$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft File: 5fjJ4D7R71BndlYU2mtRJq1vyz4.mft (raw, json) Hash identifier: PovKelNWk77WQ8VgU7sdXCyAGTDwl2KfmMlDJL6kYbI= Subject key identifier: C4:80:DE:3C:FB:90:13:87:9A:43:DD:7D:35:7F:72:1B:48:29:F8:25 Authority key identifier: E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E Certificate issuer: /CN=A91A6548/serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft Manifest number: 052C Signing time: Fri 22 Aug 2025 23:43:53 +0000 Manifest this update: Fri 22 Aug 2025 23:43:53 +0000 Manifest next update: Fri 29 Aug 2025 23:43:53 +0000 Files and hashes: 1: 5fjJ4D7R71BndlYU2mtRJq1vyz4.crl (hash: cotZ59omS0wbfeDmooFmvbMi+w7Fs7Qc2gARGTCz+88=) 2: E6EC55EE0D7E11EC94917272C4F9AE02.roa (hash: ZFPLjWKhXylD4Z8vt5rlOjVNLoBd2B0qS7n8g9uJPA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6548, serialNumber=E5F8C9E03ED1EF5067765614DA6B5126AD6FCB3E Validity Not Before: Aug 22 23:43:53 2025 GMT Not After : Aug 29 23:43:53 2025 GMT Subject: CN=68a900b9-baef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f2:a0:7f:98:76:9e:dc:a5:01:f5:bc:62:66: cc:0f:c8:4a:54:35:a5:c2:ca:f7:61:ac:8f:03:c4: 9f:96:08:1e:fd:a5:e6:f2:10:0f:4e:79:22:7b:6f: f8:8a:cd:0c:3e:c5:52:95:d3:e2:d9:7c:c0:5d:06: 03:86:c6:b4:68:cb:f6:81:9e:b3:fe:b1:86:52:aa: 06:c9:2b:84:0d:53:7a:f8:99:c8:d4:b0:fd:b9:31: bf:c1:07:f7:4a:b9:5c:17:1f:09:1f:53:c2:14:d2: 30:a1:ac:4a:13:ae:ce:b4:21:c6:19:d2:05:28:cf: 92:a9:ee:3b:45:68:1d:22:81:9a:33:0f:13:e4:2b: 91:04:21:2e:7f:78:3a:55:d3:f3:06:61:7a:80:0e: 3a:bd:2a:bc:c1:06:ea:fd:96:fb:9a:1b:b0:e0:74: d4:54:e2:da:7f:e1:9f:72:51:ee:1f:b0:8e:7e:46: fa:1a:7e:d9:2e:27:4a:e8:73:6b:62:01:a8:fc:7d: 47:12:b7:37:3c:bd:7f:dc:4d:e9:a7:d8:8c:65:6f: 22:0f:70:91:dd:20:2b:a3:08:23:a7:2c:a7:8f:23: 24:39:6b:2d:34:e4:4f:b8:c1:37:df:ea:87:5e:f0: 3e:e2:26:b3:c3:76:73:92:2e:c4:b8:13:2b:36:47: 43:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:DE:3C:FB:90:13:87:9A:43:DD:7D:35:7F:72:1B:48:29:F8:25 X509v3 Authority Key Identifier: keyid:E5:F8:C9:E0:3E:D1:EF:50:67:76:56:14:DA:6B:51:26:AD:6F:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5fjJ4D7R71BndlYU2mtRJq1vyz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6548/7DCF248A0D7C11ECBABDD56DC4F9AE02/5fjJ4D7R71BndlYU2mtRJq1vyz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:5f:25:ae:9a:e8:3c:d3:36:b9:e9:4a:f9:d0:69:e3:f4:94: 