$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: gcojq3cOkAzL4avGYJCscA5MfXkuJrLU4Vfr7PP2kck= Subject key identifier: 60:B0:53:05:2A:1C:D0:05:1B:D1:F5:9F:68:89:16:95:2E:DD:35:82 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 059E Signing time: Fri 22 Aug 2025 23:24:08 +0000 Manifest this update: Fri 22 Aug 2025 23:24:08 +0000 Manifest next update: Fri 29 Aug 2025 23:24:08 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: XfdI9phTbPjoMw3XVWjgRxWT2EfuIFmLU/j3cNu8vxA=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Aug 22 23:24:08 2025 GMT Not After : Aug 29 23:24:08 2025 GMT Subject: CN=68a8fc18-c1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:5b:90:67:65:d1:ee:da:9f:34:01:17:37: 91:6c:be:37:6c:c4:5c:80:e8:5a:95:fa:d4:14:c4: 94:3b:6e:53:a1:7f:3d:a6:31:46:05:98:15:56:ae: 8a:26:2a:d6:5f:5a:51:16:59:ef:dc:3f:5d:a3:07: 2a:9c:cb:65:20:1e:1f:83:f0:31:a9:3d:e4:30:6e: 06:da:05:24:73:dd:db:34:44:8c:a5:58:9c:33:02: 9e:1e:3d:a4:7f:fd:e1:04:9f:44:02:b0:be:fa:2f: 1e:03:4a:fa:f6:3d:65:a2:29:05:bb:15:26:a0:3b: 07:06:6e:f7:c2:6c:ce:4f:3f:aa:2c:de:04:f0:6e: 9a:d3:1d:85:c8:f8:d4:7b:c2:e5:0d:e7:51:80:ba: c8:63:73:b5:c2:79:3e:57:1a:6c:8f:d6:94:28:0d: ec:0e:f8:36:6a:76:89:61:50:21:32:30:45:64:c7: c3:b2:1a:ae:37:9b:32:e1:72:64:29:e1:7d:42:dd: 24:f3:fa:25:26:85:73:e8:0c:db:7a:42:69:42:a0: fc:1b:64:af:f7:6e:9d:5d:04:19:7f:cf:81:78:1f: 4d:d9:7d:39:ac:ba:95:e3:05:f1:ba:c2:a1:99:d1: df:50:91:20:9e:03:d0:4e:6b:e5:77:2a:c6:97:bb: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B0:53:05:2A:1C:D0:05:1B:D1:F5:9F:68:89:16:95:2E:DD:35:82 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:19:e3:31:58:65:2c:9e:20:90:af:9f:ff:a5:6e:0f:dc:fc: a3:e9:f7:15:74:0a:29:54:55:d8:4a:29:bb:b9:da:c0:86:77: 4d:8f:15:ff:21:d0:cf:2d:43:c4:19:4b:b6:18:c8:58:39:c1: 37:e5:c2:ec:b8:b3:e9:f9:19:e7:db:f1:68:3c:09:98:8e:a3: ca:e3:2e:76:a2:b5:99:34:ea:68:4c:dd:20:0b:d0:b2:ca:32: fa:21:68:af:57:e5:49:c3:bc:e3:1a:fa:81:04:d5:a1:a0:9f: c7:9e:93:fd:f6:95:74:7c:b6:25:20:bf:ed:16:ee:5f:ad:37: 58:c4:39:ff:3f:ba:bb:c8:2f:c7:0c:fc:b4:c5:5d:d6:1a:11: 3c:3c:e9:1c:59:4e:cc:0b:43:67:91:69:5e:49:fb:43:61:d7: 35:ec:64:02:fa:ec:d4:a8:5c:19:cf:68:2c:4c:c5:53:63:f3: 1a:5b:98:f5:f6:08:21:7c:a0:e6:04:fd:44:de:5c:af:7f:2c: 37:59:b5:56:56:59:9f:62:06:8f:f7:99:8b:3c:18:9c:b9:a4: 76:b8:94:ad:c3:ba:55:fe:13:11:b0:30:82:26:17:7c:df:80: 0e:0f:99:1e:33:da:b5:dd:a2:ba:f9:9a:7d:e2:64:02:d6:2d: b0:8b:75:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwODIyMjMyNDA4WhcNMjUwODI5MjMyNDA4WjAYMRYwFAYD VQQDEw02OGE4ZmMxOC1jMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIFbkGdl0e7anzQBFzeRbL43bMRcgOhalfrUFMSUO25ToX89pjFGBZgVVq6K JirWX1pRFlnv3D9dowcqnMtlIB4fg/AxqT3kMG4G2gUkc93bNESMpVicMwKeHj2k f/3hBJ9EArC++i8eA0r69j1loikFuxUmoDsHBm73wmzOTz+qLN4E8G6a0x2FyPjU e8LlDedRgLrIY3O1wnk+Vxpsj9aUKA3sDvg2anaJYVAhMjBFZMfDshquN5sy4XJk KeF9Qt0k8/olJoVz6AzbekJpQqD8G2Sv926dXQQZf8+BeB9N2X05rLqV4wXxusKh mdHfUJEgngPQTmvldyrGl7sM9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCwUwUq HNAFG9H1n2iJFpUu3TWCMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGGeMxWGUsniCQr5//pW4P3Pyj6fcVdAopVFXYSim7udrAhndNjxX/ IdDPLUPEGUu2GMhYOcE35cLsuLPp+Rnn2/FoPAmYjqPK4y52orWZNOpoTN0gC9Cy yjL6IWivV+VJw7zjGvqBBNWhoJ/HnpP99pV0fLYlIL/tFu5frTdYxDn/P7q7yC/H DPy0xV3WGhE8POkcWU7MC0NnkWleSftDYdc17GQC+uzUqFwZz2gsTMVTY/MaW5j1 9gghfKDmBP1E3lyvfyw3WbVWVlmfYgaP95mLPBicuaR2uJStw7pV/hMRsDCCJhd8 34AOD5keM9q13aK6+Zp94mQC1i2wi3UE -----END CERTIFICATE-----Generated at Sun Aug 24 02:31:14 2025 by rpki-client