$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft File: V1pu0ww3OtQ00VpmXdoudk7Imso.mft (raw, json) Hash identifier: cbWLro/rrPRTonKAzBd17yrm8sDYiw1IETN+mx/B1Mc= Subject key identifier: EE:D4:0C:0C:B2:5D:D1:6F:33:C8:3A:53:AA:14:F1:63:97:F8:CA:33 Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA Certificate issuer: /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft Manifest number: A5 Signing time: Sat 23 Aug 2025 06:29:01 +0000 Manifest this update: Sat 23 Aug 2025 06:29:01 +0000 Manifest next update: Sat 30 Aug 2025 06:29:01 +0000 Files and hashes: 1: V1pu0ww3OtQ00VpmXdoudk7Imso.crl (hash: YHt5ZbX5Y7vGEO4u0G/22dkIfNVbXdc+Gafrq6p8Yv8=) 2: 6F591F00671411F0A568F124C4F9AE02.roa (hash: 4GuAkXkn1/gka3Rv2ul8CZn8e9rkvrUOsh7cZSz/dVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA Validity Not Before: Aug 23 06:29:01 2025 GMT Not After : Aug 30 06:29:01 2025 GMT Subject: CN=68a95fad-87dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:f3:d6:13:4c:27:77:70:e7:87:9b:75:52: 46:03:4d:9f:55:b4:2c:3d:30:69:17:ca:9f:fe:ac: 23:18:51:3d:13:ce:05:65:87:6b:b2:81:52:be:d1: 38:f1:f6:b2:5f:ee:1c:c9:1b:45:21:4c:ab:e6:2c: 48:00:96:62:59:dc:1c:0b:50:01:b8:62:f0:a8:e7: 80:8d:f5:5c:e3:4d:ba:91:3a:ef:4f:55:26:90:98: 14:35:5e:a3:65:a2:6b:3b:82:1c:88:9e:9c:03:12: d2:e3:6b:38:11:72:bd:e3:3e:97:05:a9:0f:9a:23: 29:24:06:1a:a3:0c:ac:f9:c1:89:00:65:cc:ae:e5: 52:46:03:86:f6:db:26:c2:79:63:3c:d8:df:ea:6d: c7:9e:47:1c:b9:9b:92:e0:82:ac:9d:24:a0:83:27: 44:c1:db:9f:8f:04:00:4b:9f:ef:09:c0:b0:32:e4: 10:4e:79:3b:e0:89:a5:a8:76:69:d6:a3:09:c8:c3: a1:b0:9d:2d:8a:db:39:16:78:19:cf:6d:8d:c1:46: dc:c9:7b:ae:39:15:b0:56:de:2c:ce:de:03:c9:17: 82:37:d2:aa:3b:d9:d1:14:cb:91:00:c5:9e:e6:c5: cd:ec:5c:b5:be:f7:1c:5f:96:50:71:7f:02:ba:aa: 08:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D4:0C:0C:B2:5D:D1:6F:33:C8:3A:53:AA:14:F1:63:97:F8:CA:33 X509v3 Authority Key Identifier: keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6e:29:72:6c:62:be:48:a7:8b:6e:32:f9:02:32:99:5e:ac: a2:08:93:76:69:c9:6d:cd:ae:1a:e3:96:f3:24:20:9e:59:5f: 66:49:39:b0:2d:f9:bc:47:d7:99:34:54:3f:3b:06:d9:42:d0: 68:c8:2c:67:d3:88:9c:15:9b:ff:22:0f:ab:9e:c4:e2:8d:a7: fa:f2:11:24:00:04:4f:8f:0e:b1:c2:e8:6a:fb:ab:7f:dd:05: 4d:54:d6:4e:cf:c5:87:24:0d:bc:ba:cf:ec:ec:b3:87:a2:a8: 73:10:c6:22:7a:2f:0e:c0:54:11:cf:ff:6d:63:40:65:3a:ee: be:33:14:40:6d:f2:59:ce:5c:4d:31:a1:7f:61:49:12:50:01: e8:67:29:af:eb:10:b1:36:36:cf:98:d7:8b:99:3a:fd:bd:5c: 95:68:f2:84:1a:75:0c:5f:1a:62:1c:6b:99:83:6e:dd:0b:15: 65:6b:c2:03:52:cd:1d:3c:e0:05:08:37:85:e0:18:c7:57:be: 66:0f:10:b7:5e:69:05:18:0f:b5:75:12:69:10:7f:ec:09:71: 97:1c:f9:5f:05:cd:60:c3:ad:e3:af:23:d7:60:8d:b2:bf:38: cc:9d:6b:6a:14:4d:41:e9:7b:f4:5b:8a:18:3c:57:3f:78:ba: 75:90:19:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3QzUxMTAvBgNVBAUTKDU3NUE2RUQzMEMzNzNBRDQzNEQxNUE2NjVEREEyRTc2 NEVDODlBQ0EwHhcNMjUwODIzMDYyOTAxWhcNMjUwODMwMDYyOTAxWjAYMRYwFAYD VQQDEw02OGE5NWZhZC04N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19vz1hNMJ3dw54ebdVJGA02fVbQsPTBpF8qf/qwjGFE9E84FZYdrsoFSvtE4 8fayX+4cyRtFIUyr5ixIAJZiWdwcC1ABuGLwqOeAjfVc4026kTrvT1UmkJgUNV6j ZaJrO4IciJ6cAxLS42s4EXK94z6XBakPmiMpJAYaowys+cGJAGXMruVSRgOG9tsm wnljPNjf6m3HnkccuZuS4IKsnSSggydEwdufjwQAS5/vCcCwMuQQTnk74ImlqHZp 1qMJyMOhsJ0tits5FngZz22NwUbcyXuuORWwVt4szt4DyReCN9KqO9nRFMuRAMWe 5sXN7Fy1vvccX5ZQcX8CuqoIRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7UDAyy XdFvM8g6U6oU8WOX+MozMB8GA1UdIwQYMBaAFFdabtMMNzrUNNFaZl3aLnZOyJrK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EMDY1QUJCNDhB RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090UTAwVnBtWGRvdWRrN0lt c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1YxcHUwd3czT3RRMDBWcG1YZG91ZGs3SW1zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdDNS9EMDY1QUJCNDhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9WMXB1MHd3M090 UTAwVnBtWGRvdWRrN0ltc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADbilybGK+SKeLbjL5AjKZXqyiCJN2acltza4a45bzJCCeWV9mSTmw Lfm8R9eZNFQ/OwbZQtBoyCxn04icFZv/Ig+rnsTijaf68hEkAARPjw6xwuhq+6t/ 3QVNVNZOz8WHJA28us/s7LOHoqhzEMYiei8OwFQRz/9tY0BlOu6+MxRAbfJZzlxN MaF/YUkSUAHoZymv6xCxNjbPmNeLmTr9vVyVaPKEGnUMXxpiHGuZg27dCxVla8ID Us0dPOAFCDeF4BjHV75mDxC3XmkFGA+1dRJpEH/sCXGXHPlfBc1gw63jryPXYI2y vzjMnWtqFE1B6Xv0W4oYPFc/eLp1kBkr -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:15 2025 by rpki-client