8d:46:78:4d:a9:f1:3c:a1:fb:f8:6b:ac:88:79:dd:f9:66:8e: 04:a5:ed:76:cb:ae:7a:af:d1:63:d0:6a:81:e6:4e:4d:c0:46: 15:ff:23:19:56:5a:25:5b:f1:a0:01:09:86:72:50:7e:5d:c6: 53:81:f9:13:92:28:24:93:b3:68:dd:3c:33:e2:06:60:7c:70: a4:a6:45:8a:69:80:2a:df:43:af:5b:b6:92:5b:42:f6:39:db: 89:20:63:53:0f:e5:95:ac:1b:bc:fb:a9:57:05:73:e1:31:48: 79:ed:4f:72:e9:8e:9b:c3:ba:c1:40:b7:d4:73:03:5c:01:a1: 9f:13:e0:1b:a9:f0:12:ee:c6:10:a0:c4:ac:41:6c:82:03:71: ef:87:75:62:79:1d:ea:e6:93:10:1c:5e:8a:d5:f5:8a:c4:83: 9d:44:c4:ea:b3:07:fc:25:14:51:16:32:6a:22:bf:1b:a4:c1: 72:fb:89:1e:e9:5c:e7:c3:3a:c0:67:d8:90:fb:8e:c2:71:45: fa:f9:ab:73:04:95:59:d1:b0:01:be:9b:71:4d:3a:bb:6f:da: 0b:b5:e9:5e:d4:fc:66:92:ce:83:e2:27:af:3d:51:12:92:73: eb:06:16:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY1NDgxMTAvBgNVBAUTKEU1RjhDOUUwM0VEMUVGNTA2Nzc2NTYxNERBNkI1MTI2 QUQ2RkNCM0UwHhcNMjUwODIyMjM0MzUzWhcNMjUwODI5MjM0MzUzWjAYMRYwFAYD VQQDEw02OGE5MDBiOS1iYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvKgf5h2ntylAfW8YmbMD8hKVDWlwsr3YayPA8Sflgge/aXm8hAPTnkie2/4 is0MPsVSldPi2XzAXQYDhsa0aMv2gZ6z/rGGUqoGySuEDVN6+JnI1LD9uTG/wQf3 SrlcFx8JH1PCFNIwoaxKE67OtCHGGdIFKM+Sqe47RWgdIoGaMw8T5CuRBCEuf3g6 VdPzBmF6gA46vSq8wQbq/Zb7mhuw4HTUVOLaf+GfclHuH7COfkb6Gn7ZLidK6HNr YgGo/H1HErc3PL1/3E3pp9iMZW8iD3CR3SArowgjpyynjyMkOWstNORPuME33+qH XvA+4iazw3Zzki7EuBMrNkdDpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSA3jz7 kBOHmkPdfTV/chtIKfglMB8GA1UdIwQYMBaAFOX4yeA+0e9QZ3ZWFNprUSatb8s+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjU0OC83RENGMjQ4QTBE N0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3UjcxQm5kbFlVMm10UkpxMXZ5 ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVmako0RDdSNzFCbmRsWVUybXRSSnExdnl6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjU0OC83RENGMjQ4QTBEN0MxMUVDQkFCREQ1NkRDNEY5QUUwMi81ZmpKNEQ3Ujcx Qm5kbFlVMm10UkpxMXZ5ejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYXyWumug80za56Ur50Gnj9JSNRnhNqfE8ofv4a6yIed35Zo4Epe12 y656r9Fj0GqB5k5NwEYV/yMZVlolW/GgAQmGclB+XcZTgfkTkigkk7No3Twz4gZg fHCkpkWKaYAq30OvW7aSW0L2OduJIGNTD+WVrBu8+6lXBXPhMUh57U9y6Y6bw7rB QLfUcwNcAaGfE+AbqfAS7sYQoMSsQWyCA3Hvh3VieR3q5pMQHF6K1fWKxIOdRMTq swf8JRRRFjJqIr8bpMFy+4ke6VznwzrAZ9iQ+47CcUX6+atzBJVZ0bABvptxTTq7 b9oLtele1Pxmks6D4ievPVESknPrBhbw -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:46 2025 by rpki-client