$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft File: eAtbxs5eRpg3res2hXTtSDBIAcs.mft (raw, json) Hash identifier: 4TxaL+38TxedUctkusdt0PzkOmsJ8vnrqHf/NfAS3Wo= Subject key identifier: BC:9F:05:7C:60:81:36:AC:20:6D:BB:FE:50:CF:8E:3A:04:56:C3:A6 Authority key identifier: 78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB Certificate issuer: /CN=A91A5A93/serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft Manifest number: F1 Signing time: Sat 23 Aug 2025 05:27:27 +0000 Manifest this update: Sat 23 Aug 2025 05:27:26 +0000 Manifest next update: Sat 30 Aug 2025 05:27:26 +0000 Files and hashes: 1: eAtbxs5eRpg3res2hXTtSDBIAcs.crl (hash: W9zxdm+XrOe7gNF+bw/jb7A1uYB7I134XqOlLER0qkY=) 2: 521500EE15C611EF88C07237C4F9AE02.roa (hash: BCuicmcvw7ww1h97rYp14idO+zun7W58fW3pvWobsAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB Validity Not Before: Aug 23 05:27:26 2025 GMT Not After : Aug 30 05:27:26 2025 GMT Subject: CN=68a9513e-962c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b3:8b:57:40:fe:83:6f:f3:b4:6a:70:29:b7: aa:5d:34:86:ec:cb:7d:6d:e9:1b:12:cb:24:06:50: e6:c7:df:e7:94:c4:e6:0f:fb:67:22:d1:00:77:ed: c0:6d:3d:de:8d:1b:c0:fd:dc:65:65:b5:b2:16:f4: cf:1e:49:bc:d2:88:91:21:2e:f5:b3:34:d4:e0:86: 21:f6:f8:a1:92:60:f4:8a:0c:fe:e0:d4:48:60:d4: f3:64:78:0a:0c:30:a9:97:11:67:38:ca:1a:05:c3: e2:44:c5:2b:f2:d2:f4:4a:34:de:05:48:0e:d9:1b: 37:87:87:1d:ee:1a:2b:6c:7b:ec:f2:5d:1b:02:9a: fe:e1:c8:9b:22:45:d3:ae:f9:1d:52:c8:12:f7:d6: 77:a5:b0:77:d6:1b:26:22:76:a9:a2:c4:2a:b1:88: 41:37:3c:64:31:b2:c6:97:33:77:c3:ec:87:16:54: 47:9c:6c:2e:be:23:32:cc:00:8e:41:c8:38:ae:ac: bf:02:6e:69:51:56:43:e0:b5:8b:ee:b8:cd:6e:d1: 36:89:a2:7d:22:41:5c:01:8e:ea:2f:d1:28:6e:26: 66:16:b1:30:e6:04:b1:b9:4b:b0:f2:ef:7a:d6:f8: 35:28:3e:1b:cf:dd:91:04:a7:d8:9f:80:e5:fd:59: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9F:05:7C:60:81:36:AC:20:6D:BB:FE:50:CF:8E:3A:04:56:C3:A6 X509v3 Authority Key Identifier: keyid:78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:29:13:a4:59:86:58:11:d4:9b:a7:0f:68:1d:48:05:44:1d: 9b:5b:b1:ed:f9:f8:c4:8a:13:4f:a5:04:04:7f:8f:79:d3:79: e3:7f:9c:87:d0:43:a7:7d:0f:ea:6f:bc:d2:c9:4a:20:02:60: a1:f4:e0:11:e8:bf:6e:a3:38:f0:bf:02:0e:a0:8e:8f:42:d5: 53:ca:de:79:72:2e:8e:80:4d:0a:1d:ad:f9:67:e3:0b:ce:57: 3d:70:d5:d3:d0:d1:e0:3d:3d:05:00:3f:d5:64:8a:d2:b7:73: 93:9b:c2:48:dc:2a:12:3e:5c:1f:8d:06:bf:62:ab:4b:32:ad: 1f:9d:fe:1b:8d:28:8e:7f:bb:15:60:15:a9:1b:ea:b6:98:1d: 97:bb:ff:18:6f:89:16:d8:42:c4:3d:14:91:70:a0:4b:c8:82: 0b:ff:cf:c8:de:db:10:e1:1c:bc:ca:aa:da:c7:84:52:1b:f7: 50:61:f7:e1:3a:1c:cc:9f:dc:6c:b3:f6:2a:00:99:4b:d2:70: 87:e5:68:8d:13:0f:1e:7b:e1:2d:62:a8:ac:53:95:9d:94:f1: 45:de:1b:cd:3e:b7:1b:77:8c:48:bc:cf:ee:05:5d:85:06:41: c7:e0:9a:80:01:f3:ea:52:da:cd:e6:91:df:db:c6:ca:3a:fe: b2:64:ef:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBOTMxMTAvBgNVBAUTKDc4MEI1QkM2Q0U1RTQ2OTgzN0FERUIzNjg1NzRFRDQ4 MzA0ODAxQ0IwHhcNMjUwODIzMDUyNzI2WhcNMjUwODMwMDUyNzI2WjAYMRYwFAYD VQQDEw02OGE5NTEzZS05NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LOLV0D+g2/ztGpwKbeqXTSG7Mt9bekbEsskBlDmx9/nlMTmD/tnItEAd+3A bT3ejRvA/dxlZbWyFvTPHkm80oiRIS71szTU4IYh9vihkmD0igz+4NRIYNTzZHgK DDCplxFnOMoaBcPiRMUr8tL0SjTeBUgO2Rs3h4cd7horbHvs8l0bApr+4cibIkXT rvkdUsgS99Z3pbB31hsmInaposQqsYhBNzxkMbLGlzN3w+yHFlRHnGwuviMyzACO Qcg4rqy/Am5pUVZD4LWL7rjNbtE2iaJ9IkFcAY7qL9EobiZmFrEw5gSxuUuw8u96 1vg1KD4bz92RBKfYn4Dl/VmeXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyfBXxg gTasIG27/lDPjjoEVsOmMB8GA1UdIwQYMBaAFHgLW8bOXkaYN63rNoV07UgwSAHL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE5My9DMDFBRjVGNDE1 QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJwZzNyZXMyaFhUdFNEQklB Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VBdGJ4czVlUnBnM3JlczJoWFR0U0RCSUFjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE5My9DMDFBRjVGNDE1QzUxMUVGQUEzMzgyMzZDNEY5QUUwMi9lQXRieHM1ZVJw ZzNyZXMyaFhUdFNEQklBY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkKROkWYZYEdSbpw9oHUgFRB2bW7Ht+fjEihNPpQQEf49503njf5yH 0EOnfQ/qb7zSyUogAmCh9OAR6L9uozjwvwIOoI6PQtVTyt55ci6OgE0KHa35Z+ML zlc9cNXT0NHgPT0FAD/VZIrSt3OTm8JI3CoSPlwfjQa/YqtLMq0fnf4bjSiOf7sV YBWpG+q2mB2Xu/8Yb4kW2ELEPRSRcKBLyIIL/8/I3tsQ4Ry8yqrax4RSG/dQYffh OhzMn9xss/YqAJlL0nCH5WiNEw8ee+EtYqisU5WdlPFF3hvNPrcbd4xIvM/uBV2F BkHH4JqAAfPqUtrN5pHf28bKOv6yZO+S -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:06 2025 by rpki-client