$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json) Hash identifier: puHUErdV3Lx5CGkTWdyRdYK/8dQHnC5tFKkZHrxTxRM= Subject key identifier: D2:50:99:64:CA:5B:02:6E:69:43:56:27:1B:7C:D5:A0:68:0B:AC:12 Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Certificate serial: 08B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft Manifest number: 08A6 Signing time: Fri 22 Aug 2025 20:40:36 +0000 Manifest this update: Fri 22 Aug 2025 20:40:35 +0000 Manifest next update: Fri 29 Aug 2025 20:40:35 +0000 Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: WZEgBcWGrEYAqCOwbms1a6sSpOJlzLSwuOSGmASAajQ=) 2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=) 3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11 Validity Not Before: Aug 22 20:40:35 2025 GMT Not After : Aug 29 20:40:35 2025 GMT Subject: CN=68a8d5c3-a731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f3:6b:2a:23:b5:4c:cf:92:7f:36:2e:58:9b: 0d:28:b4:69:cd:4c:1d:89:da:ad:fc:a6:95:9f:9e: 09:ae:20:ef:c0:16:52:4e:02:e9:28:7a:5d:91:13: ad:6a:38:39:0f:86:02:a0:4e:7d:06:f7:03:3c:20: 24:09:36:11:7f:74:40:b3:92:21:55:f7:38:4b:ee: 4d:48:b7:c0:63:eb:d0:22:cf:9f:60:f4:b1:69:56: 4f:0f:4f:20:4f:7a:53:86:08:4e:2d:94:ee:04:9d: 2c:10:8d:f5:62:28:67:d4:a4:3c:4f:4d:83:98:bb: 40:9f:8a:b2:f5:97:43:4b:5f:5c:94:d5:3c:22:77: 34:da:b1:72:73:b3:b9:50:5f:35:dd:7d:b1:0d:61: 38:a7:d6:ec:29:74:d2:a6:e9:56:cc:2f:25:2c:78: e6:69:8a:95:97:fb:c9:9a:56:fd:39:d3:83:98:47: 37:95:2a:d7:d2:20:ef:89:03:16:4e:2a:9d:2d:2e: 6c:b6:67:82:ef:42:b5:04:a6:e0:d3:7f:c9:50:74: 44:41:7c:a8:39:ea:c7:6b:c7:76:4f:e9:ee:44:ee: 7b:84:05:a4:79:b9:0d:e5:49:c6:a0:47:65:76:55: ac:22:85:d1:67:3d:72:84:94:3c:e2:67:ac:29:bd: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:50:99:64:CA:5B:02:6E:69:43:56:27:1B:7C:D5:A0:68:0B:AC:12 X509v3 Authority Key Identifier: keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:13:21:d7:7e:79:8a:fe:26:b8:d1:38:e1:cc:f2:76:a4:41: 2f:1b:1d:70:a2:df:7c:3f:2f:70:ae:ad:6d:09:b0:05:f8:f0: b1:ff:6b:28:01:24:c2:1f:21:e0:c9:e1:12:81:a3:a7:a2:58: 4e:a9:e6:49:5c:08:ca:5a:56:f1:d5:e4:5a:0e:71:9b:9f:02: 7e:29:d3:8d:8f:9d:ba:30:6e:d1:9e:05:8b:cc:ac:fd:82:86: 26:df:2f:da:1e:5e:24:00:cd:e0:72:ad:d8:9e:6e:bd:56:de: 0c:d1:c8:3e:2f:78:e8:7c:5c:9a:b8:22:92:56:bf:14:97:5e: c5:70:e0:22:8a:de:a2:cb:c8:33:54:af:5c:d1:9b:d8:62:98: 4a:09:2e:92:4f:c9:c4:75:d5:d4:cc:ce:99:f2:d9:98:92:55: 05:c7:11:76:75:41:4b:65:7e:06:71:f2:c2:d6:e5:7e:a9:8b: 77:a5:bd:6f:87:55:07:8f:1a:3c:7c:4b:af:5c:3f:dd:8b:76: 3c:e1:9a:34:e3:34:0a:d3:6a:f1:cc:9d:ef:4c:ee:b3:3f:ec: 47:55:be:33:0b:e0:32:51:a9:38:94:7e:15:ed:09:d5:2c:80: fc:98:7b:61:ba:0f:6b:90:63:2e:b4:dc:8f:1d:fb:65:6d:63: db:a3:b4:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1M0IxMTAvBgNVBAUTKEJDQUU1NzMyRUYyMTk3MzJCNDlBQzgyODREQjE4MTRF OTJDODZCMTEwHhcNMjUwODIyMjA0MDM1WhcNMjUwODI5MjA0MDM1WjAYMRYwFAYD VQQDEw02OGE4ZDVjMy1hNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fNrKiO1TM+SfzYuWJsNKLRpzUwdidqt/KaVn54JriDvwBZSTgLpKHpdkROt ajg5D4YCoE59BvcDPCAkCTYRf3RAs5IhVfc4S+5NSLfAY+vQIs+fYPSxaVZPD08g T3pThghOLZTuBJ0sEI31Yihn1KQ8T02DmLtAn4qy9ZdDS19clNU8Inc02rFyc7O5 UF813X2xDWE4p9bsKXTSpulWzC8lLHjmaYqVl/vJmlb9OdODmEc3lSrX0iDviQMW TiqdLS5stmeC70K1BKbg03/JUHREQXyoOerHa8d2T+nuRO57hAWkebkN5UnGoEdl dlWsIoXRZz1yhJQ84mesKb0dCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJQmWTK WwJuaUNWJxt81aBoC6wSMB8GA1UdIwQYMBaAFLyuVzLvIZcytJrIKE2xgU6SyGsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjUzQi8yOTM4M0NERUMy MEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6SzBtc2dvVGJHQlRwTElh eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLNVhNdThobHpLMG1zZ29UYkdCVHBMSWF4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjUzQi8yOTM4M0NERUMyMEMxMUVBQjgxMkEwMUFDNEY5QUUwMi92SzVYTXU4aGx6 SzBtc2dvVGJHQlRwTElheEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEEyHXfnmK/ia40TjhzPJ2pEEvGx1wot98Py9wrq1tCbAF+PCx/2so ASTCHyHgyeESgaOnolhOqeZJXAjKWlbx1eRaDnGbnwJ+KdONj526MG7RngWLzKz9 goYm3y/aHl4kAM3gcq3Ynm69Vt4M0cg+L3jofFyauCKSVr8Ul17FcOAiit6iy8gz VK9c0ZvYYphKCS6ST8nEddXUzM6Z8tmYklUFxxF2dUFLZX4GcfLC1uV+qYt3pb1v h1UHjxo8fEuvXD/di3Y84Zo04zQK02rxzJ3vTO6zP+xHVb4zC+AyUak4lH4V7QnV LID8mHthug9rkGMutNyPHftlbWPbo7TB -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:20 2025 by rpki-client