$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft File: 5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json) Hash identifier: nxcSw7ml6cPnpKT75Ydun30H1G9WzX5+vM0Du2hPwPw= Subject key identifier: 70:00:35:A7:B1:7A:8C:CA:D6:D9:45:AB:64:E0:A7:13:C5:34:42:D4 Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 Certificate issuer: /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft Manifest number: 029E Signing time: Sat 23 Aug 2025 01:55:22 +0000 Manifest this update: Sat 23 Aug 2025 01:55:22 +0000 Manifest next update: Sat 30 Aug 2025 01:55:22 +0000 Files and hashes: 1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: 43qFTR5DR+9ESbvEz7ZooRtMdDFoj1ePfPua70DAtcY=) 2: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: YJknqh8T+qXW11AGQpkWixPSeb/oim2jtPvDZDC0Y5M=) 3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: 0d7okG44VFnG4nuLf3zjFz92ZcS33/9Y18izFVAiNWk=) 4: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: pOsL4nJKiT9Wc01cD2wPZO+WlYtBX9ZtStyQuOwRJu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3 Validity Not Before: Aug 23 01:55:22 2025 GMT Not After : Aug 30 01:55:22 2025 GMT Subject: CN=68a91f8a-057d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:77:6c:de:09:d1:c2:34:c0:f8:cc:b2:d1:d6: cb:7b:17:54:f5:86:ef:b5:5a:d0:ac:33:a5:d1:d1: 24:dd:30:40:8e:d0:34:9c:95:21:8f:72:f9:40:bc: 64:48:5c:46:31:ae:ff:9d:65:ee:fc:cd:d6:39:c2: 75:70:13:39:4f:e2:1a:2c:9b:62:ae:1b:9e:92:be: e8:77:71:89:c0:23:e6:82:04:0d:2c:30:d6:fc:43: 8c:17:d7:dc:d1:c2:f2:59:99:a1:3a:5d:9e:8b:30: eb:8d:59:e4:eb:85:11:1f:a9:30:11:cb:c6:97:2d: 4f:52:22:bd:54:27:2b:e7:9b:6e:0d:ce:63:09:9e: 32:7f:cf:75:d3:dd:01:6c:9e:cc:32:63:b6:eb:37: 00:53:14:fb:ad:83:4e:30:8c:55:8e:8c:58:55:7e: 7d:16:49:08:cd:02:5e:e1:96:d7:25:ae:93:19:a5: 94:67:4e:68:af:7b:1f:50:00:e2:3c:29:fe:60:eb: 12:27:80:3d:33:d7:86:85:d3:98:42:fd:9e:2f:75: f3:23:04:73:c4:48:5f:0a:e1:ca:bc:99:eb:ba:6d: fd:ba:89:f8:fa:23:93:46:c7:42:17:5e:63:99:ff: 71:04:b4:2c:41:f1:49:1f:78:05:ee:3f:77:5c:ed: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:00:35:A7:B1:7A:8C:CA:D6:D9:45:AB:64:E0:A7:13:C5:34:42:D4 X509v3 Authority Key Identifier: keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2a:74:ba:b1:46:e8:30:59:32:5b:89:58:89:f2:bb:b6:e7: 4b:15:4c:77:97:2a:a6:f4:15:17:b3:eb:25:d1:b0:cf:78:01: e3:45:31:6b:65:05:ff:28:fa:6b:93:98:08:73:5d:5c:83:4a: 7a:d8:a0:4f:66:23:dd:2e:d8:b4:51:68:4e:b4:93:7c:81:e0: 9a:44:1e:75:2d:dc:07:d8:f5:5a:f3:49:f8:ee:f1:e1:ec:40: ae:68:f7:b1:e3:07:29:2f:5f:5c:df:de:3b:b3:4d:57:fe:ca: b9:c8:12:6d:67:00:da:2a:cb:fc:d3:1b:c2:2a:81:32:ed:f4: 09:f4:cc:1c:12:9f:85:f1:b2:97:9f:91:f6:4c:ec:3b:11:a7: a6:4e:21:e3:5b:21:62:c1:50:2e:8f:ce:12:7a:b2:43:80:a2: 8f:c3:b5:fe:39:23:b4:35:59:df:a4:a6:26:3b:29:11:8e:e6: 67:41:1d:a2:c0:9c:50:ab:b0:22:7a:fb:4c:bb:8d:4e:c4:ed: b5:dc:bc:de:2c:a5:ea:74:86:b4:cd:bc:29:dd:6f:5a:85:46: ad:2a:7e:14:b0:00:95:d5:2d:63:18:bf:29:77:87:c4:63:c3: 0a:fa:7e:15:e6:29:a5:ce:dc:72:59:51:fb:26:0a:06:e9:45: fc:1c:ab:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNBQjMxMTAvBgNVBAUTKEU0QTk0Q0ZBOEQyRjlGNUIzOUVGNDYzNTA1OTFDRTMx MkU1MTRGQjMwHhcNMjUwODIzMDE1NTIyWhcNMjUwODMwMDE1NTIyWjAYMRYwFAYD VQQDEw02OGE5MWY4YS0wNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nds3gnRwjTA+Myy0dbLexdU9YbvtVrQrDOl0dEk3TBAjtA0nJUhj3L5QLxk SFxGMa7/nWXu/M3WOcJ1cBM5T+IaLJtirhuekr7od3GJwCPmggQNLDDW/EOMF9fc 0cLyWZmhOl2eizDrjVnk64URH6kwEcvGly1PUiK9VCcr55tuDc5jCZ4yf891090B bJ7MMmO26zcAUxT7rYNOMIxVjoxYVX59FkkIzQJe4ZbXJa6TGaWUZ05or3sfUADi PCn+YOsSJ4A9M9eGhdOYQv2eL3XzIwRzxEhfCuHKvJnrum39uon4+iOTRsdCF15j mf9xBLQsQfFJH3gF7j93XO1/gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAANaex eozK1tlFq2TgpxPFNELUMB8GA1UdIwQYMBaAFOSpTPqNL59bOe9GNQWRzjEuUU+z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0FCMy8wNUVEOTRDRTE5 NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4xczU3MFkxQlpIT01TNVJU N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVLbE0tbzB2bjFzNTcwWTFCWkhPTVM1UlQ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0FCMy8wNUVEOTRDRTE5NEMxMUVEQUQzOEYyMkJDNEY5QUUwMi81S2xNLW8wdm4x czU3MFkxQlpIT01TNVJUN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAKnS6sUboMFkyW4lYifK7tudLFUx3lyqm9BUXs+sl0bDPeAHjRTFr ZQX/KPprk5gIc11cg0p62KBPZiPdLti0UWhOtJN8geCaRB51LdwH2PVa80n47vHh 7ECuaPex4wcpL19c3947s01X/sq5yBJtZwDaKsv80xvCKoEy7fQJ9MwcEp+F8bKX n5H2TOw7EaemTiHjWyFiwVAuj84SerJDgKKPw7X+OSO0NVnfpKYmOykRjuZnQR2i wJxQq7AievtMu41OxO213LzeLKXqdIa0zbwp3W9ahUatKn4UsACV1S1jGL8pd4fE Y8MK+n4V5imlztxyWVH7JgoG6UX8HKtk -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:10 2025 by rpki-client