$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft File: jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json) Hash identifier: oyxwTj73mcagMiDcSYR+SI7TMIcKh0qk0Pw/AptaGvs= Subject key identifier: 9D:FA:66:CD:69:43:8B:FC:9E:5F:00:A9:42:C2:68:DD:C3:18:03:96 Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B Certificate issuer: /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft Manifest number: B5 Signing time: Sat 23 Aug 2025 06:13:18 +0000 Manifest this update: Sat 23 Aug 2025 06:13:17 +0000 Manifest next update: Sat 30 Aug 2025 06:13:17 +0000 Files and hashes: 1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: h5/nom86go65iDCRhLtAkxDRe3FhqoZ91gyJhIifuic=) 2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: n3pzdI1R6OnpGAR7FmeF9nZ8iLEx5lsOyhq7ASsGK90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Validity Not Before: Aug 23 06:13:17 2025 GMT Not After : Aug 30 06:13:17 2025 GMT Subject: CN=68a95bfd-8f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:2b:2f:15:6c:fa:a7:47:de:1d:fb:bf:1d: 0e:b5:8e:24:18:a3:a1:40:62:bd:21:62:d8:00:94: 6f:4a:7d:4c:6c:2e:35:90:0d:e9:92:c4:fa:46:36: 0a:07:1e:b5:43:39:b3:1f:fd:bb:7d:47:c5:5a:e1: ae:a2:4c:0a:25:e1:78:71:28:6a:19:a9:ca:7a:25: 4a:d3:40:d9:82:8c:63:2d:75:41:c0:a3:e0:dd:4b: ea:15:90:55:46:72:17:9d:7d:12:f0:3c:47:76:07: e2:93:cf:60:0d:f1:b1:d7:4c:ae:00:18:3d:ac:77: 70:f0:10:de:50:81:c8:3d:63:98:01:f3:bd:99:cf: 43:0a:ee:12:d4:ec:d0:33:1b:87:c6:7a:e2:ba:cd: 6c:2b:69:e6:ac:46:45:bb:55:18:f7:00:28:4c:7d: 5d:2c:1c:c6:99:7a:98:33:cb:26:6b:7b:60:35:1f: 0f:ab:bf:ee:1d:89:cc:f2:ba:0c:35:9d:93:04:f1: 14:f5:22:d0:3c:04:82:89:5f:e8:0c:5d:57:0c:71: d4:ee:3e:27:0a:8c:94:b2:4c:9f:67:24:de:48:85: 42:b8:a3:2e:bc:98:a0:a7:6d:98:91:30:48:88:85: a9:f7:69:e0:3e:76:5a:7b:31:48:c0:44:70:7b:6d: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FA:66:CD:69:43:8B:FC:9E:5F:00:A9:42:C2:68:DD:C3:18:03:96 X509v3 Authority Key Identifier: keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:1b:cc:47:4b:17:0a:73:30:d4:23:52:03:ec:c5:aa:56:71: 14:0e:c3:4e:d3:39:45:88:0f:63:c6:b0:3b:24:16:a5:0f:4e: 35:70:4e:11:d8:e7:d0:a3:ce:f9:ad:ae:d2:6b:f4:dd:22:d3: b4:51:77:1f:4f:ab:31:ca:3d:d5:aa:82:93:16:64:78:71:b3: 9d:ed:ca:02:ed:42:1f:95:08:f4:b2:85:ff:00:25:39:e7:76: 8d:bd:a3:14:0f:d2:0a:83:f0:f3:8c:ae:43:b2:6e:94:6b:5c: 26:a0:d0:84:3a:51:2f:11:1e:c6:b0:71:43:3c:63:37:52:10: c1:1f:da:64:77:ac:cd:97:d3:53:48:75:aa:e4:85:ef:60:e5: 93:72:5f:e2:f7:e5:ce:c4:65:aa:59:df:ab:d1:19:d8:21:19: b2:62:dd:1f:f0:7d:62:99:76:1e:9d:66:e8:15:6b:0f:62:c6: 2b:53:0c:7a:54:97:73:91:6d:9d:84:58:8e:70:38:a4:4b:92: 12:de:28:c1:e2:12:15:97:51:d2:b4:57:e6:9c:48:a2:39:8d: d9:bb:8c:ca:ac:50:78:46:7b:1b:a7:96:cf:96:b0:76:f2:31: 8b:90:84:da:01:02:dc:cb:cf:7a:07:d6:0e:e5:21:f7:cd:e2: 0e:3e:71:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKDhFQTVCOTU2MzIyN0MyRTU4RDQzOEJDMTdCQTgyMjUw NzU0MjQ0M0IwHhcNMjUwODIzMDYxMzE3WhcNMjUwODMwMDYxMzE3WjAYMRYwFAYD VQQDEw02OGE5NWJmZC04ZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmk0rLxVs+qdH3h37vx0OtY4kGKOhQGK9IWLYAJRvSn1MbC41kA3pksT6RjYK Bx61QzmzH/27fUfFWuGuokwKJeF4cShqGanKeiVK00DZgoxjLXVBwKPg3UvqFZBV RnIXnX0S8DxHdgfik89gDfGx10yuABg9rHdw8BDeUIHIPWOYAfO9mc9DCu4S1OzQ MxuHxnrius1sK2nmrEZFu1UY9wAoTH1dLBzGmXqYM8sma3tgNR8Pq7/uHYnM8roM NZ2TBPEU9SLQPASCiV/oDF1XDHHU7j4nCoyUskyfZyTeSIVCuKMuvJigp22YkTBI iIWp92ngPnZaezFIwERwe21aAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ36Zs1p Q4v8nl8AqULCaN3DGAOWMB8GA1UdIwQYMBaAFI6luVYyJ8LljUOLwXuoIlB1QkQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83MDQwQThFODZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1V05RNHZCZTZnaVVIVkNS RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pxVzVWaklud3VXTlE0dkJlNmdpVUhWQ1JEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83MDQwQThFODZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1 V05RNHZCZTZnaVVIVkNSRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFG8xHSxcKczDUI1ID7MWqVnEUDsNO0zlFiA9jxrA7JBalD041cE4R 2OfQo875ra7Sa/TdItO0UXcfT6sxyj3VqoKTFmR4cbOd7coC7UIflQj0soX/ACU5 53aNvaMUD9IKg/DzjK5Dsm6Ua1wmoNCEOlEvER7GsHFDPGM3UhDBH9pkd6zNl9NT SHWq5IXvYOWTcl/i9+XOxGWqWd+r0RnYIRmyYt0f8H1imXYenWboFWsPYsYrUwx6 VJdzkW2dhFiOcDikS5IS3ijB4hIVl1HStFfmnEiiOY3Zu4zKrFB4Rnsbp5bPlrB2 8jGLkITaAQLcy896B9YO5SH3zeIOPnFP -----END CERTIFICATE-----Generated at Sat Aug 23 22:15:45 2025 by rpki-client