6c:20:d3:bb:88:48:f0:1f:4b:9c:9d:24: 80:45:77:72:46:d6:88:5c:f3:15:8f:44:94:80:3e:6e:d8:b1: 0b:e5:6b:d1:ee:bb:00:cd:b5:2c:b6:08:18:41:2f:7a:92:db: 86:71:b7:40:33:3d:db:ea:30:a2:2f:28:de:89:cf:cc:08:96: c4:5a:29:69:9a:3a:d2:25:19:8c:ba:6a:c8:c0:0b:d1:97:27: 30:02:b6:27:fd:19:00:18:03:0d:95:56:c1:96:29:53:9b:22: ac:02:91:ff:f2:a6:76:9b:a5:33:ba:6e:00:a0:21:70:1c:d5: 9c:1d:f6:79:11:b4:51:4b:a4:36:39:a0:d0:c6:d7:41:eb:11: 98:17:05:46:f0:dd:4f:c5:b4:ba:63:15:d5:1e:e6:a2:8a:b3: 86:62:80:b2:4b:c7:12:a8:0d:2c:a1:1c:0d:4d:52:b1:2f:00: fd:b3:9d:08:92:7d:be:c9:2d:5e:31:ad:38:50:b9:de:b0:69: 96:fe:d8:e0:c8:27:ef:c1:7d:32:02:6b:84:a2:18:fe:c7:a8: ec:58:3d:a4:b4:49:ea:a8:8e:28:63:ba:a8:df:c4:c7:f8:fe: 8b:4a:1b:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUwODIzMDUzMTU5WhcNMjUwODMwMDUzMTU5WjAYMRYwFAYD VQQDEw02OGE5NTI1MC03YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzURPKWvzIa6BwbDpXzu+0bRSD9WmjZQeuNJoi9VRJfVF1Y2O+hd6jY/a6oi6 gpvrILXXnoDq4ADWzFiLvLvC225S6BY3kIBpMnVa/TcXL5Pn+bGlwmCQ4m9nlPQP YMsgRmsy8H4FcpEXLGGDBxRzp9wLYsY2+KT9yZKZlY491/EHh9ph5d4dL0LytbE5 lEl4M8uNKCADFeuGnvEOfESSBetfe98XLq1CgouznV4osT+ti1VC+3MGzYuGNgiC n5/6ZhRd6zNzIigsZBX7Bl2C1sUPtgAdBavrw44CZh86ZQAHJgGtic3IJ+8mHOZb MbBPtqexNl4/WtZ+sk0gJt4MfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7rw5lG fDe/lWIJ7Vuai2ZGmNXIMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxRNDFxZ3hjZ0/V1NNiJs5H/edF2oEAnZsINO7iEjwH0ucnSSARXdy RtaIXPMVj0SUgD5u2LEL5WvR7rsAzbUstggYQS96ktuGcbdAMz3b6jCiLyjeic/M CJbEWilpmjrSJRmMumrIwAvRlycwArYn/RkAGAMNlVbBlilTmyKsApH/8qZ2m6Uz um4AoCFwHNWcHfZ5EbRRS6Q2OaDQxtdB6xGYFwVG8N1PxbS6YxXVHuaiirOGYoCy S8cSqA0soRwNTVKxLwD9s50Ikn2+yS1eMa04ULnesGmW/tjgyCfvwX0yAmuEohj+ x6jsWD2ktEnqqI4oY7qo38TH+P6LSht6 -----END CERTIFICATE-----Generated at Sat Aug 23 15:48:58 2025 by rpki-client