$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft File: 5CHll4Srb9cADNFZcQHsNg3ZQGY.mft (raw, json) Hash identifier: i7SsRePv0zwg0NYpDuxn6UkODYa+5MBFBiqfvVAQaPY= Subject key identifier: 2E:18:88:08:16:8B:57:41:03:D0:4C:79:77:96:DD:FC:4D:71:79:F3 Authority key identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 Certificate issuer: /CN=A91A1E1C/serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft Manifest number: 9E Signing time: Sat 23 Aug 2025 06:34:13 +0000 Manifest this update: Sat 23 Aug 2025 06:34:12 +0000 Manifest next update: Sat 30 Aug 2025 06:34:12 +0000 Files and hashes: 1: 5CHll4Srb9cADNFZcQHsNg3ZQGY.crl (hash: VZ+3ZCkR1fhY1o26fKE9kXn5gvvZy3p2z7fHgflVwAA=) 2: 5BC18D6C9A6C11EF8C656668C4F9AE02.roa (hash: 1ljn9MSckdlGvWQ7HkpY2v8ly/0oxPt9z/n6V7MEeDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Validity Not Before: Aug 23 06:34:12 2025 GMT Not After : Aug 30 06:34:12 2025 GMT Subject: CN=68a960e4-d958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:45:ef:c5:53:c2:75:74:ee:f6:07:8c:6c:96: cd:ef:45:4e:0a:00:20:18:e6:b8:a5:c4:1d:b0:f6: 0d:f3:20:fc:72:16:a0:3c:23:ed:12:c1:c1:0e:51: 95:d8:16:1a:34:73:5c:08:46:a2:8b:85:0a:5a:c9: 0c:e0:5f:a3:d9:34:7b:b6:35:6f:49:fe:59:e9:92: 33:52:45:6c:aa:71:6f:03:f8:7c:10:31:de:56:cc: 9a:89:7e:c9:f1:0e:8a:51:2e:7d:50:93:58:1c:97: 55:3c:9c:ed:9e:d8:7a:07:2b:2f:b8:8d:59:3e:7f: 8e:25:4e:61:23:d6:94:b7:ea:58:08:07:4f:67:c1: 31:42:f7:dd:fb:3c:b4:1c:44:d9:fc:a9:29:c9:b4: 57:55:6f:bb:c0:0b:38:eb:9b:63:23:ce:ea:d9:f7: de:b5:2b:3e:a5:28:ea:32:03:14:bb:9e:c1:18:6f: f8:cd:88:a5:95:e7:78:45:e4:b2:c0:86:3e:01:22: 8e:2e:aa:81:b3:4a:65:9d:b3:45:e2:25:00:82:db: dc:a9:7a:3a:ff:2b:5b:71:97:8c:75:3a:00:96:8f: 00:52:58:fe:b4:9a:7c:9c:cc:99:f4:7d:72:65:d0: 41:f3:eb:6b:f2:30:6e:31:8a:e2:94:e0:d9:e8:cd: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:18:88:08:16:8B:57:41:03:D0:4C:79:77:96:DD:FC:4D:71:79:F3 X509v3 Authority Key Identifier: keyid:E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:26:35:1f:71:5c:f7:ad:f9:c7:63:60:d3:47:e2:5b:60:b1: 0a:ca:9f:77:e0:77:c0:b9:4e:68:91:72:e6:3d:b0:ae:de:fe: 62:88:87:87:f7:05:13:fa:bf:2e:da:3c:4f:a0:f9:38:e1:58: d4:5f:59:f8:ef:78:f5:95:54:0d:a7:e3:65:b5:d8:37:73:8e: f8:cf:e1:3a:bf:45:ba:17:b9:03:48:30:f7:c7:2f:fb:b3:30: 24:8f:14:f1:81:ec:80:4c:ed:26:2c:0c:df:8f:11:ec:bb:ae: 51:6b:e6:8a:16:70:e0:3a:07:9b:a2:da:0d:3d:7c:21:ea:77: c5:d9:f8:59:a5:55:77:31:f8:5e:4a:d8:37:28:d6:19:4b:b6: 1a:de:c5:08:31:65:51:6c:11:2d:8c:de:38:73:bc:7a:bc:30: ad:83:16:cf:78:05:df:18:19:7b:e7:70:55:5a:cc:b7:91:c3: 8f:00:c7:bb:13:76:54:d8:23:aa:3e:5f:39:5c:85:ce:cc:1a: cc:74:78:30:59:60:ee:5e:ca:97:18:d1:50:48:bd:44:cb:74: c3:fd:2c:1e:60:d6:1f:da:b5:bc:f9:a0:30:b7:11:cb:8a:a2: 04:13:a0:99:7a:25:78:5f:d8:1a:e1:ef:0e:fe:ed:5d:b9:b8: f8:c8:bc:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEU0MjFFNTk3ODRBQjZGRDcwMDBDRDE1OTcxMDFFQzM2 MEREOTQwNjYwHhcNMjUwODIzMDYzNDEyWhcNMjUwODMwMDYzNDEyWjAYMRYwFAYD VQQDEw02OGE5NjBlNC1kOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0XvxVPCdXTu9geMbJbN70VOCgAgGOa4pcQdsPYN8yD8chagPCPtEsHBDlGV 2BYaNHNcCEaii4UKWskM4F+j2TR7tjVvSf5Z6ZIzUkVsqnFvA/h8EDHeVsyaiX7J 8Q6KUS59UJNYHJdVPJztnth6BysvuI1ZPn+OJU5hI9aUt+pYCAdPZ8ExQvfd+zy0 HETZ/KkpybRXVW+7wAs465tjI87q2ffetSs+pSjqMgMUu57BGG/4zYilled4ReSy wIY+ASKOLqqBs0plnbNF4iUAgtvcqXo6/ytbcZeMdToAlo8AUlj+tJp8nMyZ9H1y ZdBB8+tr8jBuMYrilODZ6M0TpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4YiAgW i1dBA9BMeXeW3fxNcXnzMB8GA1UdIwQYMBaAFOQh5ZeEq2/XAAzRWXEB7DYN2UBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yNTIyMkQ4MDky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5Y0FETkZaY1FIc05nM1pR R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDSGxsNFNyYjljQURORlpjUUhzTmczWlFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yNTIyMkQ4MDkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5 Y0FETkZaY1FIc05nM1pRR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLJjUfcVz3rfnHY2DTR+JbYLEKyp934HfAuU5okXLmPbCu3v5iiIeH 9wUT+r8u2jxPoPk44VjUX1n473j1lVQNp+Nltdg3c474z+E6v0W6F7kDSDD3xy/7 szAkjxTxgeyATO0mLAzfjxHsu65Ra+aKFnDgOgebotoNPXwh6nfF2fhZpVV3Mfhe Stg3KNYZS7Ya3sUIMWVRbBEtjN44c7x6vDCtgxbPeAXfGBl753BVWsy3kcOPAMe7 E3ZU2COqPl85XIXOzBrMdHgwWWDuXsqXGNFQSL1Ey3TD/SweYNYf2rW8+aAwtxHL iqIEE6CZeiV4X9ga4e8O/u1dubj4yLy4 -----END CERTIFICATE-----Generated at Sat Aug 23 20:29:06 2025 by rpki-client