$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: lwZSs7ijJomWsBz8mJWP47hyxzBDpT4x2wyYnm+ukhQ= Subject key identifier: C4:16:FE:27:ED:89:5D:3C:30:38:A8:BC:0A:F7:17:21:73:82:45:CC Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: 8C Signing time: Sat 23 Aug 2025 06:50:44 +0000 Manifest this update: Sat 23 Aug 2025 06:50:44 +0000 Manifest next update: Sat 30 Aug 2025 06:50:44 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: 84yxq7/ay8/l8XKFpyl5ibDtyQ2ZpBEqOMCuCaSM0V8=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Aug 23 06:50:44 2025 GMT Not After : Aug 30 06:50:44 2025 GMT Subject: CN=68a964c4-590e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:63:d4:39:de:63:36:77:b1:74:ff:2a:13: 4f:c1:9e:ad:ea:8d:21:41:dc:49:c3:e0:df:7b:df: 8f:ae:0e:f4:dc:03:7a:0f:a1:57:0f:cf:e3:15:d1: 8c:13:4e:59:bd:07:b3:ba:12:cb:3f:6a:b3:00:1e: 5b:5a:2c:62:fb:0a:a2:a8:f5:32:4a:c4:0e:e2:0c: 4b:83:00:50:08:12:0a:0d:f8:2e:5d:12:91:10:7e: 66:c9:36:09:fa:62:28:0f:09:90:d7:67:3d:9f:f7: 29:4c:05:fe:73:a3:ef:80:e7:cc:fc:67:de:ff:ad: b1:c0:0c:f0:f5:79:df:ef:d5:19:c9:b7:f3:c1:93: f1:0d:05:c8:bf:24:36:c3:af:39:c7:e6:8f:12:d9: a3:cd:a5:ae:ae:33:99:5e:53:c9:b4:d3:c2:ca:eb: 5f:60:45:68:cf:1e:bc:a9:26:ac:a2:81:aa:24:d9: 18:06:d6:fd:2b:ef:15:39:38:14:16:ed:c5:06:c3: e5:5f:5d:6a:41:54:cd:c6:6b:96:49:1f:38:29:1c: 91:75:cf:e5:75:e5:8f:03:a1:c8:36:46:7d:e1:25: c8:63:e8:0c:27:f1:b4:82:f8:7e:cd:b1:79:3d:2c: a9:e2:1a:42:05:be:67:6a:6d:70:31:14:ed:98:37: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:FE:27:ED:89:5D:3C:30:38:A8:BC:0A:F7:17:21:73:82:45:CC X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:74:ca:da:66:3d:b7:f5:63:53:26:34:05:6e:42:f7:c1:c7: cf:f3:9e:6a:63:7b:65:01:92:ae:82:de:fa:ba:f4:e1:73:cd: 97:77:83:71:1b:11:d5:e0:9b:47:ef:2e:c6:c3:97:b8:da:da: 40:2a:f4:99:9f:3a:b1:c6:3b:71:e2:b7:23:1f:61:32:56:1b: b6:50:90:95:91:72:7c:c2:7b:ae:08:ae:28:41:6b:e2:a7:86: ad:5e:2a:b0:65:19:33:f0:c4:38:4d:1c:34:92:61:67:6c:36: 63:b3:d3:55:a4:54:28:8a:2b:38:d2:70:48:65:0c:c2:4c:f9: 1e:49:85:e0:b9:21:99:31:b5:87:3a:5a:b9:da:75:23:35:2a: cb:c4:ca:ad:82:ed:d8:b3:4c:de:cc:8a:84:e0:cc:8f:0a:61: 94:2a:57:59:e4:34:99:35:03:57:2d:eb:78:33:66:f4:f6:db: fb:e6:49:c3:ea:ac:3a:2c:de:13:d9:45:b8:0b:1a:d8:6e:05: a0:ec:d7:ea:d2:fe:3f:6f:14:8a:00:8d:d9:30:77:0a:9d:c5: f6:24:e7:b4:ea:65:50:15:b8:fd:ce:9c:d6:0a:93:05:2f:f4: 25:36:32:e8:da:55:b2:ed:82:ef:55:d1:49:d0:af:2f:4f:d1: 30:5c:70:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEU0QzU4OUI4OTNEMjcyODlDRjg0NkRGMDVBREZCNTk2 MDM2NDI4RkQwHhcNMjUwODIzMDY1MDQ0WhcNMjUwODMwMDY1MDQ0WjAYMRYwFAYD VQQDEw02OGE5NjRjNC01OTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qJj1DneYzZ3sXT/KhNPwZ6t6o0hQdxJw+Dfe9+Prg703AN6D6FXD8/jFdGM E05ZvQezuhLLP2qzAB5bWixi+wqiqPUySsQO4gxLgwBQCBIKDfguXRKREH5myTYJ +mIoDwmQ12c9n/cpTAX+c6PvgOfM/Gfe/62xwAzw9Xnf79UZybfzwZPxDQXIvyQ2 w685x+aPEtmjzaWurjOZXlPJtNPCyutfYEVozx68qSasooGqJNkYBtb9K+8VOTgU Fu3FBsPlX11qQVTNxmuWSR84KRyRdc/ldeWPA6HINkZ94SXIY+gMJ/G0gvh+zbF5 PSyp4hpCBb5nam1wMRTtmDe3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQW/ift iV08MDiovAr3FyFzgkXMMB8GA1UdIwQYMBaAFOTFibiT0nKJz4Rt8FrftZYDZCj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FMTJEMTA1MkIx M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2NvblBoRzN3V3QtMWxnTmtL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2Nv blBoRzN3V3QtMWxnTmtLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDdMraZj239WNTJjQFbkL3wcfP855qY3tlAZKugt76uvThc82Xd4Nx GxHV4JtH7y7Gw5e42tpAKvSZnzqxxjtx4rcjH2EyVhu2UJCVkXJ8wnuuCK4oQWvi p4atXiqwZRkz8MQ4TRw0kmFnbDZjs9NVpFQoiis40nBIZQzCTPkeSYXguSGZMbWH Olq52nUjNSrLxMqtgu3Ys0zezIqE4MyPCmGUKldZ5DSZNQNXLet4M2b09tv75knD 6qw6LN4T2UW4CxrYbgWg7Nfq0v4/bxSKAI3ZMHcKncX2JOe06mVQFbj9zpzWCpMF L/QlNjLo2lWy7YLvVdFJ0K8vT9EwXHCk -----END CERTIFICATE-----Generated at Sat Aug 23 22:39:30 2025 by rpki-client