$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: t+fshAUMLym/M0lLZv9X/k9OcRnyquHRAUzEcGX82lE= Subject key identifier: E7:02:BB:9C:E0:42:34:AC:C2:B2:76:E4:4D:A4:BB:63:7E:2F:1C:47 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 08D1 Signing time: Fri 22 Aug 2025 20:33:22 +0000 Manifest this update: Fri 22 Aug 2025 20:33:22 +0000 Manifest next update: Fri 29 Aug 2025 20:33:21 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: VeBAed5WLwr6YbLZPiDiSpRRbB5OQhrPEMvp2JWRnNM=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: DP8lG9el46NF03CMOLzrMzttp6pe74xkZuZziqnxmJ4=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: mYMneOcMzVSjWOSfz2l4H7HMRndq3Nml1V+jd7+ZSu8=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: EeEFahw1S1xzRQMqYweCJnCU9S+/LW0T/PuPJ3E+UWM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: LdDw24/Or3M92peybKBWsStvdJIFCX02q7LqBzB3QW8=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Aug 22 20:33:22 2025 GMT Not After : Aug 29 20:33:21 2025 GMT Subject: CN=68a8d412-f506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:dc:94:91:a3:b4:a7:ea:e6:c1:2e:c6:3d: e2:7c:57:e2:88:22:c1:e4:e9:a6:fa:37:d3:de:b4: 9c:c4:e2:3f:04:b8:b7:cb:64:5e:4e:64:c2:06:4d: 03:81:b1:c0:9e:c2:7c:e3:6f:e4:86:eb:54:37:00: 27:c8:4f:80:a1:2a:51:69:3c:8c:23:60:e6:cb:7d: 59:4f:42:49:85:a5:63:a1:3f:22:f0:6f:6f:83:2d: 8e:40:24:e9:00:0f:a4:72:9e:a1:c8:79:b9:08:83: 82:4c:c1:8f:48:56:52:80:21:06:94:c2:c6:c5:48: 44:34:3e:eb:0c:f5:21:ef:28:2f:7e:a2:ab:3a:91: 76:ca:50:ec:0d:84:12:e6:8e:fb:02:48:ba:aa:09: 46:9c:ba:9f:4d:17:f0:da:64:91:1a:d3:bd:8c:b5: 48:19:59:07:e1:c4:4a:49:16:39:49:03:6e:d4:74: c1:3b:44:2c:6a:b8:17:9e:b5:63:ca:44:e7:79:ae: c8:af:f4:91:05:02:9f:b7:e6:07:38:ee:f3:1c:00: 67:7b:1a:e4:5c:fd:d0:60:ab:0a:e5:45:7f:cf:e8: 64:7f:7f:8b:29:06:94:1d:7c:fa:54:9c:28:91:e4: d3:c6:84:d5:42:01:bd:07:fe:30:13:2c:83:6e:0d: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:BB:9C:E0:42:34:AC:C2:B2:76:E4:4D:A4:BB:63:7E:2F:1C:47 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:39:10:46:21:d3:c0:ef:7e:bd:78:fd:38:74:27:e6:d8:e2: 01:85:5e:0e:e8:b7:2a:a8:22:0e:f7:86:95:83:58:9b:54:f4: f5:13:ff:a6:0e:d5:9b:c0:a0:eb:76:20:26:c3:34:60:74:ff: 69:d3:4a:08:3e:34:04:a4:eb:48:86:10:6e:6e:73:3b:6e:08: c2:7c:93:3b:3f:47:3d:f9:f4:f6:f2:86:90:e9:ea:b0:e6:51: 8c:d7:fb:6d:13:a9:13:9f:b8:20:75:e7:99:2e:b4:93:87:2a: 11:03:b5:9a:d7:31:8c:1d:c5:8d:07:79:21:a3:aa:b0:25:6f: a4:8c:75:38:a8:82:98:5c:f4:a5:4e:f4:8c:e4:ba:cb:a0:f4: 84:7b:6f:69:62:11:97:94:ca:9d:02:97:63:d2:e6:6d:99:6c: 5f:40:4e:3e:65:5a:16:05:db:ca:67:84:e8:fd:e5:45:dc:20: a1:35:79:e5:3d:8a:61:a5:b5:fb:d6:cf:00:b2:c8:64:be:37: 97:ae:52:0e:f9:1d:92:c2:92:bb:b7:e1:c3:02:db:9e:2a:4b: 24:db:8f:05:86:ae:cd:c9:e7:7e:5b:14:c3:8f:f4:5d:f9:97: 7a:6b:7b:73:98:cf:f4:14:d8:ee:2f:68:27:e1:9d:2c:64:f5: 9f:cf:ec:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUwODIyMjAzMzIyWhcNMjUwODI5MjAzMzIxWjAYMRYwFAYD VQQDEw02OGE4ZDQxMi1mNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEjclJGjtKfq5sEuxj3ifFfiiCLB5Omm+jfT3rScxOI/BLi3y2ReTmTCBk0D gbHAnsJ842/khutUNwAnyE+AoSpRaTyMI2Dmy31ZT0JJhaVjoT8i8G9vgy2OQCTp AA+kcp6hyHm5CIOCTMGPSFZSgCEGlMLGxUhEND7rDPUh7ygvfqKrOpF2ylDsDYQS 5o77Aki6qglGnLqfTRfw2mSRGtO9jLVIGVkH4cRKSRY5SQNu1HTBO0QsargXnrVj ykTnea7Ir/SRBQKft+YHOO7zHABnexrkXP3QYKsK5UV/z+hkf3+LKQaUHXz6VJwo keTTxoTVQgG9B/4wEyyDbg0cOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcCu5zg QjSswrJ25E2ku2N+LxxHMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqORBGIdPA7369eP04dCfm2OIBhV4O6LcqqCIO94aVg1ibVPT1E/+m DtWbwKDrdiAmwzRgdP9p00oIPjQEpOtIhhBubnM7bgjCfJM7P0c9+fT28oaQ6eqw 5lGM1/ttE6kTn7ggdeeZLrSThyoRA7Wa1zGMHcWNB3kho6qwJW+kjHU4qIKYXPSl TvSM5LrLoPSEe29pYhGXlMqdApdj0uZtmWxfQE4+ZVoWBdvKZ4To/eVF3CChNXnl PYphpbX71s8AsshkvjeXrlIO+R2SwpK7t+HDAtueKksk248Fhq7Nyed+WxTDj/Rd +Zd6a3tzmM/0FNjuL2gn4Z0sZPWfz+yo -----END CERTIFICATE-----Generated at Sat Aug 23 13:37:26 2025 by rpki-client