$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json) Hash identifier: hHFBgJBQQ/+JI3eIKqDHWJNjOxWcKU8Dyzqok06A1gg= Subject key identifier: DC:94:2C:24:1B:3A:84:5A:35:65:4F:C5:73:B4:E6:35:25:18:77:B6 Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Certificate serial: 0B63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft Manifest number: 0B5A Signing time: Fri 22 Aug 2025 19:14:02 +0000 Manifest this update: Fri 22 Aug 2025 19:14:01 +0000 Manifest next update: Fri 29 Aug 2025 19:14:01 +0000 Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: awhu1pax5YdkIOacjTGW3r4K0N0wqYLjB2eNkOWyl+4=) 2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: Gpxpc8IRQzuHqiyk8bsF5mq9N6coqqpi1UICb22hud0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2915 (0xb63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE Validity Not Before: Aug 22 19:14:01 2025 GMT Not After : Aug 29 19:14:01 2025 GMT Subject: CN=68a8c179-6688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:85:60:ed:cd:61:04:a4:f8:83:b8:44:f0:b0: e2:d8:fa:58:13:34:0d:93:01:d4:7d:e7:0d:91:1d: 0d:1b:49:20:c6:d7:48:5a:36:18:31:80:4c:ed:41: c9:5c:c0:57:98:61:09:d5:36:34:53:f9:3b:12:4c: 76:8d:52:8f:1e:de:25:d0:0f:5b:d7:75:b7:37:1b: d4:27:bf:8e:b3:b6:05:5d:3c:1e:1d:9d:4a:ab:20: 94:c9:88:5a:5c:3a:8a:1e:0a:bd:3b:ea:8b:1a:be: 9a:63:85:26:05:80:49:5d:f8:df:6e:f2:fe:a1:51: 55:4a:04:85:63:b2:ac:1b:13:49:1e:27:47:c4:a2: 8b:84:fd:ef:a1:a5:76:d2:f6:e7:c9:66:14:a2:51: ba:9d:55:98:a3:59:bb:c1:49:17:56:e6:22:28:49: b8:43:c5:0d:0a:b7:48:d7:ae:86:80:2e:2a:82:14: cd:59:ab:d0:a3:65:fb:5c:db:8e:90:a7:c0:27:8f: 21:9f:e1:96:3c:8c:7c:ac:d0:09:52:15:e6:5d:8c: ad:1d:b7:fe:b7:dd:8e:25:1e:d7:f1:15:dc:92:2a: fd:c3:e0:f0:7e:75:d7:40:16:d3:64:d1:fb:40:e7: c8:27:c4:53:c7:aa:55:bc:d2:e9:60:ac:bf:0c:7f: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:94:2C:24:1B:3A:84:5A:35:65:4F:C5:73:B4:E6:35:25:18:77:B6 X509v3 Authority Key Identifier: keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:40:10:44:1a:b6:b5:cf:66:75:e4:c8:40:9a:c8:c1:31:ea: 75:3a:c4:37:b0:70:15:7d:b2:53:9f:87:a6:2c:94:51:38:dd: a9:ce:54:48:34:ac:d0:e7:84:4e:85:c3:af:55:48:94:cc:74: 8d:4d:91:e6:0a:0e:89:0d:90:16:a4:fd:cc:86:7e:68:0d:2c: a1:5b:09:01:97:c7:6b:f9:5f:a9:72:96:04:0c:aa:d6:e0:a9: 0e:fd:c4:5d:6c:58:2e:6f:bb:00:95:d4:ef:6e:62:30:cf:c8: b6:1f:c8:af:b6:15:e6:e7:97:c0:4c:7d:3d:28:84:df:53:9b: ea:5a:22:20:a4:96:ad:c7:8b:04:fb:2a:4d:b9:74:eb:91:e1: 1a:76:31:83:c1:c1:be:b1:ff:7d:0e:54:2f:8c:04:b9:64:24: 25:de:29:6a:83:9a:b2:dc:50:77:59:7a:01:3b:50:c0:fd:5c: 06:f5:ea:3e:91:e6:ae:94:91:6a:c4:3a:2f:fb:c6:3c:cc:43: a9:9b:c2:36:31:0b:de:5b:0f:29:8f:16:76:f9:a6:54:ee:dd: ca:66:80:37:c5:6f:5e:53:7f:ec:52:3a:0c:a6:98:9b:37:42: dd:da:2a:db:da:c5:d9:64:0e:fc:5b:cc:c8:a7:44:67:5b:2a: 9c:76:ce:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QzIxMTAvBgNVBAUTKDZGOUFDMDRDRTVBQzcxQTdDMkI3QUZCMUE1NTcyN0Ex MEU1QjA2RUUwHhcNMjUwODIyMTkxNDAxWhcNMjUwODI5MTkxNDAxWjAYMRYwFAYD VQQDEw02OGE4YzE3OS02Njg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYVg7c1hBKT4g7hE8LDi2PpYEzQNkwHUfecNkR0NG0kgxtdIWjYYMYBM7UHJ XMBXmGEJ1TY0U/k7Ekx2jVKPHt4l0A9b13W3NxvUJ7+Os7YFXTweHZ1KqyCUyYha XDqKHgq9O+qLGr6aY4UmBYBJXfjfbvL+oVFVSgSFY7KsGxNJHidHxKKLhP3voaV2 0vbnyWYUolG6nVWYo1m7wUkXVuYiKEm4Q8UNCrdI166GgC4qghTNWavQo2X7XNuO kKfAJ48hn+GWPIx8rNAJUhXmXYytHbf+t92OJR7X8RXckir9w+DwfnXXQBbTZNH7 QOfIJ8RTx6pVvNLpYKy/DH+lTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyULCQb OoRaNWVPxXO05jUlGHe2MB8GA1UdIwQYMBaAFG+awEzlrHGnwrevsaVXJ6EOWwbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlDMi9BQjBERjRGMjNB QTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2NhZkN0Ni14cFZjbm9RNWJC dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I1ckFUT1dzY2FmQ3Q2LXhwVmNub1E1YkJ1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlDMi9BQjBERjRGMjNBQTIxMUVBQTc5RTZBNjlDNEY5QUUwMi9iNXJBVE9Xc2Nh ZkN0Ni14cFZjbm9RNWJCdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVQBBEGra1z2Z15MhAmsjBMep1OsQ3sHAVfbJTn4emLJRRON2pzlRI NKzQ54ROhcOvVUiUzHSNTZHmCg6JDZAWpP3Mhn5oDSyhWwkBl8dr+V+pcpYEDKrW 4KkO/cRdbFgub7sAldTvbmIwz8i2H8ivthXm55fATH09KITfU5vqWiIgpJatx4sE +ypNuXTrkeEadjGDwcG+sf99DlQvjAS5ZCQl3ilqg5qy3FB3WXoBO1DA/VwG9eo+ keaulJFqxDov+8Y8zEOpm8I2MQveWw8pjxZ2+aZU7t3KZoA3xW9eU3/sUjoMppib N0Ld2irb2sXZZA78W8zIp0RnWyqcds5K -----END CERTIFICATE-----Generated at Sat Aug 23 19:26:11 2025 by rpki-client