$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft (raw, json) Hash identifier: oIKelaqDmIi88dHemTgBlm0ewY13OaWnC7p/g42z5NY= Subject key identifier: 1B:72:83:D0:4A:E7:EF:6E:3C:1E:34:5A:CC:BF:C7:EF:D9:6E:C2:BF Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft Manifest number: 07A3 Signing time: Fri 22 Aug 2025 21:29:37 +0000 Manifest this update: Fri 22 Aug 2025 21:29:36 +0000 Manifest next update: Fri 29 Aug 2025 21:29:36 +0000 Files and hashes: 1: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl (hash: DITwllzjvPIzz1bqzefil/IAQNNmMu3qClYJVs7rLII=) 2: 09664BCE144D11EBA0AF3555C4F9AE02.roa (hash: rdUSXytbXM84CWenGOGoRob5nCuOJZnNVIkvDgmUqS4=) 3: 08CE75A6144D11EBA0AF3555C4F9AE02.roa (hash: Ey+1oSHacaQI23omTKC4i8oGovoWsEThpx7tq0kzMuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6395, serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22 Validity Not Before: Aug 22 21:29:36 2025 GMT Not After : Aug 29 21:29:36 2025 GMT Subject: CN=68a8e140-10a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:19:5a:23:a0:71:95:e4:e3:09:ba:de:03: 73:61:7f:d0:91:08:1f:b2:02:c4:30:f1:e0:a9:1b: 90:ab:ca:79:93:2b:35:30:51:01:2a:42:d2:b1:57: d7:fd:65:f6:bf:2e:84:e8:95:18:44:f2:8f:4a:50: c8:ac:f4:d2:a8:f1:2c:0d:99:82:e5:a7:23:e1:58: fe:8e:32:9f:3f:97:33:8d:b4:22:aa:96:e2:77:45: f4:72:91:15:2e:2e:c2:c1:5e:a6:2b:18:f0:59:0d: c7:95:78:ab:a7:91:b4:9f:e5:54:de:7b:a8:64:c8: bc:3c:ab:f3:41:6c:a6:26:12:42:c9:f2:89:9a:5f: 1e:f7:d5:88:f3:4e:41:10:93:3b:5b:a9:34:ba:50: ac:3e:3d:3d:5b:97:ea:ce:7a:93:94:12:38:65:51: 21:0e:da:50:b2:0f:59:13:71:78:53:e5:b9:9d:10: 29:05:66:d4:f8:62:5c:18:8f:bb:1f:13:15:8a:a7: 5d:21:a2:8c:55:d9:45:c8:32:39:0f:ff:08:48:b1: 99:c9:cd:81:af:18:8f:62:db:22:eb:24:84:a7:48: 0b:b6:8b:85:00:37:f8:1d:29:c6:eb:5a:63:60:26: 54:e3:af:c9:f8:dc:42:db:b9:15:ca:06:1f:ce:f4: 9a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:72:83:D0:4A:E7:EF:6E:3C:1E:34:5A:CC:BF:C7:EF:D9:6E:C2:BF X509v3 Authority Key Identifier: keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:49:2d:8c:09:cb:ff:ae:6a:85:b7:21:9b:cc:0b:1f:8c:35: b6:c4:da:e8:33:8c:b4:d8:d8:c4:1a:cf:6b:10:3a:41:75:af: f1:c5:7f:84:9d:46:b0:44:5c:bb:68:f9:e4:62:86:c0:68:ce: de:a3:51:8f:16:92:b7:75:61:ed:d2:eb:fb:df:c4:51:8d:c6: 94:80:9d:08:e3:a0:42:a8:39:97:34:89:62:fd:45:aa:bf:48: 60:f9:e7:af:85:0e:40:00:2d:1e:f0:17:3c:c8:59:c7:31:30: 39:f2:68:63:6f:ac:79:d0:de:9f:bb:f8:ee:8b:e7:ca:29:9f: da:df:66:49:51:e5:a4:2c:cb:b4:70:05:6b:29:09:4b:58:df: 23:0c:b6:dd:bb:62:9b:d9:ab:22:f0:66:a4:01:f1:9d:65:a0: 3e:b7:45:06:3f:c4:b2:34:0c:5d:8e:ed:7c:0b:3c:0c:3f:ec: 13:5e:dc:20:68:ca:cb:af:14:b9:30:0d:b5:95:cc:aa:7e:d4: 39:4f:ce:9e:34:7a:87:88:cb:ca:3c:d1:d4:1a:d2:2b:0b:fa: 94:6c:e3:39:b3:66:3a:6f:de:e8:2c:36:d1:94:79:71:76:68: 38:71:ca:4d:f8:29:b5:f6:58:49:ff:29:59:f4:e4:e6:13:67: 94:e1:7e:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD ODY1Q0NFMjIwHhcNMjUwODIyMjEyOTM2WhcNMjUwODI5MjEyOTM2WjAYMRYwFAYD VQQDEw02OGE4ZTE0MC0xMGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN4ZWiOgcZXk4wm63gNzYX/QkQgfsgLEMPHgqRuQq8p5kys1MFEBKkLSsVfX /WX2vy6E6JUYRPKPSlDIrPTSqPEsDZmC5acj4Vj+jjKfP5czjbQiqpbid0X0cpEV Li7CwV6mKxjwWQ3HlXirp5G0n+VU3nuoZMi8PKvzQWymJhJCyfKJml8e99WI805B EJM7W6k0ulCsPj09W5fqznqTlBI4ZVEhDtpQsg9ZE3F4U+W5nRApBWbU+GJcGI+7 HxMViqddIaKMVdlFyDI5D/8ISLGZyc2BrxiPYtsi6ySEp0gLtouFADf4HSnG61pj YCZU46/J+NxC27kVygYfzvSa7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtyg9BK 5+9uPB40Wsy/x+/ZbsK/MB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0 NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6 aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjM5NS9EQzQ1NjU3ODE0NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0 LUpldTJxdEtQVGpJWmN6aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZSS2MCcv/rmqFtyGbzAsfjDW2xNroM4y02NjEGs9rEDpBda/xxX+E nUawRFy7aPnkYobAaM7eo1GPFpK3dWHt0uv738RRjcaUgJ0I46BCqDmXNIli/UWq v0hg+eevhQ5AAC0e8Bc8yFnHMTA58mhjb6x50N6fu/jui+fKKZ/a32ZJUeWkLMu0 cAVrKQlLWN8jDLbdu2Kb2asi8GakAfGdZaA+t0UGP8SyNAxdju18CzwMP+wTXtwg aMrLrxS5MA21lcyqftQ5T86eNHqHiMvKPNHUGtIrC/qUbOM5s2Y6b97oLDbRlHlx dmg4ccpN+Cm19lhJ/ylZ9OTmE2eU4X6x -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:48 2025 by rpki-client